last executing test programs: 19m36.458728988s ago: executing program 3 (id=4631): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 19m36.252044518s ago: executing program 3 (id=4636): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 19m36.114839953s ago: executing program 3 (id=4640): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x2000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000680)={0x7, 0x4, 0x4, {0x6, @pix_mp={0x7, 0x7ff, 0x31363553, 0x8, 0xb, [{0x1000, 0x9}, {0x5, 0x8}, {0x8, 0x4}, {0x2, 0x10}, {0x81, 0x4}, {0x80000000}, {0x800, 0x1}, {0xffffffff, 0x1}], 0x5, 0x6, 0x0, 0x1, 0x2}}, 0xfffffffd}) 19m35.923262732s ago: executing program 3 (id=4646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 19m35.749220793s ago: executing program 3 (id=4649): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000200)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202070000000300010004000300eab556a7052584c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953579179080000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19m35.563602944s ago: executing program 3 (id=4653): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0}) 19m19.435768781s ago: executing program 32 (id=4653): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0}) 19m13.8720226s ago: executing program 5 (id=5007): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) pread64(r0, 0x0, 0x0, 0x7fff) 18m57.77647986s ago: executing program 33 (id=5007): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) pread64(r0, 0x0, 0x0, 0x7fff) 10m4.726838264s ago: executing program 6 (id=15391): io_setup(0x3, &(0x7f0000000140)=0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 10m4.41381303s ago: executing program 6 (id=15396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72000000000000000000ff010000000a0001006f776e65720000000900010073797a3000c3bf000900020073797a32"], 0x98}}, 0x4048010) 10m4.113876259s ago: executing program 6 (id=15400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0xb0, {0xb0, 0x1, "0579930df3a9dd27edec8b24d00162328d6754e27419faf407fb39141e5b6817fbb1d0e0a96247b3acb38d1f80bad440a6d13bbe25f79316a8cd90dce3e13e1e701057eae9465b99ab092ebd47e3c37c67ff459a22d00141ad9de711bcbb91a638d4cb78743fc0728cb543a218f675d8b7a008ab2d424586d45219018279c91494c434a18ba681ae08bb73359294715040fdee77d178d2f73025b20aa61df6abd38435a77f2791ed3488693602f4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10m0.724163313s ago: executing program 6 (id=15457): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000300)=0x401, 0x4) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10m0.686392441s ago: executing program 6 (id=15458): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 10m0.55383123s ago: executing program 6 (id=15461): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x40}, 0x0) 9m44.298598993s ago: executing program 34 (id=15461): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000008"], 0x118}], 0x1, 0x0, 0x0, 0x40}, 0x0) 9m41.227786773s ago: executing program 0 (id=15703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x331, 0x70bd2a, 0x0, {0x8}}, 0x14}}, 0x0) 9m41.022171071s ago: executing program 0 (id=15708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2c, r1, 0x205, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x4000) 9m40.820891723s ago: executing program 0 (id=15712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 9m40.651859518s ago: executing program 0 (id=15713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 9m40.411771039s ago: executing program 0 (id=15716): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x6, 0x103, 0x101, 0x8, 0x6, 0x1}, 0xc) 9m40.203859623s ago: executing program 0 (id=15718): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 9m39.846438827s ago: executing program 35 (id=15718): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) 4m24.156085074s ago: executing program 8 (id=19757): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m23.975666332s ago: executing program 8 (id=19760): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x73, 0x300, [], [0x2b8, 0x0, 0x800004], [0x0, 0x0, 0x533], [0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff]}) 4m23.767802384s ago: executing program 8 (id=19764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m23.571628956s ago: executing program 8 (id=19768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000020000002201"]) 4m23.230450062s ago: executing program 8 (id=19773): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m23.083942516s ago: executing program 8 (id=19775): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x2000, 0x0) 4m6.965033349s ago: executing program 36 (id=19775): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x2000, 0x0) 9.297930178s ago: executing program 7 (id=22787): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) io_setup(0xfb, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, 0x0) 7.834288193s ago: executing program 7 (id=22801): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000000)='/', 0x1, 0x24048880, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) 6.737396052s ago: executing program 7 (id=22816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000ebffff800000c0"]) 6.323942607s ago: executing program 7 (id=22820): ioperm(0x0, 0xd, 0x4000000000000020) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) iopl(0x3) ioperm(0x0, 0x40, 0x0) 6.052704568s ago: executing program 7 (id=22822): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x86) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000b40), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.782100128s ago: executing program 7 (id=22823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 4.898311579s ago: executing program 4 (id=22833): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 4.623390072s ago: executing program 4 (id=22838): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) setresuid(0xee00, 0xee00, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000100)='./file0\x00', 0x0) 4.467689379s ago: executing program 4 (id=22840): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) 4.229767364s ago: executing program 4 (id=22843): sendmmsg(0xffffffffffffffff, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x8810) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) 3.979846933s ago: executing program 4 (id=22845): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000102312073f00000000ad9335"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 3.131113965s ago: executing program 9 (id=22854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 2.936637167s ago: executing program 9 (id=22857): mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.234087684s ago: executing program 1 (id=22862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf258200000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040054) 2.022037726s ago: executing program 1 (id=22864): syz_open_dev$usbfs(&(0x7f0000000080), 0xd, 0x40) r0 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x8008, 0x10100}, &(0x7f0000000240), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 1.851862321s ago: executing program 1 (id=22866): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x80, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0xc, 0xcc1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000240)={r1}) 1.689053921s ago: executing program 9 (id=22868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 1.551966166s ago: executing program 1 (id=22869): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.44007603s ago: executing program 2 (id=22870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x1000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1.414228742s ago: executing program 9 (id=22871): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) close(r0) close(r1) 1.292932265s ago: executing program 9 (id=22872): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x22, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) 1.281321022s ago: executing program 2 (id=22873): pipe(&(0x7f0000000080)) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x8a}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1.131375884s ago: executing program 9 (id=22874): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0xc0, &(0x7f0000000680)={{0x12, 0x1, 0x310, 0x49, 0x11, 0xf2, 0xff, 0x1630, 0x5, 0xde3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x1, 0x2, 0x4, 0x0, 0x8, [{{0x9, 0x4, 0x29, 0x24, 0x1, 0x56, 0xa4, 0xd4, 0xa1, [], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0x75, 0xb, 0x6, [@generic={0x93, 0x4, "32661f6b0ec0d2a8421e092b340c5b1c428188a883b071baaf034ee7fba8a79eda6da5817af2635bff8b492feb83d94acbaea10f93e6a81cd8bb00dd7b51c8d9f8792c8decbefedf79f1c4c430a45b411478188ebdfc80c6b9249192e316803f68709093f2e9b6a918203a5b08a68e4170526eb0b3c4e4ca721c26c7f94d8d71990ba6dc543ab4a21e3038e93d391b4053"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 604.038906ms ago: executing program 2 (id=22875): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvfrom$inet(r0, &(0x7f00000002c0)=""/231, 0xfffffffffffffee2, 0x40000102, 0x0, 0x0) 567.363485ms ago: executing program 4 (id=22876): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 466.24606ms ago: executing program 2 (id=22877): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000000000000000000000002001000000000000000000008000100ac1414aa"], 0x24}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0xaa1414ac}) 400.059063ms ago: executing program 1 (id=22878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000c40)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5d80) 248.794858ms ago: executing program 2 (id=22879): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904006ad54afac11d875397bdb2680000b420a1a93c5240f45f819e01177d3d458dac00f50000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x2000000003, 0x8000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000880)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x202, 0x0, 0x0, 0x20003, 0x90dcee9397caba8d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c683dda1af1ea80000000033000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54a0ec11d875397bd7561ac000000000000000000000063000804000000000000000001000000000000000800", "90be555a55f9640000000000000000070000000000e7ff000000a3d402008000", [0xffffffffffffff00, 0x9]}}) 150.794673ms ago: executing program 1 (id=22880): mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=22881): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x1, 0x7}, &(0x7f00000000c0)=0x8) kernel console output (not intermixed with test programs): terval 0, changing to 7 [ 1417.873682][ T8] logitech 0003:046D:C295.0059: no inputs found [ 1417.959569][ T7789] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1417.969692][ T7789] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.989242][ T7789] usb 10-1: Product: syz [ 1417.996422][ T7789] usb 10-1: Manufacturer: syz [ 1418.010440][ T7789] usb 10-1: SerialNumber: syz [ 1418.023106][ T7789] usb 10-1: config 0 descriptor?? [ 1418.046981][ T7789] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1418.075092][ T8] usb 2-1: USB disconnect, device number 92 [ 1418.081500][ T7789] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1418.721152][ T7789] em28xx 10-1:0.0: chip ID is em2860 [ 1418.953205][ T7789] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1418.963493][ T7789] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1418.970639][ T7789] em28xx 10-1:0.0: No AC97 audio processor [ 1418.998116][ T7789] usb 10-1: USB disconnect, device number 12 [ 1419.014432][ T7789] em28xx 10-1:0.0: Disconnecting em28xx [ 1419.026268][ T7789] em28xx 10-1:0.0: Freeing device [ 1419.281890][ T5052] Bluetooth: hci3: link tx timeout [ 1419.288888][ T5052] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1419.416317][ T29] kauditd_printk_skb: 7808 callbacks suppressed [ 1419.416336][ T29] audit: type=1400 audit(2000000011.402:808591): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19523 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1419.452215][ T29] audit: type=1400 audit(2000000011.421:808592): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19523 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1419.490965][T19524] hpfs: Bad magic ... probably not HPFS [ 1419.496722][ T29] audit: type=1400 audit(2000000011.421:808593): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19523 comm="syz-executor" name="4462" dev="tmpfs" ino=22494 [ 1419.516135][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.543060][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1419.549633][T17058] audit: audit_lost=83763 audit_rate_limit=0 audit_backlog_limit=64 [ 1419.573235][T17058] audit: backlog limit exceeded [ 1419.578183][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1419.580028][ T29] audit: type=1400 audit(2000000011.421:808594): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=19523 comm="syz-executor" opid=19523 ocomm="syz-executor" [ 1419.605569][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1419.612130][ C1] audit: audit_lost=83764 audit_rate_limit=0 audit_backlog_limit=64 [ 1420.047432][T19538] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.082655][T19538] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1420.116263][T19538] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.184857][T19538] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1420.248101][T19545] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.289711][T19545] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1420.335846][T19545] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1420.365630][T19545] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1421.489327][T16006] Bluetooth: hci3: command 0x0405 tx timeout [ 1421.580990][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21061'. [ 1423.616233][T19645] vivid-008: disconnect [ 1423.643126][T19650] netlink: 48 bytes leftover after parsing attributes in process `syz.9.21090'. [ 1423.653932][T19643] vivid-008: reconnect [ 1424.801076][ T29] kauditd_printk_skb: 8384 callbacks suppressed [ 1424.801097][ T29] audit: type=1400 audit(2000004110.437:815629): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7539 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1424.841347][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.848924][ T7539] audit: audit_lost=84220 audit_rate_limit=0 audit_backlog_limit=64 [ 1424.857936][ T29] audit: type=1400 audit(2000004110.437:815630): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7539 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1424.878987][ T7539] audit: backlog limit exceeded [ 1424.883917][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.891575][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1424.899704][ T7539] audit: audit_lost=84221 audit_rate_limit=0 audit_backlog_limit=64 [ 1424.916536][ T5833] audit: audit_lost=84222 audit_rate_limit=0 audit_backlog_limit=64 [ 1424.925640][ T29] audit: type=1400 audit(2000004110.437:815631): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7539 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1425.474980][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1425.646053][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1425.689733][ T9] usb 2-1: config 0 has an invalid interface number: 61 but max is 0 [ 1425.697904][ T9] usb 2-1: config 0 has no interface number 0 [ 1425.722595][ T9] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1425.734485][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.743718][ T9] usb 2-1: Product: syz [ 1425.748333][ T9] usb 2-1: Manufacturer: syz [ 1425.753982][ T9] usb 2-1: SerialNumber: syz [ 1425.761946][ T9] usb 2-1: config 0 descriptor?? [ 1425.881420][ T9] viperboard 2-1:0.61: version 0.00 found at bus 002 address 093 [ 1425.921746][ T9] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1425.947392][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1426.030484][ T9] usb 2-1: USB disconnect, device number 93 [ 1426.109202][ T5052] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 1426.641060][ T7789] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1426.810272][ T7789] usb 3-1: Using ep0 maxpacket: 16 [ 1426.822959][ T7789] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1426.841584][ T7789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.852296][ T7789] usb 3-1: Product: syz [ 1426.886671][ T7789] usb 3-1: Manufacturer: syz [ 1426.891385][ T7789] usb 3-1: SerialNumber: syz [ 1426.907833][ T7789] usb 3-1: config 0 descriptor?? [ 1426.924139][ T7789] as10x_usb: device has been detected [ 1426.950026][ T7789] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1427.025965][ T7789] usb 3-1: DVB: registering adapter 3 frontend 0 (Sky IT Digital Key (green led))... [ 1427.077131][ T7789] as10x_usb: error during firmware upload part1 [ 1427.085562][ T7789] Registered device Sky IT Digital Key (green led) [ 1427.165206][T19720] random: crng reseeded on system resumption [ 1427.270404][ T25] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1427.324873][T19750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21136'. [ 1427.442176][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1427.475156][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.507311][ T25] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.536117][ T25] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1427.604027][T19757] kernel read not supported for file /eth0 (pid: 19757 comm: syz.1.21139) [ 1427.725421][ T46] usb 3-1: USB disconnect, device number 75 [ 1427.740800][ T25] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1427.751479][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.766447][ T46] Unregistered device Sky IT Digital Key (green led) [ 1427.769158][ T46] as10x_usb: device has been disconnected [ 1427.786244][ T25] usb 10-1: config 0 descriptor?? [ 1428.291924][ T25] cougar 0003:060B:500A.005A: unexpected long global item [ 1428.318928][ T25] cougar 0003:060B:500A.005A: parse failed [ 1428.324869][ T25] cougar 0003:060B:500A.005A: probe with driver cougar failed with error -22 [ 1428.514424][ T25] usb 10-1: USB disconnect, device number 13 [ 1429.317053][T19797] netlink: 60 bytes leftover after parsing attributes in process `syz.9.21156'. [ 1430.007379][T19816] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 1430.046892][T19816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1430.174397][ T5838] audit_log_start: 8012 callbacks suppressed [ 1430.174418][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.178340][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.193641][ C1] audit: audit_lost=84488 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.201682][ C1] audit: backlog limit exceeded [ 1430.206889][ T29] audit: type=1400 audit(2000004115.469:822860): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1430.211073][ T5838] audit: audit_lost=84489 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.238733][ T29] audit: type=1400 audit(2000004115.469:822861): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1430.270090][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.276107][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.277906][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1431.108384][T19844] netlink: 'syz.9.21176': attribute type 1 has an invalid length. [ 1431.416047][T19849] lo speed is unknown, defaulting to 1000 [ 1432.284697][T19864] i2c i2c-0: Invalid block write size 252 [ 1432.452747][T19849] wlan0 speed is unknown, defaulting to 1000 [ 1433.236071][ T25] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1433.419413][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1433.428378][ T25] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1433.436644][ T25] usb 2-1: config 0 has no interface number 0 [ 1433.481009][ T25] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1433.491018][ T25] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1433.536371][ T25] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1433.546613][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.559511][T19899] wireguard1: entered promiscuous mode [ 1433.565032][T19899] wireguard1: entered allmulticast mode [ 1433.585381][ T25] usb 2-1: Product: syz [ 1433.599636][ T25] usb 2-1: Manufacturer: syz [ 1433.623043][ T25] usb 2-1: SerialNumber: syz [ 1433.640368][ T25] usb 2-1: config 0 descriptor?? [ 1433.658899][T19886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.687285][T19886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.967408][T19886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.975740][T19886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1433.992442][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21201'. [ 1434.661246][ T25] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1434.689684][ T25] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1434.717284][ T25] asix 2-1:0.251: probe with driver asix failed with error -71 [ 1434.736839][ T25] usb 2-1: USB disconnect, device number 94 [ 1434.749059][T19926] serio: Serial port ptm0 [ 1434.805685][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21210'. [ 1435.523626][ T29] kauditd_printk_skb: 6413 callbacks suppressed [ 1435.523647][ T29] audit: type=1400 audit(2000004120.474:828590): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="3946" dev="tmpfs" ino=19905 [ 1435.573034][T19950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.590965][T19950] audit: audit_lost=84719 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.609490][ T29] audit: type=1400 audit(2000004120.474:828591): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5838 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1435.619079][T19950] audit: backlog limit exceeded [ 1435.642788][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.649346][T17058] audit: audit_lost=84720 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.650162][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.664008][ C1] audit: audit_lost=84721 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.672121][ C1] audit: backlog limit exceeded [ 1436.410947][ T25] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1436.593130][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1436.604736][ T25] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1436.624924][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.649154][ T25] usb 2-1: config 0 descriptor?? [ 1437.320025][ T25] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1437.346920][ T25] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1437.366904][ T25] usb 2-1: USB disconnect, device number 95 [ 1438.327923][T20026] netlink: 'syz.9.21255': attribute type 3 has an invalid length. [ 1438.337233][T20026] netlink: 'syz.9.21255': attribute type 3 has an invalid length. [ 1438.409998][ T46] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1438.421674][ T5052] Bluetooth: hci3: command 0x0405 tx timeout [ 1438.591858][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1438.609376][ T46] usb 2-1: config 0 has no interfaces? [ 1438.625300][ T46] usb 2-1: New USB device found, idVendor=ff7a, idProduct=007f, bcdDevice=a6.00 [ 1438.635839][T20030] xt_CT: No such helper "snmp" [ 1438.648402][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.664102][ T46] usb 2-1: Product: syz [ 1438.669264][ T46] usb 2-1: Manufacturer: syz [ 1438.673912][ T46] usb 2-1: SerialNumber: syz [ 1438.689757][ T46] usb 2-1: config 0 descriptor?? [ 1438.954248][ T46] usb 2-1: USB disconnect, device number 96 [ 1439.073640][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1439.261375][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.285272][ T9] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1439.307084][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.331501][ T9] usb 10-1: config 0 descriptor?? [ 1439.788112][ T9] keytouch 0003:0926:3333.005B: fixing up Keytouch IEC report descriptor [ 1439.803408][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.005B/input/input164 [ 1440.026040][ T9] keytouch 0003:0926:3333.005B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1440.078308][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21268'. [ 1440.112743][T20058] batadv1: left allmulticast mode [ 1440.118880][T20058] batadv1: left promiscuous mode [ 1440.135306][T20058] bridge0: port 1(batadv1) entered disabled state [ 1440.296214][ T7789] usb 10-1: USB disconnect, device number 14 [ 1440.640124][T20076] sp0: Synchronizing with TNC [ 1440.742029][T20076] Falling back ldisc for ttyS3. [ 1440.894685][ T29] kauditd_printk_skb: 6964 callbacks suppressed [ 1440.894706][ T29] audit: type=1400 audit(2000004125.497:834873): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13053 comm="kworker/u8:35" saddr=10.128.0.169 src=30008 daddr=10.128.1.167 dest=58978 netif=eth0 [ 1440.946368][T20080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.946370][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.946394][T17058] audit: audit_lost=84950 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.952920][T20080] audit: audit_lost=84951 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.952941][T20080] audit: backlog limit exceeded [ 1440.952958][T20080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.952974][T20080] audit: audit_lost=84952 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.996250][T17058] audit: backlog limit exceeded [ 1441.006811][T20081] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.246853][T20089] netlink: 4272 bytes leftover after parsing attributes in process `syz.1.21281'. [ 1441.788508][ T7789] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1441.857114][T20112] netlink: 104 bytes leftover after parsing attributes in process `syz.7.21291'. [ 1442.015319][ T7789] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1442.054697][ T7789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.063455][ T7789] usb 2-1: Product: syz [ 1442.090097][ T7789] usb 2-1: Manufacturer: syz [ 1442.106028][ T7789] usb 2-1: SerialNumber: syz [ 1442.128510][ T7789] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1442.167229][ T25] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1442.389305][T20129] sctp: [Deprecated]: syz.9.21300 (pid 20129) Use of int in max_burst socket option. [ 1442.389305][T20129] Use struct sctp_assoc_value instead [ 1442.576519][ T7789] kernel write not supported for file /sequencer (pid: 7789 comm: kworker/1:2) [ 1442.761241][T20137] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1442.769553][T20137] syzkaller0: linktype set to 821 [ 1442.896143][ T46] usb 2-1: USB disconnect, device number 97 [ 1443.236568][T20148] netlink: 196 bytes leftover after parsing attributes in process `syz.4.21309'. [ 1443.822076][ T25] usb 2-1: Service connection timeout for: 257 [ 1443.863415][ T25] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1443.871912][ T25] ath9k_htc: Failed to initialize the device [ 1443.927238][ T46] usb 2-1: ath9k_htc: USB layer deinitialized [ 1444.792720][T20206] tap0: tun_chr_ioctl cmd 1074025672 [ 1444.798174][T20206] tap0: ignored: set checksum enabled [ 1445.410291][T20226] ptrace attach of "./syz-executor exec"[5833] was attempted by "4 [ 1446.118505][ T25] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1446.209660][ C1] vkms_vblank_simulate: vblank timer overrun [ 1446.250183][ C1] audit_log_start: 9395 callbacks suppressed [ 1446.250205][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.250502][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.256291][ C1] audit: audit_lost=85096 audit_rate_limit=0 audit_backlog_limit=64 [ 1446.256313][ C1] audit: backlog limit exceeded [ 1446.257602][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.264503][ T29] audit: type=1400 audit(2000004130.483:843840): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17058 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1446.270463][ C1] audit: audit_lost=85097 audit_rate_limit=0 audit_backlog_limit=64 [ 1446.270490][ C1] audit: backlog limit exceeded [ 1446.275335][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.292484][ T5833] audit: audit_lost=85098 audit_rate_limit=0 audit_backlog_limit=64 [ 1446.563409][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 1446.582933][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.607202][ T25] usb 3-1: config 0 descriptor?? [ 1446.623760][ T25] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1446.641895][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 1446.668281][ T25] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1446.693898][ T25] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1446.709568][ T25] usb 3-1: media controller created [ 1446.714869][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 1446.731671][ T25] dvb-usb: MAC address reading failed. [ 1446.740523][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1446.754635][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1446.762770][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 1446.768886][ T25] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1446.781161][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input165 [ 1446.805978][T20259] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.812524][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 1446.831524][ T25] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1446.850227][ T25] usb 3-1: USB disconnect, device number 76 [ 1446.884985][ T25] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1446.979029][T20259] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1447.082394][T20259] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1447.152970][T20259] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1447.229764][ T8] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1447.265810][T20259] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.289342][T20259] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.309040][T20259] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.328429][T20259] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.398603][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1447.422075][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1447.450949][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1447.461700][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.490044][ T8] usb 2-1: config 0 descriptor?? [ 1447.941474][ T8] hid (null): nested delimiters [ 1447.955500][ T8] hid (null): nested delimiters [ 1447.963056][ T8] hid (null): nested delimiters [ 1447.969197][ T8] hid (null): bogus close delimiter [ 1447.991857][ T8] uclogic 0003:28BD:0042.005C: interface is invalid, ignoring [ 1448.192188][ T46] usb 2-1: USB disconnect, device number 98 [ 1448.642219][ T46] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1448.829967][ T46] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1448.851291][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.878924][ T46] usb 10-1: config 0 descriptor?? [ 1449.522712][T20335] netlink: 'syz.7.21394': attribute type 1 has an invalid length. [ 1449.545143][T20335] netlink: 24 bytes leftover after parsing attributes in process `syz.7.21394'. [ 1449.765363][ T46] usb 10-1: Cannot set autoneg [ 1449.770395][ T46] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1449.795725][ T46] usb 10-1: USB disconnect, device number 15 [ 1450.244734][ T46] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1450.408520][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.423563][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.434532][ T46] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1450.447848][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.491776][ T46] usb 2-1: config 0 descriptor?? [ 1450.522409][ T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1450.696247][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1450.736116][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1450.745272][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1450.768892][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1450.778023][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.816353][T20357] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1450.862549][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1450.921100][T20377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21413'. [ 1450.956547][ T46] corsair 0003:1B1C:1B3E.005D: unknown main item tag 0x0 [ 1450.972770][ T46] corsair 0003:1B1C:1B3E.005D: unknown main item tag 0x0 [ 1450.990856][ T46] corsair 0003:1B1C:1B3E.005D: item fetching failed at offset 2/5 [ 1451.013137][ T46] corsair 0003:1B1C:1B3E.005D: parse failed [ 1451.020038][ T46] corsair 0003:1B1C:1B3E.005D: probe with driver corsair failed with error -22 [ 1451.101360][T20379] netlink: 56 bytes leftover after parsing attributes in process `syz.7.21414'. [ 1451.198762][ T46] usb 2-1: USB disconnect, device number 99 [ 1451.233137][T17460] usb 3-1: USB disconnect, device number 77 [ 1451.394786][T20386] input: syz0 as /devices/virtual/input/input166 [ 1451.640107][ T29] kauditd_printk_skb: 9232 callbacks suppressed [ 1451.640127][ T29] audit: type=1400 audit(2000004135.543:852009): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7539 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1451.647100][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.647124][ T7539] audit: audit_lost=85460 audit_rate_limit=0 audit_backlog_limit=64 [ 1451.647143][ T7539] audit: backlog limit exceeded [ 1451.647355][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.647371][ T7539] audit: audit_lost=85461 audit_rate_limit=0 audit_backlog_limit=64 [ 1451.647389][ T7539] audit: backlog limit exceeded [ 1451.647418][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1451.647432][ T7539] audit: audit_lost=85462 audit_rate_limit=0 audit_backlog_limit=64 [ 1451.647450][ T7539] audit: backlog limit exceeded [ 1451.949789][T20397] tap0: tun_chr_ioctl cmd 1074025694 [ 1452.359470][T20413] lo speed is unknown, defaulting to 1000 [ 1452.468137][ T46] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1452.593594][T20413] wlan0 speed is unknown, defaulting to 1000 [ 1452.634031][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.660668][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.692998][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1452.737520][ T46] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1452.769218][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.817660][ T46] usb 3-1: config 0 descriptor?? [ 1453.282098][ T46] dragonrise 0003:0079:0011.005E: unknown main item tag 0x3 [ 1453.295591][ T46] dragonrise 0003:0079:0011.005E: unknown main item tag 0x0 [ 1453.333184][ T46] dragonrise 0003:0079:0011.005E: item fetching failed at offset 4/5 [ 1453.366959][ T46] dragonrise 0003:0079:0011.005E: parse failed [ 1453.373316][ T46] dragonrise 0003:0079:0011.005E: probe with driver dragonrise failed with error -22 [ 1453.441506][T20430] batman_adv: batadv0: Adding interface: gretap1 [ 1453.456000][T20430] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1453.530361][T17460] usb 3-1: USB disconnect, device number 78 [ 1454.002975][T20442] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.047301][T20445] batadv_slave_0: entered allmulticast mode [ 1454.062318][T20444] dvmrp8: entered allmulticast mode [ 1454.087139][T20443] batadv_slave_0: left allmulticast mode [ 1454.110057][T20443] dvmrp8: left allmulticast mode [ 1454.305829][T20442] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.447456][T20442] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.601319][T20442] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.793872][T20442] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.898486][T20442] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.971183][T20442] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.053646][T20442] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.273314][T20473] netlink: 32 bytes leftover after parsing attributes in process `syz.9.21457'. [ 1455.378913][T20475] netlink: 'syz.2.21458': attribute type 3 has an invalid length. [ 1456.063749][T20499] netlink: 56 bytes leftover after parsing attributes in process `syz.9.21470'. [ 1456.161416][T20503] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1456.781672][T20523] netlink: 'syz.1.21481': attribute type 18 has an invalid length. [ 1456.990524][ T29] kauditd_printk_skb: 7969 callbacks suppressed [ 1456.990546][ T29] audit: type=1400 audit(2000004140.547:858945): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7539 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.167 dest=58978 netif=eth0 [ 1457.019608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1457.060945][T20532] netlink: 10 bytes leftover after parsing attributes in process `syz.1.21483'. [ 1457.097177][ T29] audit: type=1400 audit(2000004140.547:858946): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=7539 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.167 dest=58978 netif=eth0 [ 1457.128331][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1457.129282][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1457.141495][ C1] audit: audit_lost=85808 audit_rate_limit=0 audit_backlog_limit=64 [ 1457.149551][ C1] audit: backlog limit exceeded [ 1457.156059][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1457.162698][ C1] audit: audit_lost=85809 audit_rate_limit=0 audit_backlog_limit=64 [ 1457.166821][T17058] audit: audit_lost=85810 audit_rate_limit=0 audit_backlog_limit=64 [ 1457.170704][ C1] audit: backlog limit exceeded [ 1457.235529][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1458.347330][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1458.647071][ T5969] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1458.808199][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 1458.820038][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.837137][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1458.849459][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1458.862159][ T5969] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1458.872861][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1458.888370][ T5969] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1458.898532][ T5969] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1458.907303][ T5969] usb 2-1: Manufacturer: syz [ 1458.917019][ T5969] usb 2-1: config 0 descriptor?? [ 1459.246154][ T5969] rc_core: IR keymap rc-hauppauge not found [ 1459.261399][ T5969] Registered IR keymap rc-empty [ 1459.273752][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.299589][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.332400][ T5969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1459.372953][ T5969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input167 [ 1459.419337][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.449371][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.486930][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.525788][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.526449][T20590] netlink: 20 bytes leftover after parsing attributes in process `syz.7.21510'. [ 1459.598792][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.631803][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.652233][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.684363][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.744557][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.791267][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.827496][ T5969] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1459.868728][ T5969] mceusb 2-1:0.0: Registered Ñ€ with mce emulator interface version 1 [ 1459.910551][ T5969] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1459.938012][ T5969] usb 2-1: USB disconnect, device number 100 [ 1459.994292][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1460.647378][ T46] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1460.818506][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 1460.826708][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.860598][ T46] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1460.878712][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1460.893863][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.922082][ T46] usb 3-1: config 0 descriptor?? [ 1461.084122][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1461.134652][T20647] vlan2: entered allmulticast mode [ 1461.232257][ T46] usb 3-1: USB disconnect, device number 79 [ 1461.523156][T17460] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1461.695135][T17460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.719393][T17460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1461.753563][T17460] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1461.782920][T17460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1461.829023][T17460] usb 2-1: SerialNumber: syz [ 1462.092234][T17460] usb 2-1: 0:2 : does not exist [ 1462.161403][T17460] usb 2-1: USB disconnect, device number 101 [ 1462.196589][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1462.346741][ T29] kauditd_printk_skb: 8310 callbacks suppressed [ 1462.347111][ T29] audit: type=1400 audit(2000004145.552:866472): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1462.353622][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.353647][ C1] audit: audit_lost=86079 audit_rate_limit=0 audit_backlog_limit=64 [ 1462.353667][ C1] audit: backlog limit exceeded [ 1462.353765][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.353783][ C1] audit: audit_lost=86080 audit_rate_limit=0 audit_backlog_limit=64 [ 1462.353802][ C1] audit: backlog limit exceeded [ 1462.380545][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1462.380569][T17058] audit: audit_lost=86081 audit_rate_limit=0 audit_backlog_limit=64 [ 1462.380586][T17058] audit: backlog limit exceeded [ 1462.624678][ T5052] Bluetooth: hci3: command 0x0405 tx timeout [ 1463.794121][T20715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.828810][T20715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.068818][T20715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.081553][T20715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.347413][T20715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.377526][T20715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.654433][T20715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.667680][T20715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.942185][T20715] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1464.969460][T20715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.047538][T20715] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1465.070379][T20715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.135917][T20715] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1465.147289][T20715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.199097][T20715] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1465.223256][T20715] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.393051][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1466.472228][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1466.601412][ T5969] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1466.786600][ T5969] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1466.847268][ T5969] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1466.877112][ T5969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1466.920070][ T5969] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1466.941213][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.960943][ T5969] usb 2-1: Product: syz [ 1466.986130][ T5969] usb 2-1: Manufacturer: syz [ 1467.002561][ T5969] usb 2-1: SerialNumber: syz [ 1467.133985][T20816] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1467.584116][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1467.698790][ T5969] usb 2-1: 0:2 : does not exist [ 1467.714136][ T29] kauditd_printk_skb: 9169 callbacks suppressed [ 1467.714155][ T29] audit: type=1400 audit(2000004150.584:873654): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1467.764483][ T29] audit: type=1400 audit(2000004150.584:873655): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="snd" dev="devtmpfs" ino=1278 [ 1467.795686][ T29] audit: type=1400 audit(2000004150.584:873656): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="snd" dev="devtmpfs" ino=1278 [ 1467.811790][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1467.821466][ T29] audit: type=1400 audit(2000004150.584:873657): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="controlC3" dev="devtmpfs" ino=5728 [ 1467.821516][ T29] audit: type=1400 audit(2000004150.612:873658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1467.821553][ T29] audit: type=1400 audit(2000004150.612:873659): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1467.821592][ T29] audit: type=1400 audit(2000004150.612:873660): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="mixer3" dev="devtmpfs" ino=5729 [ 1467.821633][ T29] audit: type=1400 audit(2000004150.659:873661): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5815 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.167 dest=58978 netif=eth0 [ 1467.821680][ T29] audit: type=1400 audit(2000004150.659:873662): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5815 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.167 dest=58978 netif=eth0 [ 1467.923781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1467.953187][ T5969] usb 2-1: USB disconnect, device number 102 [ 1468.337514][T20835] netlink: 'syz.9.21622': attribute type 9 has an invalid length. [ 1469.178282][T20863] ip6_vti0: entered promiscuous mode [ 1469.186229][T20863] ip6_vti0: left promiscuous mode [ 1469.387413][T20870] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 1469.467926][T20870] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 1469.488613][T20870] overlayfs: conflicting lowerdir path [ 1470.770808][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1470.975176][T20922] bpf: Bad value for 'uid' [ 1471.388394][T20935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1471.563929][T20935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1471.702656][T20935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1471.861358][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1471.897876][T20935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1472.190494][T20935] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1472.284360][T20935] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1472.322082][T20935] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1472.361699][T20935] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1472.600411][T20968] netlink: 104 bytes leftover after parsing attributes in process `syz.2.21680'. [ 1472.972155][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1473.077945][ T29] kauditd_printk_skb: 7971 callbacks suppressed [ 1473.077972][ T29] audit: type=1400 audit(2000004155.598:881019): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20986 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1473.118238][ T29] audit: type=1400 audit(2000004155.598:881020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20986 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1473.152142][ T29] audit: type=1400 audit(2000004155.598:881021): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20986 comm="syz-executor" name="4582" dev="tmpfs" ino=23105 [ 1473.179031][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1473.185634][ T5833] audit: audit_lost=86957 audit_rate_limit=0 audit_backlog_limit=64 [ 1473.196358][ T5833] audit: backlog limit exceeded [ 1473.201970][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1473.209818][ T5833] audit: audit_lost=86958 audit_rate_limit=0 audit_backlog_limit=64 [ 1473.212917][ T29] audit: type=1400 audit(2000004155.598:881022): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=20986 comm="syz-executor" opid=20986 ocomm="syz-executor" [ 1473.218955][ T5833] audit: backlog limit exceeded [ 1473.424028][T20995] netlink: 'syz.9.21692': attribute type 6 has an invalid length. [ 1474.152287][T21017] batadv0: entered promiscuous mode [ 1474.160039][T21017] macvlan4: entered promiscuous mode [ 1474.166861][T21017] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1474.673036][T17460] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1474.854492][T17460] usb 10-1: Using ep0 maxpacket: 8 [ 1474.869429][T17460] usb 10-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1474.886502][T17460] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.905726][T17460] usb 10-1: Product: syz [ 1474.916521][T17460] usb 10-1: Manufacturer: syz [ 1474.927321][T17460] usb 10-1: SerialNumber: syz [ 1474.944794][T17460] usb 10-1: config 0 descriptor?? [ 1475.221527][T17460] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1475.677118][ T46] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1475.779238][T21059] random: crng reseeded on system resumption [ 1475.843003][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1475.865054][T17460] gspca_sunplus: reg_w_riv err -71 [ 1475.871644][T17460] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1475.892798][ T46] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1475.905086][T17460] usb 10-1: USB disconnect, device number 16 [ 1475.917024][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1475.926743][ T46] usb 2-1: SerialNumber: syz [ 1476.093287][T21063] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1476.093287][T21063] The task syz.4.21718 (21063) triggered the difference, watch for misbehavior. [ 1476.158436][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1476.820197][ T46] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1476.856195][T21059] Unrecognized hibernate image header format! [ 1476.863113][T21059] PM: hibernation: Image mismatch: architecture specific data [ 1476.877275][ T46] usb 2-1: USB disconnect, device number 103 [ 1477.248315][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1477.318878][T21087] macvlan5: entered promiscuous mode [ 1477.325423][T21087] team0: entered promiscuous mode [ 1477.330707][T21087] team_slave_0: entered promiscuous mode [ 1477.347805][T21087] team_slave_1: entered promiscuous mode [ 1477.379127][T21087] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1477.387087][T21087] bridge0: port 3(macvlan5) entered blocking state [ 1477.416612][T21087] bridge0: port 3(macvlan5) entered disabled state [ 1477.442075][T21087] macvlan5: entered allmulticast mode [ 1477.452952][T21087] team0: entered allmulticast mode [ 1477.458147][T21087] team_slave_0: entered allmulticast mode [ 1477.477672][T21087] team_slave_1: entered allmulticast mode [ 1477.684856][T21098] netlink: 260 bytes leftover after parsing attributes in process `syz.2.21733'. [ 1478.117463][T21115] netlink: 188 bytes leftover after parsing attributes in process `syz.7.21742'. [ 1478.360162][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1478.426569][ T29] kauditd_printk_skb: 8119 callbacks suppressed [ 1478.426589][ T29] audit: type=1400 audit(2000004160.593:888315): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13021 comm="kworker/u8:20" saddr=10.128.0.169 src=30008 daddr=10.128.1.167 dest=58978 netif=eth0 [ 1478.455739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1478.493187][T21126] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1478.493197][T21127] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1478.493218][T21127] audit: audit_lost=87236 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.514938][ T29] audit: type=1400 audit(2000004160.593:888316): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=13021 comm="kworker/u8:20" saddr=10.128.0.169 src=30008 daddr=10.128.1.167 dest=58978 netif=eth0 [ 1478.542467][T21126] audit: audit_lost=87237 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.550517][T21126] audit: backlog limit exceeded [ 1478.550835][T21128] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1478.562942][T21128] audit: audit_lost=87238 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.568456][T21130] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1480.467210][ T46] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1480.637779][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1480.645452][ T46] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1480.665519][ T46] usb 2-1: config 0 has no interface number 0 [ 1480.686626][ T46] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1480.702031][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.721111][ T46] usb 2-1: Product: syz [ 1480.728556][ T46] usb 2-1: Manufacturer: syz [ 1480.732990][T21191] ALSA: mixer_oss: invalid OSS volume '·' [ 1480.733395][ T46] usb 2-1: SerialNumber: syz [ 1480.766267][ T46] usb 2-1: config 0 descriptor?? [ 1480.774338][ T46] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1481.045806][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1481.069784][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1481.487076][T21213] netlink: 'syz.9.21787': attribute type 8 has an invalid length. [ 1481.495829][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1481.506040][ T46] usb 2-1: USB disconnect, device number 104 [ 1481.525259][ T46] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1481.545946][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1481.562281][ T46] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1481.582291][ T46] quatech2 2-1:0.51: device disconnected [ 1481.637580][T21217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1482.376442][T21241] netlink: 'syz.9.21800': attribute type 11 has an invalid length. [ 1482.385664][T21241] netlink: 60 bytes leftover after parsing attributes in process `syz.9.21800'. [ 1482.647072][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1482.792475][T21254] netlink: 'syz.1.21806': attribute type 4 has an invalid length. [ 1483.730870][T21287] cifs: Unknown parameter 'mode' [ 1483.748282][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1483.792364][ T29] kauditd_printk_skb: 8920 callbacks suppressed [ 1483.792392][ T29] audit: type=1400 audit(2000004165.616:896630): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21289 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1483.806578][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1483.826793][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1483.833386][ C1] audit: audit_lost=87444 audit_rate_limit=0 audit_backlog_limit=64 [ 1483.841449][ C1] audit: backlog limit exceeded [ 1483.845486][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1483.847605][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1483.859499][ C1] audit: audit_lost=87445 audit_rate_limit=0 audit_backlog_limit=64 [ 1483.860602][T21291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1483.867549][ C1] audit: backlog limit exceeded [ 1484.102932][T21297] block device autoloading is deprecated and will be removed. [ 1484.115753][T21297] bio_check_eod: 2 callbacks suppressed [ 1484.115778][T21297] syz.2.21827: attempt to access beyond end of device [ 1484.115778][T21297] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1485.297362][T21348] sctp: [Deprecated]: syz.4.21851 (pid 21348) Use of int in max_burst socket option deprecated. [ 1485.297362][T21348] Use struct sctp_assoc_value instead [ 1485.717047][ T5969] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1485.877983][T21364] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1485.887310][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 1485.913581][ T5969] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1485.930245][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1485.961871][ T5969] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1485.977866][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1485.998274][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1486.033430][ T5969] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1486.059186][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1486.089200][ T5969] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1486.118605][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1486.143760][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1486.219253][ T5969] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1486.226734][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1486.264633][ T5969] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1486.293519][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1486.317009][ T5969] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1486.354774][ T5969] usb 2-1: string descriptor 0 read error: -22 [ 1486.362117][ T5969] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1486.394808][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.459952][ T5969] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1486.611534][T21381] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1486.723923][ T46] usb 2-1: USB disconnect, device number 105 [ 1486.934581][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1487.070699][T21389] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21871'. [ 1487.651907][T21405] netlink: 'syz.2.21878': attribute type 1 has an invalid length. [ 1488.024447][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1488.213304][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21887'. [ 1488.281962][ T5052] Bluetooth: hci3: command 0x0405 tx timeout [ 1488.356078][ T25] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1488.560396][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.580372][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.601066][ T25] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1488.621507][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.632901][ T25] usb 3-1: config 0 descriptor?? [ 1488.752089][ T8] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1488.903550][T21434] block device autoloading is deprecated and will be removed. [ 1488.911480][T21434] syz.7.21892: attempt to access beyond end of device [ 1488.911480][T21434] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1488.925871][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1488.945597][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1488.966244][ T8] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1488.998286][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1489.020199][ T8] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1489.040739][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1489.061290][ T8] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1489.074997][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.083894][ T8] usb 2-1: Product: syz [ 1489.088211][ T8] usb 2-1: Manufacturer: syz [ 1489.092844][ T8] usb 2-1: SerialNumber: syz [ 1489.098228][ T25] playstation 0003:054C:0DF2.005F: unknown main item tag 0x0 [ 1489.098268][ T25] playstation 0003:054C:0DF2.005F: unknown main item tag 0x0 [ 1489.098298][ T25] playstation 0003:054C:0DF2.005F: unknown main item tag 0x0 [ 1489.098343][ T25] playstation 0003:054C:0DF2.005F: unknown main item tag 0x0 [ 1489.098374][ T25] playstation 0003:054C:0DF2.005F: unknown main item tag 0x0 [ 1489.137593][ T25] playstation 0003:054C:0DF2.005F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1489.149487][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1489.170267][ T29] kauditd_printk_skb: 7725 callbacks suppressed [ 1489.170288][ T29] audit: type=1400 audit(2000004170.658:903588): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1489.171356][ T8] usb 2-1: config 0 descriptor?? [ 1489.177004][ T29] audit: type=1400 audit(2000004170.658:903589): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 1489.210135][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.223453][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.235591][ C1] audit: audit_lost=87703 audit_rate_limit=0 audit_backlog_limit=64 [ 1489.240649][ T7539] audit: audit_lost=87704 audit_rate_limit=0 audit_backlog_limit=64 [ 1489.243622][ C1] audit: backlog limit exceeded [ 1489.244921][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.264024][ C1] audit: audit_lost=87705 audit_rate_limit=0 audit_backlog_limit=64 [ 1489.272114][ C1] audit: backlog limit exceeded [ 1489.277685][T21429] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1489.355570][ T25] playstation 0003:054C:0DF2.005F: Invalid byte count transferred, expected 20 got 0 [ 1489.368159][ T25] playstation 0003:054C:0DF2.005F: Failed to retrieve DualSense pairing info: -22 [ 1489.379533][ T25] playstation 0003:054C:0DF2.005F: Failed to get MAC address from DualSense [ 1489.389717][ T25] playstation 0003:054C:0DF2.005F: Failed to create dualsense. [ 1489.441860][ T25] playstation 0003:054C:0DF2.005F: probe with driver playstation failed with error -22 [ 1489.515265][T21429] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1489.524962][T21442] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1489.539502][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input168 [ 1489.579949][ T46] usb 3-1: USB disconnect, device number 80 [ 1489.775878][ T5052] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1489.785161][ T25] usb 2-1: USB disconnect, device number 106 [ 1490.956060][T21491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21921'. [ 1491.108481][T21499] input: syz1 as /devices/virtual/input/input169 [ 1491.255424][ T25] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1491.439051][ T25] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1491.460549][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.482657][ T25] usb 10-1: config 0 descriptor?? [ 1491.781530][ T25] kaweth 10-1:0.0: Firmware present in device. [ 1491.814844][T21519] sctp: [Deprecated]: syz.7.21934 (pid 21519) Use of int in max_burst socket option. [ 1491.814844][T21519] Use struct sctp_assoc_value instead [ 1491.960617][ T5052] Bluetooth: hci3: command 0x0405 tx timeout [ 1491.984454][ T25] kaweth 10-1:0.0: Statistics collection: 0 [ 1492.007885][ T25] kaweth 10-1:0.0: Multicast filter limit: 0 [ 1492.038166][ T25] kaweth 10-1:0.0: MTU: 0 [ 1492.042586][ T25] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1492.311202][T21537] dummy0: entered promiscuous mode [ 1492.322743][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1492.366246][T21537] dummy0: left promiscuous mode [ 1492.425786][ T25] kaweth 10-1:0.0: Error setting SOFS wait [ 1492.438162][ T25] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 