last executing test programs: 6m27.004729343s ago: executing program 0 (id=16530): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000006c0)) 6m26.796007701s ago: executing program 0 (id=16533): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) bind$netlink(r0, &(0x7f0000514ff4), 0xc) 6m26.613784826s ago: executing program 0 (id=16535): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 6m26.509245741s ago: executing program 0 (id=16537): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) 6m26.277662206s ago: executing program 0 (id=16539): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 6m26.053173264s ago: executing program 0 (id=16544): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x4, "c7096bed"}, @global=@item_012={0x1, 0x1, 0x2, 'd'}]}}, 0x0}, 0x0) 6m9.958058152s ago: executing program 32 (id=16544): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x4, "c7096bed"}, @global=@item_012={0x1, 0x1, 0x2, 'd'}]}}, 0x0}, 0x0) 4m59.496354369s ago: executing program 2 (id=17778): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @remote}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000005b00), r1}}, 0x18) 4m59.211793106s ago: executing program 2 (id=17781): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) 4m58.972021051s ago: executing program 2 (id=17784): mkdir(&(0x7f0000000180)='./file0\x00', 0x77) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/175, 0xaf) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) 4m58.651589397s ago: executing program 2 (id=17788): syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000001140)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0xb34, {0x6, 0x6, "78ce5f", 0xff, 0x3a, 0xfe, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [], "f0402d91c9f64d43"}}}}}}}, 0x0) 4m58.36543467s ago: executing program 2 (id=17792): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m58.133376958s ago: executing program 2 (id=17798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 4m41.980170124s ago: executing program 33 (id=17798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m25.603609254s ago: executing program 6 (id=19441): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2m24.508718383s ago: executing program 6 (id=19457): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xc422, 0x0, 0x0) 2m23.338923621s ago: executing program 6 (id=19470): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2m22.270209263s ago: executing program 6 (id=19476): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) 2m21.235104037s ago: executing program 6 (id=19492): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000040)='./bus\x00') 2m21.028723348s ago: executing program 6 (id=19495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x6, &(0x7f0000000440)={0x0, 0x0, 0x82}) 2m4.689963525s ago: executing program 34 (id=19495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x6, &(0x7f0000000440)={0x0, 0x0, 0x82}) 1m40.969116519s ago: executing program 1 (id=19912): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) 1m40.813096725s ago: executing program 1 (id=19914): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) 1m39.646142874s ago: executing program 1 (id=19927): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 1m39.460512716s ago: executing program 1 (id=19931): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2000, 0x0) 1m39.22077385s ago: executing program 1 (id=19934): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1m38.685690526s ago: executing program 1 (id=19941): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m38.322220954s ago: executing program 35 (id=19941): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 4.290344176s ago: executing program 7 (id=21116): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x100) 4.099184171s ago: executing program 7 (id=21119): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) 3.776861306s ago: executing program 7 (id=21125): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00'}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.59049505s ago: executing program 7 (id=21128): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a01020000000000000b000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080003400000000008000240000000140800014000000003080001400000000b080001400000001208000240000000180800034000000011"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x30048050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3.334559605s ago: executing program 7 (id=21131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd27, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x86dd}}}]}, 0x38}}, 0x4040) 2.936951905s ago: executing program 7 (id=21135): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d39e6908402000d3b3160102030109021b0001000000000904"], 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000480)={0x18, 0x0, {0x1, @broadcast, 'dummy0\x00'}}, 0x1e) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2.50296948s ago: executing program 8 (id=21139): r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_STATX={0x15, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x4000, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2.388883593s ago: executing program 8 (id=21141): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x3, 0x0, &(0x7f0000001400)) 1.686510111s ago: executing program 4 (id=21149): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x1ff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x34}}, 0x0) 1.532829421s ago: executing program 4 (id=21150): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030400"/18, @ANYRES32=0x0, @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e24, 0x2, 'sed\x00', 0x0, 0xfffffffc}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.532147934s ago: executing program 8 (id=21151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 1.334722517s ago: executing program 4 (id=21154): timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) 1.301467912s ago: executing program 5 (id=21156): r0 = io_uring_setup(0x3efa, &(0x7f0000000000)={0x0, 0x0, 0x1840, 0x2, 0x10000}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x13}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 1.253152075s ago: executing program 8 (id=21157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0xfff}, 0x18) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffff4edd, 0x9, 0xfff7}) 1.136563065s ago: executing program 8 (id=21158): r0 = syz_open_dev$loop(&(0x7f00000015c0), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x1c, "fee8a2ab780ef39fa3910d96072000001ea800000000fdffffff0000faffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001700", "90be8bf4bd00000000000000000000000000001000", [0xe8]}}) 1.076205112s ago: executing program 5 (id=21160): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]}) write$ppp(r0, &(0x7f0000000700)="57a4", 0x2) 908.615171ms ago: executing program 5 (id=21161): r0 = socket(0x2b, 0x80801, 0x1) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11e, 0x1, &(0x7f0000000300)=@ccm_128={{0x304}, "00000000008000", "a5776c4416d4ab083d9a96513dfe0c75", '\b\x00', "9bd8162d242321f1"}, 0x28) 903.206238ms ago: executing program 8 (id=21162): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffdd, 0x11, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 796.186849ms ago: executing program 5 (id=21164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, &(0x7f0000000340)=0x4) 730.018309ms ago: executing program 3 (id=21165): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index, 0x10, 0x0, 0x95b7, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 619.436702ms ago: executing program 3 (id=21166): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="fa82", 0xff80}], 0x1}, 0x20000000) 577.513059ms ago: executing program 5 (id=21167): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) unshare(0x28000600) pidfd_getfd(r1, r1, 0x0) 526.784318ms ago: executing program 5 (id=21168): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 508.852922ms ago: executing program 3 (id=21169): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) 393.093273ms ago: executing program 3 (id=21170): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 269.632796ms ago: executing program 4 (id=21171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000000000003"]) 251.458391ms ago: executing program 3 (id=21172): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 137.258196ms ago: executing program 3 (id=21173): unshare(0x28000600) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/246, 0xf6}], 0x1) 118.764324ms ago: executing program 4 (id=21174): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x9}) 0s ago: executing program 4 (id=21175): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) readv(r0, &(0x7f00000008c0)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) kernel console output (not intermixed with test programs): .591285][ T28] audit: backlog limit exceeded [ 1269.591375][ T28] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1269.591446][ T28] audit: audit_lost=130088 audit_rate_limit=0 audit_backlog_limit=64 [ 1270.261786][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18944'. [ 1270.304899][T26263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18944'. [ 1270.743504][T26270] pim6reg: tun_chr_ioctl cmd 1074025677 [ 1270.755715][T26270] pim6reg: linktype set to 6 [ 1271.554921][ T5873] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1271.741103][ T5873] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1271.757796][ T5873] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1271.777213][ T5873] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1271.778620][T26323] random: crng reseeded on system resumption [ 1271.799199][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.828199][ T5873] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1271.849051][ T5873] usb 2-1: invalid MIDI out EP 0 [ 1271.943562][ T5873] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1272.066624][ T5873] usb 2-1: USB disconnect, device number 96 [ 1272.209483][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18975'. [ 1272.480160][T26374] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.497696][T26374] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.527456][ T5919] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1272.604358][T26374] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.615756][T26374] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.700952][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.712151][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1272.727487][T26374] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.741235][ T5919] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1272.744715][T26374] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.773250][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.784889][ T5919] usb 7-1: config 0 descriptor?? [ 1272.944400][T26374] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1272.975982][T26374] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.218444][T26374] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.246299][T26374] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.274170][T26374] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.279939][ T5919] megaworld 0003:07B5:0312.0085: unknown main item tag 0x7 [ 1273.290058][ T5919] megaworld 0003:07B5:0312.0085: item fetching failed at offset 3/5 [ 1273.298791][ T5919] megaworld 0003:07B5:0312.0085: parse failed [ 1273.305129][ T5919] megaworld 0003:07B5:0312.0085: probe with driver megaworld failed with error -22 [ 1273.317652][T26374] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.338272][T26374] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.346950][T26374] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.371362][T26374] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1273.394452][T26374] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.508880][ T5919] usb 7-1: USB disconnect, device number 6 [ 1274.642955][T26479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19008'. [ 1274.892709][ T30] kauditd_printk_skb: 9781 callbacks suppressed [ 1274.892729][ T30] audit: type=1400 audit(2000000605.305:1230824): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26487 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1274.937780][T26491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1274.946325][T26491] audit: audit_lost=130570 audit_rate_limit=0 audit_backlog_limit=64 [ 1274.954643][ T30] audit: type=1400 audit(2000000605.305:1230825): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26487 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1274.974914][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1274.976458][T26491] audit: backlog limit exceeded [ 1274.987100][ T5821] audit: audit_lost=130571 audit_rate_limit=0 audit_backlog_limit=64 [ 1274.995410][T26491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1275.003382][ T30] audit: type=1400 audit(2000000605.305:1230826): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26487 comm="syz-executor" name="3778" dev="tmpfs" ino=19050 [ 1275.015666][ T5821] audit: backlog limit exceeded [ 1275.565877][T26508] netlink: 'syz.1.19017': attribute type 8 has an invalid length. [ 1275.586425][T26508] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.19017'. [ 1276.755631][T26549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19035'. [ 1277.325158][T26562] netlink: 'syz.1.19040': attribute type 18 has an invalid length. [ 1277.747592][T26581] misc userio: Invalid payload size [ 1277.958459][ T5873] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1278.129283][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 1278.141689][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.154072][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1278.169180][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1278.179782][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1278.193952][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1278.227760][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1278.237320][ T5873] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1278.245364][ T5873] usb 5-1: Manufacturer: syz [ 1278.255287][ T5873] usb 5-1: config 0 descriptor?? [ 1278.664110][ T5873] rc_core: IR keymap rc-hauppauge not found [ 1278.670668][ T5873] Registered IR keymap rc-empty [ 1278.675918][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.696190][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.718085][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1278.747288][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input176 [ 1278.782180][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.804495][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.824968][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.845698][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.867036][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.889173][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.921227][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.931988][ T5876] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1278.942163][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.974157][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1278.996096][ T5873] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1279.018159][ T5873] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1279.049285][ T5873] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1279.064129][ T5873] usb 5-1: USB disconnect, device number 110 [ 1279.102173][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 1279.109695][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.123489][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1279.155592][ T5876] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1279.189110][ T5876] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1279.198614][ T5876] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1279.206686][ T5876] usb 4-1: Manufacturer: syz [ 1279.214214][ T5876] usb 4-1: config 0 descriptor?? [ 1279.483360][ T5873] usb 4-1: USB disconnect, device number 95 [ 1279.899950][T26698] netlink: 277 bytes leftover after parsing attributes in process `syz.1.19077'. [ 1280.040991][T26706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.247340][ T30] kauditd_printk_skb: 9687 callbacks suppressed [ 1280.247362][ T30] audit: type=1400 audit(2000000610.309:1240026): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1280.260297][T18834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1280.278648][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1280.280447][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1280.286641][ C0] audit: audit_lost=130735 audit_rate_limit=0 audit_backlog_limit=64 [ 1280.295764][ T5820] audit: audit_lost=130736 audit_rate_limit=0 audit_backlog_limit=64 [ 1280.301245][ C0] audit: backlog limit exceeded [ 1280.301841][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1280.321288][ C0] audit: audit_lost=130737 audit_rate_limit=0 audit_backlog_limit=64 [ 1280.329399][ C0] audit: backlog limit exceeded [ 1280.488706][T26722] tap0: tun_chr_ioctl cmd 1074025677 [ 1280.545820][T26722] tap0: linktype set to 512 [ 1280.610769][T26733] openvswitch: netlink: nsh attribute has 65535 unknown bytes. [ 1280.652607][T26733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.816316][T26742] hsr0: entered promiscuous mode [ 1281.582342][ T976] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1281.771319][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.782682][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.792552][ T976] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1281.801967][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.813927][ T976] usb 4-1: config 0 descriptor?? [ 1282.281811][ T976] hid-led 0003:1D34:0004.0086: unknown main item tag 0x0 [ 1282.471862][T26806] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19111'. [ 1282.500948][ T976] hid-led 0003:1D34:0004.0086: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.3-1/input0 [ 1282.507663][T26806] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19111'. [ 1282.544734][ T976] hid-led 0003:1D34:0004.0086: Dream Cheeky Webmail Notifier initialized [ 1282.744798][ T5873] usb 4-1: USB disconnect, device number 96 [ 1283.380545][T26855] netlink: 'syz.6.19126': attribute type 10 has an invalid length. [ 1283.388543][T26855] netlink: 40 bytes leftover after parsing attributes in process `syz.6.19126'. [ 1283.417430][T26855] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.428489][T26855] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.438831][T26855] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.453321][T26855] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.514118][T26855] team0: Port device geneve0 added [ 1283.794544][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19134'. [ 1283.875555][T26879] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1283.894643][T26879] overlayfs: conflicting options: metacopy=off,verity=require [ 1285.602520][ T30] kauditd_printk_skb: 9212 callbacks suppressed [ 1285.602541][ T30] audit: type=1400 audit(2000000615.323:1248349): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1285.652796][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.678522][ T5821] audit: audit_lost=131038 audit_rate_limit=0 audit_backlog_limit=64 [ 1285.679694][T26942] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.693987][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1285.700601][ C0] audit: audit_lost=131039 audit_rate_limit=0 audit_backlog_limit=64 [ 1285.708712][ C0] audit: backlog limit exceeded [ 1285.719981][T26942] audit: audit_lost=131040 audit_rate_limit=0 audit_backlog_limit=64 [ 1285.721200][ T5821] audit: backlog limit exceeded [ 1285.733592][ T30] audit: type=1400 audit(2000000615.360:1248350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1286.839150][T26981] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19173'. [ 1286.854600][T26981] bridge_slave_0: entered allmulticast mode [ 1287.823029][T27017] tap0: tun_chr_ioctl cmd 2149341215 [ 1289.800456][T27082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19213'. [ 1290.605298][T27122] netlink: 632 bytes leftover after parsing attributes in process `syz.6.19231'. [ 1290.824000][T27131] netlink: 'syz.6.19236': attribute type 2 has an invalid length. [ 1290.961822][ T30] kauditd_printk_skb: 9172 callbacks suppressed [ 1290.961844][ T30] audit: type=1400 audit(2000000620.327:1257159): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1291.005658][T27137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.015346][T27137] audit: audit_lost=131162 audit_rate_limit=0 audit_backlog_limit=64 [ 1291.038890][T27137] audit: backlog limit exceeded [ 1291.047889][ T30] audit: type=1400 audit(2000000620.327:1257160): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1291.048764][T27139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.079874][T18834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.086730][T27137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.087408][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.093249][T27137] audit: audit_lost=131163 audit_rate_limit=0 audit_backlog_limit=64 [ 1291.762160][T27163] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 1291.769964][T27163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.069152][T27177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1292.138285][T27177] bond0: (slave bond4): Enslaving as an active interface with a down link [ 1292.455292][T27227] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1292.652580][ T5873] IPVS: starting estimator thread 0... [ 1292.764805][T27241] IPVS: using max 22 ests per chain, 52800 per kthread [ 1292.833511][T27246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19273'. [ 1294.745423][T27314] netlink: 'syz.5.19303': attribute type 10 has an invalid length. [ 1294.765951][T27314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19303'. [ 1294.791578][T27314] team0: entered promiscuous mode [ 1294.801047][T27314] team_slave_0: entered promiscuous mode [ 1294.828596][T27314] team_slave_1: entered promiscuous mode [ 1294.839473][T27314] team0: entered allmulticast mode [ 1294.844664][T27314] team_slave_0: entered allmulticast mode [ 1294.873109][T27314] team_slave_1: entered allmulticast mode [ 1294.918417][T27314] bond0: (slave team0): Releasing backup interface [ 1294.967804][T27314] bridge0: port 3(team0) entered blocking state [ 1294.974391][T27314] bridge0: port 3(team0) entered disabled state [ 1294.975817][T27327] netlink: 'syz.4.19307': attribute type 11 has an invalid length. [ 1294.999039][T23472] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1295.056071][T27327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19307'. [ 1295.202321][T23472] usb 7-1: Using ep0 maxpacket: 16 [ 1295.223838][T23472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.246300][T18111] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1295.268511][T23472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.285673][T23472] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1295.295643][T23472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.320058][T23472] usb 7-1: config 0 descriptor?? [ 1295.630054][ T5873] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1295.793331][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1295.794981][T23472] playstation 0003:054C:05C4.0087: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 1295.820677][ T5873] usb 4-1: config 0 has no interfaces? [ 1295.833245][ T5873] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1295.842633][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.853512][ T5873] usb 4-1: Product: syz [ 1295.858249][ T5873] usb 4-1: Manufacturer: syz [ 1295.862947][ T5873] usb 4-1: SerialNumber: syz [ 1295.881187][ T5873] usb 4-1: config 0 descriptor?? [ 1295.907538][T27370] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1296.009186][T23472] playstation 0003:054C:05C4.0087: Invalid reportID received, expected 18 got 0 [ 1296.019118][T23472] playstation 0003:054C:05C4.0087: Failed to retrieve DualShock4 pairing info: -22 [ 1296.028705][T23472] playstation 0003:054C:05C4.0087: Failed to get MAC address from DualShock4 [ 1296.046663][T23472] playstation 0003:054C:05C4.0087: Failed to create dualshock4. [ 1296.078348][T23472] playstation 0003:054C:05C4.0087: probe with driver playstation failed with error -22 [ 1296.114914][ T5873] usb 4-1: USB disconnect, device number 97 [ 1296.258511][T23472] usb 7-1: USB disconnect, device number 7 [ 1296.343054][ T30] kauditd_printk_skb: 10379 callbacks suppressed [ 1296.343073][ T30] audit: type=1400 audit(2000000625.369:1266183): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27400 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1296.381940][ T30] audit: type=1400 audit(2000000625.397:1266184): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27400 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1296.420859][ T30] audit: type=1400 audit(2000000625.397:1266185): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27400 comm="syz-executor" name="431" dev="tmpfs" ino=2181 [ 1296.441311][ T30] audit: type=1400 audit(2000000625.397:1266186): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=27400 comm="syz-executor" opid=27400 ocomm="syz-executor" [ 1296.456963][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.461099][ T30] audit: type=1400 audit(2000000625.397:1266187): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27400 comm="syz-executor" name="431" dev="tmpfs" ino=2181 [ 1296.487430][ T30] audit: type=1400 audit(2000000625.397:1266188): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27400 comm="syz-executor" name="431" dev="tmpfs" ino=2181 [ 1296.491497][ T5821] audit: audit_lost=131626 audit_rate_limit=0 audit_backlog_limit=64 [ 1296.507689][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.522077][ C0] audit: audit_lost=131627 audit_rate_limit=0 audit_backlog_limit=64 [ 1297.695073][T27450] trusted_key: syz.3.19349 sent an empty control message without MSG_MORE. [ 1300.889880][T23472] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1301.071485][T23472] usb 5-1: Using ep0 maxpacket: 32 [ 1301.091582][T23472] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1301.103526][T23472] usb 5-1: config 0 has no interface number 0 [ 1301.133027][T23472] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1301.154467][T23472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.177996][T23472] usb 5-1: Product: syz [ 1301.185878][T23472] usb 5-1: Manufacturer: syz [ 1301.202655][T23472] usb 5-1: SerialNumber: syz [ 1301.221500][T23472] usb 5-1: config 0 descriptor?? [ 1301.248783][T23472] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1301.478381][T23472] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1301.502430][T23472] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1301.712506][ T30] kauditd_printk_skb: 8273 callbacks suppressed [ 1301.712525][ T30] audit: type=1400 audit(2000000630.383:1274054): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=27573 comm="syz.3.19395" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1301.779787][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1301.786391][ T5834] audit: audit_lost=131766 audit_rate_limit=0 audit_backlog_limit=64 [ 1301.795238][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1301.801833][ C0] audit: audit_lost=131767 audit_rate_limit=0 audit_backlog_limit=64 [ 1301.810087][ C0] audit: backlog limit exceeded [ 1301.815781][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1301.822369][ C0] audit: audit_lost=131768 audit_rate_limit=0 audit_backlog_limit=64 [ 1301.830503][ C0] audit: backlog limit exceeded [ 1301.835523][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1301.904893][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1301.913388][ T5876] usb 5-1: USB disconnect, device number 111 [ 1301.922972][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1301.945034][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1301.958255][ T5876] quatech2 5-1:0.51: device disconnected [ 1305.000838][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19446'. [ 1305.160787][T27723] [U]  [ 1306.910481][T27782] loop4: detected capacity change from 0 to 524287999 [ 1306.934697][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1306.943910][ C0] buffer_io_error: 4 callbacks suppressed [ 1306.943928][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1306.958070][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1306.967322][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1306.977068][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1306.986379][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.003510][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1307.012760][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.049713][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1307.059008][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.067660][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1307.076900][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.089761][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1307.098995][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.107260][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1307.116550][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.124725][T27782] ldm_validate_partition_table(): Disk read failed. [ 1307.135125][ T30] kauditd_printk_skb: 8708 callbacks suppressed [ 1307.135143][ T30] audit: type=1400 audit(2000000635.471:1281696): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27784 comm="syz.3.19475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1307.167599][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1307.176894][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.189016][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1307.198229][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1307.206850][T27782] Dev loop4: unable to read RDB block 0 [ 1307.214104][T27782] loop4: unable to read partition table [ 1307.220572][ T30] audit: type=1400 audit(2000000635.546:1281697): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=27743 comm="syz.1.19459" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1307.251201][T27782] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1307.251778][ T30] audit: type=1400 audit(2000000635.574:1281698): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27784 comm="syz.3.19475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1307.288342][ T30] audit: type=1400 audit(2000000635.602:1281699): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27790 comm="kworker/u8:32" name="/" dev="sda1" ino=2 [ 1307.308189][ T5919] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1307.318819][ T30] audit: type=1400 audit(2000000635.602:1281700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27789 