last executing test programs: 5m51.306537543s ago: executing program 0 (id=12032): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1f, 0x3e7ffffffc, 0x0, 0x10}]) 5m50.985432696s ago: executing program 0 (id=12039): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x8840) 5m50.766581126s ago: executing program 0 (id=12043): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}) 5m50.580461976s ago: executing program 0 (id=12047): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 5m50.387455804s ago: executing program 0 (id=12051): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x4) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8108551b, &(0x7f0000002a40)) 5m50.121532084s ago: executing program 0 (id=12055): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xa}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000}) 5m49.490804099s ago: executing program 32 (id=12055): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0xa}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000}) 2m35.561638311s ago: executing program 5 (id=15039): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m35.16287222s ago: executing program 5 (id=15046): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000080)={0x0, "6a4da751434fd7f4a4331cbdbfe693a5babcdf3aa54bce5d926ef908d52773fa7f"}}) 2m34.930519609s ago: executing program 5 (id=15052): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x200, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) 2m34.553007882s ago: executing program 5 (id=15058): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) 2m34.156584038s ago: executing program 5 (id=15064): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m34.0490528s ago: executing program 5 (id=15065): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) semget$private(0x0, 0x3, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x76bb, 0x1000}], 0x1, 0x0) 2m18.857654107s ago: executing program 33 (id=15065): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) semget$private(0x0, 0x3, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x76bb, 0x1000}], 0x1, 0x0) 1m36.138042121s ago: executing program 4 (id=15753): r0 = syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_socket_connect_nvme_tcp() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}) 1m35.08715562s ago: executing program 4 (id=15765): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1m34.100443589s ago: executing program 4 (id=15778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) listen(r0, 0x1) 1m33.785539824s ago: executing program 4 (id=15784): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m33.581334637s ago: executing program 4 (id=15787): ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000002c0)={{}, "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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x1, 0x4}) ptrace(0x10, 0x1) 1m32.915556556s ago: executing program 4 (id=15794): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000a00)={r1}, &(0x7f00000000c0)=0x8) 1m32.400501043s ago: executing program 34 (id=15794): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000a00)={r1}, &(0x7f00000000c0)=0x8) 4.616185466s ago: executing program 3 (id=16871): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x1000, &(0x7f0000002a80)=""/4096}) 4.504128621s ago: executing program 3 (id=16873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffffffff3900000008000300", @ANYRES32=r2, @ANYBLOB="10005a800c00008004000100040002"], 0x2c}}, 0x0) 4.385064129s ago: executing program 3 (id=16876): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) listen(r0, 0x0) 2.70934838s ago: executing program 3 (id=16898): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.45922343s ago: executing program 3 (id=16903): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) 2.224835843s ago: executing program 1 (id=16907): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.807741506s ago: executing program 2 (id=16914): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000500)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.680813059s ago: executing program 2 (id=16917): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, r0, 0x2ff, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x8, 0x2]}, @NL80211_ATTR_FRAME={0x25, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x2, 0xb84}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x1, 0x0, 0x2}}, @void, @val, @val={0x3, 0x1, 0x9d}, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x850) 1.528344172s ago: executing program 2 (id=16920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x38, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "10f13ea00600"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.474643627s ago: executing program 3 (id=16921): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 1.349420705s ago: executing program 2 (id=16924): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x1, 0x10}, &(0x7f00000000c0)=0xc) 1.245255997s ago: executing program 2 (id=16925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) 1.213959918s ago: executing program 1 (id=16926): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x27) 1.16882913s ago: executing program 6 (id=16927): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r0, 0x540c) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.073464266s ago: executing program 1 (id=16929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d000040"]) 1.027782486s ago: executing program 2 (id=16930): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 963.557398ms ago: executing program 6 (id=16931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000099000040"]) 820.567322ms ago: executing program 7 (id=16932): r0 = socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x4c}}, 0x40000) 756.062933ms ago: executing program 1 (id=16933): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21ee, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4084, 0xff4}], 0x1}, 0x3}], 0x1, 0x6120, 0x0) 694.256835ms ago: executing program 6 (id=16934): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 596.717268ms ago: executing program 1 (id=16935): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x40, r2, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x60a}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4020000) 557.11656ms ago: executing program 7 (id=16936): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/70, 0x46}], 0x1, 0x8, 0x0) 420.614899ms ago: executing program 6 (id=16937): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 420.444585ms ago: executing program 7 (id=16938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 331.532978ms ago: executing program 1 (id=16939): r0 = gettid() pause() r1 = syz_open_procfs(r0, &(0x7f0000000180)='stack\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 275.554438ms ago: executing program 6 (id=16940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 224.577277ms ago: executing program 7 (id=16941): r0 = io_uring_setup(0x420c, &(0x7f0000000240)={0x0, 0x49d2, 0x2, 0x0, 0x402f}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='contention_begin\x00', r1}, 0x18) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 142.350121ms ago: executing program 7 (id=16942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000006fc0)=0xbd7, 0x4) 68.516288ms ago: executing program 6 (id=16943): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) 0s ago: executing program 7 (id=16944): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) kernel console output (not intermixed with test programs): uct=0, SerialNumber=0 [ 1170.846139][T25122] usb 5-1: config 0 descriptor?? [ 1170.978965][ T30] kauditd_printk_skb: 10825 callbacks suppressed [ 1170.978989][ T30] audit: type=1400 audit(2000000092.496:1902811): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=31080 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 [ 1170.985506][T31080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1171.014165][ T30] audit: type=1400 audit(2000000092.496:1902812): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=31080 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 [ 1171.039332][ T5121] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1171.045912][ T5121] audit: audit_lost=291807 audit_rate_limit=0 audit_backlog_limit=64 [ 1171.047885][T31080] audit: audit_lost=291808 audit_rate_limit=0 audit_backlog_limit=64 [ 1171.055878][ T5122] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1171.070143][ T5121] audit: backlog limit exceeded [ 1171.075099][ T5121] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1171.082123][T31080] audit: backlog limit exceeded [ 1171.091206][ T977] usb 3-1: USB disconnect, device number 45 [ 1171.103714][ T977] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1171.113322][ T5123] 9p: Unknown Cache mode or invalid value f [ 1171.140319][ T977] keyspan 3-1:0.133: device disconnected [ 1171.293245][T25122] greenasia 0003:0E8F:0012.006A: item fetching failed at offset 0/3 [ 1171.309940][T25122] greenasia 0003:0E8F:0012.006A: parse failed [ 1171.321826][T25122] greenasia 0003:0E8F:0012.006A: probe with driver greenasia failed with error -22 [ 1171.341405][ T5133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1171.529038][ T6150] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1171.545599][T25122] usb 5-1: USB disconnect, device number 70 [ 1171.681418][ T5137] netlink: 'syz.1.15073': attribute type 3 has an invalid length. [ 1171.706752][ T6150] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1171.718643][ T6150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.729255][ T6150] usb 4-1: Product: syz [ 1171.734434][ T6150] usb 4-1: Manufacturer: syz [ 1171.757673][ T6150] usb 4-1: SerialNumber: syz [ 1171.775924][ T6150] usb 4-1: config 0 descriptor?? [ 1171.792226][ T6150] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1172.066770][ T5145] __nla_validate_parse: 2 callbacks suppressed [ 1172.066790][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15077'. [ 1172.407783][ T6150] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1172.416011][ T6150] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1172.467983][ T6150] usb 4-1: USB disconnect, device number 73 [ 1173.450596][ T5189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15095'. [ 1173.868487][ T5197] netlink: 192 bytes leftover after parsing attributes in process `syz.4.15100'. [ 1173.888674][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15100'. [ 1174.205859][T23314] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1174.304188][ T5207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15104'. [ 1174.410207][T23314] usb 2-1: Using ep0 maxpacket: 32 [ 1174.433803][T23314] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.472372][T23314] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.499060][T23314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1174.518466][T23314] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1174.532471][ T5210] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15105'. [ 1174.551821][T23314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.589822][T23314] usb 2-1: config 0 descriptor?? [ 1175.035036][T23314] elecom 0003:056E:00E6.006B: item fetching failed at offset 0/2 [ 1175.077035][T23314] elecom 0003:056E:00E6.006B: probe with driver elecom failed with error -22 [ 1175.232122][ T977] usb 2-1: USB disconnect, device number 56 [ 1175.575460][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15117'. [ 1175.715177][ T5239] usb usb8: usbfs: process 5239 (syz.3.15119) did not claim interface 0 before use [ 1175.787926][ T977] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1175.948367][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 1175.956473][ T977] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.984931][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1175.997558][ T30] kauditd_printk_skb: 21773 callbacks suppressed [ 1175.997576][ T30] audit: type=1400 audit(2000000097.486:1920692): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31080 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1176.006999][T31080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1176.030967][ T977] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1176.050626][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.058057][ T5244] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1176.065107][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1176.065415][ T5244] audit: audit_lost=293110 audit_rate_limit=0 audit_backlog_limit=64 [ 1176.072482][T31080] audit: audit_lost=293111 audit_rate_limit=0 audit_backlog_limit=64 [ 1176.089752][ T26] audit: audit_lost=293112 audit_rate_limit=0 audit_backlog_limit=64 [ 1176.096208][ T30] audit: type=1400 audit(2000000097.506:1920693): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31080 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 1176.103987][ T26] audit: backlog limit exceeded [ 1176.122929][T31080] audit: backlog limit exceeded [ 1176.134149][ T977] usb 3-1: config 0 descriptor?? [ 1176.194135][ T5245] mkiss: ax0: crc mode is auto. [ 1176.576717][ T977] aquacomputer_d5next 0003:0C70:F0BD.006C: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.2-1/input0 [ 1176.782358][ T977] usb 3-1: USB disconnect, device number 46 [ 1177.531678][ T5269] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1177.573727][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.265747][T31329] hid-generic 0000:0000:0000.006D: unknown main item tag 0x0 [ 1178.306398][T31329] hid-generic 0000:0000:0000.006D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1179.593058][ T5324] mkiss: ax0: crc mode is auto. [ 1179.903438][ T5333] program syz.1.15165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1180.162468][T25122] libceph: connect (1)[c::]:6789 error -101 [ 1180.180461][T25122] libceph: mon0 (1)[c::]:6789 connect error [ 1180.457951][T25122] libceph: connect (1)[c::]:6789 error -101 [ 1180.467199][T25122] libceph: mon0 (1)[c::]:6789 connect error [ 1180.954461][ T5344] ceph: No mds server is up or the cluster is laggy [ 1180.991980][T25122] libceph: connect (1)[c::]:6789 error -101 [ 1181.006936][ T30] kauditd_printk_skb: 23035 callbacks suppressed [ 1181.006956][ T30] audit: type=1400 audit(2000000102.507:1937568): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=31080 comm="syz-executor" name="/" dev="binder" ino=1 [ 1181.019450][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1181.041771][T25122] libceph: mon0 (1)[c::]:6789 connect error [ 1181.047985][ T6112] audit: audit_lost=295178 audit_rate_limit=0 audit_backlog_limit=64 [ 1181.048088][ T6112] audit: backlog limit exceeded [ 1181.048112][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1181.068441][T31080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1181.068462][T31080] audit: audit_lost=295179 audit_rate_limit=0 audit_backlog_limit=64 [ 1181.068478][T31080] audit: backlog limit exceeded [ 1181.068900][T31080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1181.108215][ T6112] audit: audit_lost=295180 audit_rate_limit=0 audit_backlog_limit=64 [ 1181.609748][ T5379] [U]  [ 1181.612602][ T5379] [U] K{ [ 1181.615658][ T5379] [U] t 1ŠFfˊ`GJgo/mC [ 1181.622657][ T5379] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1181.638585][ T5379] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1181.649063][ T5379] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1181.685188][ T5379] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1181.708751][ T5379] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1181.719967][ T5379] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1181.731607][ T5379] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1182.005026][ T5379] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1182.013637][ T5379] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1182.027180][ T5379] [U] 22Ʃx?0;3u [ 1182.031346][ T5379] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1182.056447][ T5379] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1182.065830][ T5379] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1182.074501][ T5379] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1182.080659][ T5379] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1182.093078][ T5379] [U] ec [ 1182.096196][ T5379] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1182.200114][ T5385] program syz.1.15188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1182.264268][ T5376] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1182.363341][ T5357] syz.2.15176 (5357): drop_caches: 2 [ 