last executing test programs: 6m28.801923925s ago: executing program 2 (id=5346): r0 = socket(0x200000000000011, 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) 6m28.558124722s ago: executing program 2 (id=5352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001f2feff00000000d40f000085000000ae000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 6m28.401462049s ago: executing program 2 (id=5356): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000080)="e5786a0d000000000000c83b", 0xfedb, 0x80, &(0x7f0000000100)={0x2, 0x0, @local, 0x3}, 0x10) 6m28.166124868s ago: executing program 2 (id=5363): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x28, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m27.970282331s ago: executing program 2 (id=5368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 6m27.769795084s ago: executing program 2 (id=5374): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0xfffe, 0x0, {'\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x2000000000001005, 0x10001}}}, 0x90) 6m11.708920628s ago: executing program 32 (id=5374): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0xfffe, 0x0, {'\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x2000000000001005, 0x10001}}}, 0x90) 2m42.630429775s ago: executing program 4 (id=8905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x4, 0x4, 0x20bf22, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 2m42.340245476s ago: executing program 4 (id=8910): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1002, 0xb, 0x8012, r0, 0x83000000) 2m42.120291293s ago: executing program 4 (id=8913): r0 = io_uring_setup(0x7bd7, &(0x7f0000000080)={0x0, 0x6ce3, 0x800, 0x0, 0x10b}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x19, 0x2000000, 0x0) 2m41.962837787s ago: executing program 4 (id=8916): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt(r0, 0x101, 0x0, 0x0, 0x0) 2m41.855683472s ago: executing program 4 (id=8918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003240)=ANY=[@ANYBLOB="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"], 0x1124}}, 0x0) 2m41.666299756s ago: executing program 4 (id=8921): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m38.765085658s ago: executing program 3 (id=8967): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x10, 0x4, 0x418, 0x220, 0x220, 0x220, 0x330, 0x330, 0x330, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @mac=@remote, @rand_addr=0x64010102, @local, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @loopback, @empty, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 2m38.586741156s ago: executing program 3 (id=8970): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m38.376841334s ago: executing program 3 (id=8973): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) 2m38.307159385s ago: executing program 3 (id=8976): r0 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x11d, 0x20, 0x0, 0x0) 2m38.196213576s ago: executing program 3 (id=8979): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000240)=0x1, 0x4) 2m38.004360987s ago: executing program 3 (id=8982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 2m25.503894975s ago: executing program 33 (id=8921): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m21.870439171s ago: executing program 34 (id=8982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) 4.777878737s ago: executing program 6 (id=10941): r0 = syz_open_dev$video(&(0x7f0000000180), 0x403, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) 4.472639113s ago: executing program 6 (id=10945): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffc, 0x9, 0x32315241, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x3, 0x5}, {0x3, 0x5}, {0x6, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x5}}) 4.269154742s ago: executing program 6 (id=10947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x74, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 3.892287958s ago: executing program 6 (id=10952): syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) syz_usbip_server_init(0x5) 3.542674238s ago: executing program 5 (id=10957): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x4, 0x0, 0x0) 3.16866285s ago: executing program 5 (id=10961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.811888671s ago: executing program 5 (id=10963): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, &(0x7f0000000340)) 2.41644433s ago: executing program 5 (id=10965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x9c}}, 0x0) 2.114407272s ago: executing program 5 (id=10968): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0xf, 0x4, "216674f0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.907975136s ago: executing program 7 (id=10970): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000100)=0x4) 1.791095341s ago: executing program 1 (id=10971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ff}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff086dd1f", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.711091735s ago: executing program 0 (id=10972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) 1.708076879s ago: executing program 6 (id=10973): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) 1.541821891s ago: executing program 7 (id=10974): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x560d) 1.444218085s ago: executing program 0 (id=10975): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dmm32at\x00', [0x9e1, 0x2566, 0x2, 0x100000, 0xa, 0x0, 0x5, 0x12, 0x1002, 0xffffffff, 0x1, 0x5, 0x3ff, 0x401, 0x7, 0x5, 0x8, 0x3, 0xb, 0x75, 0x100, 0x1003, 0x9, 0x7, 0x5, 0x1, 0xb2c4, 0x7db, 0x8, 0x400007, 0x1]}) 1.341736036s ago: executing program 1 (id=10976): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) 1.320724669s ago: executing program 6 (id=10977): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.241087693s ago: executing program 7 (id=10978): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 1.160203165s ago: executing program 0 (id=10979): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000003c0)) prlimit64(0x0, 0x0, 0x0, 0x0) 1.086303907s ago: executing program 1 (id=10980): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0xfffffffc, 0x7, 0x1, {0xa, @pix_mp={0x9, 0x181, 0x0, 0x9, 0x2, [{0x5, 0xfffffffe}, {0xffffffff, 0x8}, {0xa64a80ed, 0xfffffff2}, {0x200, 0x3ff}, {0x5, 0x2000001}, {0x4cc, 0x8}, {0x7ff, 0x9}, {0x30000006, 0x1}], 0x1, 0xfe, 0x0, 0x1, 0x1}}, 0x3}) 848.137487ms ago: executing program 7 (id=10981): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x4) 757.531876ms ago: executing program 0 (id=10982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000002060300000000000000000a00000000050004000000f2ff0800020073797a31"], 0x68}, 0x1, 0x0, 0x0, 0x844}, 0x4040004) 597.02925ms ago: executing program 1 (id=10983): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$smackfs_ptrace(r0, 0x0, 0x0) 389.338275ms ago: executing program 7 (id=10984): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x300000, 0x6) 363.223575ms ago: executing program 0 (id=10985): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x12) 270.029167ms ago: executing program 1 (id=10986): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000280)='!\x00', 0x2) 263.122371ms ago: executing program 5 (id=10987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 60.428711ms ago: executing program 7 (id=10988): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 1.961287ms ago: executing program 0 (id=10989): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0xfffffffe, 0x4) 0s ago: executing program 1 (id=10990): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='8', 0x1}], 0x2) kernel console output (not intermixed with test programs): ridge_slave_1) entered disabled state [ 728.677566][T25884] bridge_slave_1: entered allmulticast mode [ 728.685629][T25884] bridge_slave_1: entered promiscuous mode [ 728.730102][ T6119] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 728.872297][T25884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.915076][ T6119] usb 2-1: Using ep0 maxpacket: 16 [ 728.919342][T25884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.937361][ T6119] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 728.947865][ T6119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 728.980560][ T6119] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 729.039945][ T6119] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 729.082262][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.105610][ T6119] usb 2-1: Product: syz [ 729.109890][ T6119] usb 2-1: Manufacturer: syz [ 729.137964][ T6119] usb 2-1: SerialNumber: syz [ 729.140090][T25884] team0: Port device team_slave_0 added [ 729.180633][ T6119] usb 2-1: config 0 descriptor?? [ 729.188460][T25965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 729.210016][T25884] team0: Port device team_slave_1 added [ 729.395053][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 729.401556][ T6119] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 729.409361][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 729.492491][ T6119] usb 2-1: USB disconnect, device number 18 [ 729.525063][T25884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.526369][ T6119] mcba_usb 2-1:0.0 can0: device disconnected [ 729.553900][T25884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.671875][T25884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.798657][ T5869] Bluetooth: hci6: command tx timeout [ 729.840161][T25884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.862531][T25884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.890225][T25884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.896354][ T6077] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 730.071048][T25884] hsr_slave_0: entered promiscuous mode [ 730.098981][T25884] hsr_slave_1: entered promiscuous mode [ 730.109929][ T6077] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 730.118112][ T6077] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.135148][T25884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.146913][ T6077] usb 1-1: config 0 has no interface number 0 [ 730.168727][T25884] Cannot create hsr debugfs directory [ 730.174567][ T6077] usb 1-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.209669][T25791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.227426][ T6077] usb 1-1: config 0 interface 25 has no altsetting 0 [ 730.242794][ T6077] usb 1-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 