comm="kworker/u8:32" name="/" dev="sda1" ino=2 [ 1307.338644][ T30] audit: type=1400 audit(2000000635.640:1281701): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=27784 comm="syz.3.19475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1307.346080][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1307.360002][ T30] audit: type=1400 audit(2000000635.640:1281702): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27784 comm="syz.3.19475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1307.366035][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1307.386261][ T30] audit: type=1400 audit(2000000635.640:1281703): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27784 comm="syz.3.19475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1307.496471][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 1307.503623][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.516960][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1307.539492][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1307.597007][ T5919] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1307.606561][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.615822][ T5919] usb 4-1: Product: syz [ 1307.620034][ T5919] usb 4-1: Manufacturer: syz [ 1307.625529][ T5919] usb 4-1: SerialNumber: syz [ 1307.632921][ T5919] usb 4-1: config 0 descriptor?? [ 1307.640988][ T5919] mcba_usb 4-1:0.0: Can't find endpoints [ 1307.883124][ T5876] usb 4-1: USB disconnect, device number 98 [ 1308.103971][T27814] netlink: 'syz.4.19481': attribute type 4 has an invalid length. [ 1308.306361][T27819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19483'. [ 1309.037484][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19493'. [ 1309.827684][T27863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19502'. [ 1311.008734][T10772] kernel write not supported for file /input/mouse0 (pid: 10772 comm: kworker/1:0) [ 1311.505407][T27902] trusted_key: encrypted_key: keyword 'upcate' not recognized [ 1312.489167][ T30] kauditd_printk_skb: 23852 callbacks suppressed [ 1312.489188][ T30] audit: type=1400 audit(2000000640.476:1299052): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22840 comm="syz-executor" name="282" dev="tmpfs" ino=1448 [ 1312.523022][T22840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1312.529595][T22840] audit: audit_lost=134327 audit_rate_limit=0 audit_backlog_limit=64 [ 1312.540358][T22840] audit: backlog limit exceeded [ 1312.549810][ T30] audit: type=1400 audit(2000000640.494:1299053): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22840 comm="syz-executor" name="bus" dev="tmpfs" ino=1453 [ 1312.569964][T22840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1312.582737][T22840] audit: audit_lost=134328 audit_rate_limit=0 audit_backlog_limit=64 [ 1312.591838][T27926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1312.604274][T22840] audit: backlog limit exceeded [ 1312.609313][ T30] audit: type=1400 audit(2000000640.494:1299054): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22840 comm="syz-executor" path="/282/bus" dev="tmpfs" ino=1453 [ 1312.734745][ T5876] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1312.912170][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 1312.920120][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.948774][ T5876] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1312.957919][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.984672][ T5876] usb 2-1: config 0 descriptor?? [ 1313.269649][ T5876] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1313.480431][ T5876] usb 2-1: USB disconnect, device number 97 [ 1313.993351][T27969] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19533'. [ 1314.294037][T27977] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[27977] [ 1315.204927][T10772] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1315.418694][T10772] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1315.436339][T10772] usb 2-1: config 0 has no interface number 0 [ 1315.471180][T10772] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1315.492056][T10772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.527856][T10772] usb 2-1: config 0 descriptor?? [ 1315.548496][T10772] usb 2-1: selecting invalid altsetting 1 [ 1315.554393][T10772] dvb_ttusb_budget: ttusb_init_controller: error [ 1315.593976][T10772] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1315.728953][T28014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.742714][T10772] DVB: Unable to find symbol cx22700_attach() [ 1315.883465][T10772] DVB: Unable to find symbol tda10046_attach() [ 1315.892363][T10772] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1315.913802][T10772] usb 2-1: USB disconnect, device number 98 [ 1316.711313][T28062] netlink: 1344 bytes leftover after parsing attributes in process `syz.3.19561'. [ 1317.824795][T28089] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19571'. [ 1317.845036][ T30] kauditd_printk_skb: 39360 callbacks suppressed [ 1317.845057][ T30] audit: type=1400 audit(2000000645.480:1322083): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22840 comm="syz-executor" name="282" dev="tmpfs" ino=1448 [ 1317.845865][T22840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1317.861730][ T30] audit: type=1400 audit(2000000645.480:1322084): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22840 comm="syz-executor" name="bus" dev="tmpfs" ino=1453 [ 1317.871049][T22840] audit: audit_lost=139788 audit_rate_limit=0 audit_backlog_limit=64 [ 1317.898559][ T30] audit: type=1400 audit(2000000645.480:1322085): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22840 comm="syz-executor" path="/282/bus" dev="tmpfs" ino=1453 [ 1317.953220][ T30] audit: type=1400 audit(2000000645.480:1322086): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=22840 comm="syz-executor" path="/282/bus" dev="tmpfs" ino=1453 [ 1317.963443][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1317.979430][T22840] audit: backlog limit exceeded [ 1317.984748][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1317.991338][ C0] audit: audit_lost=139789 audit_rate_limit=0 audit_backlog_limit=64 [ 1318.139523][T28093] random: crng reseeded on system resumption [ 1318.155532][T28092] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1319.690225][T28132] tap0: tun_chr_ioctl cmd 1074025672 [ 1319.696222][T28132] tap0: ignored: set checksum enabled [ 1319.900666][T28122] sctp: [Deprecated]: syz.4.19585 (pid 28122) Use of int in max_burst socket option. [ 1319.900666][T28122] Use struct sctp_assoc_value instead [ 1320.933952][T28167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19600'. [ 1321.011998][T28169] lo speed is unknown, defaulting to 1000 [ 1321.095412][T28174] netlink: 88 bytes leftover after parsing attributes in process `syz.1.19602'. [ 1321.254316][T28169] wg1 speed is unknown, defaulting to 1000 [ 1322.180498][T28211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19609'. [ 1322.891175][T28228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19617'. [ 1322.900282][T28228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19617'. [ 1322.947348][T28228] bridge0: port 5(vlan3) entered blocking state [ 1322.964459][T28228] bridge0: port 5(vlan3) entered disabled state [ 1322.971540][T28228] vlan3: entered allmulticast mode [ 1323.011762][T28228] vlan3: left allmulticast mode [ 1323.059851][T28241] xt_hashlimit: max too large, truncated to 1048576 [ 1323.067306][T28232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19618'. [ 1323.082623][T28232] bridge: RTM_NEWNEIGH with unconfigured vlan 16 on bridge0 [ 1323.137469][T28241] Cannot find set identified by id 0 to match [ 1323.202939][ T30] kauditd_printk_skb: 40650 callbacks suppressed [ 1323.202960][ T30] audit: type=1400 audit(2000000650.494:1343617): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=18113 comm="kworker/u8:32" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1323.217661][T22840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1323.239401][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1323.246005][ C0] audit: audit_lost=146232 audit_rate_limit=0 audit_backlog_limit=64 [ 1323.254139][ C0] audit: backlog limit exceeded [ 1323.260265][ T5834] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1323.269654][ T5821] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1323.276903][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1323.283503][ C0] audit: audit_lost=146233 audit_rate_limit=0 audit_backlog_limit=64 [ 1323.289197][T28242] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1324.712013][T28280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19636'. [ 1324.861636][T28282] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1324.868219][T28282] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1324.911717][T28282] vhci_hcd vhci_hcd.0: Device attached [ 1324.935405][T28284] vhci_hcd: connection closed [ 1324.937568][T18113] vhci_hcd: stop threads [ 1324.992972][T18113] vhci_hcd: release socket [ 1325.011971][T18113] vhci_hcd: disconnect device [ 1325.939195][T21617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1325.952429][T21617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1325.962217][T21617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1325.973398][T21617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1325.983954][T21617] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1326.007082][T21617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1326.040374][T28307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19645'. [ 1326.109839][T18131] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.149900][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19645'. [ 1326.277358][T18131] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.293517][T28300] lo speed is unknown, defaulting to 1000 [ 1326.380444][T18131] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.493567][ T5876] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1326.534701][T18131] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.593336][T28300] wg1 speed is unknown, defaulting to 1000 [ 1326.677107][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 1326.700559][ T5876] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1326.724621][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.769392][ T5876] usb 4-1: config 0 descriptor?? [ 1326.884974][T18131] veth0_to_bridge: left allmulticast mode [ 1326.899754][T18131] veth0_to_bridge: left promiscuous mode [ 1326.905802][T18131] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1326.997333][T18131] bridge0: port 3(batadv0) entered disabled state [ 1327.020398][T18131] bridge_slave_1: left allmulticast mode [ 1327.026280][T18131] bridge_slave_1: left promiscuous mode [ 1327.049868][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.061814][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1327.077905][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1327.093184][ T5876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1327.101250][T18131] bridge_slave_0: left allmulticast mode [ 1327.110300][T18131] bridge_slave_0: left promiscuous mode [ 1327.134624][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.142677][ T5876] usb 4-1: media controller created [ 1327.176599][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.514414][T18131] team0: Port device geneve0 removed [ 1327.749666][ T5876] az6027: usb out operation failed. (-71) [ 1327.755624][ T5876] stb0899_attach: Driver disabled by Kconfig [ 1327.761745][ T5876] az6027: no front-end attached [ 1327.761745][ T5876] [ 1327.769320][ T5876] az6027: usb out operation failed. (-71) [ 1327.775990][ T5876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1327.786550][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input179 [ 1327.805393][ T5876] dvb-usb: schedule remote query interval to 400 msecs. [ 1327.814158][ T5876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1327.836160][ T5876] usb 4-1: USB disconnect, device number 99 [ 1327.852081][T18131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.878151][T18131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.895868][T18131] bond0 (unregistering): Released all slaves [ 1327.914138][ T5876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1327.938858][T28359] bridge0: port 2(batadv1) entered blocking state [ 1327.959221][T28359] bridge0: port 2(batadv1) entered disabled state [ 1327.982281][T28359] batadv1: entered allmulticast mode [ 1327.989354][T28359] batadv1: entered promiscuous mode [ 1328.182769][T21617] Bluetooth: hci3: command tx timeout [ 1328.423968][T18095] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1328.518868][T28300] chnl_net:caif_netlink_parms(): no params data found [ 1328.556997][ T30] kauditd_printk_skb: 16754 callbacks suppressed [ 1328.557017][ T30] audit: type=1400 audit(2000000655.508:1355581): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=28489 comm="syz-executor" opid=28489 ocomm="syz-executor" [ 1328.586694][ T1131] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1328.596286][ T1131] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1328.656172][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1328.662742][ T5820] audit: audit_lost=147836 audit_rate_limit=0 audit_backlog_limit=64 [ 1328.671666][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1328.678408][ C0] audit: audit_lost=147837 audit_rate_limit=0 audit_backlog_limit=64 [ 1328.686550][ C0] audit: backlog limit exceeded [ 1328.691945][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1328.695965][ T30] audit: type=1400 audit(2000000655.508:1355582): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28490 comm="kworker/u8:5" name="/" dev="sda1" ino=2 [ 1328.698520][ C0] audit: audit_lost=147838 audit_rate_limit=0 audit_backlog_limit=64 [ 1328.725405][ C0] audit: backlog limit exceeded [ 1328.960689][T28300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.968524][T28300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.977059][T28300] bridge_slave_0: entered allmulticast mode [ 1328.995246][T28300] bridge_slave_0: entered promiscuous mode [ 1329.018159][T28300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.025381][T28300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.038120][T28300] bridge_slave_1: entered allmulticast mode [ 1329.045190][T28300] bridge_slave_1: entered promiscuous mode [ 1329.185323][T28553] netlink: 'syz.1.19665': attribute type 14 has an invalid length. [ 1329.268501][T28300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.291470][T28300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.576499][T28300] team0: Port device team_slave_0 added [ 1329.602458][T28300] team0: Port device team_slave_1 added [ 1329.631233][T28619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.715060][T28300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.743721][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.843141][T28300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1329.930379][T28300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.952996][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.021492][T28300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.338788][T28300] hsr_slave_0: entered promiscuous mode [ 1330.376067][T28300] hsr_slave_1: entered promiscuous mode [ 1330.392706][T28300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1330.406439][T21617] Bluetooth: hci3: command tx timeout [ 1330.420751][T28300] Cannot create hsr debugfs directory [ 1330.909115][ T5876] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1331.079891][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 1331.087705][ T5876] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1331.103685][ T5876] usb 4-1: config 179 has no interface number 0 [ 1331.129166][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1331.174137][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1331.207276][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1331.261761][ T5876] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1331.300210][ T5876] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1331.318677][T18131] hsr_slave_0: left promiscuous mode [ 1331.325287][T18131] hsr_slave_1: left promiscuous mode [ 1331.329248][ T5876] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1331.332983][T18131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.351952][T18131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.361273][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.386399][T28716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1331.646869][ T6356] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input180 [ 1331.848933][ T6356] usb 4-1: USB disconnect, device number 100 [ 1331.848999][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1331.863375][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1331.910426][ T6356] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1332.619851][T21617] Bluetooth: hci3: command tx timeout [ 1332.712244][T18131] team0 (unregistering): Port device team_slave_1 removed [ 1332.813694][T18131] team0 (unregistering): Port device team_slave_0 removed [ 1333.913024][ T30] kauditd_printk_skb: 5414 callbacks suppressed [ 1333.913045][ T30] audit: type=1400 audit(2000000660.503:1360014): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28300 comm="syz-executor" name="udp_ports" dev="debugfs" ino=155823 [ 1333.920038][T28300] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1333.956803][T28300] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1334.003399][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1334.006537][T28300] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1334.014913][ T30] audit: type=1400 audit(2000000660.503:1360015): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28300 comm="syz-executor" name="udp_ports" dev="debugfs" ino=155823 [ 1334.027542][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1334.040405][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1334.050517][ C0] audit: audit_lost=148168 audit_rate_limit=0 audit_backlog_limit=64 [ 1334.051898][ T5821] audit: audit_lost=148169 audit_rate_limit=0 audit_backlog_limit=64 [ 1334.058616][ C0] audit: backlog limit exceeded [ 1334.072770][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1334.079385][ C0] audit: audit_lost=148170 audit_rate_limit=0 audit_backlog_limit=64 [ 1334.084655][T28300] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1334.449414][T28300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.497723][T28858] netlink: 80 bytes leftover after parsing attributes in process `syz.4.19705'. [ 1334.500046][T28300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1334.547305][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.554536][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.598815][T18111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.606018][T18111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.844502][T21617] Bluetooth: hci3: command tx timeout [ 1335.076373][T28300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.489891][T28300] veth0_vlan: entered promiscuous mode [ 1335.516079][T28300] veth1_vlan: entered promiscuous mode [ 1335.571212][T28300] veth0_macvtap: entered promiscuous mode [ 1335.581359][T28300] veth1_macvtap: entered promiscuous mode [ 1335.600801][T28300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.624314][T28300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.642556][T28300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.666742][T28300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.685337][T28300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.706758][T28300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.729019][T28300] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.739694][T28300] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.757956][T28300] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.783805][T28300] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.007493][T18114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.030808][T18114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.111371][T18111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.120528][T18111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.585754][ T6356] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1336.767075][ T6356] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1336.787779][ T6356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.821852][ T6356] usb 5-1: config 0 descriptor?? [ 1337.713268][ T6356] usb 5-1: Cannot set autoneg [ 1337.718194][ T6356] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1337.734624][ T6356] usb 5-1: USB disconnect, device number 112 [ 1337.894936][T28990] netlink: 'syz.5.19744': attribute type 21 has an invalid length. [ 1337.915513][T28990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19744'. [ 1339.275001][ T30] kauditd_printk_skb: 11785 callbacks suppressed [ 1339.275022][ T30] audit: type=1400 audit(2000000665.526:1370358): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29050 comm="modprobe" name="/" dev="sda1" ino=2 [ 1339.298434][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1339.304380][ T30] audit: type=1400 audit(2000000665.526:1370359): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29050 comm="modprobe" name="etc" dev="sda1" ino=115 [ 1339.322489][T29053] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1339.331816][T29053] audit: audit_lost=148659 audit_rate_limit=0 audit_backlog_limit=64 [ 1339.332571][ T30] audit: type=1400 audit(2000000665.526:1370360): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1339.359707][ T5821] audit: audit_lost=148660 audit_rate_limit=0 audit_backlog_limit=64 [ 1339.359734][ T5821] audit: backlog limit exceeded [ 1339.359839][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1339.359856][ T5821] audit: audit_lost=148661 audit_rate_limit=0 audit_backlog_limit=64 [ 1340.972013][T29116] Â: renamed from pim6reg1 [ 1342.906684][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19815'. [ 1343.304405][T29190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1343.406703][ T5919] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1343.527115][T29205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19826'. [ 1343.594778][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.620083][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1343.644040][ T5919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1343.669738][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.687554][ T5919] usb 2-1: Product: syz [ 1343.693480][ T5919] usb 2-1: Manufacturer: syz [ 1343.698907][ T5919] usb 2-1: SerialNumber: syz [ 1343.941045][ T5919] usb 2-1: 0:2 : does not exist [ 1343.958548][ T5919] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1343.959777][T29222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19832'. [ 1343.999994][ T5919] usb 2-1: USB disconnect, device number 99 [ 1344.657096][ T30] kauditd_printk_skb: 9229 callbacks suppressed [ 1344.657118][ T30] audit: type=1400 audit(2000000670.549:1378403): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29255 comm="kworker/u8:24" name="/" dev="sda1" ino=2 [ 1344.693249][ T30] audit: type=1400 audit(2000000670.558:1378404): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1344.736510][ T30] audit: type=1400 audit(2000000670.558:1378405): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1344.800087][T29259] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1344.811118][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1344.818967][ T30] audit: type=1400 audit(2000000670.558:1378406): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5834 comm="syz-executor" name="4091" dev="tmpfs" ino=20624 [ 1344.820391][T29259] audit: audit_lost=149065 audit_rate_limit=0 audit_backlog_limit=64 [ 1344.858154][ T5821] audit: audit_lost=149066 audit_rate_limit=0 audit_backlog_limit=64 [ 1344.858291][T28300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1344.880458][T29259] audit: backlog limit exceeded [ 1345.008049][T29266] netlink: 'syz.4.19842': attribute type 6 has an invalid length. [ 1345.861112][T29306] input: syz1 as /devices/virtual/input/input181 [ 1346.115039][T29323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19863'. [ 1346.175374][T29323] vlan3: entered allmulticast mode [ 1346.183662][T29323] dummy0: entered allmulticast mode [ 1346.212032][T29328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19865'. [ 1346.560004][T10772] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1346.731680][T10772] usb 5-1: Using ep0 maxpacket: 32 [ 1346.743343][T10772] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1346.773877][T10772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.799587][T10772] usb 5-1: config 0 descriptor?? [ 1347.064182][T10772] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1347.090481][T29371] netlink: 312 bytes leftover after parsing attributes in process `syz.3.19883'. [ 1347.104696][T10772] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1347.123566][T10772] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1347.132942][T10772] usb 5-1: media controller created [ 1347.161752][T10772] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.743663][T10772] az6027: usb out operation failed. (-71) [ 1347.750478][T10772] stb0899_attach: Driver disabled by Kconfig [ 1347.777113][T10772] az6027: no front-end attached [ 1347.777113][T10772] [ 1347.790053][T10772] az6027: usb out operation failed. (-71) [ 1347.802211][T10772] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1347.811528][T10772] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input182 [ 1347.829845][T10772] dvb-usb: schedule remote query interval to 400 msecs. [ 1347.837938][T10772] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1347.852743][T10772] usb 5-1: USB disconnect, device number 113 [ 1347.937821][T10772] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1348.422797][ T5873] Process accounting resumed [ 1348.566032][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19906'. [ 1348.602160][ T5919] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1348.625238][T29452] macsec0: entered promiscuous mode [ 1348.775058][ T5919] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1348.802284][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1348.812255][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1348.827530][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1348.835864][ T5919] usb 4-1: Product: syz [ 1348.846649][ T5919] usb 4-1: Manufacturer: syz [ 1348.859461][ T5919] usb 4-1: SerialNumber: syz [ 1348.892680][ T5919] usb 4-1: config 0 descriptor?? [ 1348.915106][ T5919] usb 4-1: selecting invalid altsetting 0 [ 1348.988204][ T5873] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1349.045027][T29483] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1349.069897][T29483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.149993][T10772] usb 4-1: USB disconnect, device number 101 [ 1349.169463][ T5873] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1349.194516][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.234755][ T5873] usb 5-1: config 0 descriptor?? [ 1349.250471][ T5873] cp210x 5-1:0.0: cp210x converter detected [ 1349.418394][T29506] netlink: 36 bytes leftover after parsing attributes in process `syz.5.19918'. [ 1349.435748][T29506] netlink: 36 bytes leftover after parsing attributes in process `syz.5.19918'. [ 1349.701035][ T5873] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1349.725627][ T5873] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1349.941085][T23472] usb 5-1: USB disconnect, device number 114 [ 1349.964536][T23472] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1349.987355][T23472] cp210x 5-1:0.0: device disconnected [ 1350.014734][ T30] kauditd_printk_skb: 9801 callbacks suppressed [ 1350.014754][ T30] audit: type=1400 audit(2000000675.581:1387355): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29542 comm="kworker/u8:5" name="/" dev="sda1" ino=2 [ 1350.068738][ T30] audit: type=1400 audit(2000000675.581:1387356): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29543 comm="kworker/u8:30" name="/" dev="sda1" ino=2 [ 1350.094275][ T30] audit: type=1400 audit(2000000675.581:1387357): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29544 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1350.101364][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1350.120671][T29546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1350.123118][ T30] audit: type=1400 audit(2000000675.581:1387358): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29544 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1350.149254][T29546] audit: audit_lost=149356 audit_rate_limit=0 audit_backlog_limit=64 [ 1350.155624][ T30] audit: type=1400 audit(2000000675.581:1387359): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29544 comm="syz-executor" name="4052" dev="tmpfs" ino=20425 [ 1350.163109][ T5820] audit: audit_lost=149357 audit_rate_limit=0 audit_backlog_limit=64 [ 1350.193689][ T30] audit: type=1400 audit(2000000675.581:1387360): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=29544 comm="syz-executor" opid=29544 ocomm="syz-executor" [ 1351.161465][T29586] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1352.012314][T29608] netlink: 'syz.4.19950': attribute type 1 has an invalid length. [ 1352.269957][T18131] tipc: Resetting bearer [ 1352.313291][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1352.326307][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1352.336060][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1352.351304][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1352.364159][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1352.372363][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1353.042762][T18131] tipc: Disabling bearer [ 1353.088107][T18131] dvmrp6 (unregistering): left allmulticast mode [ 1353.624281][T18131] $Hÿ (unregistering): Released all slaves [ 1353.636551][T18131] bond0 (unregistering): (slave bond4): Releasing backup interface [ 1353.651623][T18131] bond0 (unregistering): Released all slaves [ 1353.664503][T18131] bond1 (unregistering): Released all slaves [ 1353.684720][T18131] bond2 (unregistering): Released all slaves [ 1353.716510][T18131] bond3 (unregistering): Released all slaves [ 1353.967578][T18131] bond4 (unregistering): Released all slaves [ 1353.990717][T29641] netlink: 'syz.5.19956': attribute type 25 has an invalid length. [ 1353.998709][T29641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19956'. [ 1354.100041][T29656] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1354.599414][T21617] Bluetooth: hci4: command tx timeout [ 1354.898921][T29656] bond6 (unregistering): Released all slaves [ 1354.962311][T18131] : left promiscuous mode [ 1355.055541][T29629] lo speed is unknown, defaulting to 1000 [ 1355.097934][T18131] tipc: Disabling bearer [ 1355.116020][T18131] tipc: Left network mode [ 