1492.479004][ T25] usb 10-1: USB disconnect, device number 17 [ 1493.217716][T21560] netlink: 32 bytes leftover after parsing attributes in process `syz.7.21954'. [ 1493.412546][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1493.478870][ T5969] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1493.651205][ T5969] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.667163][ T5969] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1493.701188][ T5969] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1493.745491][ T5969] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1493.772677][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.792956][T21565] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1493.809951][ T5969] hub 2-1:1.0: bad descriptor, ignoring hub [ 1493.816024][ T5969] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1493.847848][ T5969] cdc_wdm 2-1:1.0: skipping garbage [ 1493.908982][ T5969] cdc_wdm 2-1:1.0: skipping garbage [ 1493.919510][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21969'. [ 1493.930757][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21969'. [ 1493.944728][ T5969] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1493.952457][ T5969] cdc_wdm 2-1:1.0: Unknown control protocol [ 1493.970587][T21592] gtp0: entered promiscuous mode [ 1493.976812][T21592] gtp0: entered allmulticast mode [ 1494.098064][ T5052] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1494.110296][ T5052] Bluetooth: hci2: Injecting HCI hardware error event [ 1494.123416][ T5052] Bluetooth: hci2: hardware error 0x00 [ 1494.141058][ T46] usb 2-1: USB disconnect, device number 107 [ 1494.152382][T21597] Process accounting resumed [ 1494.183897][T21598] Bluetooth: hci3: command 0x0405 tx timeout [ 1494.258794][T21602] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1494.535640][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1494.544521][ T29] kauditd_printk_skb: 9972 callbacks suppressed [ 1494.544542][ T29] audit: type=1400 audit(2000004175.662:912720): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7539 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1494.576660][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.584350][ T29] audit: type=1400 audit(2000004175.662:912721): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7539 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1494.606292][T21614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.609892][ T7539] audit: audit_lost=87992 audit_rate_limit=0 audit_backlog_limit=64 [ 1494.624328][T21614] audit: audit_lost=87993 audit_rate_limit=0 audit_backlog_limit=64 [ 1494.626459][ T7539] audit: backlog limit exceeded [ 1494.642237][ T29] audit: type=1400 audit(2000004175.662:912722): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7539 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1494.661683][T21614] audit: backlog limit exceeded [ 1494.661995][T21614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1494.848837][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21981'. [ 1495.743865][ T46] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1495.914761][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1495.923185][ T46] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 1495.933090][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.944382][ T46] usb 3-1: config 0 has no interface number 0 [ 1495.955728][ T46] usb 3-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 1495.966755][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.975032][ T46] usb 3-1: Product: syz [ 1495.980468][ T46] usb 3-1: Manufacturer: syz [ 1495.985248][ T46] usb 3-1: SerialNumber: syz [ 1495.994105][ T46] usb 3-1: config 0 descriptor?? [ 1496.004155][ T46] rndis_host 3-1:0.195: More than one union descriptor, skipping ... [ 1496.013418][ T46] usb 3-1: bad CDC descriptors [ 1496.018870][ T46] cdc_acm 3-1:0.195: More than one union descriptor, skipping ... [ 1496.221757][ T46] usb 3-1: USB disconnect, device number 81 [ 1496.321009][ T5052] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1496.867299][T21665] team0: No ports can be present during mode change [ 1497.710730][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1498.108404][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22017'. [ 1498.124164][T21707] netlink: 'syz.7.22018': attribute type 10 has an invalid length. [ 1498.800587][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1499.454162][T21746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22037'. [ 1499.870312][T17460] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1499.907133][ T29] kauditd_printk_skb: 7471 callbacks suppressed [ 1499.907155][ T29] audit: type=1400 audit(2000004180.695:919859): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17058 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1499.913627][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1499.916324][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1499.934870][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1499.955530][ C1] audit: audit_lost=88106 audit_rate_limit=0 audit_backlog_limit=64 [ 1499.957314][T17058] audit: audit_lost=88107 audit_rate_limit=0 audit_backlog_limit=64 [ 1499.963559][ C1] audit: backlog limit exceeded [ 1499.978000][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1499.984562][ C1] audit: audit_lost=88108 audit_rate_limit=0 audit_backlog_limit=64 [ 1499.992639][ C1] audit: backlog limit exceeded [ 1499.997614][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1500.064232][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22044'. [ 1500.105509][T17460] usb 2-1: Using ep0 maxpacket: 16 [ 1500.113391][T17460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.132193][T17460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1500.162204][T17460] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1500.191139][T17460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.220992][T17460] usb 2-1: Product: syz [ 1500.242589][T17460] usb 2-1: Manufacturer: syz [ 1500.260655][T17460] usb 2-1: SerialNumber: syz [ 1500.645571][ T8] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 1500.666493][ T8] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1500.749846][T17460] usb 2-1: 0:2 : does not exist [ 1500.917861][T32101] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1501.081111][T32101] usb 3-1: config 0 has no interfaces? [ 1501.095936][T32101] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1501.106113][T32101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.129744][T32101] usb 3-1: Product: syz [ 1501.134743][T32101] usb 3-1: Manufacturer: syz [ 1501.139451][T32101] usb 3-1: SerialNumber: syz [ 1501.147458][T32101] usb 3-1: config 0 descriptor?? [ 1501.189891][T17460] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1501.210875][T17460] usb 2-1: USB disconnect, device number 108 [ 1501.376325][ T25] usb 3-1: USB disconnect, device number 82 [ 1501.700889][T21794] netlink: 'syz.9.22060': attribute type 1 has an invalid length. [ 1501.709758][T21794] netlink: 104 bytes leftover after parsing attributes in process `syz.9.22060'. [ 1501.719762][T21794] netlink: 'syz.9.22060': attribute type 1 has an invalid length. [ 1502.299809][T21814] netlink: 16 bytes leftover after parsing attributes in process `syz.9.22069'. [ 1503.109470][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1503.879400][T32101] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1504.062345][T32101] usb 3-1: Using ep0 maxpacket: 32 [ 1504.080872][T32101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.107001][T32101] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.128667][T32101] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1504.145468][T32101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.157312][ T8] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1504.188661][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1504.199147][T32101] usb 3-1: config 0 descriptor?? [ 1504.340851][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1504.386681][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1504.410811][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 1504.443532][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.470676][ T8] usb 2-1: config 0 descriptor?? [ 1504.691922][T32101] ft260 0003:0403:6030.0061: unknown main item tag 0x0 [ 1504.732406][T21871] tap0: tun_chr_ioctl cmd 1074025677 [ 1504.739303][T21871] tap0: linktype set to 805 [ 1504.929049][T32101] ft260 0003:0403:6030.0061: chip code: 6424 8183 [ 1504.941588][ T8] wacom 0003:056A:0027.0062: unknown main item tag 0x0 [ 1504.962724][ T8] wacom 0003:056A:0027.0062: unknown main item tag 0x0 [ 1505.004677][ T8] wacom 0003:056A:0027.0062: unknown main item tag 0x0 [ 1505.011690][ T8] wacom 0003:056A:0027.0062: unknown main item tag 0x0 [ 1505.063180][ T8] wacom 0003:056A:0027.0062: unknown main item tag 0x0 [ 1505.073269][ T8] wacom 0003:056A:0027.0062: unknown main item tag 0x0 [ 1505.080938][ T8] wacom 0003:056A:0027.0062: unknown main item tag 0x0 [ 1505.089847][ T8] wacom 0003:056A:0027.0062: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 1505.111625][ T8] wacom 0003:056A:0027.0062: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.1-1/input0 [ 1505.143725][T32101] ft260 0003:0403:6030.0061: failed to retrieve system status [ 1505.155461][ T8] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0027.0062/input/input170 [ 1505.173182][T32101] ft260 0003:0403:6030.0061: probe with driver ft260 failed with error -71 [ 1505.187927][T32101] usb 3-1: USB disconnect, device number 83 [ 1505.210850][ T8] usb 2-1: USB disconnect, device number 109 [ 1505.258552][ T29] kauditd_printk_skb: 6585 callbacks suppressed [ 1505.258572][ T29] audit: type=1400 audit(2000004185.709:926007): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=5183 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=5757 [ 1505.292137][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.292226][ T5183] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1505.304646][T17058] audit: audit_lost=88255 audit_rate_limit=0 audit_backlog_limit=64 [ 1505.305322][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1505.313965][T17058] audit: backlog limit exceeded [ 1505.322390][ T27] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1505.326693][T17058] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1505.332287][ T27] audit: audit_lost=88256 audit_rate_limit=0 audit_backlog_limit=64 [ 1505.339353][ T29] audit: type=1400 audit(2000004185.727:926008): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17058 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1505.339400][ T29] audit: type=1400 audit(2000004185.727:926009): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17058 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1506.374926][T21916] netlink: 100 bytes leftover after parsing attributes in process `syz.1.22114'. [ 1506.893941][ T8] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1507.075642][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1507.101268][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1507.144279][ T8] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1507.182633][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.201691][ T8] usb 3-1: Product: syz [ 1507.206832][ T8] usb 3-1: Manufacturer: syz [ 1507.218037][ T8] usb 3-1: SerialNumber: syz [ 1507.242908][ T8] usb 3-1: config 0 descriptor?? [ 1507.705129][ T8] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1507.913272][T21959] lo speed is unknown, defaulting to 1000 [ 1508.136351][ T8] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1508.150453][ T8] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1508.163924][ T8] usb 3-1: USB disconnect, device number 84 [ 1508.219751][T17460] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1508.246841][T21959] wlan0 speed is unknown, defaulting to 1000 [ 1508.397595][T17460] usb 2-1: Using ep0 maxpacket: 32 [ 1508.472309][T17460] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1508.486855][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1508.488747][T21975] ?: renamed from vlan0 [ 1508.503766][T17460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.529948][T17460] usb 2-1: Product: syz [ 1508.548102][T17460] usb 2-1: Manufacturer: syz [ 1508.569527][T17460] usb 2-1: SerialNumber: syz [ 1508.584277][T17460] usb 2-1: config 0 descriptor?? [ 1508.606360][T17460] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1508.874859][T17460] gspca_ov534_9: reg_w failed -71 [ 1509.299479][T17460] gspca_ov534_9: Unknown sensor 0000 [ 1509.299567][T17460] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1509.338533][T17460] usb 2-1: USB disconnect, device number 110 [ 1509.587420][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1510.641923][ T29] kauditd_printk_skb: 7415 callbacks suppressed [ 1510.641943][ T29] audit: type=1400 audit(2000004190.732:932931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1510.655027][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.669636][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.682241][ C1] audit: audit_lost=88423 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.689206][ T5833] audit: audit_lost=88424 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.690282][ C1] audit: backlog limit exceeded [ 1510.703284][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.709873][ C1] audit: audit_lost=88425 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.717903][ C1] audit: backlog limit exceeded [ 1510.724118][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1510.736306][ T5833] audit: backlog limit exceeded [ 1511.618101][T22040] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1512.428246][T22069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.22187'. [ 1512.538676][ T25] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1512.701137][T22077] netlink: 'syz.9.22191': attribute type 1 has an invalid length. [ 1512.712582][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.725543][T22077] netlink: 134708 bytes leftover after parsing attributes in process `syz.9.22191'. [ 1512.746469][T22081] netlink: 20 bytes leftover after parsing attributes in process `syz.7.22193'. [ 1512.748198][ T25] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1512.806338][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.833661][ T25] usb 2-1: config 0 descriptor?? [ 1513.337007][ T25] uclogic 0003:145F:0212.0063: interface is invalid, ignoring [ 1513.577777][ T46] usb 2-1: USB disconnect, device number 111 [ 1513.874923][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1513.949879][ T8] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1514.123462][ T8] usb 10-1: config 0 has no interfaces? [ 1514.129195][ T8] usb 10-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 1514.167038][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.197235][ T8] usb 10-1: config 0 descriptor?? [ 1514.449093][T22126] lo speed is unknown, defaulting to 1000 [ 1514.461210][ T46] usb 10-1: USB disconnect, device number 18 [ 1514.671512][T22126] wlan0 speed is unknown, defaulting to 1000 [ 1514.964818][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1515.449570][T22160] @: renamed from vlan0 (while UP) [ 1515.468182][T22162] program syz.7.22230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1515.993232][ T29] kauditd_printk_skb: 8018 callbacks suppressed [ 1515.993254][ T29] audit: type=1400 audit(2000004195.745:940007): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22178 comm="syz.4.22238" name="newroot" dev="tmpfs" ino=2 [ 