730.256074][ T6077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.272442][ T6077] usb 1-1: Product: syz [ 730.276783][ T6077] usb 1-1: Manufacturer: syz [ 730.300249][ T6077] usb 1-1: SerialNumber: syz [ 730.324198][ T6077] usb 1-1: config 0 descriptor?? [ 730.578861][ T6077] usb 1-1: Found UVC 0.00 device syz (1b3b:2951) [ 730.585304][ T6077] usb 1-1: No valid video chain found. [ 730.613521][T26001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.653664][ T5869] Bluetooth: hci5: command tx timeout [ 730.794552][ T5915] usb 1-1: USB disconnect, device number 16 [ 731.185224][T25884] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 731.245696][T25884] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 731.291333][T25884] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 731.331525][T25884] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 731.594637][ T30] kauditd_printk_skb: 25875 callbacks suppressed [ 731.594658][ T30] audit: type=1400 audit(2000000095.463:591266): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26027 comm="modprobe" name="usr" dev="sda1" ino=1480 [ 731.656663][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.668466][T26030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.675298][ T6473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.675323][ T6473] audit: audit_lost=99127 audit_rate_limit=0 audit_backlog_limit=64 [ 731.675340][ T6473] audit: backlog limit exceeded [ 731.675366][ T6473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.675380][ T6473] audit: audit_lost=99128 audit_rate_limit=0 audit_backlog_limit=64 [ 731.675396][ T6473] audit: backlog limit exceeded [ 731.675413][ T6473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.818248][T25884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.921967][T25884] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.958127][T25791] veth0_vlan: entered promiscuous mode [ 731.987235][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.994503][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.014626][ T5869] Bluetooth: hci6: command tx timeout [ 732.036590][T26039] netlink: 'syz.5.9265': attribute type 11 has an invalid length. [ 732.079285][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.086512][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.186716][T25791] veth1_vlan: entered promiscuous mode [ 732.486535][T25791] veth0_macvtap: entered promiscuous mode [ 732.512915][T25791] veth1_macvtap: entered promiscuous mode [ 732.585733][T25791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.645766][T25791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.701038][T25791] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.762693][T25791] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.787205][T25791] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.813454][T25791] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.936827][T26058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.132812][T26061] SET target dimension over the limit! [ 733.328921][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.371203][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.558563][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.568543][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.651615][T25884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.234971][ T5869] Bluetooth: hci6: command tx timeout [ 735.090989][T26108] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 735.494159][T25884] veth0_vlan: entered promiscuous mode [ 735.574804][T26123] ./file0: Can't open blockdev [ 735.599527][T25884] veth1_vlan: entered promiscuous mode [ 735.738313][T26127] xt_l2tp: v2 doesn't support IP mode [ 735.802539][T25884] veth0_macvtap: entered promiscuous mode [ 735.855421][T25884] veth1_macvtap: entered promiscuous mode [ 735.947420][T26132] x_tables: duplicate underflow at hook 2 [ 735.974576][T25884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.070672][T25884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.119294][T25884] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.201000][T25884] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.226508][T25884] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.276639][T25884] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.640513][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.669059][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.676878][ T5904] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 736.863732][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.892469][ T5904] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 736.928900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.941763][ T5904] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 736.950705][ T30] kauditd_printk_skb: 26665 callbacks suppressed [ 736.950724][ T30] audit: type=1400 audit(2000000100.477:608221): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 736.950768][ T30] audit: type=1400 audit(2000000100.477:608222): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sysfs" ino=1 [ 736.950828][ T30] audit: type=1400 audit(2000000100.477:608223): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="devices" dev="sysfs" ino=7 [ 736.950875][ T30] audit: type=1400 audit(2000000100.477:608224): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="virtual" dev="sysfs" ino=1370 [ 736.950939][ T30] audit: type=1400 audit(2000000100.477:608225): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="block" dev="sysfs" ino=13135 [ 736.950982][ T30] audit: type=1400 audit(2000000100.477:608226): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="loop5" dev="sysfs" ino=15493 [ 736.951025][ T30] audit: type=1400 audit(2000000100.477:608227): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 736.951066][ T30] audit: type=1400 audit(2000000100.477:608228): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sysfs" ino=1 [ 736.951110][ T30] audit: type=1400 audit(2000000100.477:608229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="devices" dev="sysfs" ino=7 [ 736.994015][ T5904] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 737.022576][T26156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 737.188473][T26160] __nla_validate_parse: 45 callbacks suppressed [ 737.188495][T26160] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.9309'. [ 737.200551][ T5904] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.221552][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.251188][T26160] netlink: 3696 bytes leftover after parsing attributes in process `syz.5.9309'. [ 737.277907][ T5904] usb 7-1: Product: syz [ 737.306309][ T5904] usb 7-1: Manufacturer: syz [ 737.311001][ T5904] usb 7-1: SerialNumber: syz [ 737.366948][ T5904] cdc_ncm 7-1:1.0: invalid descriptor buffer length [ 737.389096][ T5904] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 737.428553][ T5904] cdc_ncm 7-1:1.0: bind() failure [ 737.766397][ T6064] usb 7-1: USB disconnect, device number 2 [ 737.773490][ T5915] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 737.955871][ T5915] usb 8-1: Using ep0 maxpacket: 32 [ 737.975718][ T5915] usb 8-1: unable to get BOS descriptor or descriptor too short [ 738.003930][ T5915] usb 8-1: config 255 has an invalid interface number: 81 but max is 0 [ 738.037979][ T5915] usb 8-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 738.077424][ T5915] usb 8-1: config 255 has no interface number 0 [ 738.110797][ T5915] usb 8-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 738.132718][ T5915] usb 8-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 738.146653][ T5915] usb 8-1: config 255 interface 81 has no altsetting 0 [ 738.166943][ T5915] usb 8-1: string descriptor 0 read error: -22 [ 738.199741][ T5915] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 738.229483][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.301969][ T5915] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:255.81/input/input75 [ 738.727981][T26197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9323'. [ 738.750365][ T5904] usb 8-1: USB disconnect, device number 2 [ 739.318656][T26216] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9329'. [ 739.921600][T26234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9337'. [ 741.033952][ T6057] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 741.072277][T26271] netlink: 'syz.5.9355': attribute type 10 has an invalid length. [ 741.096233][T26272] netlink: 'syz.6.9354': attribute type 11 has an invalid length. [ 741.129334][T26271] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.138561][T26272] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9354'. [ 741.155431][T26271] bond0: (slave team0): Enslaving as an active interface with an up link [ 741.237017][ T6057] usb 2-1: Using ep0 maxpacket: 32 [ 741.274541][ T6057] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 741.321916][ T6057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.344767][ T6057] usb 2-1: Product: syz [ 741.349011][ T6057] usb 2-1: Manufacturer: syz [ 741.386246][ T6057] usb 2-1: SerialNumber: syz [ 741.410306][ T6057] usb 2-1: config 0 descriptor?? [ 741.417462][T26283] cgroup: subsys name conflicts with all [ 741.660740][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9363'. [ 741.670139][ T6057] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 741.679339][ T5915] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 741.698878][T26289] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9363'. [ 741.707261][ T6057] eb aa 00 00 00 00 00 00 [ 741.712555][ T6057] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 741.728007][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9363'. [ 741.789183][T26289] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9363'. [ 741.805062][T26291] macvtap0: entered allmulticast mode [ 741.812863][T26291] veth0_macvtap: entered allmulticast mode [ 741.882752][ T6057] usb 2-1: USB disconnect, device number 19 [ 741.899394][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 741.924509][ T5915] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 741.935050][ T5915] usb 6-1: config 179 has no interface number 0 [ 741.941409][ T5915] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 741.999978][ T5915] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 742.044292][ T5915] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 742.081087][ T5915] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 