1355.408879][ T30] kauditd_printk_skb: 6196 callbacks suppressed [ 1355.408898][ T30] audit: type=1400 audit(2000000680.614:1393189): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=5820 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1355.450341][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1355.457890][ T5820] audit: audit_lost=149480 audit_rate_limit=0 audit_backlog_limit=64 [ 1355.476044][ T30] audit: type=1400 audit(2000000680.651:1393190): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1355.498460][ T5820] audit: backlog limit exceeded [ 1355.503604][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1355.510811][ T5820] audit: audit_lost=149481 audit_rate_limit=0 audit_backlog_limit=64 [ 1355.519045][ T5820] audit: backlog limit exceeded [ 1355.523951][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1355.530611][ T30] audit: type=1400 audit(2000000680.651:1393191): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1355.562884][T29629] wg1 speed is unknown, defaulting to 1000 [ 1356.288591][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19983'. [ 1356.309713][T29796] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19983'. [ 1356.543186][T29817] Attempt to restore checkpoint with obsolete wellknown handles [ 1356.555859][T18131] hsr_slave_0: left promiscuous mode [ 1356.562097][T18131] hsr_slave_1: left promiscuous mode [ 1356.822967][T21617] Bluetooth: hci4: command tx timeout [ 1357.149501][T18131] hsr0 (unregistering): left allmulticast mode [ 1357.953007][T29830] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1358.012632][T29834] tap0: tun_chr_ioctl cmd 1074025680 [ 1358.300219][T29923] lo speed is unknown, defaulting to 1000 [ 1358.386993][T29629] chnl_net:caif_netlink_parms(): no params data found [ 1358.495612][T29923] wg1 speed is unknown, defaulting to 1000 [ 1358.785238][T29629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.794775][T29629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.802196][T29629] bridge_slave_0: entered allmulticast mode [ 1358.809468][T29629] bridge_slave_0: entered promiscuous mode [ 1358.818043][T29629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.826067][T29629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.830501][T18131] IPVS: stop unused estimator thread 0... [ 1358.834331][T29629] bridge_slave_1: entered allmulticast mode [ 1358.866038][T29629] bridge_slave_1: entered promiscuous mode [ 1358.953180][T29629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.997034][T29629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.057371][T21617] Bluetooth: hci4: command tx timeout [ 1359.180918][T29629] team0: Port device team_slave_0 added [ 1359.218279][T29629] team0: Port device team_slave_1 added [ 1359.479956][T29629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.501081][T29629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.544429][T29629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.557924][T29629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.565662][T29629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1359.625136][T29629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.820174][T29629] hsr_slave_0: entered promiscuous mode [ 1359.853939][T29629] hsr_slave_1: entered promiscuous mode [ 1359.875479][T29629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.905310][T29629] Cannot create hsr debugfs directory [ 1360.481561][T29629] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1360.510848][T29629] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1360.548823][T29629] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1360.575916][T29629] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1360.757221][ T30] kauditd_printk_skb: 6361 callbacks suppressed [ 1360.757250][ T30] audit: type=1400 audit(2000000685.627:1399137): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="3974" dev="tmpfs" ino=20042 [ 1360.792352][T30210] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1360.799237][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1360.811524][T29629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.823850][T28300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1360.828250][T30210] audit: audit_lost=149621 audit_rate_limit=0 audit_backlog_limit=64 [ 1360.830384][T28300] audit: audit_lost=149622 audit_rate_limit=0 audit_backlog_limit=64 [ 1360.847297][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1360.853263][ T5821] audit: audit_lost=149623 audit_rate_limit=0 audit_backlog_limit=64 [ 1360.853860][ C0] audit: audit_lost=149624 audit_rate_limit=0 audit_backlog_limit=64 [ 1360.861885][ T5821] audit: backlog limit exceeded [ 1360.889555][T29629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.922493][T30252] netlink: 10 bytes leftover after parsing attributes in process `syz.5.20026'. [ 1360.964409][T18083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.971608][T18083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.035810][T18115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.043014][T18115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.090172][T29629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1361.101225][T29629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1361.281232][T21617] Bluetooth: hci4: command tx timeout [ 1361.626735][T29629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.679436][T18095] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1361.682718][T30274] lo speed is unknown, defaulting to 1000 [ 1362.015218][T30274] wg1 speed is unknown, defaulting to 1000 [ 1362.798363][T29629] veth0_vlan: entered promiscuous mode [ 1362.922674][T29629] veth1_vlan: entered promiscuous mode [ 1363.108223][T29629] veth0_macvtap: entered promiscuous mode [ 1363.119348][T29629] veth1_macvtap: entered promiscuous mode [ 1363.167230][T29629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.192563][T29629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.216163][T29629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.241755][T29629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.268550][T29629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.330015][T29629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.376629][T29629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.414496][T29629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.457803][T29629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.477873][T29629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1363.529362][T29629] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.559802][T29629] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.597557][T29629] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.617643][T29629] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.834606][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.851012][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.969431][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.982767][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.119509][ T30] kauditd_printk_skb: 10166 callbacks suppressed [ 1366.119529][ T30] audit: type=1400 audit(2000000690.640:1407112): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30481 comm="kworker/u8:30" name="/" dev="sda1" ino=2 [ 1366.162629][ T30] audit: type=1400 audit(2000000690.659:1407113): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30479 comm="syz-executor" name="3992" dev="tmpfs" ino=20132 [ 1366.190037][ T30] audit: type=1400 audit(2000000690.659:1407114): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30479 comm="syz-executor" name="3992" dev="tmpfs" ino=20132 [ 1366.212139][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1366.242576][ T30] audit: type=1400 audit(2000000690.659:1407115): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=30479 comm="syz-executor" name="3992" dev="tmpfs" ino=20132 [ 1366.244022][ T5821] audit: audit_lost=150359 audit_rate_limit=0 audit_backlog_limit=64 [ 1366.263078][T18834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1366.271235][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1366.271256][ C0] audit: audit_lost=150360 audit_rate_limit=0 audit_backlog_limit=64 [ 1366.271300][ C0] audit: backlog limit exceeded [ 1366.740379][T30501] mkiss: ax0: crc mode is auto. [ 1367.045361][T30519] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 30519 comm: syz.5.20098) [ 1368.416732][T30564] tap0: tun_chr_ioctl cmd 1074812118 [ 1368.478510][T30571] tap0: tun_chr_ioctl cmd 1074025673 [ 1370.111341][T30614] Invalid logical block size (2047) [ 1370.871480][ T5877] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1371.052277][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 1371.079852][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1371.129604][ T5877] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1371.148387][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.169378][ T5877] usb 5-1: Product: syz [ 1371.174515][ T5877] usb 5-1: Manufacturer: syz [ 1371.179564][ T5877] usb 5-1: SerialNumber: syz [ 1371.201621][ T5877] usb 5-1: config 0 descriptor?? [ 1371.210897][ T5877] hub 5-1:0.0: bad descriptor, ignoring hub [ 1371.233828][ T5877] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1371.244664][ T5877] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input183 [ 1371.469006][ T30] kauditd_printk_skb: 7879 callbacks suppressed [ 1371.469027][ T30] audit: type=1400 audit(2000000695.635:1413995): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1371.561533][ T30] audit: type=1400 audit(2000000695.635:1413996): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1371.582253][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1371.590534][T30674] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1371.598585][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1371.605191][ C0] audit: audit_lost=150706 audit_rate_limit=0 audit_backlog_limit=64 [ 1371.613351][ C0] audit: backlog limit exceeded [ 1371.614956][ T30] audit: type=1400 audit(2000000695.635:1413997): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5820 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1371.631018][T29629] audit: audit_lost=150707 audit_rate_limit=0 audit_backlog_limit=64 [ 1371.676178][T30674] audit: audit_lost=150708 audit_rate_limit=0 audit_backlog_limit=64 [ 1371.951184][ T5873] usb 5-1: USB disconnect, device number 115 [ 1372.177588][T23472] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1372.384236][T23472] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1372.397330][T23472] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1372.425877][T23472] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1372.444901][T23472] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1372.453721][T23472] usb 9-1: Manufacturer: syz [ 1372.461772][T23472] usb 9-1: config 0 descriptor?? [ 1372.469920][T30714] tap0: tun_chr_ioctl cmd 1074025677 [ 1372.481954][T30714] tap0: linktype set to 1 [ 1372.559613][T23472] rc_core: IR keymap rc-hauppauge not found [ 1372.567571][T23472] Registered IR keymap rc-empty [ 1372.574079][T23472] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1372.604696][T23472] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input184 [ 1372.692658][T30733] vivid-008: disconnect [ 1372.698140][T30729] vivid-008: reconnect [ 1373.019256][ T6356] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1373.053278][ T976] usb 9-1: USB disconnect, device number 2 [ 1373.192648][ T6356] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1373.204565][ T6356] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1373.217528][ T6356] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1373.227579][ T6356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.246524][T30735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1373.272995][ T6356] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1373.286548][T30757] xt_CT: No such helper "snmp" [ 1373.539842][ T5873] usb 4-1: USB disconnect, device number 102 [ 1373.617375][T30795] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1374.395635][ T5873] hid-generic 0000:0003:0000.0088: unknown main item tag 0x0 [ 1374.407194][ T5873] hid-generic 0000:0003:0000.0088: unknown main item tag 0x0 [ 1374.419852][ T5873] hid-generic 0000:0003:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1374.539848][T30831] netlink: 120 bytes leftover after parsing attributes in process `syz.3.20187'. [ 1374.656092][T10772] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 1374.839323][T10772] usb 9-1: config index 0 descriptor too short (expected 62378, got 36) [ 1374.858884][T10772] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.877113][T10772] usb 9-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1374.886867][T10772] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.900845][T10772] usb 9-1: config 0 descriptor?? [ 1375.136663][T10772] usb 9-1: USB disconnect, device number 3 [ 1375.594500][T30883] random: crng reseeded on system resumption [ 1376.834771][ T30] kauditd_printk_skb: 8927 callbacks suppressed [ 1376.834793][ T30] audit: type=1400 audit(2000000700.658:1422293): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=30918 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1376.887180][ T5820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1376.894766][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1376.895258][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1376.901358][ C0] audit: audit_lost=150919 audit_rate_limit=0 audit_backlog_limit=64 [ 1376.901381][ C0] audit: backlog limit exceeded [ 1376.901975][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1376.919591][ T5820] audit: audit_lost=150920 audit_rate_limit=0 audit_backlog_limit=64 [ 1376.920992][ C0] audit: audit_lost=150921 audit_rate_limit=0 audit_backlog_limit=64 [ 1376.943883][ C0] audit: backlog limit exceeded [ 1377.631468][T30946] netlink: 76 bytes leftover after parsing attributes in process `syz.8.20233'. [ 1378.182792][ T6356] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1378.354210][ T6356] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 242, using maximum allowed: 30 [ 1378.373655][ T6356] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.394909][ T6356] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1378.418922][ T6356] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1378.427097][ T6356] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 1378.442739][ T6356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.461990][ T6356] usb 5-1: config 0 descriptor?? [ 1378.903544][T31004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20255'. [ 1378.924740][ T6356] apple 0003:05AC:0225.0089: unknown main item tag 0x0 [ 1378.954371][ T6356] apple 0003:05AC:0225.0089: hidraw0: USB HID v0.03 Device [HID 05ac:0225] on usb-dummy_hcd.4-1/input0 [ 1379.149586][ T6356] usb 5-1: USB disconnect, device number 116 [ 1379.317782][T31033] netlink: 'syz.7.20261': attribute type 10 has an invalid length. [ 1379.350448][T31033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.358358][T31033] bridge_slave_1: left allmulticast mode [ 1379.381885][T31033] bridge_slave_1: left promiscuous mode [ 1379.387952][T31033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.425524][T31033] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1379.676616][T31045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.818973][T31050] netlink: 830 bytes leftover after parsing attributes in process `syz.5.20268'. [ 1380.721938][T31083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20278'. [ 