1516.058372][T22183] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1516.075957][ T29] audit: type=1400 audit(2000004195.745:940008): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22178 comm="syz.4.22238" name="/" dev="proc" ino=1 [ 1516.089712][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1516.101325][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1516.103576][T22185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1516.111349][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1516.118726][T22183] audit: audit_lost=88748 audit_rate_limit=0 audit_backlog_limit=64 [ 1516.124206][ C1] audit: audit_lost=88749 audit_rate_limit=0 audit_backlog_limit=64 [ 1516.124228][ C1] audit: backlog limit exceeded [ 1516.125570][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1516.229795][T22186] Invalid logical block size (3) [ 1518.542111][T22243] lo speed is unknown, defaulting to 1000 [ 1519.183258][T22243] wlan0 speed is unknown, defaulting to 1000 [ 1519.263033][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1519.548599][T22262] vivid-004: ================= START STATUS ================= [ 1519.592201][T22262] vivid-004: Radio HW Seek Mode: Bounded [ 1519.611338][T22262] vivid-004: Radio Programmable HW Seek: false [ 1519.636590][T22262] vivid-004: RDS Rx I/O Mode: Block I/O [ 1519.648042][T22262] vivid-004: Generate RBDS Instead of RDS: false [ 1519.667727][T22262] vivid-004: RDS Reception: true [ 1519.688355][T22262] vivid-004: RDS Program Type: 0 inactive [ 1519.727457][T22262] vivid-004: RDS PS Name: inactive [ 1519.750241][T22262] vivid-004: RDS Radio Text: inactive [ 1519.761275][T22262] vivid-004: RDS Traffic Announcement: false inactive [ 1519.783351][T22262] vivid-004: RDS Traffic Program: false inactive [ 1519.801458][T22262] vivid-004: RDS Music: false inactive [ 1519.818886][T22262] vivid-004: ================== END STATUS ================== [ 1519.896804][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22265'. [ 1520.352841][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1520.903364][T22304] sctp: [Deprecated]: syz.9.22290 (pid 22304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1520.903364][T22304] Use struct sctp_sack_info instead [ 1521.302611][T22311] syzkaller0: tun_chr_ioctl cmd 35108 [ 1521.360375][ T29] kauditd_printk_skb: 5721 callbacks suppressed [ 1521.360395][ T29] audit: type=1400 audit(2000004200.769:945265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1521.365333][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.396181][ T29] audit: type=1400 audit(2000004200.769:945266): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1521.439565][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.440217][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.452803][ C1] audit: audit_lost=88906 audit_rate_limit=0 audit_backlog_limit=64 [ 1521.460862][ C1] audit: backlog limit exceeded [ 1521.465848][ T5833] audit: audit_lost=88907 audit_rate_limit=0 audit_backlog_limit=64 [ 1521.467571][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1521.482342][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1521.486638][ T29] audit: type=1400 audit(2000004200.769:945267): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1522.171032][ T25] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1522.355890][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1522.366083][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.409028][ T25] usb 2-1: config 0 descriptor?? [ 1522.428118][ T25] cp210x 2-1:0.0: cp210x converter detected [ 1522.487093][T22346] netlink: 165 bytes leftover after parsing attributes in process `syz.2.22308'. [ 1522.536689][T22347] netpci0: tun_chr_ioctl cmd 1074025677 [ 1522.566744][T22347] netpci0: linktype set to 769 [ 1522.796467][T22356] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 8) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 1522.888915][ T25] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1522.909100][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1523.118533][ T8] usb 2-1: USB disconnect, device number 112 [ 1523.130129][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1523.163438][ T8] cp210x 2-1:0.0: device disconnected [ 1523.778692][T22375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22323'. [ 1524.416016][ T25] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1524.576982][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1524.602829][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.619344][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1524.643048][ T25] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1524.653122][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1524.679563][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.683346][ T8] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1524.701606][ T25] usb 10-1: config 0 descriptor?? [ 1524.801173][ T46] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1524.854134][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1524.862005][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.889957][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1524.918377][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.929650][ T8] usb 2-1: config 0 descriptor?? [ 1524.972236][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 1524.985585][ T46] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.003907][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1525.029939][ T46] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.064436][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1525.093643][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1525.108562][ T46] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.117859][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1525.130334][ T46] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.143900][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1525.155741][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1525.191666][ T46] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.200408][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1525.213196][ T46] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.243247][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1525.282793][ T46] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1525.321327][ T46] usb 3-1: string descriptor 0 read error: -22 [ 1525.333864][ T46] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1525.347089][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.365648][ T46] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1525.414379][ T8] logitech-djreceiver 0003:046D:C531.0064: hidraw0: USB HID v0.05 Device [HID 046d:c531] on usb-dummy_hcd.1-1/input0 [ 1525.613491][ T46] usb 3-1: USB disconnect, device number 85 [ 1525.751628][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1525.889272][ T46] usb 2-1: USB disconnect, device number 113 [ 1526.742875][ T29] kauditd_printk_skb: 5847 callbacks suppressed [ 1526.742895][ T29] audit: type=1400 audit(2000004205.792:950397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1526.749082][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1526.757260][ T29] audit: type=1400 audit(2000004205.792:950398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1526.770256][ T5833] audit: audit_lost=89150 audit_rate_limit=0 audit_backlog_limit=64 [ 1526.789179][ T29] audit: type=1400 audit(2000004205.792:950399): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1526.796220][ T5833] audit: backlog limit exceeded [ 1526.815097][ T29] audit: type=1400 audit(2000004205.792:950400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1526.850690][ T29] audit: type=1400 audit(2000004205.792:950401): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5833 comm="syz-executor" name="4708" dev="tmpfs" ino=23742 [ 1526.866445][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1526.870931][ T29] audit: type=1400 audit(2000004205.792:950402): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5833 comm="syz-executor" path="/4708" dev="tmpfs" ino=23742 [ 1526.876779][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1527.424002][ T25] usbhid 10-1:0.0: can't add hid device: -71 [ 1527.451117][ T25] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1527.485641][ T25] usb 10-1: USB disconnect, device number 19 [ 1527.853608][T22438] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2840 [ 1528.380582][T22453] program syz.9.22359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1530.038741][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1530.456599][ T8] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1530.477557][ T25] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1530.619734][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1530.637989][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.637991][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 1530.640485][ T8] usb 3-1: config 0 descriptor?? [ 1530.661943][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1530.678561][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.697039][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.708420][ T25] usb 10-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1530.718548][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.731204][ T25] usb 10-1: config 0 descriptor?? [ 1531.111966][T22533] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1531.130062][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1531.206683][ T25] logitech 0003:046D:C29C.0065: unknown main item tag 0x0 [ 1531.237102][ T25] logitech 0003:046D:C29C.0065: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.9-1/input0 [ 1531.553477][ T8] gspca_sunplus: reg_w_riv err -71 [ 1531.568285][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1531.587080][ T8] usb 3-1: USB disconnect, device number 86 [ 1531.636659][ T25] logitech 0003:046D:C29C.0065: no inputs found [ 1531.658734][ T25] usb 10-1: USB disconnect, device number 20 [ 1532.009654][T22555] lo speed is unknown, defaulting to 1000 [ 1532.099003][ T29] kauditd_printk_skb: 7577 callbacks suppressed [ 1532.099023][ T29] audit: type=1400 audit(2000004210.805:957388): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22557 comm="syz-executor" name="4133" dev="tmpfs" ino=20855 [ 1532.127198][ T29] audit: type=1400 audit(2000004210.805:957389): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22557 comm="syz-executor" name="4133" dev="tmpfs" ino=20855 [ 1532.147589][ T29] audit: type=1400 audit(2000004210.805:957390): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22557 comm="syz-executor" name="4133" dev="tmpfs" ino=20855 [ 1532.168979][ T29] audit: type=1400 audit(2000004210.805:957391): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22557 comm="syz-executor" name="4133" dev="tmpfs" ino=20855 [ 1532.189495][ T29] audit: type=1400 audit(2000004210.805:957392): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22557 comm="syz-executor" name="4133" dev="tmpfs" ino=20855 [ 1532.210838][ T29] audit: type=1400 audit(2000004210.805:957393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22557 comm="syz-executor" name="4133" dev="tmpfs" ino=20855 [ 1532.229350][T22555] wlan0 speed is unknown, defaulting to 1000 [ 1532.241602][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1532.248144][ T29] audit: type=1400 audit(2000004210.805:957394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22557 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1532.268184][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1532.273918][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1532.277072][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1534.108017][T22610] netlink: 340 bytes leftover after parsing attributes in process `syz.4.22431'. [ 1534.118511][ T25] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1534.287672][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.311996][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.335002][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1534.354592][ T25] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1534.376518][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.455878][ T25] usb 3-1: config 0 descriptor?? [ 1534.906422][ T25] betop 0003:11C0:5506.0066: unbalanced collection at end of report description [ 1534.936539][ T25] betop 0003:11C0:5506.0066: parse failed [ 1534.953287][ T25] betop 0003:11C0:5506.0066: probe with driver betop failed with error -22 [ 1535.143335][ T25] usb 3-1: USB disconnect, device number 87 [ 1535.427156][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1536.047737][ T25] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1536.234108][ T25] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1536.251721][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.286287][ T25] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1536.314793][ T25] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1536.322978][ T25] usb 10-1: Manufacturer: syz [ 1536.365714][ T25] usb 10-1: config 0 descriptor?? [ 1536.517069][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1536.537555][ T25] rc_core: IR keymap rc-hauppauge not found [ 1536.548869][ T25] Registered IR keymap rc-empty [ 1536.563139][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1536.598213][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input173 [ 1536.890928][T22697] tap0: tun_chr_ioctl cmd 1074025673 [ 1536.901058][ C1] igorplugusb 10-1:0.0: receive overflow, at least 9 lost [ 1537.120892][ T25] usb 10-1: USB disconnect, device number 21 [ 1537.123942][T22703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22475'. [ 1537.415972][ T46] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1537.449223][ T29] kauditd_printk_skb: 9417 callbacks suppressed [ 1537.449243][ T29] audit: type=1400 audit(2000004215.819:965605): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1537.477087][ T29] audit: type=1400 audit(2000004215.828:965606): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5826 comm="syz-executor" name="4635" dev="tmpfs" ino=23378 [ 1537.496390][ C1] vkms_vblank_simulate: vblank timer overrun [ 1537.506023][ T29] audit: type=1400 audit(2000004215.828:965607): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5826 comm="syz-executor" name="4635" dev="tmpfs" ino=23378 [ 1537.525962][ T29] audit: type=1400 audit(2000004215.828:965608): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5826 comm="syz-executor" name="cgroup" dev="tmpfs" ino=23379 [ 1537.580556][ T7539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1537.587989][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1537.593267][ T7539] audit: audit_lost=89763 audit_rate_limit=0 audit_backlog_limit=64 [ 1537.602159][T22706] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1537.609994][T22706] audit: audit_lost=89764 audit_rate_limit=0 audit_backlog_limit=64 [ 1537.618039][T22706] audit: backlog limit exceeded [ 1537.625052][ T7539] audit: backlog limit exceeded [ 1537.630109][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1537.643215][ T46] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1537.652379][ T46] usb 2-1: config 0 has no interface number 0 [ 1537.663366][ T46] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1537.674605][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.683331][ T46] usb 2-1: Product: syz [ 1537.687630][ T46] usb 2-1: Manufacturer: syz [ 1537.692281][ T46] usb 2-1: SerialNumber: syz [ 1537.700470][ T46] usb 2-1: config 0 descriptor?? [ 1537.771462][ T46] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1537.848469][T22722] lo speed is unknown, defaulting to 1000 [ 