742.111553][T26298] i2c i2c-0: Invalid block write size 35 [ 742.119119][ T5915] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 742.166610][ T5915] usb 6-1: config 179 interface 65 has no altsetting 0 [ 742.183293][ T5915] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 742.209400][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.268155][ T5915] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input76 [ 742.305583][ T30] kauditd_printk_skb: 31906 callbacks suppressed [ 742.305603][ T30] audit: type=1400 audit(2000000105.472:626918): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5206 comm="udevd" path="/sys/devices/virtual/block/loop5/power" dev="sysfs" ino=15528 [ 742.346078][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 742.354855][T26302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 742.363055][ T5206] audit: audit_lost=106773 audit_rate_limit=0 audit_backlog_limit=64 [ 742.371309][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 742.378071][T26302] audit: audit_lost=106774 audit_rate_limit=0 audit_backlog_limit=64 [ 742.387327][ T26] audit: audit_lost=106775 audit_rate_limit=0 audit_backlog_limit=64 [ 742.395995][ T5206] audit: backlog limit exceeded [ 742.401021][ T30] audit: type=1400 audit(2000000105.482:626920): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5206 comm="udevd" path="/sys/devices/virtual/block/loop5/power" dev="sysfs" ino=15528 [ 742.408210][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 742.498318][ T5191] input input76: unable to receive magic message: -110 [ 742.576139][ T5191] input input76: unable to receive magic message: -32 [ 742.633162][ T5191] input input76: unable to receive magic message: -32 [ 742.710130][ T5191] input input76: unable to receive magic message: -32 [ 742.751543][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 742.751554][ T5904] usb 6-1: USB disconnect, device number 24 [ 742.766590][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 742.799400][T26314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.081953][T26324] __nla_validate_parse: 1 callbacks suppressed [ 743.081976][T26324] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.9380'. [ 744.274555][T26363] netlink: 'syz.6.9399': attribute type 32 has an invalid length. [ 744.315495][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9399'. [ 744.366919][T26363] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 744.983932][T26381] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 745.406452][ T5904] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 745.631404][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 745.639236][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 745.673179][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 745.708971][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 745.731694][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.766796][ T5904] usb 1-1: Product: syz [ 745.785475][ T5904] usb 1-1: Manufacturer: syz [ 745.802304][ T5904] usb 1-1: SerialNumber: syz [ 746.276328][ T5904] usb 1-1: cannot find UAC_HEADER [ 746.284889][T26422] Cannot find add_set index 0 as target [ 746.298489][T26421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9427'. [ 746.352216][ T5904] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 746.393012][ T5904] usb 1-1: USB disconnect, device number 17 [ 746.776751][T26435] libceph: resolve '0.0' (ret=-3): failed [ 747.665554][ T30] kauditd_printk_skb: 29656 callbacks suppressed [ 747.665576][ T30] audit: type=1400 audit(2000000110.496:643766): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sysfs" ino=1 [ 747.696538][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 747.703137][ T5206] audit: audit_lost=111046 audit_rate_limit=0 audit_backlog_limit=64 [ 747.704397][T25791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 747.712902][T26473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 747.725037][ T5206] audit: backlog limit exceeded [ 747.747276][T26473] audit: audit_lost=111047 audit_rate_limit=0 audit_backlog_limit=64 [ 747.751171][T25791] audit: audit_lost=111048 audit_rate_limit=0 audit_backlog_limit=64 [ 747.756686][ T30] audit: type=1400 audit(2000000110.496:643767): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="devices" dev="sysfs" ino=7 [ 747.774389][T26474] audit: audit_backlog=65 > audit_backlog_limit=64 [ 748.848331][ T6064] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 748.890695][ T5915] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 748.922897][ T6057] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 749.031294][ T6064] usb 8-1: Using ep0 maxpacket: 32 [ 749.049445][ T6064] usb 8-1: config 4 has an invalid interface number: 128 but max is 0 [ 749.057942][ T3092] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 749.067858][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 749.072804][ T5904] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 749.077027][ T6064] usb 8-1: config 4 has no interface number 0 [ 749.088745][ T6064] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.102646][ T6057] usb 6-1: Using ep0 maxpacket: 16 [ 749.111680][ T5915] usb 7-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 749.126991][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 749.137419][ T6064] usb 8-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.149092][ T6057] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 749.159358][ T5915] usb 7-1: Product: syz [ 749.163614][ T5915] usb 7-1: SerialNumber: syz [ 749.168706][ T6057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.177466][ T6064] usb 8-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 749.187751][ T6057] usb 6-1: Product: syz [ 749.193141][ T6064] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.201768][ T6057] usb 6-1: Manufacturer: syz [ 749.206695][ T6057] usb 6-1: SerialNumber: syz [ 749.214475][ T5915] usb 7-1: config 0 descriptor?? [ 749.227089][ T6064] hub 8-1:4.128: USB hub found [ 749.239907][ T5915] usb 7-1: Found UVC 0.00 device syz (045e:0721) [ 749.247638][ T6057] r8152-cfgselector 6-1: Unknown version 0x0000 [ 749.256925][ T3092] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 749.266899][ T6057] r8152-cfgselector 6-1: config 0 descriptor?? [ 749.272501][ T5904] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 749.273511][ T5915] usb 7-1: No valid video chain found. [ 749.289156][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.308402][ T5904] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 749.309908][ T3092] usb 1-1: config 0 descriptor?? [ 749.316554][ T5904] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 749.316600][ T5904] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 749.316647][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 749.316676][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 749.329863][ T3092] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 749.390372][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 749.422016][ T5904] usb 2-1: string descriptor 0 read error: -22 [ 749.438325][ T5904] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 749.453356][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.469680][ T6064] hub 8-1:4.128: 2 ports detected [ 749.473460][ T5904] usb 2-1: config 0 descriptor?? [ 749.474869][ T6064] hub 8-1:4.128: Using single TT (err -22) [ 749.484031][T26516] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 749.509194][ T5904] hub 2-1:0.0: bad descriptor, ignoring hub [ 749.521007][ T6077] usb 7-1: USB disconnect, device number 3 [ 749.559483][ T5904] hub 2-1:0.0: probe with driver hub failed with error -5 [ 749.582615][ T5904] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input77 [ 749.683331][ T6064] hub 8-1:4.128: hub_hub_status failed (err = -71) [ 749.701371][ T6064] hub 8-1:4.128: config failed, can't get hub status (err -71) [ 749.755373][ T6057] r8152-cfgselector 6-1: USB disconnect, device number 25 [ 749.767418][ T6064] usb 8-1: USB disconnect, device number 3 [ 749.798194][ T6077] usb 2-1: USB disconnect, device number 20 [ 749.802296][ T3092] gp8psk: usb in 128 operation failed. [ 749.827126][ T3092] gp8psk: usb in 137 operation failed. [ 749.840046][ T3092] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 749.852669][ T3092] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 749.876423][ T3092] usb 1-1: USB disconnect, device number 18 [ 751.144925][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.171703][T26538] netlink: 'syz.5.9484': attribute type 1 has an invalid length. [ 751.213200][T26538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9484'. [ 751.489278][T26542] xt_hashlimit: max too large, truncated to 1048576 [ 752.884356][T26572] libceph: resolve '4..' (ret=-3): failed [ 753.024394][ T5935] audit_log_start: 65573 callbacks suppressed [ 753.024413][ T5935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.034560][ T30] audit: type=1400 audit(2000000115.510:668966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 753.042650][ T6216] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.057072][T17861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.065720][ T5935] audit: audit_lost=124507 audit_rate_limit=0 audit_backlog_limit=64 [ 753.079751][T26577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.086639][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.086667][ C0] audit: audit_lost=124508 audit_rate_limit=0 audit_backlog_limit=64 [ 753.086687][ C0] audit: backlog limit exceeded [ 753.094270][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 753.349417][T26585] overlayfs: conflicting options: nfs_export=on,index=off [ 754.324597][T26614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.887903][T26631] netlink: 'syz.0.9523': attribute type 21 has an invalid length. [ 754.895883][T26631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9523'. [ 755.376286][T26644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.411896][ T5904] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 755.615010][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 755.658006][ T5904] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 755.666277][ T5904] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 755.747972][ T5904] usb 2-1: config 0 has no interface number 0 [ 755.780549][ T5904] usb 2-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 755.807063][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.832732][ T5904] usb 2-1: Product: syz [ 755.837001][ T5904] usb 2-1: Manufacturer: syz [ 755.864283][ T5904] usb 2-1: SerialNumber: syz [ 755.893649][ T5904] usb 2-1: config 0 descriptor?? [ 755.921968][ T5904] cdc_acm 2-1:0.123: More than one union descriptor, skipping ... [ 755.973479][ T5904] cdc_acm 2-1:0.123: skipping garbage [ 756.163326][ T6064] usb 2-1: USB disconnect, device number 21 [ 756.822649][ T6077] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 757.020408][ T6077] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 757.053551][ T6077] usb 6-1: config 0 has no interface number 0 [ 757.089994][ T6077] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 757.155388][ T6077] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 757.175494][ T6077] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.183562][ T6077] usb 6-1: Product: syz [ 757.246807][ T6077] usb 6-1: Manufacturer: syz [ 757.260884][ T6077] usb 6-1: SerialNumber: syz [ 757.298758][ T6077] usb 6-1: config 0 descriptor?? [ 757.342395][ T6077] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 757.840846][ T6077] usb 6-1: USB disconnect, device number 26 [ 757.861310][ T6077] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 758.372642][ T30] kauditd_printk_skb: 49931 callbacks suppressed [ 758.372664][ T30] audit: type=1400 audit(2000000120.496:690726): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=25884 comm="syz-executor" name="52" dev="tmpfs" ino=276 [ 758.373623][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.379089][ T30] audit: type=1400 audit(2000000120.505:690727): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5933 comm="syz-executor" name="1994" dev="tmpfs" ino=10005 [ 758.405290][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.430425][ C0] audit: audit_lost=133901 audit_rate_limit=0 audit_backlog_limit=64 [ 758.438579][ C0] audit: backlog limit exceeded [ 758.443665][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.450257][ C0] audit: audit_lost=133902 audit_rate_limit=0 audit_backlog_limit=64 [ 758.458425][ C0] audit: backlog limit exceeded [ 758.463976][ T6473] audit: audit_backlog=66 > audit_backlog_limit=64 [ 758.535197][T26731] comedi comedi3: rti800: I/O port conflict (0x4f27,16) [ 758.544066][ T6077] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 758.647325][T26735] openvswitch: netlink: Missing key (keys=40, expected=100) [ 758.736162][ T6077] usb 1-1: Using ep0 maxpacket: 8 [ 758.745153][ T6077] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 758.757480][ T6077] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 758.788059][ T6077] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 758.814517][ T6077] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 758.843014][ T6077] usb 1-1: config 0 has no interface number 0 [ 758.860314][ T6077] usb 1-1: config 0 has no interface number 1 [ 758.875350][ T6077] usb 1-1: config 0 has no interface number 2 [ 758.881577][ T6077] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.931826][ T6077] usb 1-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 758.990019][ T6077] usb 1-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 759.047108][ T6077] usb 1-1: config 0 interface 150 has no altsetting 0 [ 759.086510][ T6077] usb 1-1: config 0 interface 112 has no altsetting 0 [ 759.108110][ T6077] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 759.162979][ T6077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.222135][ T6077] usb 1-1: config 0 descriptor?? [ 759.508746][ T6077] usb 1-1: string descriptor 0 read error: -71 [ 759.568572][ T6077] usb 1-1: USB disconnect, device number 19 [ 760.400511][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9602'. [ 760.446219][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9602'. [ 760.575155][T26795] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9604'. [ 760.906443][ T6077] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 761.130696][ T6077] usb 8-1: unable to get BOS descriptor or descriptor too short [ 761.149129][T26814] netlink: 244 bytes leftover after parsing attributes in process `syz.5.9613'. [ 761.158421][ T6077] usb 8-1: config 7 has an invalid interface number: 181 but max is 0 [ 761.194801][ T6077] usb 8-1: config 7 has no interface number 0 [ 761.201031][ T6077] usb 8-1: config 7 interface 181 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 761.269899][ T6077] usb 8-1: config 7 interface 181 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 32 [ 761.306641][ T6077] usb 8-1: config 7 interface 181 has no altsetting 0 [ 761.347522][ T6077] usb 8-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=2a.3d [ 761.374958][ T6077] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.396180][ T6077] usb 8-1: Product: syz [ 761.412202][ T6077] usb 8-1: Manufacturer: syz [ 761.434643][ T6077] usb 8-1: SerialNumber: syz [ 761.485801][T26799] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 761.751237][ T6077] port100 8-1:7.181: NFC: Could not find bulk-in or bulk-out endpoint [ 761.814034][ T6077] usb 8-1: USB disconnect, device number 4 [ 762.758556][T26866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9639'. [ 763.113784][T26878] netlink: 'syz.7.9645': attribute type 11 has an invalid length. [ 763.449051][T26892] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 763.455665][T26892] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 763.521596][T26892] vhci_hcd vhci_hcd.0: Device attached [ 763.588757][T26895] vhci_hcd vhci_hcd.0: port 0 already used [ 763.628998][T26893] vhci_hcd: connection closed [ 763.632147][ T36] vhci_hcd: stop threads [ 763.659288][ T36] vhci_hcd: release socket [ 763.663805][ T36] vhci_hcd: disconnect device [ 763.730546][ T30] kauditd_printk_skb: 33671 callbacks suppressed [ 763.730567][ T30] audit: type=1400 audit(2000000125.538:709478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sysfs" ino=1 [ 763.751431][T17861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 763.755981][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 763.768309][ C0] audit: audit_lost=138877 audit_rate_limit=0 audit_backlog_limit=64 [ 763.776488][ C0] audit: backlog limit exceeded [ 763.782154][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 763.782158][T17861] audit: audit_lost=138878 audit_rate_limit=0 audit_backlog_limit=64 [ 763.782180][T17861] audit: backlog limit exceeded [ 763.788805][ C0] audit: audit_lost=138879 audit_rate_limit=0 audit_backlog_limit=64 [ 763.806945][T17861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.360041][T26984] openvswitch: netlink: Flow key attribute not present in set flow. [ 766.433638][T26986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9694'. [ 766.464093][T26986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9694'. [ 767.300221][T27019] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 767.847515][T27039] Cannot find add_set index 0 as target [ 768.285131][ T5904] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 768.432160][T27058] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 768.457238][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 768.508238][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 768.523086][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.560326][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.589660][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 768.645146][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 768.704554][ T5904] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 768.720530][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.757046][ T5904] usb 1-1: config 0 descriptor?? [ 768.764648][T27044] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 769.084002][ T30] kauditd_printk_skb: 35574 callbacks suppressed [ 769.084022][ T30] audit: type=1400 audit(2000000130.533:729180): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27077 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 769.091474][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.119637][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.127038][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.133974][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.141077][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.148156][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.155076][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.162319][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.169256][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.176292][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.183402][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.190314][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.197367][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.205643][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.214417][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.221371][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.228486][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.235817][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.238611][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 769.242706][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.256358][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.256859][ T30] audit: type=1400 audit(2000000130.542:729181): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=27042 comm="syz.0.9722" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 769.263234][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.290317][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.297325][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.305011][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.306847][T27079] audit: audit_backlog=65 > audit_backlog_limit=64 [ 769.312121][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.320410][ T5933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 769.326487][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 769.339745][ C0] audit: audit_lost=144171 audit_rate_limit=0 audit_backlog_limit=64 [ 769.343877][ T6064] usb 1-1: USB disconnect, device number 20 [ 769.347922][ C0] audit: backlog limit exceeded [ 769.359031][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.362568][ T5206] audit: audit_lost=144172 audit_rate_limit=0 audit_backlog_limit=64 [ 769.366245][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 769.381255][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.388757][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.396595][ T51] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 769.405501][ T5869] Bluetooth: hci7: Opcode 0x0c03 failed: -71 [ 769.563568][T27087] overlay: Bad value for 'workdir' [ 769.913328][ T6120] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 770.016679][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.123527][ T6120] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 770.148996][ T6120] usb 8-1: config 0 has no interface number 0 [ 770.162833][ T6120] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 770.239120][ T6120] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 770.301293][ T6120] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 770.325426][ T6120] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.333524][ T6120] usb 8-1: Product: syz [ 770.388273][ T6120] usb 8-1: Manufacturer: syz [ 770.393013][ T6120] usb 8-1: SerialNumber: syz [ 770.463477][ T6077] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 770.485392][ T6120] usb 8-1: config 0 descriptor?? [ 770.491632][T27090] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 770.537383][ T6120] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 770.602593][ T6120] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 770.684720][ T6077] usb 7-1: Using ep0 maxpacket: 8 [ 770.727811][ T6077] usb 7-1: unable to get BOS descriptor or descriptor too short [ 770.787782][ T6077] usb 7-1: config 248 has an invalid interface number: 3 but max is 2 [ 770.814103][ T6077] usb 7-1: config 248 has an invalid interface number: 190 but max is 2 [ 770.814496][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 770.846769][ T6077] usb 7-1: config 248 has an invalid interface number: 111 but max is 2 [ 770.898864][ T6077] usb 7-1: config 248 has no interface number 0 [ 770.938112][ T6077] usb 7-1: config 248 has no interface number 1 [ 770.976144][ T6077] usb 7-1: config 248 has no interface number 2 [ 770.998611][ T6077] usb 7-1: config 248 interface 3 has no altsetting 0 [ 771.036219][ T6077] usb 7-1: config 248 interface 190 has no altsetting 0 [ 771.051986][ T6064] usb 8-1: USB disconnect, device number 5 [ 771.080018][ T6077] usb 7-1: config 248 interface 111 has no altsetting 0 [ 771.134475][ T6077] usb 7-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 771.180478][ T6077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.208531][ T6064] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 771.232821][ T6077] usb 7-1: Product: syz [ 771.251257][ T6077] usb 7-1: Manufacturer: syz [ 771.263054][ T6064] cyberjack 8-1:0.69: device disconnected [ 771.284279][ T6077] usb 7-1: SerialNumber: syz [ 771.730232][T27125] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 771.926484][ T6077] usb 7-1: USB disconnect, device number 4 [ 772.004883][T27129] netlink: 'syz.7.9765': attribute type 2 has an invalid length. [ 773.504592][T27171] netlink: 'syz.0.9786': attribute type 6 has an invalid length. [ 773.617225][ T5904] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 773.793428][ T5904] usb 6-1: config 8 has an invalid interface number: 235 but max is 0 [ 773.846004][ T5904] usb 6-1: config 8 has no interface number 0 [ 773.886531][ T5904] usb 6-1: config 8 interface 235 has no altsetting 0 [ 773.929423][ T5904] usb 6-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 773.995235][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.322372][ T5904] usb 6-1: string descriptor 0 read error: -71 [ 774.360576][ T5904] keyspan 6-1:8.235: Keyspan - (without firmware) converter detected [ 774.421545][ T5904] usb 6-1: USB disconnect, device number 27 [ 774.444961][ T30] kauditd_printk_skb: 49909 callbacks suppressed [ 774.444990][ T30] audit: type=1400 audit(2000000135.547:753060): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6473 comm="udevd" name="/" dev="sda1" ino=2 [ 774.446983][ T5930] audit: audit_backlog=65 > audit_backlog_limit=64 [ 774.452026][ T6216] audit: audit_backlog=65 > audit_backlog_limit=64 [ 774.481593][ T5935] audit: audit_backlog=66 > audit_backlog_limit=64 [ 774.483787][ T5206] audit: audit_backlog=66 > audit_backlog_limit=64 [ 774.490048][ T5935] audit: audit_lost=152851 audit_rate_limit=0 audit_backlog_limit=64 [ 774.504049][ T6274] audit: audit_backlog=66 > audit_backlog_limit=64 [ 774.511490][ T6274] audit: audit_lost=152852 audit_rate_limit=0 audit_backlog_limit=64 [ 774.519841][ T6473] audit: audit_backlog=66 > audit_backlog_limit=64 [ 774.521284][ T5904] keyspan 6-1:8.235: device disconnected [ 774.526575][ T30] audit: type=1400 audit(2000000135.547:753061): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6473 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 775.094623][T27209] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 776.156879][T27234] qrtr: Invalid version 43 [ 776.482037][ T5904] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 776.631363][T27249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9823'. [ 776.687999][ T5904] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 776.729044][ T5904] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 776.744679][ T5904] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 776.764270][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.780404][T27238] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 776.818081][ T5904] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.288431][ T5904] usb 6-1: USB disconnect, device number 28 [ 777.877159][T27282] netlink: 'syz.0.9839': attribute type 11 has an invalid length. [ 777.895025][T27282] netlink: 'syz.0.9839': attribute type 4 has an invalid length. [ 777.910125][T27282] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9839'. [ 778.495344][ T6064] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 778.673168][ T6064] usb 8-1: Using ep0 maxpacket: 8 [ 778.695935][ T6064] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.738586][ T6064] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 778.773458][ T6064] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 778.823792][ T6064] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 778.872951][ T6064] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 778.878322][T27315] netlink: 'syz.6.9855': attribute type 11 has an invalid length. [ 778.907058][ T6064] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.970488][ T6064] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 778.993146][ T6064] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.013442][ T6064] usb 8-1: Product: syz [ 779.024035][ T6064] usb 8-1: Manufacturer: syz [ 779.044642][ T6064] usb 8-1: SerialNumber: syz [ 779.091788][ T6064] usb 8-1: config 0 descriptor?? [ 779.114180][T27295] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 779.166234][T27322] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 779.291120][T27322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 779.306426][ T5869] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 779.316462][ T5869] Bluetooth: hci5: Injecting HCI hardware error event [ 779.330344][ T51] Bluetooth: hci5: hardware error 0x00 [ 779.537316][T27332] tmpfs: Bad value for 'mpol' [ 779.796250][ T30] kauditd_printk_skb: 41355 callbacks suppressed [ 779.796271][ T30] audit: type=1400 audit(2000000140.570:773268): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27339 comm="syz.1.9867" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 779.817542][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.833618][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.840282][ C0] audit: audit_lost=159903 audit_rate_limit=0 audit_backlog_limit=64 [ 779.848444][ C0] audit: backlog limit exceeded [ 779.849957][T27343] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.856044][T27344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 779.867561][T27344] audit: audit_lost=159904 audit_rate_limit=0 audit_backlog_limit=64 [ 779.872925][ T5206] audit: audit_lost=159905 audit_rate_limit=0 audit_backlog_limit=64 [ 779.875835][T27344] audit: backlog limit exceeded [ 779.945375][ T6057] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 780.133257][T27352] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 780.140972][ T6057] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 780.153040][ T6057] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 780.172419][ T6057] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 780.193580][ T6057] usb 2-1: config 150 has no interface number 0 [ 780.199951][ T6057] usb 2-1: config 150 interface 204 has no altsetting 0 [ 780.245491][ T6057] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 780.269445][ T6057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.299082][ T6057] usb 2-1: Product: syz [ 780.303331][ T6057] usb 2-1: Manufacturer: syz [ 780.307995][ T6057] usb 2-1: SerialNumber: syz [ 780.357518][ T3092] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 780.505106][T27361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9879'. [ 780.526729][T27361] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9879'. [ 780.544785][T27362] xt_HMARK: spi-set and port-set can't be combined [ 780.553999][ T3092] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 780.584750][ T6057] xr_serial 2-1:150.204: skipping garbage [ 780.597697][ T3092] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 780.623967][ T6057] usb 2-1: USB disconnect, device number 22 [ 780.641543][ T3092] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 780.667525][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.720053][T27350] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 780.752072][ T3092] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 780.854373][ T6064] rc_core: IR keymap rc-snapstream-firefly not found [ 780.875374][ T6064] Registered IR keymap rc-empty [ 780.881645][ T6064] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 780.924074][ T6064] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input78 [ 780.996189][ T6064] input: syz syz mouse as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input79 [ 781.078699][ T6064] usb 8-1: USB disconnect, device number 6 [ 781.084635][ C1] ati_remote 8-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 781.101679][ T3092] usb 1-1: USB disconnect, device number 21 [ 781.268100][T27375] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9885'. [ 781.475308][T27380] syz.6.9887: attempt to access beyond end of device [ 781.475308][T27380] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 781.507118][T27380] XFS (nbd6): SB validate failed with error -5. [ 781.602026][ T6064] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 781.698772][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 781.818581][ T6064] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 781.829002][ T6064] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 781.876889][ T6064] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 781.899420][ T6064] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 781.935885][ T6064] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 781.963533][ T6064] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 782.032291][ T6064] usb 8-1: string descriptor 0 read error: -22 [ 782.038685][ T6064] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 782.071618][ T6064] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.170487][ T6064] usb 8-1: config 0 descriptor?? [ 782.190740][ T6064] hub 8-1:0.0: bad descriptor, ignoring hub [ 782.198023][ T6064] hub 8-1:0.0: probe with driver hub failed with error -5 [ 782.629345][ T5915] usb 8-1: USB disconnect, device number 7 [ 783.142382][T27434] netlink: 'syz.5.9912': attribute type 7 has an invalid length. [ 783.150202][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9912'. [ 783.404482][T27443] netlink: 'syz.6.9916': attribute type 3 has an invalid length. [ 783.452344][T27443] netlink: 'syz.6.9916': attribute type 1 has an invalid length. [ 783.489559][T27443] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9916'. [ 783.547859][T27443] NCSI netlink: No device for ifindex 33022 [ 783.819907][T27456] bond0: Error: Cannot enslave bond to itself. [ 785.157034][T27491] audit_log_start: 38710 callbacks suppressed [ 785.157056][T27491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 785.161880][ T5206] audit: audit_backlog=66 > audit_backlog_limit=64 [ 785.163458][T26540] audit: audit_backlog=66 > audit_backlog_limit=64 [ 785.169825][ T30] audit: type=1400 audit(2000000145.566:793818): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5935 comm="udevd" name="/" dev="sda1" ino=2 [ 785.184144][T27493] audit: audit_backlog=65 > audit_backlog_limit=64 [ 785.201287][ T5935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 785.201315][ T5935] audit: audit_lost=165960 audit_rate_limit=0 audit_backlog_limit=64 [ 785.201333][ T5935] audit: backlog limit exceeded [ 785.201361][ T5935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 785.201376][ T5935] audit: audit_lost=165961 audit_rate_limit=0 audit_backlog_limit=64 [ 785.349414][ T6900] udevd[6900]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.846214][T27490] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 786.527366][T27527] netlink: 252 bytes leftover after parsing attributes in process `syz.7.9955'. [ 786.708714][T27529] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9956'. [ 787.139743][T27546] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9964'. [ 787.171907][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 787.248149][T27546] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9964'. [ 787.393788][T27555] netlink: 'syz.7.9965': attribute type 3 has an invalid length. [ 787.454692][T27555] netlink: 'syz.7.9965': attribute type 3 has an invalid length. [ 787.534912][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9965'. [ 788.055427][T27573] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9975'. [ 789.939881][T27631] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 790.514394][T25884] audit_log_start: 57226 callbacks suppressed [ 790.514414][T25884] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.517352][ T30] audit: type=1400 audit(2000000150.580:815459): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5206 comm="udevd" path="/sys/devices/virtual/block/loop7/mq/0" dev="sysfs" ino=15827 [ 790.524079][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.547980][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.560854][T27646] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.565420][T25884] audit: audit_lost=177825 audit_rate_limit=0 audit_backlog_limit=64 [ 790.580517][ T30] audit: type=1400 audit(2000000150.580:815460): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5206 comm="udevd" path="/sys/devices/virtual/block/loop7/mq/0" dev="sysfs" ino=15827 [ 790.585348][T25791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.610091][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 790.616751][ C0] audit: audit_lost=177826 audit_rate_limit=0 audit_backlog_limit=64 [ 790.624928][ C0] audit: backlog limit exceeded [ 790.817322][T27652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 791.208357][T27666] netlink: 'syz.7.10019': attribute type 1 has an invalid length. [ 791.443924][T27672] usb usb8: usbfs: process 27672 (syz.7.10023) did not claim interface 0 before use [ 792.573490][T27707] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 793.263098][T27731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10049'. [ 793.448760][T27709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 793.455183][T27709] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 793.517213][T27709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 793.551694][T27709] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 793.601345][T27709] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 793.631498][T27709] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 793.683044][T27709] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 793.739969][T27709] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 793.801144][T27709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 793.807145][T27709] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 793.853383][T27709] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 793.859366][T27709] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 794.671586][T27777] netlink: 'syz.5.10068': attribute type 3 has an invalid length. [ 795.862586][ T30] kauditd_printk_skb: 31806 callbacks suppressed [ 795.862629][ T30] audit: type=1400 audit(2000000155.585:834128): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="block" dev="sysfs" ino=13135 [ 795.900824][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 795.900873][ T5933] audit: audit_backlog=66 > audit_backlog_limit=64 [ 795.907452][ C0] audit: audit_lost=182207 audit_rate_limit=0 audit_backlog_limit=64 [ 795.907475][ C0] audit: backlog limit exceeded [ 795.907758][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 795.915782][T25791] audit: audit_backlog=66 > audit_backlog_limit=64 [ 795.922194][ C0] audit: audit_lost=182208 audit_rate_limit=0 audit_backlog_limit=64 [ 795.928112][ T5933] audit: audit_lost=182209 audit_rate_limit=0 audit_backlog_limit=64 [ 795.933637][ C0] audit: backlog limit exceeded [ 797.551578][ T5915] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 797.751475][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 797.820648][ T5915] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 797.831182][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.839274][ T5915] usb 7-1: Product: syz [ 797.877874][ T5915] usb 7-1: Manufacturer: syz [ 797.882595][ T5915] usb 7-1: SerialNumber: syz [ 797.914710][ T5915] usb 7-1: config 0 descriptor?? [ 797.945701][ T5915] gspca_main: sq930x-2.14.0 probing 2770:930c [ 798.404830][ T5915] gspca_sq930x: ucbus_write failed -71 [ 798.411495][ T5915] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 798.439115][ T5915] usb 7-1: USB disconnect, device number 5 [ 798.481665][ T6119] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 798.557963][ T6064] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 798.667972][ T6119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 798.701444][ T6119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 798.738761][ T6064] usb 2-1: Using ep0 maxpacket: 8 [ 798.758472][ T6064] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 798.765047][ T6119] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 798.797755][ T6119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.801355][ T6064] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.828265][ T6119] usb 6-1: Product: syz [ 798.851153][ T6119] usb 6-1: Manufacturer: syz [ 798.856547][ T6064] usb 2-1: config 0 has no interface number 0 [ 798.877009][ T6119] usb 6-1: SerialNumber: syz [ 798.878607][ T6064] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.907060][ T6119] usb 6-1: config 0 descriptor?? [ 798.922594][T27917] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 798.937471][ T6064] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 798.951462][ T6119] hub 6-1:0.0: bad descriptor, ignoring hub [ 798.982697][ T6119] hub 6-1:0.0: probe with driver hub failed with error -5 [ 798.997734][ T6064] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 799.040121][ T6119] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input80 [ 799.048690][ T6064] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.114473][T27921] xt_TCPMSS: Only works on TCP SYN packets [ 799.129186][ T6064] usb 2-1: config 0 interface 52 has no altsetting 0 [ 799.160840][ T6064] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 799.199500][ T6064] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.227022][T27922] delete_channel: no stack [ 799.254113][ T6064] usb 2-1: config 0 descriptor?? [ 799.527406][ T6064] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input81 [ 799.778317][ T6064] usb 2-1: USB disconnect, device number 23 [ 800.772064][T27962] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 800.937820][T27967] netlink: 'syz.5.10148': attribute type 1 has an invalid length. [ 801.218059][ T30] kauditd_printk_skb: 31509 callbacks suppressed [ 801.218078][ T30] audit: type=1400 audit(2000000160.599:851793): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 801.240960][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 801.243102][T27971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 801.249472][ T5206] audit: audit_lost=186825 audit_rate_limit=0 audit_backlog_limit=64 [ 801.261222][T27979] audit: audit_backlog=66 > audit_backlog_limit=64 [ 801.265722][T25791] audit: audit_backlog=66 > audit_backlog_limit=64 [ 801.273014][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 801.284362][ C0] audit: audit_lost=186826 audit_rate_limit=0 audit_backlog_limit=64 [ 801.292489][ C0] audit: backlog limit exceeded [ 801.294394][T27980] audit: audit_backlog=66 > audit_backlog_limit=64 [ 