1381.678944][ T5919] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1381.892991][ T5919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.933411][ T5919] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1381.965879][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.989617][ T5919] usb 9-1: config 0 descriptor?? [ 1382.181018][ T30] kauditd_printk_skb: 13629 callbacks suppressed [ 1382.181037][ T30] audit: type=1400 audit(2000000705.663:1432937): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1382.187447][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1382.187643][ T30] audit: type=1400 audit(2000000705.663:1432938): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1382.213586][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1382.239748][ C0] audit: audit_lost=151943 audit_rate_limit=0 audit_backlog_limit=64 [ 1382.247979][ C0] audit: backlog limit exceeded [ 1382.253024][T31105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1382.253081][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1382.266155][ C0] audit: audit_lost=151944 audit_rate_limit=0 audit_backlog_limit=64 [ 1382.268504][T31105] audit: audit_lost=151945 audit_rate_limit=0 audit_backlog_limit=64 [ 1382.556482][ T5919] keytouch 0003:0926:3333.008A: fixing up Keytouch IEC report descriptor [ 1382.591263][ T5919] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.008A/input/input185 [ 1382.704283][ T5919] keytouch 0003:0926:3333.008A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1382.721133][T31161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20297'. [ 1383.054490][ T5873] usb 9-1: USB disconnect, device number 4 [ 1383.164567][T21617] Bluetooth: hci4: command tx timeout [ 1383.164926][ T5919] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1383.335599][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 1383.344355][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1383.356486][ T5919] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1383.367243][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.376254][ T5919] usb 5-1: Product: syz [ 1383.380830][ T5919] usb 5-1: Manufacturer: syz [ 1383.385461][ T5919] usb 5-1: SerialNumber: syz [ 1383.400547][ T5919] usb 5-1: config 0 descriptor?? [ 1383.625485][T31212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.687334][T31212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.724769][T31212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.739212][T31212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.755256][T31212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.779570][T31212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.797245][T31212] batadv_slave_0: entered promiscuous mode [ 1383.804924][T31212] batadv_slave_0: left promiscuous mode [ 1383.871638][ T5919] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1384.082740][T31233] ALSA: mixer_oss: invalid index 9551615 [ 1384.086996][ T5919] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1384.129676][ T5919] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 1384.322574][ T5919] usb 5-1: USB disconnect, device number 117 [ 1384.746724][T10772] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1384.951261][T10772] usb 9-1: Using ep0 maxpacket: 16 [ 1384.966981][T10772] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1385.001178][T10772] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1385.017515][T10772] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.051783][T10772] usb 9-1: Product: syz [ 1385.056406][T10772] usb 9-1: Manufacturer: syz [ 1385.074514][T10772] usb 9-1: SerialNumber: syz [ 1385.094060][T10772] usb 9-1: config 0 descriptor?? [ 1385.122389][T10772] hub 9-1:0.0: bad descriptor, ignoring hub [ 1385.146921][T10772] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1385.182835][T10772] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input186 [ 1385.254961][ T1131] macvlan1: left allmulticast mode [ 1385.268361][ T1131] macvlan1: left promiscuous mode [ 1385.277342][ T1131] bridge0: port 4(macvlan1) entered disabled state [ 1385.294248][ T1131] macsec0: left allmulticast mode [ 1385.302856][ T1131] macsec0: left promiscuous mode [ 1385.308062][ T1131] bridge0: port 3(macsec0) entered disabled state [ 1385.373322][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1385.378017][ T1131] bridge_slave_1: left allmulticast mode [ 1385.386947][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1385.396237][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1385.406450][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1385.406779][ T1131] bridge_slave_1: left promiscuous mode [ 1385.425303][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1385.433737][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1385.441025][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.493083][ T1131] bridge_slave_0: left allmulticast mode [ 1385.508967][ T1131] bridge_slave_0: left promiscuous mode [ 1385.514774][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.705889][T31305] syz.4.20321: attempt to access beyond end of device [ 1385.705889][T31305] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1385.721568][T31305] syz.4.20321: attempt to access beyond end of device [ 1385.721568][T31305] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1385.735003][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1385.745044][T31305] syz.4.20321: attempt to access beyond end of device [ 1385.745044][T31305] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1385.760062][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1385.762736][ T6356] usb 9-1: USB disconnect, device number 5 [ 1385.772338][T31305] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1385.783962][T31305] UDF-fs: Scanning with blocksize 512 failed [ 1385.791047][T31305] syz.4.20321: attempt to access beyond end of device [ 1385.791047][T31305] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1385.806271][T31305] syz.4.20321: attempt to access beyond end of device [ 1385.806271][T31305] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1385.876658][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1385.911313][T31305] syz.4.20321: attempt to access beyond end of device [ 1385.911313][T31305] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1385.927729][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1385.941583][T31305] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1385.960503][T31305] UDF-fs: Scanning with blocksize 1024 failed [ 1385.974467][T31305] syz.4.20321: attempt to access beyond end of device [ 1385.974467][T31305] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1386.010387][T31305] syz.4.20321: attempt to access beyond end of device [ 1386.010387][T31305] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1386.041736][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1386.059148][T31305] syz.4.20321: attempt to access beyond end of device [ 1386.059148][T31305] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1386.073664][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1386.086897][T31305] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1386.108898][T31305] UDF-fs: Scanning with blocksize 2048 failed [ 1386.118019][T31305] syz.4.20321: attempt to access beyond end of device [ 1386.118019][T31305] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1386.138341][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1386.152858][T31305] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1386.166019][T31305] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1386.183184][T31305] UDF-fs: Scanning with blocksize 4096 failed [ 1386.189604][T31305] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1386.570803][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.587141][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.599712][ T1131] bond0 (unregistering): Released all slaves [ 1386.615233][ T1131] bond1 (unregistering): Released all slaves [ 1387.203736][ T1131] bond2 (unregistering): Released all slaves [ 1387.492486][ T1131] bond3 (unregistering): Released all slaves [ 1387.506840][ T1131] bond4 (unregistering): Released all slaves [ 1387.703296][ T5827] Bluetooth: hci0: command tx timeout [ 1387.727726][ T1131] bond5 (unregistering): Released all slaves [ 1387.742112][ T1131] bond6 (unregistering): Released all slaves [ 1387.770899][ T30] kauditd_printk_skb: 5784 callbacks suppressed [ 1387.770918][ T30] audit: type=1400 audit(2000000710.892:1437877): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31343 comm="kworker/u8:24" name="/" dev="sda1" ino=2 [ 1387.790992][T31289] lo speed is unknown, defaulting to 1000 [ 1387.887758][T18834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.890302][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.895911][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.907389][ C0] audit: audit_lost=152228 audit_rate_limit=0 audit_backlog_limit=64 [ 1387.911426][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.915509][ C0] audit: backlog limit exceeded [ 1387.922138][T18834] audit: audit_lost=152229 audit_rate_limit=0 audit_backlog_limit=64 [ 1387.927009][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1387.935247][ T5821] audit: audit_lost=152230 audit_rate_limit=0 audit_backlog_limit=64 [ 1387.972237][T31289] wg1 speed is unknown, defaulting to 1000 [ 1388.134530][ T1131] IPVS: stopping backup sync thread 13568 ... [ 1388.323430][T23472] kernel write not supported for file /bluetooth/6lowpan_control (pid: 23472 comm: kworker/0:0) [ 1388.898155][T31289] chnl_net:caif_netlink_parms(): no params data found [ 1389.235707][T31523] ALSA: mixer_oss: invalid OSS volume 'Ö' [ 1389.280648][T31289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.301240][T31289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.311822][T31289] bridge_slave_0: entered allmulticast mode [ 1389.337644][T31289] bridge_slave_0: entered promiscuous mode [ 1389.356309][T31289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.363441][T31289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.399639][T31289] bridge_slave_1: entered allmulticast mode [ 1389.448528][T31289] bridge_slave_1: entered promiscuous mode [ 1389.549433][ T1131] hsr_slave_0: left promiscuous mode [ 1389.560952][ T1131] hsr_slave_1: left promiscuous mode [ 1389.579480][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.598325][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1389.606481][ T1131] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1389.622111][ T1131] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1389.639636][ T1131] hsr0: left allmulticast mode [ 1389.653677][ T1131] hsr0: left promiscuous mode [ 1389.923122][ T5827] Bluetooth: hci0: command tx timeout [ 1390.390477][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1390.519233][ T1131] team0 (unregistering): Port device C removed [ 1391.102298][T31289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.122473][T31582] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 1391.173917][T31289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.310033][T31289] team0: Port device team_slave_0 added [ 1391.342308][T31289] team0: Port device team_slave_1 added [ 1391.527068][T31289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.534083][T31289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.560680][ T5873] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1391.580765][T31289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.604604][T31289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1391.617217][T31289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.708198][T31289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.749035][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 1391.756693][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.781082][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.790916][ T5873] usb 9-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1391.839901][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.866170][ T5873] usb 9-1: config 0 descriptor?? [ 1391.903520][T31289] hsr_slave_0: entered promiscuous mode [ 1391.932313][T31289] hsr_slave_1: entered promiscuous mode [ 1392.004820][ T1131] IPVS: stop unused estimator thread 0... [ 1392.147706][ T5827] Bluetooth: hci0: command tx timeout [ 1392.335035][ T5873] gt683r_led 0003:1770:FF00.008B: unknown main item tag 0x0 [ 1392.358255][ T5873] gt683r_led 0003:1770:FF00.008B: unknown main item tag 0x0 [ 1392.365801][ T5873] gt683r_led 0003:1770:FF00.008B: unknown main item tag 0x0 [ 1392.394742][ T5873] gt683r_led 0003:1770:FF00.008B: unknown main item tag 0x0 [ 1392.411987][ T5873] gt683r_led 0003:1770:FF00.008B: unknown main item tag 0x0 [ 1392.445814][ T5873] gt683r_led 0003:1770:FF00.008B: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.8-1/input0 [ 1392.552130][ T5873] usb 9-1: USB disconnect, device number 6 [ 1392.587819][T10772] gt683r_led 0003:1770:FF00.008B: failed to send set report request: -19 [ 1392.817117][T31797] netlink: 16 bytes leftover after parsing attributes in process `syz.5.20374'. [ 1393.137012][ T30] kauditd_printk_skb: 5641 callbacks suppressed [ 1393.137036][ T30] audit: type=1400 audit(2000000715.915:1442955): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31808 comm="kworker/u8:24" name="/" dev="sda1" ino=2 [ 1393.184015][T31289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.184027][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.190581][T29629] audit: audit_lost=152421 audit_rate_limit=0 audit_backlog_limit=64 [ 1393.190619][T29629] audit: backlog limit exceeded [ 1393.190637][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.190652][T29629] audit: audit_lost=152422 audit_rate_limit=0 audit_backlog_limit=64 [ 1393.190668][T29629] audit: backlog limit exceeded [ 1393.190790][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.205940][T31809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.330517][T31289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1393.377544][T31289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1393.422249][T31289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1393.453486][T31289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1393.708500][T31289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.752222][T31289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.800806][T18089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.808055][T18089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.860339][T18089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.867538][T18089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.915144][T31289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.368309][ T5827] Bluetooth: hci0: command tx timeout [ 1394.487224][T31289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.629095][T31289] veth0_vlan: entered promiscuous mode [ 1394.674132][T31289] veth1_vlan: entered promiscuous mode [ 1394.696411][T31855] unknown channel width for channel at 909000KHz? [ 1394.748952][T31289] veth0_macvtap: entered promiscuous mode [ 1394.767426][T31861] netlink: 'syz.5.20392': attribute type 1 has an invalid length. [ 1394.769186][T31289] veth1_macvtap: entered promiscuous mode [ 1394.785274][T31861] netlink: 104 bytes leftover after parsing attributes in process `syz.5.20392'. [ 1394.812046][T31861] netlink: 'syz.5.20392': attribute type 1 has an invalid length. [ 