1537.919576][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22484'. [ 1538.007887][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1538.021068][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1538.223884][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 1538.300949][T22722] wlan0 speed is unknown, defaulting to 1000 [ 1538.438453][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1538.456660][ T46] usb 2-1: USB disconnect, device number 114 [ 1538.473898][ T46] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1538.511076][ T46] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1538.528183][ T46] quatech2 2-1:0.51: device disconnected [ 1538.792873][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22482'. [ 1539.071066][T22745] netlink: 'syz.9.22492': attribute type 21 has an invalid length. [ 1539.083904][T22745] netlink: 168 bytes leftover after parsing attributes in process `syz.9.22492'. [ 1539.907368][T22766] netlink: 'syz.9.22502': attribute type 10 has an invalid length. [ 1539.930807][T22765] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.22501'. [ 1540.126671][T22772] 9pnet_virtio: no channels available for device syz [ 1540.815423][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1540.911465][ T8] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1541.117207][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1541.141331][ T8] usb 2-1: config 0 has no interfaces? [ 1541.157836][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1541.167898][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.176089][ T8] usb 2-1: Product: syz [ 1541.181047][ T8] usb 2-1: Manufacturer: syz [ 1541.193620][ T8] usb 2-1: SerialNumber: syz [ 1541.208950][ T8] usb 2-1: config 0 descriptor?? [ 1541.852204][T32101] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1541.879400][ T8] usb 2-1: USB disconnect, device number 115 [ 1541.905122][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1542.036281][T32101] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.048510][T32101] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.059681][T32101] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1542.074560][T32101] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1542.093241][T32101] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.124477][T32101] usb 10-1: config 0 descriptor?? [ 1542.582431][T32101] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x2 [ 1542.611524][T32101] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x2 [ 1542.622129][T32101] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x3 [ 1542.631632][T32101] plantronics 0003:047F:FFFF.0067: No inputs registered, leaving [ 1542.664962][T32101] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1542.816135][ T29] kauditd_printk_skb: 5579 callbacks suppressed [ 1542.816157][ T29] audit: type=1400 audit(2000004220.833:970506): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22800 comm="syz.9.22517" name="newroot" dev="tmpfs" ino=2 [ 1542.841859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.859338][ T29] audit: type=1400 audit(2000004220.833:970507): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22800 comm="syz.9.22517" name="/" dev="devtmpfs" ino=1 [ 1542.880478][ T29] audit: type=1400 audit(2000004220.833:970508): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22800 comm="syz.9.22517" name="usb" dev="devtmpfs" ino=5781 [ 1542.901018][ T29] audit: type=1400 audit(2000004220.833:970509): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22800 comm="syz.9.22517" name="hiddev0" dev="devtmpfs" ino=5782 [ 1542.929111][ T25] usb 10-1: USB disconnect, device number 22 [ 1542.943482][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1542.943872][ T5826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1542.950830][ T29] audit: type=1400 audit(2000004220.833:970510): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22800 comm="syz.9.22517" path="/dev/usb/hiddev0" dev="devtmpfs" ino=5782 [ 1542.979346][ T27] audit: audit_lost=89993 audit_rate_limit=0 audit_backlog_limit=64 [ 1542.984563][ T5826] audit: audit_lost=89994 audit_rate_limit=0 audit_backlog_limit=64 [ 1542.988460][ T27] audit: backlog limit exceeded [ 1543.016937][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1543.457150][T22837] input: syz0 as /devices/virtual/input/input174 [ 1543.577345][T22841] netlink: 36 bytes leftover after parsing attributes in process `syz.9.22537'. [ 1543.589217][T22841] netlink: 32 bytes leftover after parsing attributes in process `syz.9.22537'. [ 1543.851517][ T46] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1544.033706][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 1544.046501][ T46] usb 2-1: config 252 has an invalid interface number: 217 but max is 0 [ 1544.074639][ T46] usb 2-1: config 252 has no interface number 0 [ 1544.096325][ T46] usb 2-1: config 252 interface 217 has no altsetting 0 [ 1544.113863][ T46] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b7.76 [ 1544.129978][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.173053][ T46] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 1544.192937][ T46] dvb-usb: bulk message failed: -22 (2/0) [ 1544.198755][ T46] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1544.229033][ T46] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 1544.241006][ T46] usb 2-1: media controller created [ 1544.264091][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1544.288542][ T46] usb 2-1: DVB: registering adapter 3 frontend 0 (WideView USB DVB-T)... [ 1544.318115][ T46] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1544.456986][ T46] rc_core: IR keymap rc-dtt200u not found [ 1544.468303][ T46] Registered IR keymap rc-empty [ 1544.491625][ T46] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1544.536688][ T46] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input175 [ 1544.577211][ T46] dvb-usb: schedule remote query interval to 300 msecs. [ 1544.585568][ T46] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 1544.691670][T32101] usb 2-1: USB disconnect, device number 116 [ 1544.764325][T32101] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 1546.094312][T22906] xt_CT: No such helper "pptp" [ 1546.214039][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1546.291183][T22916] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1546.590614][T22932] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1546.601699][ T46] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1546.781171][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1546.799043][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.829011][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.887202][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1546.893906][ T46] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1546.917441][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.943677][ T46] usb 2-1: config 0 descriptor?? [ 1547.213077][T22955] input: syz1 as /devices/virtual/input/input176 [ 1547.221427][T22957] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1547.293196][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1547.347554][ T25] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1547.483725][ T46] cougar 0003:060B:500A.0068: unexpected long global item [ 1547.495953][ T46] cougar 0003:060B:500A.0068: parse failed [ 1547.503581][ T46] cougar 0003:060B:500A.0068: probe with driver cougar failed with error -22 [ 1547.529376][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1547.537821][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.576043][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.599962][ T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1547.611523][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.623573][ T25] usb 3-1: config 0 descriptor?? [ 1547.662050][ T8] usb 2-1: USB disconnect, device number 117 [ 1547.865756][T22972] netlink: 28 bytes leftover after parsing attributes in process `syz.7.22594'. [ 1547.894081][T22972] netlink: 'syz.7.22594': attribute type 7 has an invalid length. [ 1547.902006][T22972] netlink: 'syz.7.22594': attribute type 8 has an invalid length. [ 1547.930990][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22594'. [ 1547.958276][T22972] erspan0: entered promiscuous mode [ 1547.965741][T22972] erspan0: left promiscuous mode [ 1548.107495][ T25] savu 0003:1E7D:2D5A.0069: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1548.172400][ T29] kauditd_printk_skb: 9503 callbacks suppressed [ 1548.172422][ T29] audit: type=1400 audit(2000004225.847:978757): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22977 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1548.176313][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1548.193862][ T29] audit: type=1400 audit(2000004225.847:978758): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22977 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1548.247290][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1548.250900][T22978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1548.255123][T22979] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1548.272922][T22978] audit: audit_lost=90420 audit_rate_limit=0 audit_backlog_limit=64 [ 1548.277010][T22980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1548.285991][ T29] audit: type=1400 audit(2000004225.847:978759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22977 comm="syz-executor" name="1361" dev="tmpfs" ino=6932 [ 1548.293181][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1548.316532][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1548.321077][T22951] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1548.324121][T22978] audit: backlog limit exceeded [ 1548.372133][T22983] netlink: 'syz.9.22597': attribute type 2 has an invalid length. [ 1548.395306][ T25] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1548.405022][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1548.426972][ T8] usb 3-1: USB disconnect, device number 88 [ 1548.437779][ T25] rtc rtc0: __rtc_set_alarm: err=-22 [ 1550.030732][ T8] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1550.212380][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1550.226785][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.250596][ T8] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1550.263872][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.280056][ T8] usb 2-1: Product: syz [ 1550.288755][ T8] usb 2-1: Manufacturer: syz [ 1550.297049][ T8] usb 2-1: SerialNumber: syz [ 1550.314320][ T8] usb 2-1: config 0 descriptor?? [ 1550.331576][ T8] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1551.428802][ T8] gspca_sunplus: reg_w_riv err -71 [ 1551.434890][ T8] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1551.465736][ T8] usb 2-1: USB disconnect, device number 118 [ 1551.602085][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1551.819955][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22643'. [ 1552.363994][T23108] No control pipe specified [ 1552.372975][ T8] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1552.543279][ T46] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1552.564681][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1552.575065][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.598589][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1552.617662][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.639866][ T8] usb 3-1: config 0 descriptor?? [ 1552.653705][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1552.681243][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1552.701347][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22658'. [ 1552.719296][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.719414][T23118] syz_tun: entered promiscuous mode [ 1552.739953][T23118] syz_tun: left promiscuous mode [ 1552.752009][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.773626][ T46] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1552.810274][ T46] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1552.819493][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.841115][ T46] usb 10-1: config 0 descriptor?? [ 1553.328109][ T46] plantronics 0003:047F:FFFF.006A: No inputs registered, leaving [ 1553.377485][ T46] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1553.523664][T23135] lo speed is unknown, defaulting to 1000 [ 1553.536224][ T29] kauditd_printk_skb: 8196 callbacks suppressed [ 1553.536244][ T29] audit: type=1400 audit(2000004230.851:986658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1553.555324][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1553.564243][ T29] audit: type=1400 audit(2000004230.851:986659): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1553.571494][T23095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1553.600509][T23103] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1553.608248][T23103] audit: audit_lost=90522 audit_rate_limit=0 audit_backlog_limit=64 [ 1553.629234][ T5833] audit: audit_lost=90523 audit_rate_limit=0 audit_backlog_limit=64 [ 1553.635408][T23103] audit: backlog limit exceeded [ 1553.642327][T23103] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1553.644090][T23095] audit: audit_lost=90524 audit_rate_limit=0 audit_backlog_limit=64 [ 1553.715011][T32101] usb 10-1: USB disconnect, device number 23 [ 1553.793153][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1553.827758][T23135] wlan0 speed is unknown, defaulting to 1000 [ 1553.929624][T23141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22668'. [ 1553.954811][ T8] gspca_vc032x: reg_r err -71 [ 1553.959625][ T8] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1554.020512][ T8] usb 3-1: USB disconnect, device number 89 [ 1555.099166][T23178] pim6reg1: entered promiscuous mode [ 1555.104529][T23178] pim6reg1: entered allmulticast mode [ 1556.404139][T23230] syzkaller1: entered promiscuous mode [ 1556.409676][T23230] syzkaller1: entered allmulticast mode [ 1556.601342][T23241] syzkaller1: entered promiscuous mode [ 1556.616299][T23241] syzkaller1: entered allmulticast mode [ 1556.691563][T23246] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1556.990121][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1557.055971][T23260] syzkaller1: entered promiscuous mode [ 1557.081417][T23260] syzkaller1: entered allmulticast mode [ 1557.311050][ T46] psmouse serio9: Failed to reset mouse on : -5 [ 1557.588934][ T8] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1557.750365][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1557.779157][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1557.800101][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.833733][ T8] usb 3-1: Product: syz [ 1557.845388][ T8] usb 3-1: Manufacturer: syz [ 1557.858340][ T8] usb 3-1: SerialNumber: syz [ 1557.865876][ T8] usb 3-1: config 0 descriptor?? [ 1557.883872][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1558.069320][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1558.579003][T23306] tipc: Cannot configure node identity twice [ 1558.887363][ T29] kauditd_printk_skb: 9567 callbacks suppressed [ 1558.887384][ T29] audit: type=1400 audit(2000004235.865:994818): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23314 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1558.939866][ T29] audit: type=1400 audit(2000004235.865:994819): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23314 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1558.949607][T17058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.962763][ T8] gspca_sonixj: reg_w1 err -71 [ 1558.967071][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.978321][ C1] audit: audit_lost=90996 audit_rate_limit=0 audit_backlog_limit=64 [ 1558.986381][ C1] audit: backlog limit exceeded [ 1558.992681][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1558.993602][ T29] audit: type=1400 audit(2000004235.865:994820): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23314 comm="syz-executor" name="1397" dev="tmpfs" ino=7116 [ 1558.999228][ C1] audit: audit_lost=90997 audit_rate_limit=0 audit_backlog_limit=64 [ 1558.999252][ C1] audit: backlog limit exceeded [ 1559.076604][ T8] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1559.086926][ T8] usb 3-1: USB disconnect, device number 90 [ 1559.181157][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1559.528468][T23333] sit0: entered promiscuous mode [ 1559.547498][T23333] netlink: 'syz.9.22754': attribute type 1 has an invalid length. [ 1559.563930][T23333] netlink: 1 bytes leftover after parsing attributes in process `syz.9.22754'. [ 1560.208333][ T25] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1560.381546][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.409025][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1560.440507][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1560.476878][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.503435][ T25] usb 3-1: Product: syz [ 1560.508715][ T25] usb 3-1: Manufacturer: syz [ 1560.513438][ T25] usb 3-1: SerialNumber: syz [ 1560.773448][ T25] usb 3-1: 0:2 : does not exist [ 1560.802347][ T25] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1560.843278][ T25] usb 3-1: USB disconnect, device number 91 [ 1561.150482][ T46] misc userio: Buffer overflowed, userio client isn't keeping up [ 1561.244948][ T8] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1561.416100][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 1561.439025][ T8] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1561.458999][ T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.478109][ T8] usb 10-1: Product: syz [ 1561.485476][ T8] usb 10-1: Manufacturer: syz [ 1561.501550][ T8] usb 10-1: SerialNumber: syz [ 1561.514940][ T8] usb 10-1: config 0 descriptor?? [ 1561.534910][ T8] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 1561.794946][ T8] usb 10-1: USB disconnect, device number 24 [ 1562.367650][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1562.531552][ T46] input: PS/2 Generic Mouse as /devices/serio9/input/input177 [ 1562.602878][ T8] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1562.774191][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1562.782269][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1562.793779][ T8] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1562.795483][ T46] psmouse serio9: Failed to enable mouse on [ 1562.807370][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.829676][ T8] usb 3-1: Product: syz [ 1562.840554][ T8] usb 3-1: Manufacturer: syz [ 1562.851369][ T8] usb 3-1: SerialNumber: syz [ 1562.868650][ T8] usb 3-1: config 0 descriptor?? [ 1562.956602][T23428] input: syz0 as /devices/virtual/input/input178 [ 1563.351128][ T8] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1563.457388][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1563.600095][T23444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22803'. [ 1563.996430][ T8] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1564.018389][ T8] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1564.042577][ T8] usb 3-1: USB disconnect, device number 92 [ 1564.098190][T23459] vlan5: entered allmulticast mode [ 1564.124268][T23459] bond0: entered allmulticast mode [ 1564.151180][T23459] bond0: left allmulticast mode [ 1564.239513][ T29] kauditd_printk_skb: 8412 callbacks suppressed [ 1564.239533][ T29] audit: type=1400 audit(2000004240.878:1002540): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.274356][ T29] audit: type=1400 audit(2000004240.897:1002541): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.293683][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.320239][ T29] audit: type=1400 audit(2000004240.897:1002542): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.320573][ T5838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1564.347241][ T29] audit: type=1400 audit(2000004240.897:1002543): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.347295][ T29] audit: type=1400 audit(2000004240.897:1002544): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.347334][ T29] audit: type=1400 audit(2000004240.897:1002545): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.347373][ T29] audit: type=1400 audit(2000004240.897:1002546): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.347411][ T29] audit: type=1400 audit(2000004240.897:1002547): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.347448][ T29] audit: type=1400 audit(2000004240.897:1002548): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23462 comm="syz-executor" name="667" dev="tmpfs" ino=3395 [ 1564.569260][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1564.755188][T23474] netlink: 284 bytes leftover after parsing attributes in process `syz.2.22818'. [ 1564.858483][ T8] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1565.025233][ T8] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.039610][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1565.092164][ T8] usb 10-1: string descriptor 0 read error: -71 [ 1565.171714][ T8] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1565.211261][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1565.261088][ T8] usb 10-1: can't set config #1, error -71 [ 1565.272986][ T8] usb 10-1: USB disconnect, device number 25 [ 1566.313533][ T8] IPVS: starting estimator thread 0... [ 1566.408738][T23508] IPVS: using max 21 ests per chain, 50400 per kthread [ 1567.186672][T23532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.22842'. [ 1567.253143][T23532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.22842'. [ 1567.755599][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1567.854293][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22849'. [ 1568.299629][T23558] input: syz0 as /devices/virtual/input/input180 [ 1568.845451][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1568.953594][T23571] netlink: 100 bytes leftover after parsing attributes in process `syz.1.22861'. [ 1569.597204][ T29] kauditd_printk_skb: 6725 callbacks suppressed [ 1569.597225][ T29] audit: type=1400 audit(2000004245.883:1008593): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23582 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1569.656315][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1569.664447][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1569.669072][ T5833] audit: audit_lost=91469 audit_rate_limit=0 audit_backlog_limit=64 [ 1569.671001][ C1] audit: audit_lost=91470 audit_rate_limit=0 audit_backlog_limit=64 [ 1569.687050][ C1] audit: backlog limit exceeded [ 1569.690197][ T5833] audit: backlog limit exceeded [ 1569.693950][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1569.697311][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1569.703761][ C1] audit: audit_lost=91471 audit_rate_limit=0 audit_backlog_limit=64 [ 1569.967974][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1570.449798][ T8] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1570.622849][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.645644][ T8] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1570.667871][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.702893][ T8] usb 10-1: config 0 descriptor?? [ 1571.198441][ T8] keytouch 0003:0926:3333.006B: fixing up Keytouch IEC report descriptor [ 1571.225449][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.006B/input/input181 [ 1571.323061][ T8] keytouch 0003:0926:3333.006B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1571.445166][T23598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.454751][T23598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.490182][ T8] [ 1571.490196][ T8] ====================================================== [ 1571.490206][ T8] WARNING: possible circular locking dependency detected [ 1571.490217][ T8] 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 Not tainted [ 1571.490231][ T8] ------------------------------------------------------ [ 1571.490239][ T8] kworker/0:0/8 is trying to acquire lock: [ 1571.490251][ T8] ffff88807e73c0b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x79/0x3f0 [ 1571.490314][ T8] [ 1571.490314][ T8] but task is already holding lock: [ 1571.490322][ T8] ffffffff8e814380 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x29/0x210 [ 1571.490370][ T8] [ 1571.490370][ T8] which lock already depends on the new lock. [ 1571.490370][ T8] [ 1571.490379][ T8] [ 1571.490379][ T8] the existing dependency chain (in reverse order) is: [ 1571.490388][ T8] [ 1571.490388][ T8] -> #2 (console_lock){+.+.}-{0:0}: [ 1571.490419][ T8] lock_acquire+0x1ed/0x550 [ 1571.490444][ T8] console_lock+0x164/0x1b0 [ 1571.490462][ T8] con_flush_chars+0x6f/0x270 [ 1571.490487][ T8] n_tty_write+0xf2e/0x1230 [ 1571.490516][ T8] file_tty_write+0x546/0x9b0 [ 1571.490538][ T8] vfs_write+0xacf/0xd10 [ 1571.490555][ T8] ksys_write+0x18f/0x2b0 [ 1571.490573][ T8] do_syscall_64+0xf3/0x230 [ 1571.490600][ T8] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.490628][ T8] [ 1571.490628][ T8] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 1571.490660][ T8] lock_acquire+0x1ed/0x550 [ 1571.490684][ T8] down_write+0x99/0x220 [ 1571.490712][ T8] n_tty_flush_buffer+0x31/0x240 [ 1571.490741][ T8] tty_buffer_flush+0x32c/0x3f0 [ 1571.490766][ T8] tty_ldisc_flush+0x6a/0xc0 [ 1571.490787][ T8] tty_port_close_start+0x2e2/0x540 [ 1571.490822][ T8] tty_port_close+0x28/0x140 [ 1571.490849][ T8] tty_release+0x32a/0x12c0 [ 1571.490871][ T8] __fput+0x3e9/0x9f0 [ 1571.490898][ T8] task_work_run+0x24f/0x310 [ 1571.490926][ T8] syscall_exit_to_user_mode+0x13f/0x340 [ 1571.490952][ T8] do_syscall_64+0x100/0x230 [ 1571.490979][ T8] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.491007][ T8] [ 1571.491007][ T8] -> #0 (&buf->lock){+.+.}-{4:4}: [ 1571.491038][ T8] validate_chain+0x18ef/0x5920 [ 1571.491067][ T8] __lock_acquire+0x1397/0x2100 [ 1571.491092][ T8] lock_acquire+0x1ed/0x550 [ 1571.491116][ T8] __mutex_lock+0x19c/0x1010 [ 1571.491141][ T8] tty_buffer_flush+0x79/0x3f0 [ 1571.491165][ T8] tty_ldisc_flush+0x6a/0xc0 [ 1571.491187][ T8] __do_SAK+0x27d/0x700 [ 1571.491211][ T8] vc_SAK+0x77/0x210 [ 1571.491229][ T8] process_scheduled_works+0xa66/0x1840 [ 1571.491249][ T8] worker_thread+0x870/0xd30 [ 1571.491270][ T8] kthread+0x7a9/0x920 [ 1571.491295][ T8] ret_from_fork+0x4b/0x80 [ 1571.491318][ T8] ret_from_fork_asm+0x1a/0x30 [ 1571.491341][ T8] [ 1571.491341][ T8] other info that might help us debug this: [ 1571.491341][ T8] [ 1571.491350][ T8] Chain exists of: [ 1571.491350][ T8] &buf->lock --> &tty->termios_rwsem --> console_lock [ 1571.491350][ T8] [ 1571.491388][ T8] Possible unsafe locking scenario: [ 1571.491388][ T8] [ 1571.491396][ T8] CPU0 CPU1 [ 1571.491404][ T8] ---- ---- [ 1571.491412][ T8] lock(console_lock); [ 1571.491429][ T8] lock(&tty->termios_rwsem); [ 1571.491448][ T8] lock(console_lock); [ 1571.491466][ T8] lock(&buf->lock); [ 1571.491482][ T8] [ 1571.491482][ T8] *** DEADLOCK *** [ 1571.491482][ T8] [ 1571.491489][ T8] 4 locks held by kworker/0:0/8: [ 1571.491501][ T8] #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1571.491556][ T8] #1: ffffc900000d7c60 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1571.491612][ T8] #2: ffffffff8e814380 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x29/0x210 [ 1571.491662][ T8] #3: ffff888079f340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1f/0xc0 [ 1571.491716][ T8] [ 1571.491716][ T8] stack backtrace: [ 1571.491726][ T8] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 1571.491749][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1571.491763][ T8] Workqueue: events vc_SAK [ 1571.491783][ T8] Call Trace: [ 1571.491796][ T8] [ 1571.491806][ T8] dump_stack_lvl+0x241/0x360 [ 1571.491851][ T8] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1571.491881][ T8] ? __pfx__printk+0x10/0x10 [ 1571.491913][ T8] print_circular_bug+0x13a/0x1b0 [ 1571.491944][ T8] check_noncircular+0x36a/0x4a0 [ 1571.491971][ T8] ? unwind_next_frame+0x193b/0x22d0 [ 1571.491999][ T8] ? __pfx_check_noncircular+0x10/0x10 [ 1571.492028][ T8] ? lockdep_lock+0x123/0x2b0 [ 1571.492050][ T8] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1571.492072][ T8] ? arch_stack_walk+0x11c/0x150 [ 1571.492101][ T8] validate_chain+0x18ef/0x5920 [ 1571.492140][ T8] ? __pfx_validate_chain+0x10/0x10 [ 1571.492166][ T8] ? lockdep_unlock+0x16a/0x300 [ 1571.492187][ T8] ? __pfx_lockdep_unlock+0x10/0x10 [ 1571.492210][ T8] ? add_lock_to_list+0x1e8/0x2f0 [ 1571.492250][ T8] ? __pfx_validate_chain+0x10/0x10 [ 1571.492279][ T8] ? mark_lock+0x9a/0x360 [ 1571.492303][ T8] ? __pfx_validate_chain+0x10/0x10 [ 1571.492331][ T8] __lock_acquire+0x1397/0x2100 [ 1571.492363][ T8] lock_acquire+0x1ed/0x550 [ 1571.492385][ T8] ? tty_buffer_flush+0x79/0x3f0 [ 1571.492413][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 1571.492436][ T8] ? __lock_acquire+0x1397/0x2100 [ 1571.492460][ T8] ? __pfx___might_resched+0x10/0x10 [ 1571.492489][ T8] __mutex_lock+0x19c/0x1010 [ 1571.492514][ T8] ? tty_buffer_flush+0x79/0x3f0 [ 1571.492540][ T8] ? __pfx_lock_acquire+0x10/0x10 [ 1571.492566][ T8] ? tty_buffer_flush+0x79/0x3f0 [ 1571.492590][ T8] ? __pfx___mutex_lock+0x10/0x10 [ 1571.492621][ T8] ? ldsem_down_read_trylock+0x192/0x200 [ 1571.492650][ T8] ? tty_ldisc_flush+0x1f/0xc0 [ 1571.492673][ T8] tty_buffer_flush+0x79/0x3f0 [ 1571.492701][ T8] tty_ldisc_flush+0x6a/0xc0 [ 1571.492723][ T8] __do_SAK+0x27d/0x700 [ 1571.492745][ T8] ? process_scheduled_works+0x976/0x1840 [ 1571.492767][ T8] vc_SAK+0x77/0x210 [ 1571.492783][ T8] ? process_scheduled_works+0x976/0x1840 [ 1571.492812][ T8] process_scheduled_works+0xa66/0x1840 [ 1571.492845][ T8] ? __pfx_process_scheduled_works+0x10/0x10 [ 1571.492870][ T8] ? assign_work+0x364/0x3d0 [ 1571.492891][ T8] worker_thread+0x870/0xd30 [ 1571.492918][ T8] ? __kthread_parkme+0x169/0x1d0 [ 1571.492942][ T8] ? __pfx_worker_thread+0x10/0x10 [ 1571.492963][ T8] kthread+0x7a9/0x920 [ 1571.492986][ T8] ? __pfx_kthread+0x10/0x10 [ 1571.493011][ T8] ? __pfx_worker_thread+0x10/0x10 [ 1571.493032][ T8] ? __pfx_kthread+0x10/0x10 [ 1571.493055][ T8] ? __pfx_kthread+0x10/0x10 [ 1571.493080][ T8] ? __pfx_kthread+0x10/0x10 [ 1571.493122][ T8] ? _raw_spin_unlock_irq+0x23/0x50 [ 1571.493145][ T8] ? lockdep_hardirqs_on+0x99/0x150 [ 1571.493170][ T8] ? __pfx_kthread+0x10/0x10 [ 1571.493196][ T8] ret_from_fork+0x4b/0x80 [ 1571.493220][ T8] ? __pfx_kthread+0x10/0x10 [ 1571.493246][ T8] ret_from_fork_asm+0x1a/0x30 [ 1571.493276][ T8] [ 1571.947308][ T46] usb 10-1: USB disconnect, device number 26 [ 1573.143951][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1574.233528][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1575.356019][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1577.188707][ T29] kauditd_printk_skb: 2066 callbacks suppressed [ 1577.188739][ T29] audit: type=1400 audit(2000004252.983:1010372): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34310 daddr=10.128.1.167 dest=22 netif=eth0 [ 1577.218095][ T29] audit: type=1400 audit(2000004252.983:1010373): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34310 daddr=10.128.1.167 dest=22 netif=eth0 [ 1578.531764][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1579.632286][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1580.733401][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!