1182.476871][T25122] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1182.629271][T25122] usb 4-1: Using ep0 maxpacket: 16 [ 1182.654489][T25122] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1182.692771][T25122] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.723224][T25122] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1182.743031][T25122] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1182.750377][T25122] usb 4-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 1182.759728][T25122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.771871][T25122] usb 4-1: config 0 descriptor?? [ 1182.848040][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15196'. [ 1182.867928][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15196'. [ 1182.893985][ T5401] netlink: 'syz.4.15196': attribute type 14 has an invalid length. [ 1182.916957][ T5401] netlink: 'syz.4.15196': attribute type 13 has an invalid length. [ 1183.237262][T23314] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1183.403056][T23314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.430085][T23314] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1183.438925][T25122] usb 4-1: USB disconnect, device number 74 [ 1183.440305][ T5415] netlink: 'syz.1.15202': attribute type 61 has an invalid length. [ 1183.461185][T23314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.493897][T23314] usb 3-1: config 0 descriptor?? [ 1183.968462][T23314] lenovo 0003:17EF:60A3.006F: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 1184.154125][T25122] usb 3-1: USB disconnect, device number 47 [ 1184.509633][ T5439] netlink: 'syz.3.15213': attribute type 4 has an invalid length. [ 1184.551924][ T5439] netlink: 17 bytes leftover after parsing attributes in process `syz.3.15213'. [ 1185.046954][T23314] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1185.209617][T23314] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1185.240992][T23314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.284168][T23314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.324068][T23314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1185.353649][T23314] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1185.367929][T23314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.391946][T23314] usb 3-1: config 0 descriptor?? [ 1185.534053][ T5464] program syz.4.15224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1185.877464][T23314] hid-picolcd 0003:04D8:C002.0070: unknown main item tag 0x0 [ 1185.905614][T23314] hid-picolcd 0003:04D8:C002.0070: unknown main item tag 0x0 [ 1185.932227][T23314] hid-picolcd 0003:04D8:C002.0070: unknown main item tag 0x0 [ 1185.961932][T23314] hid-picolcd 0003:04D8:C002.0070: unknown main item tag 0x0 [ 1185.991451][T23314] hid-picolcd 0003:04D8:C002.0070: unknown main item tag 0x0 [ 1186.016892][ T30] kauditd_printk_skb: 25649 callbacks suppressed [ 1186.016910][ T30] audit: type=1400 audit(2000000107.527:1952068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5475 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1186.067334][ T6104] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1186.067366][ T5475] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1186.084354][ T6104] audit: audit_lost=298912 audit_rate_limit=0 audit_backlog_limit=64 [ 1186.096857][T23314] hid-picolcd 0003:04D8:C002.0070: No report with id 0x11 found [ 1186.115247][T23314] usb 3-1: USB disconnect, device number 48 [ 1186.122326][ T30] audit: type=1400 audit(2000000107.557:1952069): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5467 comm="syz-executor" name="/" dev="sda1" ino=2 [ 1186.151318][ T6104] audit: backlog limit exceeded [ 1186.152891][ T5475] audit: audit_lost=298913 audit_rate_limit=0 audit_backlog_limit=64 [ 1186.162630][ T5467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1186.173244][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1186.179870][ T6108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1186.365876][ T5480] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1186.902328][ T3672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1186.927015][ T3672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1186.949190][ T3672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1186.960709][ T3672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1186.971420][ T3672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1187.046926][T23314] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1187.049991][ T5500] wg1 speed is unknown, defaulting to 1000 [ 1187.193783][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.235533][T23314] usb 5-1: Using ep0 maxpacket: 16 [ 1187.263312][T23314] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.282649][T23314] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.332016][T23314] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1187.354241][T23314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1187.362829][T23314] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1187.380023][T23314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.422918][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.423801][T23314] usb 5-1: config 0 descriptor?? [ 1187.558128][ T5507] syz.2.15242 (5507) used greatest stack depth: 16856 bytes left [ 1187.636023][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.739076][ T5521] tmpfs: Bad value for 'mpol' [ 1187.782734][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.903942][T23314] hid-generic 0003:045E:05DA.0071: unknown main item tag 0x0 [ 1187.912393][T23314] hid-generic 0003:045E:05DA.0071: unknown main item tag 0x0 [ 1187.925788][T23314] hid-generic 0003:045E:05DA.0071: unknown main item tag 0x0 [ 1187.956953][T23314] hid-generic 0003:045E:05DA.0071: ignoring exceeding usage max [ 1187.986166][T23314] hid-generic 0003:045E:05DA.0071: unknown main item tag 0x0 [ 1188.010531][T23314] hid-generic 0003:045E:05DA.0071: unknown main item tag 0x0 [ 1188.083985][T23314] hid-generic 0003:045E:05DA.0071: unbalanced collection at end of report description [ 1188.132498][T23314] hid-generic 0003:045E:05DA.0071: probe with driver hid-generic failed with error -22 [ 1188.175590][T23314] usb 5-1: USB disconnect, device number 71 [ 1188.440635][ T5518] infiniband syz0: set down [ 1188.449804][ T5518] infiniband syz0: added bond_slave_0 [ 1188.466973][ T36] bridge_slave_1: left allmulticast mode [ 1188.472712][ T36] bridge_slave_1: left promiscuous mode [ 1188.488369][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.514418][ T36] bridge_slave_0: left allmulticast mode [ 1188.520519][ T36] bridge_slave_0: left promiscuous mode [ 1188.529058][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.572087][ T5518] RDS/IB: syz0: added [ 1188.587488][ T5518] smc: adding ib device syz0 with port count 1 [ 1188.614954][ T5518] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 1189.017033][ T3672] Bluetooth: hci1: command tx timeout [ 1189.486064][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1189.502771][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1189.513636][ T36] bond0 (unregistering): Released all slaves [ 1189.633996][ T36] tipc: Disabling bearer [ 1189.663699][ T36] tipc: Left network mode [ 1189.693600][ T5500] chnl_net:caif_netlink_parms(): no params data found [ 1190.337151][ T5500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.367115][ T5500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.374626][ T5500] bridge_slave_0: entered allmulticast mode [ 1190.399514][ T5500] bridge_slave_0: entered promiscuous mode [ 1190.430702][ T5500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.466694][ T5500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.474154][ T5500] bridge_slave_1: entered allmulticast mode [ 1190.520136][ T5500] bridge_slave_1: entered promiscuous mode [ 1190.692523][ T5500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.722587][ T5500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.870320][ T5500] team0: Port device team_slave_0 added [ 1190.900760][ T5500] team0: Port device team_slave_1 added [ 1191.028912][ T30] kauditd_printk_skb: 5049 callbacks suppressed [ 1191.028931][ T30] audit: type=1400 audit(2000000112.537:1956971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=5588 comm="syz-executor" name="oom_score_adj" dev="proc" ino=116386 [ 1191.065551][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1191.078766][ T30] audit: type=1400 audit(2000000112.537:1956972): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5588 comm="syz-executor" path="/proc/6272/oom_score_adj" dev="proc" ino=116386 [ 1191.100568][ T30] audit: type=1400 audit(2000000112.537:1956973): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5588 comm="syz-executor" name="3085" dev="tmpfs" ino=15516 [ 1191.113420][ T3672] Bluetooth: hci1: command tx timeout [ 1191.144072][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.173633][ T5500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1191.187198][ T5500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1191.194608][ T5500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1191.224754][ T5590] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1191.231710][ T5500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1191.245495][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1191.245571][ T5590] audit: audit_lost=298964 audit_rate_limit=0 audit_backlog_limit=64 [ 1191.252504][ C0] audit: audit_lost=298965 audit_rate_limit=0 audit_backlog_limit=64 [ 1191.252539][ C0] audit: backlog limit exceeded [ 1191.286930][ T6108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1191.290217][ T30] audit: type=1400 audit(2000000112.537:1956974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5588 comm="syz-executor" name="3085" dev="tmpfs" ino=15516 [ 1191.493895][ T5500] hsr_slave_0: entered promiscuous mode [ 1191.518833][ T5500] hsr_slave_1: entered promiscuous mode [ 1191.544734][ T5500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.575036][ T5500] Cannot create hsr debugfs directory [ 1192.429848][ T5500] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1192.464994][ T5500] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1192.511337][ T5500] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1192.563453][ T5500] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1192.858340][ T5628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15290'. [ 1192.885870][ T5500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.970149][ T5500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.992377][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.999717][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.083159][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.090409][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.186764][ T3672] Bluetooth: hci1: command tx timeout [ 1193.225856][ T5500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1193.237229][ T5500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1193.947445][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15299'. [ 1194.157748][ T5500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.217225][ T36] hsr_slave_0: left promiscuous mode [ 1195.236362][ T36] hsr_slave_1: left promiscuous mode [ 1195.247632][ T3672] Bluetooth: hci1: command tx timeout [ 1195.249407][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.282514][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.295829][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.306900][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.371815][ T36] veth1_macvtap: left promiscuous mode [ 1195.382589][ T36] veth0_macvtap: left promiscuous mode [ 1195.391547][ T36] veth1_vlan: left promiscuous mode [ 1195.397752][ T36] veth0_vlan: left promiscuous mode [ 1195.506313][T25122] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1195.659075][T25122] usb 2-1: Using ep0 maxpacket: 8 [ 1195.679287][T25122] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1195.690397][T25122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.698841][T25122] usb 2-1: Product: syz [ 1195.703165][T25122] usb 2-1: Manufacturer: syz [ 1195.708859][T25122] usb 2-1: SerialNumber: syz [ 1195.724383][T25122] usb 2-1: config 0 descriptor?? [ 1195.948865][T25122] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1196.165316][ T30] kauditd_printk_skb: 5750 callbacks suppressed [ 1196.165336][ T30] audit: type=1400 audit(2000000117.667:1962014): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=5680 comm="syz.1.15309" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1196.195575][ T30] audit: type=1400 audit(2000000117.667:1962015): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=5680 comm="syz.1.15309" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1196.250785][ T30] audit: type=1400 audit(2000000117.767:1962016): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5556 comm="kworker/u8:0" saddr=10.128.0.169 src=30008 daddr=10.128.0.242 dest=40846 netif=eth0 [ 1196.273852][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.276558][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1196.352842][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1196.368207][T25122] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1196.379610][T25122] usb 2-1: USB disconnect, device number 57 [ 1196.417303][ T30] audit: type=1400 audit(2000000117.917:1962017): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1196.438123][ T30] audit: type=1400 audit(2000000117.917:1962018): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 1196.458238][ T30] audit: type=1400 audit(2000000117.917:1962019): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 1196.478056][ T30] audit: type=1400 audit(2000000117.917:1962020): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="002" dev="devtmpfs" ino=723 [ 1196.506445][ T30] audit: type=1400 audit(2000000117.917:1962021): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="057" dev="devtmpfs" ino=5355 [ 1196.527944][ T30] audit: type=1400 audit(2000000117.917:1962022): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=26 comm="kdevtmpfs" name="002" dev="devtmpfs" ino=723 [ 1196.548040][ T30] audit: type=1400 audit(2000000117.917:1962023): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="057" dev="devtmpfs" ino=5355 [ 1197.463897][ T5500] veth0_vlan: entered promiscuous mode [ 1197.481160][ T5500] veth1_vlan: entered promiscuous mode [ 1197.597896][ T5500] veth0_macvtap: entered promiscuous mode [ 1197.637750][ T5500] veth1_macvtap: entered promiscuous mode [ 1197.710177][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.757666][ T5500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.810173][ T5500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.830765][ T5500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.845716][ T5500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.870678][ T5500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.978523][ T5710] tipc: Enabling of bearer rejected, failed to enable media [ 1198.063835][ T36] IPVS: stop unused estimator thread 0... [ 1198.260949][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.284572][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.408760][T31329] kernel write not supported for file /dsp (pid: 31329 comm: kworker/0:5) [ 1198.424850][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.443230][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.305089][ T5759] input: syz1 as /devices/virtual/input/input114 [ 1200.086016][T23314] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1200.263407][T23314] usb 4-1: Using ep0 maxpacket: 8 [ 1200.295999][T23314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.326382][T23314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.342565][T23314] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1200.387378][T23314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.429973][T23314] usb 4-1: config 0 descriptor?? [ 1200.870659][T23314] kye 0003:0458:501B.0072: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1200.922855][T23314] kye 0003:0458:501B.0072: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 1200.958583][T23314] kye 0003:0458:501B.0072: tablet-enabling feature report not found [ 1200.987741][T23314] kye 0003:0458:501B.0072: tablet enabling failed [ 1201.100366][T23314] usb 4-1: USB disconnect, device number 75 [ 1201.169605][ T30] kauditd_printk_skb: 7717 callbacks suppressed [ 1201.169624][ T30] audit: type=1400 audit(2000000122.678:1968958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6112 comm="syz-executor" name="3181" dev="tmpfs" ino=16004 [ 1201.221093][ T5830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.236053][ T5830] audit: audit_lost=299466 audit_rate_limit=0 audit_backlog_limit=64 [ 1201.244320][ T5830] audit: backlog limit exceeded [ 1201.245114][ T30] audit: type=1400 audit(2000000122.678:1968959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6112 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1201.266624][ T5830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.269739][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1201.275439][ T5830] audit: audit_lost=299467 audit_rate_limit=0 audit_backlog_limit=64 [ 1201.281986][ C0] audit: audit_lost=299468 audit_rate_limit=0 audit_backlog_limit=64 [ 1201.282006][ C0] audit: backlog limit exceeded [ 1201.621278][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15383'. [ 1202.094168][ T5853] netlink: 260 bytes leftover after parsing attributes in process `syz.2.15389'. [ 1202.361330][ T5867] netlink: 232 bytes leftover after parsing attributes in process `syz.2.15395'. [ 1202.393829][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15395'. [ 1202.834634][ T5884] netlink: 180 bytes leftover after parsing attributes in process `syz.2.15403'. [ 1202.988496][ T977] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1203.146275][T23314] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1203.181332][ T977] usb 7-1: config 0 has an invalid interface number: 77 but max is 0 [ 1203.210635][ T977] usb 7-1: config 0 has no interface number 0 [ 1203.236125][ T977] usb 7-1: config 0 interface 77 has no altsetting 0 [ 1203.243012][ T977] usb 7-1: New USB device found, idVendor=22b8, idProduct=2c84, bcdDevice=44.0e [ 1203.296224][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.313446][T23314] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1203.346725][T23314] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1203.353833][ T977] usb 7-1: config 0 descriptor?? [ 1203.371693][T23314] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1203.392068][T23314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.403513][ T977] usb_serial_simple 7-1:0.77: moto_modem converter detected [ 1203.421674][ T5886] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1203.431208][ T977] usb 7-1: moto_modem converter now attached to ttyUSB0 [ 1203.432980][ T5901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15411'. [ 1203.467484][T23314] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1203.606875][T23314] usb 7-1: USB disconnect, device number 2 [ 1203.625179][T23314] moto_modem ttyUSB0: moto_modem converter now disconnected from ttyUSB0 [ 1203.644204][T23314] usb_serial_simple 7-1:0.77: device disconnected [ 1203.764055][ T977] usb 4-1: USB disconnect, device number 76 [ 1203.825925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1204.875756][T23314] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 1205.048638][T23314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.079276][T23314] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1205.105897][T23314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.124334][T23314] usb 5-1: Product: syz [ 1205.134747][T23314] usb 5-1: Manufacturer: syz [ 1205.163905][T23314] usb 5-1: SerialNumber: syz [ 1205.178614][T23314] usb 5-1: config 0 descriptor?? [ 1205.197735][T23314] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1205.219961][T23314] dvb-usb: bulk message failed: -22 (3/0) [ 1205.259842][T23314] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1205.289586][T23314] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1205.326413][T23314] usb 5-1: media controller created [ 1205.338496][T23314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1205.389501][T23314] dvb-usb: bulk message failed: -22 (6/0) [ 1205.410090][T23314] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1205.430006][T23314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input116 [ 1205.459566][T23314] dvb-usb: schedule remote query interval to 150 msecs. [ 1205.472585][T23314] dvb-usb: bulk message failed: -22 (3/0) [ 1205.527998][T23314] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1205.581701][T23314] usb 5-1: USB disconnect, device number 72 [ 1205.696345][T23314] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1205.733236][ T5967] input: syz0 as /devices/virtual/input/input117 [ 1206.183602][ T30] kauditd_printk_skb: 7822 callbacks suppressed [ 1206.183622][ T30] audit: type=1400 audit(2000000127.688:1976044): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5979 comm="syz.4.15446" name="kvm" dev="debugfs" ino=44 [ 1206.226891][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1206.227412][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1206.240481][ C0] audit: audit_lost=299719 audit_rate_limit=0 audit_backlog_limit=64 [ 1206.248894][ C0] audit: backlog limit exceeded [ 1206.255638][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1206.260953][ T5500] audit: audit_lost=299720 audit_rate_limit=0 audit_backlog_limit=64 [ 1206.262174][ C0] audit: audit_lost=299721 audit_rate_limit=0 audit_backlog_limit=64 [ 1206.278425][ C0] audit: backlog limit exceeded [ 1206.284220][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1206.333842][ T5983] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.15447'. [ 1206.883256][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15456'. [ 1206.906825][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15456'. [ 1206.984059][ T6010] program syz.3.15458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1207.185689][ T6148] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1207.358940][ T6148] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 1207.370594][ T6148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.381158][ T6148] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1207.409409][ T6148] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1207.433250][ T6148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.463698][ T6148] usb 5-1: config 0 descriptor?? [ 1207.602741][ T6035] bridge0: entered promiscuous mode [ 1207.810193][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15472'. [ 1207.927933][ T6148] lenovo 0003:17EF:60A3.0073: hidraw0: USB HID v0.03 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 1207.966273][ T6042] bond2 (unregistering): Released all slaves [ 1208.151769][T25122] usb 5-1: USB disconnect, device number 73 [ 1208.413459][T25122] hid-generic C990:0003:0000.0074: unknown main item tag 0x0 [ 1208.433338][T25122] hid-generic C990:0003:0000.0074: unknown main item tag 0x0 [ 1208.462422][T25122] hid-generic C990:0003:0000.0074: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1208.508421][T25122] IPVS: starting estimator thread 0... [ 1208.625512][ T6066] IPVS: using max 25 ests per chain, 60000 per kthread [ 1209.115715][T23314] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1209.122055][ T6093] loop6: detected capacity change from 0 to 524287999 [ 1209.295493][T23314] usb 4-1: Using ep0 maxpacket: 16 [ 1209.303989][T23314] usb 4-1: config 0 has no interfaces? [ 1209.320761][T23314] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1209.340542][T23314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.355649][T23314] usb 4-1: Product: syz [ 1209.359983][T23314] usb 4-1: Manufacturer: syz [ 1209.365116][T23314] usb 4-1: SerialNumber: syz [ 1209.378950][T23314] usb 4-1: config 0 descriptor?? [ 1209.469531][ T6148] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1209.605862][T23314] usb 4-1: USB disconnect, device number 77 [ 1209.635705][ T6148] usb 2-1: Using ep0 maxpacket: 16 [ 1209.675128][ T6148] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1209.686747][ T6148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.713690][ T6148] usb 2-1: Product: syz [ 1209.718326][ T6148] usb 2-1: Manufacturer: syz [ 1209.722970][ T6148] usb 2-1: SerialNumber: syz [ 1209.752913][ T6148] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1209.760874][ T6148] r8152-cfgselector 2-1: config 0 descriptor?? [ 1209.905430][T31329] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1210.095838][T31329] usb 3-1: Using ep0 maxpacket: 16 [ 1210.112205][T31329] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1210.141032][T31329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1210.158918][T31329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.171687][T31329] usb 3-1: Product: syz [ 1210.176619][T31329] usb 3-1: Manufacturer: syz [ 1210.183185][T31329] usb 3-1: SerialNumber: syz [ 1210.229821][ T6148] r8152-cfgselector 2-1: USB disconnect, device number 58 [ 1210.482927][T31329] cdc_ncm 3-1:1.0: bind() failure [ 1210.502004][ T6158] kvm: kvm [6155]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 1210.510226][T31329] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1210.527372][T31329] cdc_ncm 3-1:1.1: bind() failure [ 1210.551828][T31329] usb 3-1: USB disconnect, device number 49 [ 1211.195600][ T30] kauditd_printk_skb: 8495 callbacks suppressed [ 1211.195619][ T30] audit: type=1400 audit(2000000132.678:1983602): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=5500 comm="syz-executor" name="41" dev="tmpfs" ino=220 [ 1211.258443][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1211.266940][ T6178] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1211.269234][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1211.275935][ T6179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1211.280052][ C0] audit: audit_lost=300034 audit_rate_limit=0 audit_backlog_limit=64 [ 1211.294687][ C0] audit: backlog limit exceeded [ 1211.296729][ T6178] audit: audit_lost=300035 audit_rate_limit=0 audit_backlog_limit=64 [ 1211.300359][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1211.314395][ C0] audit: audit_lost=300036 audit_rate_limit=0 audit_backlog_limit=64 [ 1211.372600][ T6180] gtp0: entered promiscuous mode [ 1211.385607][ T6180] gtp0: entered allmulticast mode [ 1211.392140][ T6178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1212.780844][ T6210] bpf: Bad value for 'gid' [ 1213.080837][ T6220] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15538'. [ 1213.112782][ T6220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15538'. [ 1213.437468][ T6231] netlink: 'syz.1.15544': attribute type 1 has an invalid length. [ 1213.467972][ T6231] netlink: 'syz.1.15544': attribute type 2 has an invalid length. [ 1213.927579][ T6249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input118 [ 1215.146800][ C1] hrtimer: interrupt took 20956 ns [ 1215.564013][ T6294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15572'. [ 1215.605928][ T6294] sch_fq: defrate 0 ignored. [ 1216.166424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1216.273420][ T30] kauditd_printk_skb: 6815 callbacks suppressed [ 1216.273465][ T30] audit: type=1400 audit(2000000137.778:1989698): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6112 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1216.309937][ T6113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1216.311871][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1216.316924][ T6113] audit: audit_lost=300280 audit_rate_limit=0 audit_backlog_limit=64 [ 1216.323241][ C0] audit: audit_lost=300281 audit_rate_limit=0 audit_backlog_limit=64 [ 1216.323265][ C0] audit: backlog limit exceeded [ 1216.332243][ T6113] audit: backlog limit exceeded [ 1216.340025][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1216.345085][ T6113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1216.349341][ C0] audit: audit_lost=300282 audit_rate_limit=0 audit_backlog_limit=64 [ 1217.125759][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15591'. [ 1217.545179][ T6148] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1217.717183][ T6148] usb 4-1: Using ep0 maxpacket: 8 [ 1217.734769][ T6148] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1217.753078][ T6148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.781102][ T6148] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1217.804212][ T6148] pvrusb2: ********** [ 1217.808775][ T6148] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1217.846961][ T6148] pvrusb2: Important functionality might not be entirely working. [ 1217.887188][ T6148] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1217.904672][ T6148] pvrusb2: ********** [ 1217.994231][ T2342] pvrusb2: Invalid write control endpoint [ 1218.231328][ T6148] usb 4-1: USB disconnect, device number 78 [ 1218.232887][ T2342] pvrusb2: Invalid write control endpoint [ 1218.273051][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1218.296583][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1218.304374][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1218.326125][ T2342] pvrusb2: Device being rendered inoperable [ 1218.340375][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1218.350258][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1218.372469][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1218.383107][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1218.403809][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1219.386862][ T6411] netlink: 388 bytes leftover after parsing attributes in process `syz.6.15626'. [ 1219.393676][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15628'. [ 1219.636517][ T977] hid-generic 0000:0000:0000.0075: unknown main item tag 0x0 [ 1219.692509][ T977] hid-generic 0000:0000:0000.0075: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1219.914918][T25122] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1220.086489][T25122] usb 7-1: Using ep0 maxpacket: 16 [ 1220.102013][T25122] usb 7-1: config 0 has no interfaces? [ 1220.124590][T25122] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1220.154858][T25122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.163126][T25122] usb 7-1: Product: syz [ 1220.194917][T25122] usb 7-1: Manufacturer: syz [ 1220.211338][T25122] usb 7-1: SerialNumber: syz [ 1220.235843][T25122] usb 7-1: config 0 descriptor?? [ 1220.509886][T25122] usb 7-1: USB disconnect, device number 3 [ 1220.586519][ T6448] netlink: 'syz.3.15641': attribute type 1 has an invalid length. [ 1220.610463][ T6448] netlink: 172 bytes leftover after parsing attributes in process `syz.3.15641'. [ 1221.280730][ T30] kauditd_printk_skb: 8755 callbacks suppressed [ 1221.280750][ T30] audit: type=1400 audit(2000000142.789:1997530): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6104 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.242 dest=40846 netif=eth0 [ 1221.322546][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1221.325674][ T6472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1221.334859][ T6473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1221.343456][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1221.343484][ C0] audit: audit_lost=300591 audit_rate_limit=0 audit_backlog_limit=64 [ 1221.343500][ C0] audit: backlog limit exceeded [ 1221.358887][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1221.358909][ C0] audit: audit_lost=300592 audit_rate_limit=0 audit_backlog_limit=64 [ 1221.358925][ C0] audit: backlog limit exceeded [ 1222.397785][ T6512] IPVS: persistence engine module ip_vs_pe_ not found [ 1226.084573][ T6148] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1226.264729][ T6148] usb 2-1: Using ep0 maxpacket: 8 [ 1226.278977][ T6148] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1226.296977][ T30] kauditd_printk_skb: 8407 callbacks suppressed [ 1226.296996][ T30] audit: type=1400 audit(2000000147.799:2004374): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=6618 comm="syz.1.15720" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1226.336965][ T6148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.341141][ T6632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1226.352702][ T6108] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1226.354315][ T26] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1226.364654][ T6108] audit: audit_lost=301121 audit_rate_limit=0 audit_backlog_limit=64 [ 1226.381862][ T30] audit: type=1400 audit(2000000147.799:2004375): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6104 comm="syz-executor" name="3102" dev="tmpfs" ino=15613 [ 1226.388673][ T6632] audit: audit_lost=301122 audit_rate_limit=0 audit_backlog_limit=64 [ 1226.410181][ T6108] audit: backlog limit exceeded [ 1226.412175][ T26] audit: audit_lost=301123 audit_rate_limit=0 audit_backlog_limit=64 [ 1226.431947][ T26] audit: backlog limit exceeded [ 1226.443146][ T6148] usb 2-1: config 0 descriptor?? [ 1227.274558][ T6654] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1227.274558][ T6654] The task syz.3.15733 (6654) triggered the difference, watch for misbehavior. [ 1227.318718][ T6148] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1227.344943][ T6148] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1227.393749][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15736'. [ 1227.408781][ T6148] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1227.422978][ T6148] usb 2-1: USB disconnect, device number 59 [ 1228.296129][ T6685] block nbd1: server does not support multiple connections per device. [ 1228.333267][ T6685] block nbd1: shutting down sockets [ 1229.697526][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15768'. [ 1230.438867][ T6754] program syz.2.15776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1230.935667][ T6774] serio: Serial port ttyS3 [ 1231.344058][ T30] kauditd_printk_skb: 7812 callbacks suppressed [ 1231.344078][ T30] audit: type=1400 audit(2000262552.851:2011275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6783 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1231.400839][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1231.408311][ T6112] audit: audit_lost=301430 audit_rate_limit=0 audit_backlog_limit=64 [ 1231.416845][ T6112] audit: backlog limit exceeded [ 1231.422066][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1231.431658][ T30] audit: type=1400 audit(2000262552.861:2011276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6783 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1231.453206][ T6112] audit: audit_lost=301431 audit_rate_limit=0 audit_backlog_limit=64 [ 1231.468508][ T6112] audit: backlog limit exceeded [ 1231.473718][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1231.475197][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15790'. [ 1231.480781][ T30] audit: type=1400 audit(2000262552.861:2011277): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6783 comm="syz-executor" name="3184" dev="tmpfs" ino=16013 [ 1231.509339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.717969][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.771059][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.953716][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1231.964755][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.050933][ T6794] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.095281][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.107263][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.240400][ T6794] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.417054][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 1232.454927][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.475198][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.881294][ T6794] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.948029][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1232.960850][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1232.970213][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1232.983738][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1232.993455][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1233.064449][ T6813] wg1 speed is unknown, defaulting to 1000 [ 1233.476852][ T6794] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.683311][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15808'. [ 1233.757356][ T6826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15809'. [ 1233.768579][ T6826] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 1233.845693][T25122] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1233.949876][ T36] team0: left allmulticast mode [ 1233.965534][ T36] team_slave_0: left allmulticast mode [ 1233.978873][ T36] team_slave_1: left allmulticast mode [ 1233.991324][ T36] bridge0: port 3(team0) entered disabled state [ 1234.014160][T25122] usb 4-1: Using ep0 maxpacket: 16 [ 1234.025630][ T36] bridge_slave_1: left allmulticast mode [ 1234.031545][T25122] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1234.058148][ T36] bridge_slave_1: left promiscuous mode [ 1234.064499][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.071941][T25122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1234.092682][ T36] bridge_slave_0: left allmulticast mode [ 1234.098818][ T36] bridge_slave_0: left promiscuous mode [ 1234.107990][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.118978][T25122] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1234.129879][T25122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.138601][T25122] usb 4-1: Product: syz [ 1234.143819][T25122] usb 4-1: Manufacturer: syz [ 1234.158171][T25122] usb 4-1: SerialNumber: syz [ 1234.167737][T25122] usb 4-1: config 0 descriptor?? [ 1234.177832][T25122] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1234.191484][T25122] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1234.800772][T25122] em28xx 4-1:0.0: chip ID is em2870 [ 1235.019869][ T6148] usb 4-1: USB disconnect, device number 79 [ 1235.040835][ T6148] em28xx 4-1:0.0: Disconnecting em28xx [ 1235.096373][ T3672] Bluetooth: hci0: command tx timeout [ 1235.117186][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.128958][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.129268][ T6148] em28xx 4-1:0.0: Freeing device [ 1235.144840][ T36] bond0 (unregistering): Released all slaves [ 1235.163533][ T36] bond1 (unregistering): Released all slaves [ 1235.182775][ T36] bond2 (unregistering): Released all slaves [ 1235.197689][ T36] bond3 (unregistering): Released all slaves [ 1235.233117][ T6794] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.334909][ T6835] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1235.361041][ T6794] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.399658][ T36] tipc: Left network mode [ 1235.463377][ T6794] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.559914][ T6794] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.580460][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15815'. [ 1235.621258][ T6813] chnl_net:caif_netlink_parms(): no params data found [ 1235.696449][ T6840] netlink: 'syz.6.15815': attribute type 20 has an invalid length. [ 1235.751012][ T6840] netlink: 'syz.6.15815': attribute type 21 has an invalid length. [ 1236.240397][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.270781][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.294117][ T6813] bridge_slave_0: entered allmulticast mode [ 1236.344311][ T30] kauditd_printk_skb: 4350 callbacks suppressed [ 1236.344330][ T30] audit: type=1400 audit(2000262557.861:2014939): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5500 comm="syz-executor" name="99" dev="tmpfs" ino=515 [ 1236.383672][ T6813] bridge_slave_0: entered promiscuous mode [ 1236.396799][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.404348][ T30] audit: type=1400 audit(2000262557.861:2014940): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5500 comm="syz-executor" name="99" dev="tmpfs" ino=515 [ 1236.424675][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.432064][ T6813] bridge_slave_1: entered allmulticast mode [ 1236.448161][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1236.462727][ T6862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1236.471973][ T6112] audit: audit_lost=301662 audit_rate_limit=0 audit_backlog_limit=64 [ 1236.482519][ T30] audit: type=1400 audit(2000262557.861:2014941): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5500 comm="syz-executor" name="cgroup.cpu" dev="tmpfs" ino=517 [ 1236.502903][ T6862] audit: audit_lost=301663 audit_rate_limit=0 audit_backlog_limit=64 [ 1236.511467][ T6112] audit: backlog limit exceeded [ 1236.517267][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1236.524477][ T6862] audit: backlog limit exceeded [ 1236.531217][ T6813] bridge_slave_1: entered promiscuous mode [ 1236.820173][ T36] hsr_slave_0: left promiscuous mode [ 1236.827023][ T36] hsr_slave_1: left promiscuous mode [ 1236.833133][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.865149][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.875541][ T36] batman_adv: batadv0: Removing interface: macvtap0 [ 1237.164674][ T3672] Bluetooth: hci0: command tx timeout [ 1237.401033][ T6149] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 1237.600670][ T6149] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1237.620772][ T6149] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1237.662856][ T6149] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1237.672009][ T6149] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1237.682054][ T6149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.708506][ T6149] usb 3-1: config 0 descriptor?? [ 1237.717505][ T6872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1237.876042][ T36] team_slave_1 (unregistering): left promiscuous mode [ 1237.899912][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1237.996847][ T36] team_slave_0 (unregistering): left promiscuous mode [ 1238.015534][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1238.173477][ T6149] holtek_mouse 0003:04D9:A067.0076: unbalanced delimiter at end of report description [ 1238.184935][ T6149] holtek_mouse 0003:04D9:A067.0076: hid parse failed: -22 [ 1238.192305][ T6149] holtek_mouse 0003:04D9:A067.0076: probe with driver holtek_mouse failed with error -22 [ 1238.372931][T23314] usb 3-1: USB disconnect, device number 50 [ 1239.011428][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.249217][ T5130] Bluetooth: hci0: command tx timeout [ 1239.290861][ T6813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.331489][ T6813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.610791][ T6813] team0: Port device team_slave_0 added [ 1239.627591][ T6813] team0: Port device team_slave_1 added [ 1239.812724][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.846361][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.908165][ T6813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.971589][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.989137][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.089834][ T6813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.279092][ T6926] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1240.392982][ T36] IPVS: stop unused estimator thread 0... [ 1240.416542][ T6813] hsr_slave_0: entered promiscuous mode [ 1240.459650][ T6813] hsr_slave_1: entered promiscuous mode [ 1241.310651][ T6947] netlink: 'syz.2.15859': attribute type 2 has an invalid length. [ 1241.324408][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15859'. [ 1241.334193][ T5130] Bluetooth: hci0: command tx timeout [ 1241.382123][ T30] kauditd_printk_skb: 3914 callbacks suppressed [ 1241.382143][ T30] audit: type=1400 audit(2000262562.892:2018836): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6813 comm="syz-executor" name="health" dev="debugfs" ino=122786 [ 1241.430345][ T30] audit: type=1400 audit(2000262562.892:2018837): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6813 comm="syz-executor" name="netdevsim7" dev="debugfs" ino=122756 [ 1241.439992][ T6113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1241.481662][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1241.489505][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1241.496268][ C0] audit: audit_lost=301671 audit_rate_limit=0 audit_backlog_limit=64 [ 1241.504558][ C0] audit: backlog limit exceeded [ 1241.507615][ T6813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1241.510160][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1241.517307][ T5500] audit: audit_lost=301672 audit_rate_limit=0 audit_backlog_limit=64 [ 1241.750691][ T6813] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1241.811020][ T6813] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1241.856728][ T6813] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1241.860080][ T6957] Bluetooth: MGMT ver 1.23 [ 1241.882022][ T6813] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1241.886064][ T6957] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1242.327840][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.430051][ T6813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.474809][T25289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.482044][T25289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.540392][T25289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.547648][T25289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.765677][ T6813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1243.921151][ T6813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.074681][ T7004] dlm: no local IP address has been set [ 1244.080854][ T7004] dlm: cannot start dlm midcomms -107 [ 1245.276482][ T6813] veth0_vlan: entered promiscuous mode [ 1245.302210][ T6813] veth1_vlan: entered promiscuous mode [ 1245.411588][ T6813] veth0_macvtap: entered promiscuous mode [ 1245.425736][ T6813] veth1_macvtap: entered promiscuous mode [ 1245.470247][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.514768][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.540172][ T6813] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.559311][ T6813] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.579686][ T6813] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.603524][ T6813] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.884491][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.909673][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.060836][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.089007][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.398919][ T30] kauditd_printk_skb: 7030 callbacks suppressed [ 1246.398943][ T30] audit: type=1400 audit(2000262567.902:2025561): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7065 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1246.426771][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1246.427123][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1246.439899][ C0] audit: audit_lost=301776 audit_rate_limit=0 audit_backlog_limit=64 [ 1246.444058][ T5500] audit: audit_lost=301777 audit_rate_limit=0 audit_backlog_limit=64 [ 1246.448352][ C0] audit: backlog limit exceeded [ 1246.470208][ T30] audit: type=1400 audit(2000262567.902:2025562): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7065 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1246.470416][ T5500] audit: backlog limit exceeded [ 1246.490345][ T30] audit: type=1400 audit(2000262567.902:2025563): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7065 comm="syz-executor" name="118" dev="tmpfs" ino=610 [ 1246.490393][ T30] audit: type=1400 audit(2000262567.902:2025564): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=7065 comm="syz-executor" opid=7065 ocomm="syz-executor" [ 1246.788886][ T7070] o2cb: This node has not been configured. [ 1246.799348][ T7070] o2cb: Cluster check failed. Fix errors before retrying. [ 1246.848829][ T7070] (syz.6.15910,7070,1):user_dlm_register:674 ERROR: status = -22 [ 1246.871770][ T7070] (syz.6.15910,7070,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1248.711013][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15926'. [ 1248.735657][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15926'. [ 1249.521423][ T7124] netlink: 104 bytes leftover after parsing attributes in process `syz.6.15933'. [ 1250.142704][ T7142] netlink: 'syz.7.15944': attribute type 1 has an invalid length. [ 1250.171194][ T7142] netlink: 224 bytes leftover after parsing attributes in process `syz.7.15944'. [ 1251.291485][ T7178] can0: slcan on ttyS3. [ 1251.403254][ T30] kauditd_printk_skb: 5808 callbacks suppressed [ 1251.403273][ T30] audit: type=1400 audit(2000262572.912:2031155): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7179 comm="syz.6.15960" name="newroot" dev="tmpfs" ino=2 [ 1251.444783][ T7189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1251.454785][ T7189] audit: audit_lost=301851 audit_rate_limit=0 audit_backlog_limit=64 [ 1251.463563][ T7180] can0 (unregistered): slcan off ttyS3. [ 1251.481453][ T7178] can0: slcan on ttyS3. [ 1251.486925][ T7189] audit: backlog limit exceeded [ 1251.492195][ T7191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1251.499138][ T7189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1251.506558][ T30] audit: type=1400 audit(2000262572.922:2031156): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7179 comm="syz.6.15960" name="/" dev="devtmpfs" ino=1 [ 1251.525661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1251.533767][ T7189] audit: audit_lost=301852 audit_rate_limit=0 audit_backlog_limit=64 [ 1251.542360][ T30] audit: type=1400 audit(2000262572.922:2031157): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=7179 comm="syz.6.15960" name="virtual_nci" dev="devtmpfs" ino=698 [ 1251.551971][ T7194] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1251.677086][ T7176] can0 (unregistered): slcan off ttyS3. [ 1252.396036][ T977] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1252.499469][ T7228] binder: 7226:7228 ioctl c018620c 200000000640 returned -22 [ 1252.563196][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 1252.585862][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1252.609187][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1252.629548][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1252.713215][ T977] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1252.722519][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.764807][ T977] usb 2-1: config 0 descriptor?? [ 1252.798097][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15980'. [ 1252.982688][ T7245] IPVS: length: 4096 != 8 [ 1253.210314][ T977] microsoft 0003:045E:07DA.0077: ignoring exceeding usage max [ 1253.237065][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.254511][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.262097][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.278678][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.291606][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.307587][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.330849][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.341886][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.359126][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.368652][ T977] microsoft 0003:045E:07DA.0077: unknown main item tag 0x0 [ 1253.407351][T23314] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1253.470937][ T977] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0077/input/input119 [ 1253.535551][ T977] microsoft 0003:045E:07DA.0077: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1253.572599][ T977] usb 2-1: USB disconnect, device number 60 [ 1253.600227][T23314] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1253.629069][T23314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.641286][T23314] usb 4-1: Product: syz [ 1253.675898][T23314] usb 4-1: Manufacturer: syz [ 1253.680717][T23314] usb 4-1: SerialNumber: syz [ 1253.713460][T23314] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1253.810102][T31329] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1254.103544][ T6149] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1254.265879][ T6149] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1254.291712][ T6149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.309441][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16001'. [ 1254.330833][ T6149] usb 7-1: config 0 descriptor?? [ 1254.354647][ T6149] cp210x 7-1:0.0: cp210x converter detected [ 1254.502990][T23314] usb 4-1: USB disconnect, device number 80 [ 1254.599612][ T7286] mkiss: ax0: crc mode is auto. [ 1254.970678][ T6149] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1254.978766][ T6149] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1255.009092][ T6149] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1255.033717][ T6149] usb 7-1: USB disconnect, device number 4 [ 1255.047574][ T6149] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1255.085174][ T6149] cp210x 7-1:0.0: device disconnected [ 1255.095197][T31329] usb 4-1: Service connection timeout for: 256 [ 1255.101624][T31329] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1255.161462][T31329] ath9k_htc: Failed to initialize the device [ 1255.197609][T23314] usb 4-1: ath9k_htc: USB layer deinitialized [ 1256.468888][ T30] kauditd_printk_skb: 6734 callbacks suppressed [ 1256.468908][ T30] audit: type=1400 audit(2000262577.982:2037427): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6813 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1256.501729][ T6813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1256.513441][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1256.520578][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1256.520604][ C0] audit: audit_lost=302010 audit_rate_limit=0 audit_backlog_limit=64 [ 1256.520621][ C0] audit: backlog limit exceeded [ 1256.536461][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1256.536489][ C0] audit: audit_lost=302011 audit_rate_limit=0 audit_backlog_limit=64 [ 1256.536506][ C0] audit: backlog limit exceeded [ 1256.587202][ T6113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1257.196363][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16030'. [ 1257.422912][ T7349] mkiss: ax0: crc mode is auto. [ 1257.634874][ T7353] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.644760][ T7353] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.653900][ T7353] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1257.663237][ T7353] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1258.272138][ T7374] netlink: 'syz.6.16042': attribute type 1 has an invalid length. [ 1258.932428][ T7366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1258.959835][ T7366] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1259.253336][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16057'. [ 1259.281573][ T7366] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1259.294623][ T7400] veth1_vlan: left allmulticast mode [ 1259.300197][ T7366] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1259.352437][ T6895] bond0: (slave macvlan0): link status definitely down, disabling slave [ 1259.403332][ T6895] bond0: (slave wlan1): link status definitely down, disabling slave [ 1260.060056][ T7425] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.212397][ T7425] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.350020][ T7425] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.465390][ T7425] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.761496][ T7425] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.841267][ T7425] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.905150][ T7425] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.939071][ T7425] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.476881][ T30] kauditd_printk_skb: 6488 callbacks suppressed [ 1261.476902][ T30] audit: type=1400 audit(2000262582.993:2043199): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7441 comm="syz.3.16074" name="newroot" dev="tmpfs" ino=2 [ 1261.572301][ T6813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1261.583274][ T6813] audit: audit_lost=302252 audit_rate_limit=0 audit_backlog_limit=64 [ 1261.598219][ T30] audit: type=1400 audit(2000262582.993:2043200): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7441 comm="syz.3.16074" name="/" dev="proc" ino=1 [ 1261.607426][ T6813] audit: backlog limit exceeded [ 1261.661202][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1261.668331][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1261.675226][ C0] audit: audit_lost=302253 audit_rate_limit=0 audit_backlog_limit=64 [ 1261.679768][ T30] audit: type=1400 audit(2000262582.993:2043201): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7441 comm="syz.3.16074" name="/" dev="proc" ino=1 [ 1261.683703][ C0] audit: backlog limit exceeded [ 1262.177831][ T7465] netlink: 'syz.7.16085': attribute type 2 has an invalid length. [ 1262.372742][T25122] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1262.545571][T25122] usb 4-1: config 0 has no interfaces? [ 1262.565436][T25122] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1262.578177][T25122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.593354][T25122] usb 4-1: Product: syz [ 1262.597688][T25122] usb 4-1: Manufacturer: syz [ 1262.602385][T25122] usb 4-1: SerialNumber: syz [ 1262.627926][T25122] usb 4-1: config 0 descriptor?? [ 1262.671147][ T7473] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.836298][ T7473] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.883946][ T6150] usb 4-1: USB disconnect, device number 81 [ 1263.002184][ T7473] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.081015][ T7473] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.251656][ T7473] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.293597][ T7473] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.329495][ T7473] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.413670][ T7473] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.456238][ T7559] tipc: Enabling of bearer rejected, failed to enable media [ 1265.900050][ T7571] ucma_write: process 6347 (syz.2.16133) changed security contexts after opening file descriptor, this is not allowed. [ 1266.052905][ T6149] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1266.182687][T23314] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1266.220752][ T6149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.252426][ T6149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.272626][ T6149] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1266.292598][ T6149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.311945][ T6149] usb 4-1: config 0 descriptor?? [ 1266.356674][T23314] usb 2-1: Using ep0 maxpacket: 32 [ 1266.375033][T23314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.431662][T23314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.463604][T23314] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1266.513106][T23314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.532402][T23314] usb 2-1: config 0 descriptor?? [ 1266.533902][ T30] kauditd_printk_skb: 6886 callbacks suppressed [ 1266.533918][ T30] audit: type=1400 audit(2000262588.043:2049357): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1266.607136][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1266.616837][ T30] audit: type=1400 audit(2000262588.043:2049358): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 1266.636902][ T5500] audit: audit_lost=302498 audit_rate_limit=0 audit_backlog_limit=64 [ 1266.654704][ T5500] audit: backlog limit exceeded [ 1266.660457][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1266.674868][ T30] audit: type=1400 audit(2000262588.043:2049359): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 1266.698202][ T5500] audit: audit_lost=302499 audit_rate_limit=0 audit_backlog_limit=64 [ 1266.707053][ T5500] audit: backlog limit exceeded [ 1266.712597][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1266.806346][ T6149] hid-steam 0003:28DE:1142.0078: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1266.879884][ T6149] hid-steam 0003:28DE:1142.0078: Steam wireless receiver connected [ 1266.921990][ T6149] hid-steam 0003:28DE:1142.0079: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1266.999533][T23314] savu 0003:1E7D:2D5A.007A: unknown main item tag 0x0 [ 1267.025612][T23314] savu 0003:1E7D:2D5A.007A: unknown main item tag 0x0 [ 1267.047356][T23314] savu 0003:1E7D:2D5A.007A: unknown main item tag 0x0 [ 1267.047796][ T6149] usb 4-1: USB disconnect, device number 82 [ 1267.054943][T23314] savu 0003:1E7D:2D5A.007A: unknown main item tag 0x0 [ 1267.054976][T23314] savu 0003:1E7D:2D5A.007A: unknown main item tag 0x0 [ 1267.055002][T23314] savu 0003:1E7D:2D5A.007A: unbalanced collection at end of report description [ 1267.055799][T23314] savu 0003:1E7D:2D5A.007A: parse failed [ 1267.088184][ T6149] hid-steam 0003:28DE:1142.0078: Steam wireless receiver disconnected [ 1267.113099][T23314] savu 0003:1E7D:2D5A.007A: probe with driver savu failed with error -22 [ 1267.259807][ T6150] usb 2-1: USB disconnect, device number 61 [ 1267.966875][ T7610] kvm: kvm [7609]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1268.382247][T31329] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1268.396306][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16159'. [ 1268.413594][ T7632] netlink: 'syz.6.16159': attribute type 7 has an invalid length. [ 1268.421871][ T7632] netlink: 'syz.6.16159': attribute type 8 has an invalid length. [ 1268.435917][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16159'. [ 1268.532863][T31329] usb 4-1: Using ep0 maxpacket: 16 [ 1268.547988][T31329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.579297][T31329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.600740][T31329] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1268.616043][T31329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.635949][T31329] usb 4-1: config 0 descriptor?? [ 1268.975824][ T7651] input: syz0 as /devices/virtual/input/input120 [ 1269.073169][T31329] playstation 0003:054C:05C4.007B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 1269.187072][ T7657] input: syz1 as /devices/virtual/input/input121 [ 1269.259264][T31329] playstation 0003:054C:05C4.007B: Invalid byte count transferred, expected 16 got 0 [ 1269.269200][T31329] playstation 0003:054C:05C4.007B: Failed to retrieve DualShock4 pairing info: -22 [ 1269.279524][T31329] playstation 0003:054C:05C4.007B: Failed to get MAC address from DualShock4 [ 1269.301224][T31329] playstation 0003:054C:05C4.007B: Failed to create dualshock4. [ 1269.330882][T31329] playstation 0003:054C:05C4.007B: probe with driver playstation failed with error -22 [ 1269.399920][ T6149] kernel write not supported for file bpf-prog (pid: 6149 comm: kworker/1:4) [ 1269.500858][T31329] usb 4-1: USB disconnect, device number 83 [ 1270.395858][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16187'. [ 1270.538233][ T7701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.771128][ T7708] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16195'. [ 1270.838822][ T7709] tap0: tun_chr_ioctl cmd 1074025677 [ 1270.854399][ T7709] tap0: linktype set to 773 [ 1271.250081][ T7722] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1271.562972][ T30] kauditd_printk_skb: 7171 callbacks suppressed [ 1271.562994][ T30] audit: type=1400 audit(2000262593.083:2056463): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7730 comm="syz.3.16206" name="3271" dev="tmpfs" ino=16453 [ 1271.609628][ T7732] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1271.619714][ T7736] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1271.628701][ T6108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1271.629758][ T30] audit: type=1400 audit(2000262593.083:2056464): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7730 comm="syz.3.16206" name="3271" dev="tmpfs" ino=16453 [ 1271.635588][ T7732] audit: audit_lost=302523 audit_rate_limit=0 audit_backlog_limit=64 [ 1271.635608][ T7732] audit: backlog limit exceeded [ 1271.635890][ T7732] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1271.655414][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1271.655433][ C0] audit: audit_lost=302524 audit_rate_limit=0 audit_backlog_limit=64 [ 1272.102057][ T6149] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1272.269382][ T6149] usb 7-1: Using ep0 maxpacket: 8 [ 1272.277910][ T6149] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1272.310993][ T6149] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1272.348383][ T6149] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.376177][ T6149] usb 7-1: config 0 descriptor?? [ 1272.622176][ T6149] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1272.653015][ T7767] random: crng reseeded on system resumption [ 1272.832018][T31329] usb 7-1: USB disconnect, device number 5 [ 1272.841825][ T7773] fuse: Bad value for 'fd' [ 1273.234517][ T7785] netlink: 'syz.2.16230': attribute type 1 has an invalid length. [ 1273.570524][ T7799] tap0: tun_chr_ioctl cmd 35108 [ 1273.693188][T31329] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1273.871158][T31329] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1273.912441][T31329] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1273.942989][T31329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1273.966375][T31329] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.002807][T31329] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1274.022275][T31329] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1274.050809][T31329] usb 2-1: Product: syz [ 1274.061949][T31329] usb 2-1: Manufacturer: syz [ 1274.082516][T31329] cdc_wdm 2-1:1.0: skipping garbage [ 1274.088412][T31329] cdc_wdm 2-1:1.0: skipping garbage [ 1274.094097][T31329] cdc_wdm 2-1:1.0: skipping garbage [ 1274.107240][T31329] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1274.300013][T31329] usb 2-1: USB disconnect, device number 62 [ 1275.289072][ T7850] xt_cgroup: invalid path, errno=-2 [ 1275.585893][ T7862] bond0: entered promiscuous mode [ 1275.591288][ T7862] bond_slave_0: entered promiscuous mode [ 1275.597797][ T7862] bond_slave_1: entered promiscuous mode [ 1275.612893][ T7862] bond0: left promiscuous mode [ 1275.618262][ T7862] bond_slave_0: left promiscuous mode [ 1275.628642][ T7862] bond_slave_1: left promiscuous mode [ 1276.584065][ T30] kauditd_printk_skb: 8321 callbacks suppressed [ 1276.584085][ T30] audit: type=1400 audit(2000262598.103:2063581): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=6108 comm="syz-executor" name="3293" dev="tmpfs" ino=16565 [ 1276.622614][ T6113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1276.630086][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1276.636709][ C0] audit: audit_lost=302931 audit_rate_limit=0 audit_backlog_limit=64 [ 1276.642129][ T7889] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1276.644978][ C0] audit: backlog limit exceeded [ 1276.658307][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1276.661883][ T6113] audit: audit_lost=302932 audit_rate_limit=0 audit_backlog_limit=64 [ 1276.664874][ C0] audit: audit_lost=302933 audit_rate_limit=0 audit_backlog_limit=64 [ 1276.664897][ C0] audit: backlog limit exceeded [ 1276.968094][ T7892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1276.979378][ T7892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.167996][ T7892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1277.178722][ T7892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.314329][ T7892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1277.333584][ T7892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.590081][ T7892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1277.641482][ T7892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.652713][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1277.893390][ T10] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1277.909564][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.932992][ T10] usb 3-1: Product: syz [ 1277.937709][ T10] usb 3-1: Manufacturer: syz [ 1277.950783][ T10] usb 3-1: SerialNumber: syz [ 1277.965986][ T10] usb 3-1: config 0 descriptor?? [ 1277.992465][ T7892] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.010810][ T7892] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.094818][ T7892] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.112472][ T7892] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.148462][ T7892] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.157671][ T7892] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.187700][ T7892] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.196928][ T7892] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.221920][ T10] usb 3-1: ignoring: probably an ADSL modem [ 1278.649402][ T10] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1278.656600][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16291'. [ 1278.869597][ T10] usb 3-1: USB disconnect, device number 51 [ 1279.206230][ T7941] block device autoloading is deprecated and will be removed. [ 1279.439333][ T7947] Falling back ldisc for ptm0. [ 1279.638125][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16304'. [ 1280.421997][ T6150] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1280.581650][ T6150] usb 3-1: Using ep0 maxpacket: 32 [ 1280.590494][ T6150] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.610492][ T6150] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.631385][ T6150] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1280.640732][ T6150] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1280.655554][ T6150] usb 3-1: Product: syz [ 1280.660055][ T6150] usb 3-1: Manufacturer: syz [ 1280.679049][ T6150] hub 3-1:4.0: USB hub found [ 1280.904213][ T6150] hub 3-1:4.0: 2 ports detected [ 1281.115581][ T6150] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1281.137859][ T6150] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1281.198204][ T6150] usb 3-1: USB disconnect, device number 52 [ 1281.463153][ T7990] kernel read not supported for file /eth0 (pid: 7990 comm: syz.6.16322) [ 1281.594894][ T30] kauditd_printk_skb: 5539 callbacks suppressed [ 1281.594914][ T30] audit: type=1400 audit(2000262603.114:2069116): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=30 comm="kauditd" saddr=10.128.0.169 src=30008 daddr=10.128.0.242 dest=40846 netif=eth0 [ 1281.606569][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1281.624370][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1281.637129][ C0] audit: audit_lost=302936 audit_rate_limit=0 audit_backlog_limit=64 [ 1281.641018][ T6112] audit: audit_lost=302937 audit_rate_limit=0 audit_backlog_limit=64 [ 1281.645328][ C0] audit: backlog limit exceeded [ 1281.645787][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1281.645804][ C0] audit: audit_lost=302938 audit_rate_limit=0 audit_backlog_limit=64 [ 1281.645820][ C0] audit: backlog limit exceeded [ 1281.646342][ T30] audit: type=1400 audit(2000262603.104:2069115): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6112 comm="syz-executor" path="/3362" dev="tmpfs" ino=16934 [ 1282.841731][T25122] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1283.014755][T25122] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1283.033012][T25122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.059789][T25122] usb 7-1: config 0 descriptor?? [ 1283.076850][T25122] cp210x 7-1:0.0: cp210x converter detected [ 1283.173249][ T8047] program syz.3.16349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1283.486639][T25122] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1283.507597][T25122] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1283.719238][ T6148] usb 7-1: USB disconnect, device number 6 [ 1283.748852][ T6148] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1283.773805][ T6148] cp210x 7-1:0.0: device disconnected [ 1283.860927][ T8068] netlink: 'syz.7.16359': attribute type 29 has an invalid length. [ 1283.877337][ T8068] netlink: 'syz.7.16359': attribute type 29 has an invalid length. [ 1283.890299][ T8068] netlink: 'syz.7.16359': attribute type 29 has an invalid length. [ 1284.151685][T31329] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1284.287595][ T8084] mkiss: ax0: crc mode is auto. [ 1284.312260][T31329] usb 3-1: Using ep0 maxpacket: 16 [ 1284.332735][T31329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.371610][T31329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.393488][T31329] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1284.410563][T31329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.440362][T31329] usb 3-1: config 0 descriptor?? [ 1284.674277][ T8099] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.785408][ T8099] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.889053][ T8099] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.913495][T31329] lua 0003:1E7D:2C2E.007C: report_id 0 is invalid [ 1284.933714][T31329] lua 0003:1E7D:2C2E.007C: item 0 4 1 8 parsing failed [ 1284.952031][ T8099] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.970045][T31329] lua 0003:1E7D:2C2E.007C: parse failed [ 1284.991407][T31329] lua 0003:1E7D:2C2E.007C: probe with driver lua failed with error -22 [ 1285.139653][T25122] usb 3-1: USB disconnect, device number 53 [ 1285.213382][ T8099] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.251437][ T8099] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.335563][ T8099] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.410124][ T8099] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.650307][ T8128] batadv0: entered promiscuous mode [ 1285.728713][ T8128] batadv0: left promiscuous mode [ 1286.612850][ T30] kauditd_printk_skb: 8562 callbacks suppressed [ 1286.612871][ T30] audit: type=1400 audit(2000262608.134:2077393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8165 comm="syz.1.16402" name="newroot" dev="tmpfs" ino=2 [ 1286.648176][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1286.670830][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1286.670978][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1286.680593][ T5500] audit: audit_lost=303034 audit_rate_limit=0 audit_backlog_limit=64 [ 1286.684249][ C0] audit: audit_lost=303035 audit_rate_limit=0 audit_backlog_limit=64 [ 1286.684268][ C0] audit: backlog limit exceeded [ 1286.685019][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1286.701238][ T30] audit: type=1400 audit(2000262608.134:2077394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8165 comm="syz.1.16402" name="/" dev="devtmpfs" ino=1 [ 1286.705935][ C0] audit: audit_lost=303036 audit_rate_limit=0 audit_backlog_limit=64 [ 1286.810616][ T8168] bridge0: port 3(syz_tun) entered blocking state [ 1286.842021][ T8168] bridge0: port 3(syz_tun) entered disabled state [ 1286.849166][ T8168] syz_tun: entered allmulticast mode [ 1286.903840][ T8172] overlay: filesystem on ./bus not supported [ 1286.910601][ T8168] syz_tun: entered promiscuous mode [ 1286.948906][ T8168] bridge0: port 3(syz_tun) entered blocking state [ 1286.956390][ T8168] bridge0: port 3(syz_tun) entered forwarding state [ 1287.189057][ T8181] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16409'. [ 1288.595612][ T8227] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1288.701474][ T8229] tc_dump_action: action bad kind [ 1288.842416][T25122] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1288.864737][T25122] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1288.889291][T25122] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1288.931605][T25122] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1288.939136][T25122] rtc rtc0: __rtc_set_alarm: err=-22 [ 1289.356579][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16444'. [ 1289.511157][T25122] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1289.560710][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16449'. [ 1289.681616][T25122] usb 4-1: Using ep0 maxpacket: 32 [ 1289.693763][T25122] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1289.709035][T25122] usb 4-1: config 0 has no interface number 0 [ 1289.710900][ T8274] bridge_slave_0: left allmulticast mode [ 1289.727042][T25122] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1289.727354][ T8274] bridge_slave_0: left promiscuous mode [ 1289.738106][T25122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.745859][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.762685][T25122] usb 4-1: Product: syz [ 1289.767038][T25122] usb 4-1: Manufacturer: syz [ 1289.771216][ T8274] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1289.782750][T25122] usb 4-1: SerialNumber: syz [ 1289.800749][T25122] usb 4-1: config 0 descriptor?? [ 1289.817503][T25122] smsc95xx v2.0.0 [ 1289.828751][T25122] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1289.845826][T25122] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1289.878548][ T8277] input: syz0 as /devices/virtual/input/input122 [ 1290.075971][T31329] usb 4-1: USB disconnect, device number 84 [ 1290.204356][ T9] kworker/0:0 (9) used greatest stack depth: 15848 bytes left [ 1291.013526][ T8311] erofs (device nullb0): cannot find valid erofs superblock [ 1291.620990][ T30] kauditd_printk_skb: 8771 callbacks suppressed [ 1291.621009][ T30] audit: type=1400 audit(2000262613.134:2085138): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8327 comm="syz-executor" name="235" dev="tmpfs" ino=1204 [ 1291.684921][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.691536][ C0] audit: audit_lost=303382 audit_rate_limit=0 audit_backlog_limit=64 [ 1291.699642][ C0] audit: backlog limit exceeded [ 1291.706519][ T8325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.714233][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.721267][ T6112] audit: audit_lost=303383 audit_rate_limit=0 audit_backlog_limit=64 [ 1291.729387][ T6112] audit: backlog limit exceeded [ 1291.735009][ T8325] audit: audit_lost=303384 audit_rate_limit=0 audit_backlog_limit=64 [ 1291.739935][ T6108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1291.743398][ T6148] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1291.940095][ T6148] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1291.971045][ T6148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.979327][ T6148] usb 3-1: Product: syz [ 1292.007102][ T6148] usb 3-1: Manufacturer: syz [ 1292.030967][ T6148] usb 3-1: SerialNumber: syz [ 1292.062041][ T6148] usb 3-1: config 0 descriptor?? [ 1292.083678][ T6148] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1292.240628][ T8352] program syz.1.16487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1292.919857][ T6148] usb 3-1: USB disconnect, device number 54 [ 1294.279655][ T8411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.468367][ T8411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.718156][ T8411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.037505][ T8411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.329674][ T8411] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.411498][T25122] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1295.461283][ T8411] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.552873][ T8411] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.578705][T25122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1295.627814][T25122] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1295.654500][T25122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1295.669075][ T8411] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.686805][T25122] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1295.713447][T25122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.747172][T25122] usb 7-1: Product: syz [ 1295.782576][T25122] usb 7-1: Manufacturer: syz [ 1295.795085][T25122] usb 7-1: SerialNumber: syz [ 1295.824230][T25122] usb 7-1: config 0 descriptor?? [ 1295.842185][ T8437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1295.902177][ T8437] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1295.952235][T25122] usb 7-1: ucan: probing device on interface #0 [ 1296.544492][ T8471] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1296.601785][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1296.625127][T25122] ucan 7-1:0.0: probe with driver ucan failed with error -71 [ 1296.632721][ T30] kauditd_printk_skb: 7510 callbacks suppressed [ 1296.632743][ T30] audit: type=1400 audit(2000262618.145:2092205): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6813 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1296.632786][ T30] audit: type=1400 audit(2000262618.145:2092206): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6813 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1296.632829][ T30] audit: type=1400 audit(2000262618.145:2092207): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6813 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1296.632872][ T30] audit: type=1400 audit(2000262618.145:2092208): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=6813 comm="syz-executor" name="149" dev="tmpfs" ino=767 [ 1296.632911][ T30] audit: type=1400 audit(2000262618.145:2092209): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6813 comm="syz-executor" path="/149" dev="tmpfs" ino=767 [ 1296.632950][ T30] audit: type=1400 audit(2000262618.145:2092210): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6813 comm="syz-executor" path="/149" dev="tmpfs" ino=767 [ 1296.669324][T25122] usb 7-1: USB disconnect, device number 7 [ 1296.702250][ T8472] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.728890][ T6108] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.745180][ T30] audit: type=1400 audit(2000262618.145:2092211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6813 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1296.770138][ T6108] audit: audit_lost=303534 audit_rate_limit=0 audit_backlog_limit=64 [ 1296.877729][ T8474] input: syz0 as /devices/virtual/input/input123 [ 1298.584146][ T8547] team0: Device gtp1 is of different type [ 1300.449636][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.618250][ T8611] netlink: 'syz.2.16603': attribute type 10 has an invalid length. [ 1300.660013][ T8611] batadv_slave_0: entered promiscuous mode [ 1300.691073][ T8611] batadv_slave_0: entered allmulticast mode [ 1300.724078][ T8611] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1301.645063][ T30] kauditd_printk_skb: 9491 callbacks suppressed [ 1301.645084][ T30] audit: type=1400 audit(2000262623.165:2100270): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=8641 comm="syz.1.16618" saddr=10.128.0.169 src=30008 daddr=10.128.0.242 dest=40846 netif=eth0 [ 