1394.841317][T31289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.880877][T31289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.911706][T31289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.931276][T31289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.942803][T31289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.962593][T31289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.984275][T31289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.012609][T31289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.030577][T31289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.051304][T31289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.064337][T18083] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1395.083155][T31289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.095938][T31289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.115359][T31289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.139608][T31289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.162480][T31289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.200651][T31289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.231193][T31289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.275301][T31289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.532706][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.551723][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.647265][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.657929][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.006268][T31899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20316'. [ 1397.410002][T31956] Bluetooth: MGMT ver 1.23 [ 1398.533010][ T30] kauditd_printk_skb: 9103 callbacks suppressed [ 1398.533031][ T30] audit: type=1400 audit(2000000720.957:1451517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1398.570928][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1398.574541][T32007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1398.577480][ T5821] audit: audit_lost=152606 audit_rate_limit=0 audit_backlog_limit=64 [ 1398.577502][ T5821] audit: backlog limit exceeded [ 1398.577528][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1398.594039][T32008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1398.612858][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1398.613055][T32009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1398.619476][T29629] audit: audit_lost=152607 audit_rate_limit=0 audit_backlog_limit=64 [ 1398.864797][T32018] tipc: Started in network mode [ 1398.883229][T32018] tipc: Node identity ac14140f, cluster identity 4711 [ 1398.900155][T32018] tipc: New replicast peer: 255.255.255.255 [ 1398.911456][T32018] tipc: Enabled bearer , priority 11 [ 1399.419804][T32040] ubi31: attaching mtd0 [ 1399.428566][T32040] ubi31 error: ubi_attach_mtd_dev: bad VID header (327685) or data offsets (327749) [ 1399.985262][T32059] veth1_macvtap: left promiscuous mode [ 1400.109224][ T5877] tipc: Node number set to 2886997007 [ 1400.624213][T32086] netlink: 'syz.8.20477': attribute type 6 has an invalid length. [ 1401.127680][T32109] netlink: 32 bytes leftover after parsing attributes in process `syz.8.20486'. [ 1401.155927][T32109] netem: unknown loss type 13 [ 1401.191267][T32109] netem: change failed [ 1401.393590][T32119] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20492'. [ 1401.863342][T32135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20497'. [ 1402.021597][T32141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20500'. [ 1402.059322][T32141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.20500'. [ 1402.120958][T32141] gretap0: entered promiscuous mode [ 1402.127412][T32141] batadv_slave_1: entered promiscuous mode [ 1403.437708][T10772] kernel write not supported for file /amidi2 (pid: 10772 comm: kworker/1:0) [ 1403.594477][T32198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20522'. [ 1403.604671][T32198] openvswitch: netlink: VXLAN extension 12922 out of range max 1 [ 1403.893765][ T30] kauditd_printk_skb: 9614 callbacks suppressed [ 1403.893785][ T30] audit: type=1400 audit(2000000725.980:1459971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1403.933201][T18834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1403.940168][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1403.946809][ C0] audit: audit_lost=152997 audit_rate_limit=0 audit_backlog_limit=64 [ 1403.947896][T32209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1403.954947][ C0] audit: backlog limit exceeded [ 1403.967144][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1403.973777][ C0] audit: audit_lost=152998 audit_rate_limit=0 audit_backlog_limit=64 [ 1403.979817][T32212] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1403.981931][ C0] audit: backlog limit exceeded [ 1404.040848][T32215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20531'. [ 1404.908467][T32243] serio: Serial port ptm0 [ 1405.021487][T32252] lo: entered promiscuous mode [ 1405.038493][T32252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1405.992404][T32298] netlink: 340 bytes leftover after parsing attributes in process `syz.4.20567'. [ 1406.015640][T32300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20569'. [ 1406.054728][T32300] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 1406.065022][T32300] netlink: 'syz.3.20569': attribute type 2 has an invalid length. [ 1406.077332][T32302] mkiss: ax0: crc mode is auto. [ 1406.146047][T32310] tap0: tun_chr_ioctl cmd 1074025677 [ 1406.186330][T32310] tap0: linktype set to 773 [ 1406.951422][T32346] loop4: detected capacity change from 0 to 524255232 [ 1407.414383][T32361] [U] Ž [ 1407.539153][T21617] Bluetooth: hci0: command tx timeout [ 1409.273870][ T30] kauditd_printk_skb: 9254 callbacks suppressed [ 1409.273888][ T30] audit: type=1400 audit(2000000731.003:1468740): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5821 comm="syz-executor" name="4103" dev="tmpfs" ino=20693 [ 1409.299866][T31289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1409.303648][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1409.308875][T31289] audit: audit_lost=153162 audit_rate_limit=0 audit_backlog_limit=64 [ 1409.312895][T29629] audit: audit_lost=153163 audit_rate_limit=0 audit_backlog_limit=64 [ 1409.321163][T31289] audit: backlog limit exceeded [ 1409.321189][T31289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1409.341203][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1409.347803][ C0] audit: audit_lost=153164 audit_rate_limit=0 audit_backlog_limit=64 [ 1409.355929][ C0] audit: backlog limit exceeded [ 1409.493032][T32426] mkiss: ax0: crc mode is auto. [ 1409.733260][T32440] netlink: 'syz.4.20622': attribute type 1 has an invalid length. [ 1410.641747][T32482] tipc: Started in network mode [ 1410.646838][T32482] tipc: Node identity ff, cluster identity 4711 [ 1410.660873][T32482] tipc: Enabling of bearer rejected, failed to enable media [ 1411.832062][T32535] random: crng reseeded on system resumption [ 1411.969349][T32544] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.20665'. [ 1412.891449][T32573] smc: net device bond0 applied user defined pnetid SYZ0 [ 1412.919479][T32573] smc: net device bond0 erased user defined pnetid SYZ0 [ 1412.938037][T32575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20678'. [ 1413.385890][T32583] block device autoloading is deprecated and will be removed. [ 1414.584294][T32618] netlink: 64 bytes leftover after parsing attributes in process `syz.7.20695'. [ 1414.627292][ T30] kauditd_printk_skb: 9197 callbacks suppressed [ 1414.627312][ T30] audit: type=1400 audit(2000000736.017:1477035): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32620 comm="syz-executor" name="683" dev="tmpfs" ino=3464 [ 1414.665697][T31289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1414.675906][ T30] audit: type=1400 audit(2000000736.017:1477036): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=32620 comm="syz-executor" name="683" dev="tmpfs" ino=3464 [ 1414.703194][T31289] audit: audit_lost=153466 audit_rate_limit=0 audit_backlog_limit=64 [ 1414.711683][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1414.718579][T32621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1414.734877][T32621] audit: audit_lost=153467 audit_rate_limit=0 audit_backlog_limit=64 [ 1414.736212][T31289] audit: backlog limit exceeded [ 1414.743227][ T30] audit: type=1400 audit(2000000736.017:1477037): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=32620 comm="syz-executor" name="683" dev="tmpfs" ino=3464 [ 1414.748588][T28300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.674677][ T5877] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1415.858933][ T5877] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 1415.888391][ T5877] usb 4-1: config 150 has no interface number 0 [ 1415.907954][ T5877] usb 4-1: config 150 interface 204 has no altsetting 0 [ 1415.929705][ T5877] usb 4-1: config 150 interface 1 has no altsetting 0 [ 1415.960390][ T5877] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1415.980241][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.988667][ T5877] usb 4-1: Product: syz [ 1415.992880][ T5877] usb 4-1: Manufacturer: syz [ 1415.997708][ T5877] usb 4-1: SerialNumber: syz [ 1416.255738][ T5877] xr_serial 4-1:150.204: xr_serial converter detected [ 1416.435953][T32678] netlink: 110 bytes leftover after parsing attributes in process `syz.8.20716'. [ 1416.465499][T32678] netlink: 20 bytes leftover after parsing attributes in process `syz.8.20716'. [ 1416.803190][T32682] input: syz0 as /devices/virtual/input/input187 [ 1416.905299][ T5877] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1416.911770][ T5877] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1416.935025][ T5877] usb 4-1: USB disconnect, device number 103 [ 1416.955879][ T5877] xr_serial 4-1:150.204: device disconnected [ 1417.385723][T32710] netlink: 68 bytes leftover after parsing attributes in process `syz.4.20723'. [ 1418.123776][T32736] UBIFS error (pid: 32736): cannot open "/dev/loop3", error -22 [ 1419.395844][ T306] bridge_slave_1: entered allmulticast mode [ 1419.817814][ T325] netlink: 'syz.4.20758': attribute type 1 has an invalid length. [ 1419.983513][ T30] kauditd_printk_skb: 7615 callbacks suppressed [ 1419.983533][ T30] audit: type=1400 audit(2000000741.030:1483649): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31289 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1420.000863][ T334] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.014397][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.022595][ C0] audit: audit_lost=153803 audit_rate_limit=0 audit_backlog_limit=64 [ 1420.028853][ T335] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.030713][ C0] audit: backlog limit exceeded [ 1420.043170][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.047429][ T335] audit: audit_lost=153804 audit_rate_limit=0 audit_backlog_limit=64 [ 1420.049766][ C0] audit: audit_lost=153805 audit_rate_limit=0 audit_backlog_limit=64 [ 1420.065916][ C0] audit: backlog limit exceeded [ 1420.709896][ T6356] IPVS: starting estimator thread 0... [ 1420.806463][ T360] IPVS: using max 21 ests per chain, 50400 per kthread [ 1422.627108][ T426] netlink: 'syz.3.20796': attribute type 1 has an invalid length. [ 1422.648554][ T426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20796'. [ 1423.246589][ T454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20807'. [ 1423.465313][ T460] lo speed is unknown, defaulting to 1000 [ 1423.704180][ T460] wg1 speed is unknown, defaulting to 1000 [ 1423.945951][ T5919] kernel read not supported for file /dsp (pid: 5919 comm: kworker/1:8) [ 1424.196376][ T506] netlink: 'syz.4.20819': attribute type 1 has an invalid length. [ 1425.098886][ T533] netlink: 60 bytes leftover after parsing attributes in process `syz.8.20830'. [ 1425.361945][ T30] kauditd_printk_skb: 9558 callbacks suppressed [ 1425.361967][ T30] audit: type=1400 audit(2000000746.063:1491471): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=18083 comm="kworker/u8:17" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1425.391336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.426482][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.433053][T29629] audit: audit_lost=154391 audit_rate_limit=0 audit_backlog_limit=64 [ 1425.444009][T28300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.451082][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.453068][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.457663][ C0] audit: audit_lost=154392 audit_rate_limit=0 audit_backlog_limit=64 [ 1425.457684][ C0] audit: backlog limit exceeded [ 1425.458302][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.467770][ T5821] audit: audit_lost=154393 audit_rate_limit=0 audit_backlog_limit=64 [ 1426.416668][ T574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.233869][T18115] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1428.799503][ T633] lo speed is unknown, defaulting to 1000 [ 1429.269515][ T633] wg1 speed is unknown, defaulting to 1000 [ 1430.002593][ T697] QAT: Device 198 not found [ 1430.576656][ T717] netlink: 'syz.4.20895': attribute type 1 has an invalid length. [ 1430.622185][ T717] netlink: 104 bytes leftover after parsing attributes in process `syz.4.20895'. [ 1430.719779][ T30] kauditd_printk_skb: 7453 callbacks suppressed [ 1430.719801][ T30] audit: type=1400 audit(2000000751.067:1497793): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1430.744799][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.746463][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.758581][ C0] audit: audit_lost=154779 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.766766][ C0] audit: backlog limit exceeded [ 1430.772368][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.778930][ C0] audit: audit_lost=154780 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.787081][ C0] audit: backlog limit exceeded [ 1430.791282][ T5821] audit: audit_lost=154781 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.792129][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1431.363801][ T740] veth1_macvtap: left promiscuous mode [ 1431.768504][ T752] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 1431.785665][ T750] team0: entered promiscuous mode [ 1431.790768][ T750] team_slave_0: entered promiscuous mode [ 1431.796666][ T752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.860351][ T750] team_slave_1: entered promiscuous mode [ 1431.893899][ T749] team0: left promiscuous mode [ 1431.898826][ T749] team_slave_0: left promiscuous mode [ 1431.967516][ T749] team_slave_1: left promiscuous mode [ 1433.083042][ T803] siw: device registration error -23 [ 1434.643473][ T859] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 1435.368531][ T879] program syz.4.20966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1435.687629][ T5919] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1435.690578][ T894] ptrace attach of "./syz-executor exec"[18834] was attempted by "\x22%"[894] [ 1435.900093][ T5919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.921296][ T5919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.937099][ T5919] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1435.958779][ T5919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.978555][ T5919] usb 9-1: config 0 descriptor?? [ 1436.089923][ T30] kauditd_printk_skb: 8902 callbacks suppressed [ 1436.089943][ T30] audit: type=1400 audit(2000000756.090:1505729): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5821 