801.395509][T27982] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 801.452911][T27982] CPU: 0 UID: 0 PID: 27982 Comm: syz.1.10153 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 801.452950][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.452969][T27982] Call Trace: [ 801.452983][T27982] [ 801.452998][T27982] dump_stack_lvl+0x189/0x250 [ 801.453037][T27982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.453063][T27982] ? __pfx__printk+0x10/0x10 [ 801.453095][T27982] ? kernfs_path_from_node+0x2c/0x260 [ 801.453123][T27982] ? kernfs_path_from_node+0x2c/0x260 [ 801.453147][T27982] ? kernfs_path_from_node+0x2c/0x260 [ 801.453175][T27982] ? kernfs_path_from_node+0x22c/0x260 [ 801.453199][T27982] ? kernfs_path_from_node+0x2c/0x260 [ 801.453228][T27982] sysfs_warn_dup+0x8e/0xa0 [ 801.453253][T27982] sysfs_do_create_link_sd+0xc0/0x110 [ 801.453283][T27982] device_add_class_symlinks+0x1cf/0x240 [ 801.453321][T27982] device_add+0x475/0xb50 [ 801.453359][T27982] wiphy_register+0x199a/0x26b0 [ 801.453415][T27982] ? __pfx_wiphy_register+0x10/0x10 [ 801.453444][T27982] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 801.453483][T27982] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 801.453520][T27982] ieee80211_register_hw+0x33e1/0x4120 [ 801.453575][T27982] ? ieee80211_register_hw+0x1401/0x4120 [ 801.453619][T27982] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 801.453660][T27982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 801.453704][T27982] ? __hrtimer_setup+0x187/0x210 [ 801.453727][T27982] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.453765][T27982] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 801.453830][T27982] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 801.453859][T27982] ? trace_kmalloc+0x1f/0xd0 [ 801.453877][T27982] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 801.453912][T27982] ? kstrndup+0xbf/0x160 [ 801.453958][T27982] hwsim_new_radio_nl+0xea4/0x1b10 [ 801.453993][T27982] ? __pfx___nla_validate_parse+0x10/0x10 [ 801.454035][T27982] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 801.454069][T27982] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 801.454102][T27982] ? __nla_parse+0x40/0x60 [ 801.454132][T27982] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 801.454165][T27982] genl_family_rcv_msg_doit+0x212/0x300 [ 801.454196][T27982] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.454235][T27982] ? bpf_lsm_capable+0x9/0x20 [ 801.454262][T27982] ? security_capable+0x7e/0x2e0 [ 801.454296][T27982] genl_rcv_msg+0x60e/0x790 [ 801.454325][T27982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.454348][T27982] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 801.454416][T27982] netlink_rcv_skb+0x208/0x470 [ 801.454446][T27982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.454471][T27982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.454521][T27982] ? down_read+0x1ad/0x2e0 [ 801.454553][T27982] genl_rcv+0x28/0x40 [ 801.454573][T27982] netlink_unicast+0x759/0x8e0 [ 801.454615][T27982] netlink_sendmsg+0x805/0xb30 [ 801.454658][T27982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.454708][T27982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 801.454732][T27982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.454766][T27982] __sock_sendmsg+0x21c/0x270 [ 801.454797][T27982] ____sys_sendmsg+0x505/0x830 [ 801.454839][T27982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.454884][T27982] ? import_iovec+0x74/0xa0 [ 801.454921][T27982] ___sys_sendmsg+0x21f/0x2a0 [ 801.454967][T27982] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.455047][T27982] ? __fget_files+0x2a/0x420 [ 801.455072][T27982] ? __fget_files+0x3a0/0x420 [ 801.455111][T27982] __x64_sys_sendmsg+0x19b/0x260 [ 801.455149][T27982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 801.455197][T27982] ? rcu_is_watching+0x15/0xb0 [ 801.455229][T27982] ? do_syscall_64+0xbe/0x3b0 [ 801.455260][T27982] do_syscall_64+0xfa/0x3b0 [ 801.455283][T27982] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.455306][T27982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.455330][T27982] ? clear_bhb_loop+0x60/0xb0 [ 801.455358][T27982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.455380][T27982] RIP: 0033:0x7f81b1f8e9a9 [ 801.455412][T27982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.455432][T27982] RSP: 002b:00007f81b2eaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.455457][T27982] RAX: ffffffffffffffda RBX: 00007f81b21b5fa0 RCX: 00007f81b1f8e9a9 [ 801.455473][T27982] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 801.455488][T27982] RBP: 00007f81b2010d69 R08: 0000000000000000 R09: 0000000000000000 [ 801.455502][T27982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.455517][T27982] R13: 0000000000000000 R14: 00007f81b21b5fa0 R15: 00007ffcb63e9cd8 [ 801.455553][T27982] [ 803.024660][ T6077] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 803.229510][ T6077] usb 1-1: Using ep0 maxpacket: 8 [ 803.259402][ T6077] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 803.296927][ T6077] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 803.367198][ T6119] usb 6-1: USB disconnect, device number 29 [ 803.389513][ T6077] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 803.418884][ T6077] usb 1-1: Product: syz [ 803.445361][ T6077] usb 1-1: Manufacturer: syz [ 803.450043][ T6077] usb 1-1: SerialNumber: syz [ 803.785184][ T6077] usb 1-1: Invalid connection information received from device [ 803.977913][ T5904] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 804.071274][ T5915] usb 1-1: USB disconnect, device number 22 [ 804.189578][T28039] ubi: mtd0 is already attached to ubi31 [ 804.218485][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 804.278642][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 804.392611][ T5904] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 804.448139][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.480174][ T5904] usb 2-1: Product: syz [ 804.484429][ T5904] usb 2-1: Manufacturer: syz [ 804.510551][ T5904] usb 2-1: SerialNumber: syz [ 804.540452][ T5904] usb 2-1: config 0 descriptor?? [ 804.607631][ T5904] hub 2-1:0.0: bad descriptor, ignoring hub [ 804.613630][ T5904] hub 2-1:0.0: probe with driver hub failed with error -5 [ 804.728382][ T5904] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input82 [ 805.065966][T28054] comedi: No check for data length of config insn id 4095 is implemented [ 805.166209][T28054] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 805.219015][T28054] comedi: Assuming n=15 is correct [ 806.317273][ T6064] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 806.538268][ T6064] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 806.582008][ T5206] audit_log_start: 78242 callbacks suppressed [ 806.582029][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 806.588276][ T6064] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.603992][ T30] audit: type=1400 audit(2000000165.613:874749): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="virtual" dev="sysfs" ino=1370 [ 806.606957][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 806.648042][T28095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 806.655346][ T5933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 806.659429][ T5206] audit: audit_lost=205257 audit_rate_limit=0 audit_backlog_limit=64 [ 806.669368][T28096] audit: audit_backlog=65 > audit_backlog_limit=64 [ 806.677727][T28095] audit: audit_lost=205258 audit_rate_limit=0 audit_backlog_limit=64 [ 806.679683][ T30] audit: type=1400 audit(2000000165.613:874750): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="block" dev="sysfs" ino=13135 [ 806.686396][ T26] audit: audit_lost=205259 audit_rate_limit=0 audit_backlog_limit=64 [ 806.769193][T28100] netlink: 'syz.0.10202': attribute type 1 has an invalid length. [ 806.796001][T28100] netlink: 208 bytes leftover after parsing attributes in process `syz.0.10202'. [ 806.827162][ T6064] usb 6-1: config 0 descriptor?? [ 806.846284][ T6064] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 807.022765][ T6120] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 807.076156][ T6064] usb 6-1: Detected FT232B [ 807.207445][ T6120] usb 7-1: Using ep0 maxpacket: 8 [ 807.229506][ T6120] usb 7-1: unable to get BOS descriptor or descriptor too short [ 807.266180][ T6120] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 807.289572][ T6064] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 807.331541][ T6064] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 807.333433][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 807.360231][ T6064] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 807.404757][ T6064] usb 6-1: USB disconnect, device number 30 [ 807.431774][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 807.453075][ T6064] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 807.471691][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 807.500072][ T6120] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 807.500693][ T6064] ftdi_sio 6-1:0.0: device disconnected [ 807.533786][T28111] netlink: 'syz.7.10209': attribute type 1 has an invalid length. [ 807.588272][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 807.599700][T28111] nbd: couldn't find device at index 20 [ 807.658685][ T6120] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 807.708395][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 807.753521][ T6120] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 807.802466][ T6120] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 807.838772][ T6120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.891694][ T6120] usb 7-1: Product: syz [ 807.895939][ T6120] usb 7-1: Manufacturer: syz [ 807.951464][ T6120] usb 7-1: SerialNumber: syz [ 808.028855][ T6120] usb 7-1: config 0 descriptor?? [ 808.035546][T28099] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 808.080542][ T6120] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 808.274103][ T6057] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 808.386769][ T6120] usb 7-1: USB disconnect, device number 6 [ 808.471705][ T6057] usb 8-1: config 0 has an invalid interface number: 63 but max is 0 [ 808.507132][ T3092] usb 2-1: USB disconnect, device number 24 [ 808.516700][ T6057] usb 8-1: config 0 has no interface number 0 [ 808.538282][T28129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10218'. [ 808.547772][ T6057] usb 8-1: config 