1301.696637][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1301.699187][ T6113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1301.709023][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1301.716736][ C0] audit: audit_lost=304015 audit_rate_limit=0 audit_backlog_limit=64 [ 1301.721037][ T6113] audit: audit_lost=304016 audit_rate_limit=0 audit_backlog_limit=64 [ 1301.725131][ C0] audit: backlog limit exceeded [ 1301.733428][ T30] audit: type=1400 audit(2000262623.165:2100271): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6112 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1301.745082][ T5500] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1301.759275][ T6108] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1302.140885][ T6150] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1302.310555][ T6150] usb 3-1: Using ep0 maxpacket: 16 [ 1302.320977][ T6150] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1302.339343][ T6150] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.380375][ T6150] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1302.409298][ T6150] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1302.427567][ T6150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.450139][ T6150] usb 3-1: Product: syz [ 1302.456018][ T6150] usb 3-1: Manufacturer: syz [ 1302.461059][ T8667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1302.476058][ T6150] usb 3-1: SerialNumber: syz [ 1302.936112][ T6150] usb 3-1: 0:2 : does not exist [ 1303.344590][ T6150] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1303.408932][ T6150] usb 3-1: USB disconnect, device number 55 [ 1304.274568][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16652'. [ 1304.285148][ T8713] netlink: 'syz.6.16652': attribute type 21 has an invalid length. [ 1305.040537][ T8745] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1305.178881][ T8748] netlink: 27 bytes leftover after parsing attributes in process `syz.1.16680'. [ 1305.214141][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.242373][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.267678][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.284875][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.302629][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.310391][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.318024][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.325949][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.333665][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.355955][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.397881][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.440811][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.455131][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.480876][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.501494][T31329] hid-generic 009C:0008:0003.007D: unknown main item tag 0x0 [ 1305.541901][T31329] hid-generic 009C:0008:0003.007D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1305.582323][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16673'. [ 1305.600865][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16673'. [ 1306.188536][ T8774] input: syz1 as /devices/virtual/input/input124 [ 1306.577172][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16686'. [ 1306.604143][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16686'. [ 1306.658402][ T30] kauditd_printk_skb: 7746 callbacks suppressed [ 1306.658421][ T30] audit: type=1400 audit(2000262628.175:2106920): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8791 comm="modprobe" name="/" dev="sda1" ino=2 [ 1306.700281][ T6813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1306.708113][ T8792] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1306.722510][ T6813] audit: audit_lost=304384 audit_rate_limit=0 audit_backlog_limit=64 [ 1306.739675][ T8793] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1306.741944][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1306.748848][ T30] audit: type=1400 audit(2000262628.175:2106921): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8791 comm="modprobe" name="/" dev="sda1" ino=2 [ 1306.752785][ C0] audit: audit_lost=304385 audit_rate_limit=0 audit_backlog_limit=64 [ 1306.752806][ C0] audit: backlog limit exceeded [ 1306.753743][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1307.239919][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16697'. [ 1307.408180][ T8818] bridge0: entered promiscuous mode [ 1307.439209][ T8818] macvlan2: entered promiscuous mode [ 1307.575312][ T8828] ptrace attach of "./syz-executor exec"[6108] was attempted by ""[8828] [ 1307.961583][ T8847] random: crng reseeded on system resumption [ 1307.969772][ T8846] program syz.3.16714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1308.360464][ T8861] loop6: detected capacity change from 0 to 524287999 [ 1308.801251][T31329] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1308.970113][T31329] usb 4-1: Using ep0 maxpacket: 32 [ 1308.983977][T31329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1309.000329][ T6150] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1309.006406][T31329] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1309.085259][T31329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.094250][T31329] usb 4-1: Product: syz [ 1309.098612][T31329] usb 4-1: Manufacturer: syz [ 1309.103434][T31329] usb 4-1: SerialNumber: syz [ 1309.121058][T31329] usb 4-1: config 0 descriptor?? [ 1309.160773][ T6150] usb 3-1: Using ep0 maxpacket: 32 [ 1309.175100][ T6150] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1309.194669][ T6150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.225105][ T6150] usb 3-1: config 0 descriptor?? [ 1309.445238][ T6150] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1309.463116][ T6150] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1309.482122][ T6150] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1309.495741][ T6150] usb 3-1: media controller created [ 1309.534130][ T6150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1309.560373][T31329] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1309.651693][ T6150] az6027: usb out operation failed. (-71) [ 1309.672431][ T6150] az6027: usb out operation failed. (-71) [ 1309.690340][ T6150] stb0899_attach: Driver disabled by Kconfig [ 1309.696753][ T6150] az6027: no front-end attached [ 1309.696753][ T6150] [ 1309.713960][ T6150] az6027: usb out operation failed. (-71) [ 1309.732450][ T6150] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1309.756779][ T6150] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input125 [ 1309.785817][ T6150] dvb-usb: schedule remote query interval to 400 msecs. [ 1309.798902][ T6150] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1309.812937][ T6150] usb 3-1: USB disconnect, device number 56 [ 1309.951676][ T6150] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1309.983222][T25122] usb 4-1: USB disconnect, device number 85 [ 1310.973340][T25122] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1311.134823][T25122] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.160036][T25122] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1311.188569][T25122] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1311.213616][T25122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1311.242768][T25122] usb 4-1: SerialNumber: syz [ 1311.411997][ T8937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.456555][ T8939] : renamed from pim6reg1 [ 1311.487396][T25122] usb 4-1: 0:2 : does not exist [ 1311.533885][T25122] usb 4-1: USB disconnect, device number 86 [ 1311.677730][ T30] kauditd_printk_skb: 8889 callbacks suppressed [ 1311.677752][ T30] audit: type=1400 audit(2000262633.195:2114261): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8946 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1311.713910][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1311.728110][ T5500] audit: audit_lost=304912 audit_rate_limit=0 audit_backlog_limit=64 [ 1311.737371][ T5500] audit: backlog limit exceeded [ 1311.740084][ T30] audit: type=1400 audit(2000262633.195:2114262): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8946 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1311.747852][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1311.780710][ T5500] audit: audit_lost=304913 audit_rate_limit=0 audit_backlog_limit=64 [ 1311.789377][ T5500] audit: backlog limit exceeded [ 1311.793985][ T6112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1311.800237][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1312.407532][ T8966] delete_channel: no stack [ 1312.566605][ T8970] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1312.573131][ T8970] syzkaller0: linktype set to 769 [ 1312.580198][T25122] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1312.755486][T25122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1312.796062][T25122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.830622][T25122] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1312.859923][T25122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.891085][T25122] usb 3-1: config 0 descriptor?? [ 1313.325255][T25122] bigben 0003:146B:0902.007E: unexpected rdesc, please submit for review [ 1313.364136][T25122] bigben 0003:146B:0902.007E: unknown main item tag 0x0 [ 1313.390182][T25122] bigben 0003:146B:0902.007E: unknown main item tag 0x0 [ 1313.450771][T25122] bigben 0003:146B:0902.007E: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 1313.475046][T25122] bigben 0003:146B:0902.007E: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 1313.505406][T25122] bigben 0003:146B:0902.007E: no output report found [ 1313.602077][T25122] usb 3-1: USB disconnect, device number 57 [ 1314.861116][ T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1) [ 1315.449712][T25122] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1315.600090][T25122] usb 2-1: Using ep0 maxpacket: 32 [ 1315.631235][T25122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.663864][T25122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.691437][T25122] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1315.714487][T25122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.761703][T25122] usb 2-1: config 0 descriptor?? [ 1315.783286][T25122] hub 2-1:0.0: USB hub found [ 1316.009406][T25122] hub 2-1:0.0: 1 port detected [ 1316.413967][T25122] usb 2-1: USB disconnect, device number 63 [ 1316.714850][ T30] kauditd_printk_skb: 6759 callbacks suppressed [ 1316.714869][ T30] audit: type=1400 audit(2000262638.236:2120213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6113 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1316.777730][ T6113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1316.800504][ T9082] netlink: del zone limit has 4 unknown bytes [ 1316.839816][ T6113] audit: audit_lost=305193 audit_rate_limit=0 audit_backlog_limit=64 [ 1316.868771][ T30] audit: type=1400 audit(2000262638.246:2120214): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6113 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1316.913365][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1316.921507][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1316.928267][ C0] audit: audit_lost=305194 audit_rate_limit=0 audit_backlog_limit=64 [ 1316.936542][ C0] audit: backlog limit exceeded [ 1316.936616][ T6113] audit: backlog limit exceeded [ 1316.942069][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1318.270612][ T9130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1318.459610][T25122] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1318.639930][T25122] usb 7-1: Using ep0 maxpacket: 8 [ 1318.650386][T25122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.668251][T25122] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.678917][T25122] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1318.696169][T25122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.717581][T25122] usb 7-1: config 0 descriptor?? [ 1319.170958][T25122] uclogic 0003:2179:0053.007F: interface is invalid, ignoring [ 1319.391086][T31329] usb 7-1: USB disconnect, device number 8 [ 1319.561087][ T9169] sp0: Synchronizing with TNC [ 1319.582407][ T9169] sp0: Found TNC [ 1320.336707][ T9205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16878'. [ 1320.797332][ T9218] netlink: 27 bytes leftover after parsing attributes in process `syz.1.16884'. [ 1320.991378][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16885'. [ 1321.022872][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16885'. [ 1321.456039][ T9233] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1321.719334][ T30] kauditd_printk_skb: 8342 callbacks suppressed [ 1321.719354][ T30] audit: type=1400 audit(2000262643.236:2128109): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=9243 comm="modprobe" name="/" dev="sda1" ino=2 [ 1321.754813][ T5500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.754826][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.754846][ C0] audit: audit_lost=305346 audit_rate_limit=0 audit_backlog_limit=64 [ 1321.765044][ T9243] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1321.768047][ C0] audit: backlog limit exceeded [ 1321.782366][ T5500] audit: audit_lost=305347 audit_rate_limit=0 audit_backlog_limit=64 [ 1321.783852][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1321.788012][ T9243] audit: audit_lost=305348 audit_rate_limit=0 audit_backlog_limit=64 [ 1321.796068][ C0] audit: audit_lost=305349 audit_rate_limit=0 audit_backlog_limit=64 [ 1321.838061][ T9244] misc userio: Invalid payload size [ 1322.675389][ T9276] macsec1: entered promiscuous mode [ 1322.686826][ T9276] macvlan1: entered promiscuous mode [ 1322.703421][ T9276] macvlan1: left promiscuous mode [ 1322.948573][ T9287] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16915'. [ 1323.097804][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16918'. [ 1323.425538][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16925'. [ 1323.439845][ T6148] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1323.619294][ T6148] usb 4-1: Using ep0 maxpacket: 32 [ 1323.640675][ T6148] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1323.650650][ T6148] usb 4-1: config 0 has no interface number 0 [ 1323.670818][ T6148] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1323.692085][ T6148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.713475][ T6148] usb 4-1: Product: syz [ 1323.718892][ T6148] usb 4-1: Manufacturer: syz [ 1323.735773][ T6148] usb 4-1: SerialNumber: syz [ 1323.751932][ T6148] usb 4-1: config 0 descriptor?? [ 1323.762012][ T6148] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1323.807815][ T9319] dummy0: entered promiscuous mode [ 1323.832967][ T9319] dummy0: left promiscuous mode [ 1323.840789][T31329] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1323.947268][ T6150] kernel write not supported for file /sg0 (pid: 6150 comm: kworker/1:5) [ 1324.029767][T31329] usb 3-1: Using ep0 maxpacket: 32 [ 1324.039589][ T6148] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1324.063899][T31329] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1324.096259][ T6148] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1324.106134][T31329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.137518][T31329] usb 3-1: config 0 descriptor?? [ 1324.263325][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.293022][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.359360][T31329] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1324.391749][T31329] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1324.410732][T31329] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1324.419008][T31329] usb 3-1: media controller created [ 1324.463052][T31329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1324.521212][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1324.521779][ T6150] usb 4-1: USB disconnect, device number 87 [ 1324.562932][T31329] az6027: usb out operation failed. (-71) [ 1324.565363][ T6150] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1324.575040][T31329] az6027: usb out operation failed. (-71) [ 1324.594449][T31329] stb0899_attach: Driver disabled by Kconfig [ 1324.603005][T31329] az6027: no front-end attached [ 1324.603005][T31329] [ 1324.619778][ T9343] [ 1324.620068][ T6150] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1324.622248][ T9343] ===================================================== [ 1324.622259][ T9343] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1324.622270][ T9343] 6.15.0-syzkaller #0 Not tainted [ 1324.622280][ T9343] ----------------------------------------------------- [ 1324.622288][ T9343] syz.6.16943/9343 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1324.642829][ T6150] quatech2 4-1:0.51: device disconnected [ 1324.648511][ T9343] ffff88805753d600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1324.648572][ T9343] [ 1324.648572][ T9343] and this task is already holding: [ 1324.648579][ T9343] ffff888029bbe230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1324.701066][ T9343] which would create a new lock dependency: [ 1324.706995][ T9343] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1324.715266][ T9343] [ 1324.715266][ T9343] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1324.724878][ T9343] (&dev->event_lock#2){..