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1436.098707][ T5821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1436.137292][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1436.143904][ C0] audit: audit_lost=155110 audit_rate_limit=0 audit_backlog_limit=64 [ 1436.144256][ T5821] audit: audit_lost=155111 audit_rate_limit=0 audit_backlog_limit=64 [ 1436.152079][ C0] audit: backlog limit exceeded [ 1436.152815][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1436.161856][ T914] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1436.165144][ C0] audit: audit_lost=155112 audit_rate_limit=0 audit_backlog_limit=64 [ 1436.165165][ C0] audit: backlog limit exceeded [ 1436.442226][ T5919] razer 0003:1532:010E.008C: unknown main item tag 0x3 [ 1436.450590][ T5919] razer 0003:1532:010E.008C: ignoring exceeding usage max [ 1436.651154][T23472] kernel write not supported for file /vcs (pid: 23472 comm: kworker/0:0) [ 1436.653264][ T5919] razer 0003:1532:010E.008C: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.8-1/input0 [ 1436.768375][ T954] tap0: tun_chr_ioctl cmd 1074025677 [ 1436.774022][ T954] tap0: linktype set to 768 [ 1436.887830][ T5919] usb 9-1: USB disconnect, device number 7 [ 1437.931851][ T1007] tun0: tun_chr_ioctl cmd 1074025678 [ 1437.943392][ T1007] tun0: group set to 0 [ 1438.189275][ T5919] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1438.364607][ T5919] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.392251][ T5919] usb 4-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.415090][ T5919] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1438.437250][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.264640][T21617] Bluetooth: hci3: Dropping invalid advertising data [ 1439.273295][T21617] Bluetooth: hci3: Dropping invalid advertising data [ 1439.280203][T21617] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1439.342221][ T5919] hid-led 0003:27B8:01ED.008D: probe with driver hid-led failed with error -71 [ 1439.382397][ T5919] usb 4-1: USB disconnect, device number 104 [ 1439.878393][ T6356] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1440.059934][ T6356] usb 9-1: Using ep0 maxpacket: 16 [ 1440.071775][ T6356] usb 9-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1440.102656][ T6356] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.113449][ T6356] usb 9-1: Product: syz [ 1440.123589][ T6356] usb 9-1: Manufacturer: syz [ 1440.160657][ T6356] usb 9-1: SerialNumber: syz [ 1440.199039][ T6356] usb 9-1: config 0 descriptor?? [ 1440.210683][ T6356] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1440.644760][ T6356] gspca_sn9c20x: Write register 1001 failed -71 [ 1440.664493][ T6356] gspca_sn9c20x: Device initialization failed [ 1440.687563][ T6356] gspca_sn9c20x 9-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1440.730839][ T6356] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1440.760568][ T6356] usb 9-1: USB disconnect, device number 8 [ 1441.450968][ T30] kauditd_printk_skb: 8432 callbacks suppressed [ 1441.450989][ T30] audit: type=1400 audit(2000000761.113:1513607): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=5821 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1441.487935][T31289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.490386][ T1165] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.502808][ T1165] audit: audit_lost=155303 audit_rate_limit=0 audit_backlog_limit=64 [ 1441.515622][T31289] audit: audit_lost=155304 audit_rate_limit=0 audit_backlog_limit=64 [ 1441.519223][ T1165] audit: backlog limit exceeded [ 1441.527488][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.536293][ T30] audit: type=1400 audit(2000000761.113:1513608): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.235 dest=38172 netif=eth0 [ 1441.543906][ T1165] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.559104][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1441.935313][ T5877] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1442.123318][ T5877] usb 9-1: Using ep0 maxpacket: 16 [ 1442.164275][ T5877] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1442.176684][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.184730][ T5877] usb 9-1: Product: syz [ 1442.206700][ T5877] usb 9-1: Manufacturer: syz [ 1442.212034][ T5877] usb 9-1: SerialNumber: syz [ 1442.223939][ T5877] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1442.241025][ T5877] r8152-cfgselector 9-1: config 0 descriptor?? [ 1442.308339][ T1197] loop6: detected capacity change from 0 to 524288000 [ 1442.474688][ T5877] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1442.485667][ T5877] r8152-cfgselector 9-1: bad CDC descriptors [ 1442.505954][ T5877] r8152-cfgselector 9-1: USB disconnect, device number 9 [ 1443.743758][ T1267] netlink: 'syz.4.21088': attribute type 8 has an invalid length. [ 1443.773704][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21088'. [ 1443.937897][ T1274] tap0: tun_chr_ioctl cmd 1074025681 [ 1444.710465][T23472] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1444.892752][T23472] usb 9-1: Using ep0 maxpacket: 16 [ 1444.909028][T23472] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.926739][T23472] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1444.952127][T23472] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1444.964906][T23472] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.994678][T23472] usb 9-1: Product: syz [ 1445.005242][T23472] usb 9-1: Manufacturer: syz [ 1445.040810][T23472] usb 9-1: SerialNumber: syz [ 1445.088022][ T1336] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1445.292285][T23472] usb 9-1: 0:2 : does not exist [ 1445.313040][T23472] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1445.355516][T23472] usb 9-1: USB disconnect, device number 10 [ 1445.400608][ T1355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21111'. [ 1445.567306][ T1364] geneve2: entered promiscuous mode [ 1445.574664][ T1364] geneve2: entered allmulticast mode [ 1446.506361][ T5877] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1446.714595][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.735576][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.784443][ T5877] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1446.793555][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.814322][ T30] kauditd_printk_skb: 10704 callbacks suppressed [ 1446.814342][ T30] audit: type=1400 audit(2000000766.118:1522311): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1446.816533][ T5877] usb 4-1: config 0 descriptor?? [ 1446.827170][ T30] audit: type=1400 audit(2000000766.118:1522312): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 1446.916474][ T30] audit: type=1400 audit(2000000766.118:1522313): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 1446.920925][T28300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.942852][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.942882][ T30] audit: type=1400 audit(2000000766.118:1522314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28 comm="kdevtmpfs" name="004" dev="devtmpfs" ino=729 [ 1446.949415][ C0] audit: audit_lost=155978 audit_rate_limit=0 audit_backlog_limit=64 [ 1446.949436][ C0] audit: backlog limit exceeded [ 1446.950287][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1446.969075][T28300] audit: audit_lost=155979 audit_rate_limit=0 audit_backlog_limit=64 [ 1447.324471][ T5877] playstation 0003:054C:0DF2.008E: unknown main item tag 0x0 [ 1447.351302][ T5877] playstation 0003:054C:0DF2.008E: unknown main item tag 0x0 [ 1447.375476][ T5877] playstation 0003:054C:0DF2.008E: unknown main item tag 0x0 [ 1447.388898][ T5877] playstation 0003:054C:0DF2.008E: unknown main item tag 0x0 [ 1447.405324][ T5877] playstation 0003:054C:0DF2.008E: unknown main item tag 0x0 [ 1447.419569][ T5877] playstation 0003:054C:0DF2.008E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1447.535487][ T5877] playstation 0003:054C:0DF2.008E: Invalid byte count transferred, expected 20 got 0 [ 1447.565415][ T5877] playstation 0003:054C:0DF2.008E: Failed to retrieve DualSense pairing info: -22 [ 1447.574742][ T5877] playstation 0003:054C:0DF2.008E: Failed to get MAC address from DualSense [ 1447.607522][ T5877] playstation 0003:054C:0DF2.008E: Failed to create dualsense. [ 1447.616960][ T5877] playstation 0003:054C:0DF2.008E: probe with driver playstation failed with error -22 [ 1447.781491][ T5877] usb 4-1: USB disconnect, device number 105 [ 1448.852520][ T1490] loop9: detected capacity change from 0 to 8 [ 1448.866368][ T1490] Dev loop9: unable to read RDB block 8 [ 1448.888470][ T1490] loop9: unable to read partition table [ 1448.902283][ T1490] loop9: partition table beyond EOD, truncated [ 1448.916890][ T1490] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 1449.191546][ T1513] sctp: [Deprecated]: syz.5.21164 (pid 1513) Use of int in maxseg socket option. [ 1449.191546][ T1513] Use struct sctp_assoc_value instead [ 1449.285958][ T5919] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1449.456996][ T5919] usb 9-1: Using ep0 maxpacket: 32 [ 1449.464448][ T5919] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1449.473190][ T5919] usb 9-1: config 0 has no interface number 0 [ 1449.482912][ T5919] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1449.493977][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.502855][ T5919] usb 9-1: Product: syz [ 1449.507300][ T5919] usb 9-1: Manufacturer: syz [ 1449.523868][ T5919] usb 9-1: SerialNumber: syz [ 1449.537685][ T5919] usb 9-1: config 0 descriptor?? [ 1449.551104][ T5919] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1449.792899][ T5919] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1449.830616][ T5919] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1449.913225][ T1548] ================================================================== [ 1449.921345][ T1548] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1449.929974][ T1548] Write of size 2560 at addr ffffc9000beb2000 by task vivid-000-vid-c/1548 [ 1449.938582][ T1548] [ 1449.940937][ T1548] CPU: 0 UID: 0 PID: 1548 Comm: vivid-000-vid-c Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1449.940963][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1449.940977][ T1548] Call Trace: [ 1449.940985][ T1548] [ 1449.940995][ T1548] dump_stack_lvl+0x241/0x360 [ 1449.941022][ T1548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1449.941043][ T1548] ? __pfx__printk+0x10/0x10 [ 1449.941073][ T1548] ? _printk+0xd5/0x120 [ 1449.941106][ T1548] print_report+0x16e/0x5b0 [ 1449.941144][ T1548] ? __virt_addr_valid+0xbd/0x530 [ 1449.941177][ T1548] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1449.941202][ T1548] kasan_report+0x143/0x180 [ 1449.941234][ T1548] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1449.941262][ T1548] kasan_check_range+0x282/0x290 [ 1449.941292][ T1548] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1449.941316][ T1548] __asan_memcpy+0x40/0x70 [ 1449.941342][ T1548] tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1449.941403][ T1548] vivid_thread_vid_cap_tick+0xfbc/0x6090 [ 1449.941429][ T1548] ? mark_lock+0x9a/0x360 [ 1449.941486][ T1548] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1449.941524][ T1548] ? _raw_spin_unlock_irq+0x23/0x50 [ 1449.941550][ T1548] ? lockdep_hardirqs_on+0x99/0x150 [ 1449.941585][ T1548] vivid_thread_vid_cap+0x8aa/0xf30 [ 1449.941623][ T1548] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1449.941649][ T1548] kthread+0x7a9/0x920 [ 1449.941678][ T1548] ? __pfx_kthread+0x10/0x10 [ 1449.941708][ T1548] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1449.941734][ T1548] ? __pfx_kthread+0x10/0x10 [ 1449.941762][ T1548] ? __pfx_kthread+0x10/0x10 [ 1449.941792][ T1548] ? __pfx_kthread+0x10/0x10 [ 1449.941821][ T1548] ? _raw_spin_unlock_irq+0x23/0x50 [ 1449.941847][ T1548] ? lockdep_hardirqs_on+0x99/0x150 [ 1449.941876][ T1548] ? __pfx_kthread+0x10/0x10 [ 1449.941905][ T1548] ret_from_fork+0x4b/0x80 [ 1449.941929][ T1548] ? __pfx_kthread+0x10/0x10 [ 1449.941959][ T1548] ret_from_fork_asm+0x1a/0x30 [ 1449.941990][ T1548] [ 1449.941998][ T1548] [ 1450.133733][ T1548] The buggy address belongs to the virtual mapping at [ 1450.133733][ T1548] [ffffc9000be8a000, ffffc9000beb3000) created by: [ 1450.133733][ T1548] vb2_vmalloc_alloc+0xf2/0x340 [ 1450.151635][ T1548] [ 1450.153978][ T1548] Memory state around the buggy address: [ 1450.159607][ T1548] ffffc9000beb1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1450.167669][ T1548] ffffc9000beb1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1450.175730][ T1548] >ffffc9000beb2000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1450.183806][ T1548] ^ [ 1450.187972][ T1548] ffffc9000beb2080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1450.196297][ T1548] ffffc9000beb2100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1450.204355][ T1548] ================================================================== [ 1450.232235][ T1548] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1450.239493][ T1548] CPU: 0 UID: 0 PID: 1548 Comm: vivid-000-vid-c Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 1450.250633][ T1548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1450.260729][ T1548] Call Trace: [ 1450.264039][ T1548] [ 1450.266988][ T1548] dump_stack_lvl+0x241/0x360 [ 1450.271698][ T1548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1450.276913][ T1548] ? __pfx__printk+0x10/0x10 [ 1450.281536][ T1548] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1450.287577][ T1548] ? vscnprintf+0x5d/0x90 [ 1450.291940][ T1548] panic+0x349/0x880 [ 1450.295902][ T1548] ? check_panic_on_warn+0x21/0xb0 [ 1450.301060][ T1548] ? __pfx_panic+0x10/0x10 [ 1450.305525][ T1548] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1450.311548][ T1548] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1450.317927][ T1548] check_panic_on_warn+0x86/0xb0 [ 1450.322902][ T1548] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1450.328576][ T1548] end_report+0x77/0x160 [ 1450.332860][ T1548] kasan_report+0x154/0x180 [ 1450.337416][ T1548] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1450.343086][ T1548] kasan_check_range+0x282/0x290 [ 1450.348090][ T1548] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1450.353768][ T1548] __asan_memcpy+0x40/0x70 [ 1450.358237][ T1548] tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 1450.363788][ T1548] vivid_thread_vid_cap_tick+0xfbc/0x6090 [ 1450.369555][ T1548] ? mark_lock+0x9a/0x360 [ 1450.373967][ T1548] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1450.380165][ T1548] ? _raw_spin_unlock_irq+0x23/0x50 [ 1450.385394][ T1548] ? lockdep_hardirqs_on+0x99/0x150 [ 1450.390654][ T1548] vivid_thread_vid_cap+0x8aa/0xf30 [ 1450.395903][ T1548] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1450.401666][ T1548] kthread+0x7a9/0x920 [ 1450.405776][ T1548] ? __pfx_kthread+0x10/0x10 [ 1450.410409][ T1548] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1450.416170][ T1548] ? __pfx_kthread+0x10/0x10 [ 1450.420792][ T1548] ? __pfx_kthread+0x10/0x10 [ 1450.425431][ T1548] ? __pfx_kthread+0x10/0x10 [ 1450.430052][ T1548] ? _raw_spin_unlock_irq+0x23/0x50 [ 1450.435302][ T1548] ? lockdep_hardirqs_on+0x99/0x150 [ 1450.440533][ T1548] ? __pfx_kthread+0x10/0x10 [ 1450.445159][ T1548] ret_from_fork+0x4b/0x80 [ 1450.449613][ T1548] ? __pfx_kthread+0x10/0x10 [ 1450.454247][ T1548] ret_from_fork_asm+0x1a/0x30 [ 1450.459051][ T1548] [ 1450.462454][ T1548] Kernel Offset: disabled [ 1450.466787][ T1548] Rebooting in 86400 seconds..