-.}-{3:3} [ 1324.724928][ T9343] [ 1324.724928][ T9343] ... which became SOFTIRQ-irq-safe at: [ 1324.738255][ T9343] lock_acquire+0x120/0x360 [ 1324.742979][ T9343] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1324.748401][ T9343] input_inject_event+0xab/0x320 [ 1324.753617][ T9343] led_trigger_event+0x138/0x210 [ 1324.758690][ T9343] kbd_bh+0x1c6/0x2e0 [ 1324.763010][ T9343] tasklet_action_common+0x369/0x580 [ 1324.768531][ T9343] handle_softirqs+0x283/0x870 [ 1324.773446][ T9343] run_ksoftirqd+0x9b/0x100 [ 1324.778102][ T9343] smpboot_thread_fn+0x53f/0xa60 [ 1324.783190][ T9343] kthread+0x711/0x8a0 [ 1324.787555][ T9343] ret_from_fork+0x4b/0x80 [ 1324.792195][ T9343] ret_from_fork_asm+0x1a/0x30 [ 1324.797252][ T9343] [ 1324.797252][ T9343] to a SOFTIRQ-irq-unsafe lock: [ 1324.804370][ T9343] (tasklist_lock){.+.+}-{3:3} [ 1324.804494][ T9343] [ 1324.804494][ T9343] ... which became SOFTIRQ-irq-unsafe at: [ 1324.817573][ T9343] ... [ 1324.817587][ T9343] lock_acquire+0x120/0x360 [ 1324.824911][ T9343] _raw_read_lock+0x36/0x50 [ 1324.829546][ T9343] __do_wait+0xde/0x740 [ 1324.833925][ T9343] do_wait+0x1f8/0x520 [ 1324.838117][ T9343] kernel_wait+0xab/0x170 [ 1324.842851][ T9343] call_usermodehelper_exec_work+0xbe/0x230 [ 1324.848894][ T9343] process_scheduled_works+0xade/0x17a0 [ 1324.854596][ T9343] worker_thread+0x8a0/0xda0 [ 1324.859398][ T9343] kthread+0x711/0x8a0 [ 1324.863711][ T9343] ret_from_fork+0x4b/0x80 [ 1324.868339][ T9343] ret_from_fork_asm+0x1a/0x30 [ 1324.873430][ T9343] [ 1324.873430][ T9343] other info that might help us debug this: [ 1324.873430][ T9343] [ 1324.883967][ T9343] Chain exists of: [ 1324.883967][ T9343] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1324.883967][ T9343] [ 1324.897184][ T9343] Possible interrupt unsafe locking scenario: [ 1324.897184][ T9343] [ 1324.905717][ T9343] CPU0 CPU1 [ 1324.911200][ T9343] ---- ---- [ 1324.916686][ T9343] lock(tasklist_lock); [ 1324.921068][ T9343] local_irq_disable(); [ 1324.928027][ T9343] lock(&dev->event_lock#2); [ 1324.935477][ T9343] lock(&new->fa_lock); [ 1324.942550][ T9343] [ 1324.946039][ T9343] lock(&dev->event_lock#2); [ 1324.951061][ T9343] [ 1324.951061][ T9343] *** DEADLOCK *** [ 1324.951061][ T9343] [ 1324.959446][ T9343] 6 locks held by syz.6.16943/9343: [ 1324.964914][ T9343] #0: ffff888029e10118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1324.974377][ T9343] #1: ffff888029bbe230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1324.984722][ T9343] #2: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1324.994554][ T9343] #3: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1325.004466][ T9343] #4: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 1325.014983][ T9343] #5: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1325.024198][ T9343] [ 1325.024198][ T9343] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1325.034869][ T9343] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1325.040766][ T9343] IN-SOFTIRQ-W at: [ 1325.044786][ T9343] lock_acquire+0x120/0x360 [ 1325.051176][ T9343] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1325.058333][ T9343] input_inject_event+0xab/0x320 [ 1325.065051][ T9343] led_trigger_event+0x138/0x210 [ 1325.071826][ T9343] kbd_bh+0x1c6/0x2e0 [ 1325.077689][ T9343] tasklet_action_common+0x369/0x580 [ 1325.084847][ T9343] handle_softirqs+0x283/0x870 [ 1325.091384][ T9343] run_ksoftirqd+0x9b/0x100 [ 1325.097648][ T9343] smpboot_thread_fn+0x53f/0xa60 [ 1325.104243][ T9343] kthread+0x711/0x8a0 [ 1325.109965][ T9343] ret_from_fork+0x4b/0x80 [ 1325.116133][ T9343] ret_from_fork_asm+0x1a/0x30 [ 1325.122738][ T9343] INITIAL USE at: [ 1325.126649][ T9343] lock_acquire+0x120/0x360 [ 1325.132882][ T9343] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1325.139770][ T9343] input_inject_event+0xab/0x320 [ 1325.146292][ T9343] kbd_led_trigger_activate+0xbc/0x100 [ 1325.153450][ T9343] led_trigger_set+0x52d/0x950 [ 1325.159896][ T9343] led_trigger_set_default+0x215/0x250 [ 1325.167039][ T9343] led_classdev_register_ext+0x73d/0x930 [ 1325.174350][ T9343] input_leds_connect+0x517/0x790 [ 1325.181042][ T9343] input_register_device+0xceb/0x10b0 [ 1325.188000][ T9343] atkbd_connect+0x70e/0x9c0 [ 1325.194491][ T9343] serio_driver_probe+0x7f/0xa0 [ 1325.201114][ T9343] really_probe+0x26d/0x9a0 [ 1325.207567][ T9343] __driver_probe_device+0x18c/0x2f0 [ 1325.215795][ T9343] driver_probe_device+0x4f/0x430 [ 1325.222516][ T9343] __driver_attach+0x452/0x700 [ 1325.228899][ T9343] bus_for_each_dev+0x233/0x2b0 [ 1325.235670][ T9343] serio_handle_event+0x1a2/0x860 [ 1325.242380][ T9343] process_scheduled_works+0xade/0x17a0 [ 1325.250050][ T9343] worker_thread+0x8a0/0xda0 [ 1325.256327][ T9343] kthread+0x711/0x8a0 [ 1325.261976][ T9343] ret_from_fork+0x4b/0x80 [ 1325.268143][ T9343] ret_from_fork_asm+0x1a/0x30 [ 1325.274491][ T9343] } [ 1325.276989][ T9343] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1325.286042][ T9343] [ 1325.286042][ T9343] the dependencies between the lock to be acquired [ 1325.286059][ T9343] and SOFTIRQ-irq-unsafe lock: [ 1325.299714][ T9343] -> (tasklist_lock){.+.+}-{3:3} { [ 1325.305023][ T9343] HARDIRQ-ON-R at: [ 1325.309275][ T9343] lock_acquire+0x120/0x360 [ 1325.316086][ T9343] _raw_read_lock+0x36/0x50 [ 1325.322624][ T9343] __do_wait+0xde/0x740 [ 1325.328789][ T9343] do_wait+0x1f8/0x520 [ 1325.334862][ T9343] kernel_wait+0xab/0x170 [ 1325.341199][ T9343] call_usermodehelper_exec_work+0xbe/0x230 [ 1325.349640][ T9343] process_scheduled_works+0xade/0x17a0 [ 1325.357515][ T9343] worker_thread+0x8a0/0xda0 [ 1325.364323][ T9343] kthread+0x711/0x8a0 [ 1325.370433][ T9343] ret_from_fork+0x4b/0x80 [ 1325.376990][ T9343] ret_from_fork_asm+0x1a/0x30 [ 1325.383850][ T9343] SOFTIRQ-ON-R at: [ 1325.388366][ T9343] lock_acquire+0x120/0x360 [ 1325.395161][ T9343] _raw_read_lock+0x36/0x50 [ 1325.401699][ T9343] __do_wait+0xde/0x740 [ 1325.407912][ T9343] do_wait+0x1f8/0x520 [ 1325.414203][ T9343] kernel_wait+0xab/0x170 [ 1325.420537][ T9343] call_usermodehelper_exec_work+0xbe/0x230 [ 1325.428618][ T9343] process_scheduled_works+0xade/0x17a0 [ 1325.436375][ T9343] worker_thread+0x8a0/0xda0 [ 1325.443343][ T9343] kthread+0x711/0x8a0 [ 1325.449520][ T9343] ret_from_fork+0x4b/0x80 [ 1325.455941][ T9343] ret_from_fork_asm+0x1a/0x30 [ 1325.462892][ T9343] INITIAL USE at: [ 1325.467055][ T9343] lock_acquire+0x120/0x360 [ 1325.473707][ T9343] _raw_write_lock_irq+0xa2/0xf0 [ 1325.480651][ T9343] copy_process+0x21d5/0x3b80 [ 1325.487615][ T9343] kernel_clone+0x224/0x7f0 [ 1325.494206][ T9343] user_mode_thread+0xdd/0x140 [ 1325.501120][ T9343] rest_init+0x23/0x300 [ 1325.507460][ T9343] start_kernel+0x470/0x4f0 [ 1325.514341][ T9343] x86_64_start_reservations+0x2a/0x30 [ 1325.521834][ T9343] x86_64_start_kernel+0x66/0x70 [ 1325.528815][ T9343] common_startup_64+0x13e/0x147 [ 1325.536224][ T9343] INITIAL READ USE at: [ 1325.540862][ T9343] lock_acquire+0x120/0x360 [ 1325.547994][ T9343] _raw_read_lock+0x36/0x50 [ 1325.555174][ T9343] __do_wait+0xde/0x740 [ 1325.561813][ T9343] do_wait+0x1f8/0x520 [ 1325.568364][ T9343] kernel_wait+0xab/0x170 [ 1325.575063][ T9343] call_usermodehelper_exec_work+0xbe/0x230 [ 1325.583412][ T9343] process_scheduled_works+0xade/0x17a0 [ 1325.591318][ T9343] worker_thread+0x8a0/0xda0 [ 1325.598257][ T9343] kthread+0x711/0x8a0 [ 1325.604763][ T9343] ret_from_fork+0x4b/0x80 [ 1325.611614][ T9343] ret_from_fork_asm+0x1a/0x30 [ 1325.619107][ T9343] } [ 1325.621796][ T9343] ... key at: [] tasklist_lock+0x18/0x40 [ 1325.629906][ T9343] ... acquired at: [ 1325.633897][ T9343] lock_acquire+0x120/0x360 [ 1325.639060][ T9343] _raw_read_lock+0x36/0x50 [ 1325.643930][ T9343] send_sigurg+0x12b/0x420 [ 1325.648553][ T9343] sk_send_sigurg+0x6c/0x2e0 [ 1325.653323][ T9343] queue_oob+0x3d9/0x4e0 [ 1325.657762][ T9343] unix_stream_sendmsg+0xa41/0xb60 [ 1325.663408][ T9343] __sock_sendmsg+0x21c/0x270 [ 1325.668525][ T9343] ____sys_sendmsg+0x52d/0x830 [ 1325.673495][ T9343] ___sys_sendmsg+0x21f/0x2a0 [ 1325.678458][ T9343] __sys_sendmmsg+0x227/0x430 [ 1325.683323][ T9343] __x64_sys_sendmmsg+0xa0/0xc0 [ 1325.688442][ T9343] do_syscall_64+0xf6/0x210 [ 1325.693212][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.699284][ T9343] [ 1325.701621][ T9343] -> (&f_owner->lock){....}-{3:3} { [ 1325.706938][ T9343] INITIAL USE at: [ 1325.711047][ T9343] lock_acquire+0x120/0x360 [ 1325.717407][ T9343] _raw_write_lock_irq+0xa2/0xf0 [ 1325.724107][ T9343] __f_setown+0x67/0x370 [ 1325.730362][ T9343] tun_chr_fasync+0x128/0x1a0 [ 1325.736936][ T9343] do_fcntl+0x10a8/0x1910 [ 1325.743245][ T9343] __se_sys_fcntl+0xc8/0x150 [ 1325.749665][ T9343] do_syscall_64+0xf6/0x210 [ 1325.755914][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.763653][ T9343] INITIAL READ USE at: [ 1325.768639][ T9343] lock_acquire+0x120/0x360 [ 1325.775412][ T9343] _raw_read_lock_irq+0xaa/0xf0 [ 1325.783086][ T9343] do_fcntl+0x52c/0x1910 [ 1325.789544][ T9343] __se_sys_fcntl+0xc8/0x150 [ 1325.796406][ T9343] do_syscall_64+0xf6/0x210 [ 1325.803420][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.811511][ T9343] } [ 1325.814102][ T9343] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1325.823324][ T9343] ... acquired at: [ 1325.827289][ T9343] lock_acquire+0x120/0x360 [ 1325.832358][ T9343] _raw_read_lock_irqsave+0xaf/0x100 [ 1325.837841][ T9343] send_sigio+0x38/0x370 [ 1325.842519][ T9343] kill_fasync+0x24d/0x4d0 [ 1325.847324][ T9343] lease_break_callback+0x26/0x30 [ 1325.852547][ T9343] __break_lease+0x6a2/0x1620 [ 1325.857421][ T9343] do_dentry_open+0xd62/0x1970 [ 1325.862487][ T9343] vfs_open+0x3b/0x340 [ 1325.866775][ T9343] path_openat+0x2ee5/0x3830 [ 1325.871719][ T9343] do_filp_open+0x1fa/0x410 [ 1325.876557][ T9343] do_sys_openat2+0x121/0x1c0 [ 1325.881509][ T9343] __x64_sys_openat+0x138/0x170 [ 1325.887074][ T9343] do_syscall_64+0xf6/0x210 [ 1325.891759][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.897924][ T9343] [ 1325.900258][ T9343] -> (&new->fa_lock){....}-{3:3} { [ 1325.905411][ T9343] INITIAL USE at: [ 1325.909403][ T9343] lock_acquire+0x120/0x360 [ 1325.915765][ T9343] _raw_write_lock_irq+0xa2/0xf0 [ 1325.923003][ T9343] fasync_remove_entry+0xf1/0x1c0 [ 1325.929603][ T9343] tun_chr_fasync+0x87/0x1a0 [ 1325.935977][ T9343] __fput+0x89f/0xa70 [ 1325.941548][ T9343] task_work_run+0x1d4/0x260 [ 1325.948160][ T9343] resume_user_mode_work+0x5e/0x80 [ 1325.955017][ T9343] syscall_exit_to_user_mode+0x9a/0x120 [ 1325.962330][ T9343] do_syscall_64+0x103/0x210 [ 1325.968626][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.976284][ T9343] INITIAL READ USE at: [ 1325.980643][ T9343] lock_acquire+0x120/0x360 [ 1325.987352][ T9343] _raw_read_lock_irqsave+0xaf/0x100 [ 1325.994910][ T9343] kill_fasync+0x199/0x4d0 [ 1326.001333][ T9343] vcs_notifier+0x14b/0x1f0 [ 1326.007877][ T9343] notifier_call_chain+0x1b3/0x3e0 [ 1326.015191][ T9343] atomic_notifier_call_chain+0xda/0x180 [ 1326.023211][ T9343] vcs_scr_updated+0x8c/0xd0 [ 1326.029995][ T9343] vcs_write+0x105f/0x1260 [ 1326.036418][ T9343] vfs_write+0x27e/0xa90 [ 1326.042700][ T9343] ksys_write+0x145/0x250 [ 1326.049157][ T9343] do_syscall_64+0xf6/0x210 [ 1326.055867][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.063780][ T9343] } [ 1326.066293][ T9343] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1326.074998][ T9343] ... acquired at: [ 1326.078895][ T9343] lock_acquire+0x120/0x360 [ 1326.083775][ T9343] _raw_read_lock_irqsave+0xaf/0x100 [ 1326.089308][ T9343] kill_fasync+0x199/0x4d0 [ 1326.094123][ T9343] mousedev_notify_readers+0x6f1/0xc00 [ 1326.099901][ T9343] mousedev_event+0x602/0x1320 [ 1326.104959][ T9343] input_handle_events_default+0xd4/0x1a0 [ 1326.111056][ T9343] input_pass_values+0x285/0x890 [ 1326.116289][ T9343] input_event_dispose+0x330/0x6b0 [ 1326.121775][ T9343] input_inject_event+0x1fe/0x320 [ 1326.127010][ T9343] evdev_write+0x2fc/0x480 [ 1326.131652][ T9343] vfs_write+0x27e/0xa90 [ 1326.136117][ T9343] ksys_write+0x145/0x250 [ 1326.140646][ T9343] do_syscall_64+0xf6/0x210 [ 1326.145336][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.151414][ T9343] [ 1326.153826][ T9343] [ 1326.153826][ T9343] stack backtrace: [ 1326.160420][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: syz.6.16943 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1326.160441][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1326.160450][ T9343] Call Trace: [ 1326.160459][ T9343] [ 1326.160467][ T9343] dump_stack_lvl+0x189/0x250 [ 1326.160489][ T9343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1326.160507][ T9343] ? __pfx__printk+0x10/0x10 [ 1326.160533][ T9343] validate_chain+0x1f05/0x2140 [ 1326.160564][ T9343] __lock_acquire+0xaac/0xd20 [ 1326.160583][ T9343] ? kill_fasync+0x199/0x4d0 [ 1326.160600][ T9343] lock_acquire+0x120/0x360 [ 1326.160617][ T9343] ? kill_fasync+0x199/0x4d0 [ 1326.160634][ T9343] ? __lock_acquire+0xaac/0xd20 [ 1326.160654][ T9343] _raw_read_lock_irqsave+0xaf/0x100 [ 1326.160671][ T9343] ? kill_fasync+0x199/0x4d0 [ 1326.160687][ T9343] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1326.160705][ T9343] kill_fasync+0x199/0x4d0 [ 1326.160721][ T9343] ? kill_fasync+0x53/0x4d0 [ 1326.160737][ T9343] mousedev_notify_readers+0x6f1/0xc00 [ 1326.160761][ T9343] ? mousedev_notify_readers+0x2c/0xc00 [ 1326.160781][ T9343] mousedev_event+0x602/0x1320 [ 1326.160801][ T9343] input_handle_events_default+0xd4/0x1a0 [ 1326.160817][ T9343] ? input_pass_values+0x8d/0x890 [ 1326.160836][ T9343] input_pass_values+0x285/0x890 [ 1326.160858][ T9343] ? input_handle_event+0x70c/0xf30 [ 1326.160875][ T9343] input_event_dispose+0x330/0x6b0 [ 1326.160894][ T9343] input_inject_event+0x1fe/0x320 [ 1326.160911][ T9343] ? input_inject_event+0xbc/0x320 [ 1326.160928][ T9343] evdev_write+0x2fc/0x480 [ 1326.160943][ T9343] ? __pfx_evdev_write+0x10/0x10 [ 1326.160964][ T9343] ? bpf_lsm_file_permission+0x9/0x20 [ 1326.160981][ T9343] ? security_file_permission+0x75/0x290 [ 1326.160998][ T9343] ? rw_verify_area+0x258/0x650 [ 1326.161016][ T9343] ? __pfx_evdev_write+0x10/0x10 [ 1326.161036][ T9343] vfs_write+0x27e/0xa90 [ 1326.161057][ T9343] ? __pfx_vfs_write+0x10/0x10 [ 1326.161076][ T9343] ? __fget_files+0x2a/0x420 [ 1326.161090][ T9343] ? __fget_files+0x2a/0x420 [ 1326.161102][ T9343] ? __fget_files+0x3a0/0x420 [ 1326.161114][ T9343] ? __fget_files+0x2a/0x420 [ 1326.161139][ T9343] ksys_write+0x145/0x250 [ 1326.161157][ T9343] ? rcu_is_watching+0x15/0xb0 [ 1326.161178][ T9343] ? __pfx_ksys_write+0x10/0x10 [ 1326.161197][ T9343] ? do_syscall_64+0xba/0x210 [ 1326.161216][ T9343] do_syscall_64+0xf6/0x210 [ 1326.161234][ T9343] ? clear_bhb_loop+0x60/0xb0 [ 1326.161250][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.161264][ T9343] RIP: 0033:0x7f944078e969 [ 1326.161279][ T9343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.161292][ T9343] RSP: 002b:00007f94415c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1326.161309][ T9343] RAX: ffffffffffffffda RBX: 00007f94409b5fa0 RCX: 00007f944078e969 [ 1326.161320][ T9343] RDX: 0000000000000078 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1326.161330][ T9343] RBP: 00007f9440810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1326.161339][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1326.161349][ T9343] R13: 0000000000000000 R14: 00007f94409b5fa0 R15: 00007fff13f68238 [ 1326.161364][ T9343] [ 1326.477401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.544031][T31329] az6027: usb out operation failed. (-71) [ 1326.550288][T31329] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1326.558610][T31329] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input127 [ 1326.572319][T31329] dvb-usb: schedule remote query interval to 400 msecs. [ 1326.579401][T31329] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1326.592941][T31329] usb 3-1: USB disconnect, device number 58 [ 1326.615470][T31329] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.