0 interface 63 has no altsetting 0 [ 808.555673][T28129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10218'. [ 808.572224][ T6057] usb 8-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=2b.5e [ 808.612961][ T6057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.632084][ T6057] usb 8-1: Product: syz [ 808.639350][ T6057] usb 8-1: Manufacturer: syz [ 808.658118][ T6057] usb 8-1: SerialNumber: syz [ 808.764837][ T6900] udevd[6900]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.793253][ T6057] usb 8-1: config 0 descriptor?? [ 808.816290][ T3092] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 808.839730][ T6057] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 808.921720][ T6057] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 808.942593][ T6057] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 808.981235][ T6057] usb 8-1: media controller created [ 809.015924][ T3092] usb 2-1: Using ep0 maxpacket: 16 [ 809.028407][ T6057] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.064979][ T3092] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 809.100267][ T3092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.119337][ T6057] dvb-usb: bulk message failed: -22 (6/0) [ 809.128600][ T3092] usb 2-1: Product: syz [ 809.136824][ T6057] dvb-usb: bulk message failed: -22 (6/0) [ 809.147814][ T3092] usb 2-1: Manufacturer: syz [ 809.166340][ T6057] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 809.177667][ T3092] usb 2-1: SerialNumber: syz [ 809.203222][ T3092] usb 2-1: config 0 descriptor?? [ 809.220662][ T3092] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 809.462640][ T6057] rc_core: IR keymap rc-avermedia-m135a not found [ 809.497546][ T6057] Registered IR keymap rc-empty [ 809.505674][ T6057] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 809.554316][ T6057] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input84 [ 809.583391][T28146] bond2: entered promiscuous mode [ 809.597282][T28146] bond2: entered allmulticast mode [ 809.631730][ T6057] dvb-usb: schedule remote query interval to 150 msecs. [ 809.655940][ T3092] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 809.706408][ T6057] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 809.730150][ T3092] usb 2-1: USB disconnect, device number 25 [ 809.780377][ T6057] usb 8-1: USB disconnect, device number 8 [ 809.975951][ T6057] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 810.894996][T28191] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 810.934521][T28191] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 811.111311][T28191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 811.127982][T28196] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10249'. [ 811.929386][ T30] kauditd_printk_skb: 43794 callbacks suppressed [ 811.929406][ T30] audit: type=1400 audit(2000000170.627:896542): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28223 comm="syz-executor" name="2138" dev="tmpfs" ino=10726 [ 811.929686][ T30] audit: type=1400 audit(2000000170.627:896543): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=28223 comm="syz-executor" opid=28223 ocomm="syz-executor" [ 811.930100][ T30] audit: type=1400 audit(2000000170.627:896544): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sysfs" ino=1 [ 811.930154][ T30] audit: type=1400 audit(2000000170.627:896545): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="devices" dev="sysfs" ino=7 [ 811.930236][ T30] audit: type=1400 audit(2000000170.627:896546): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="virtual" dev="sysfs" ino=1370 [ 811.930385][ T30] audit: type=1400 audit(2000000170.627:896547): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="block" dev="sysfs" ino=13135 [ 811.930435][ T30] audit: type=1400 audit(2000000170.627:896548): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="loop7" dev="sysfs" ino=15733 [ 811.930592][ T30] audit: type=1400 audit(2000000170.627:896549): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sda1" ino=2 [ 811.930757][ T30] audit: type=1400 audit(2000000170.627:896550): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sysfs" ino=1 [ 811.930811][ T30] audit: type=1400 audit(2000000170.627:896551): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="devices" dev="sysfs" ino=7 [ 812.769381][T28249] netlink: 'syz.5.10274': attribute type 13 has an invalid length. [ 812.849230][T28249] gretap0: refused to change device tx_queue_len [ 812.849260][T28249] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 813.324283][T28269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10284'. [ 813.368916][T28269] netlink: 212 bytes leftover after parsing attributes in process `syz.5.10284'. [ 813.768275][ T6057] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 813.929595][ T5904] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 813.945520][ T6057] usb 7-1: Using ep0 maxpacket: 16 [ 813.986251][ T6057] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 814.014176][ T6057] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.033350][ T6057] usb 7-1: config 0 has no interface number 0 [ 814.059736][ T6057] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 814.066496][T28293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10296'. [ 814.089592][ T6057] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.097722][ T6057] usb 7-1: Product: syz [ 814.101682][T28293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10296'. [ 814.121311][ T5904] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 814.137609][ T6057] usb 7-1: Manufacturer: syz [ 814.143293][ T5904] usb 6-1: config 0 has no interface number 0 [ 814.149479][ T5904] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.152910][ T6057] usb 7-1: SerialNumber: syz [ 814.204640][ T5904] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 814.220273][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 814.229061][ T6057] usb 7-1: config 0 descriptor?? [ 814.249299][ T5904] usb 6-1: Product: syz [ 814.266193][ T5904] usb 6-1: SerialNumber: syz [ 814.292117][ T5904] usb 6-1: config 0 descriptor?? [ 814.322078][ T5904] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input85 [ 814.479653][ T6057] usb 7-1: Found UVC 0.00 device syz (046d:08d3) [ 814.493124][ T6057] usb 7-1: No valid video chain found. [ 814.555241][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 814.562515][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 814.563594][ T6057] usb 6-1: USB disconnect, device number 31 [ 814.569501][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 814.648816][ T6057] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 814.733154][ T6120] usb 7-1: USB disconnect, device number 7 [ 814.867963][T28311] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 815.212571][ T5904] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 815.414312][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 815.459472][ T5904] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 815.511618][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 815.589199][ T5904] usb 2-1: Product: syz [ 815.593450][ T5904] usb 2-1: Manufacturer: syz [ 815.627513][ T5904] usb 2-1: SerialNumber: syz [ 815.694737][ T5904] r8152-cfgselector 2-1: Unknown version 0x0000 [ 815.732473][ T5904] r8152-cfgselector 2-1: config 0 descriptor?? [ 815.993261][T28325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.086030][T28325] bond0: (slave rose0): Enslaving as an active interface with an up link [ 816.294021][ T5904] r8152-cfgselector 2-1: USB disconnect, device number 26 [ 817.285053][ T30] kauditd_printk_skb: 46105 callbacks suppressed [ 817.285073][ T30] audit: type=1400 audit(2000000175.622:918588): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5922 comm="udevd" name="/" dev="sda1" ino=2 [ 817.295911][ T5904] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 817.310899][ T5932] audit: audit_backlog=65 > audit_backlog_limit=64 [ 817.325669][ T5935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 817.332544][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 817.332968][T25791] audit: audit_backlog=66 > audit_backlog_limit=64 [ 817.344387][T28360] audit: audit_backlog=66 > audit_backlog_limit=64 [ 817.346450][T28359] audit: audit_backlog=66 > audit_backlog_limit=64 [ 817.360555][ T6473] audit: audit_backlog=67 > audit_backlog_limit=64 [ 817.360578][ T6473] audit: audit_lost=220617 audit_rate_limit=0 audit_backlog_limit=64 [ 817.360596][ T6473] audit: backlog limit exceeded [ 817.579164][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 817.625836][ T5904] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 817.648702][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.695252][ T5904] usb 1-1: config 0 descriptor?? [ 817.769869][ T5904] gspca_main: sunplus-2.14.0 probing 041e:400b [ 818.225152][ T5904] gspca_sunplus: reg_w_riv err -71 [ 818.241836][ T5904] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 818.286080][ T5904] usb 1-1: USB disconnect, device number 23 [ 818.499076][T28392] CIFS mount error: No usable UNC path provided in device string! [ 818.499076][T28392] [ 818.578938][T28392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 819.733259][ T6120] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 819.957811][ T6120] usb 6-1: Using ep0 maxpacket: 8 [ 819.966030][ T6120] usb 6-1: too many configurations: 128, using maximum allowed: 8 [ 820.040566][ T6120] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 820.075543][ T6120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 820.083626][ T6120] usb 6-1: Product: syz [ 820.134293][ T6120] usb 6-1: Manufacturer: syz [ 820.186290][ T6120] usb 6-1: config 0 descriptor?? [ 820.219621][ T6120] gspca_main: 2770:9120 too many config [ 820.494197][ T6120] usb 6-1: USB disconnect, device number 32 [ 820.563047][T28457] kernel read not supported for file /ٓ㎀Dg@]eh (pid: 28457 comm: syz.7.10366) [ 821.144457][T28477] netlink: 'syz.7.10375': attribute type 15 has an invalid length. [ 821.163517][T28477] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10375'. [ 821.202817][T28479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10376'. [ 821.236224][T28479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10376'. [ 821.283793][T28479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10376'. [ 821.315868][ T6057] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 821.351075][T28479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10376'. [ 821.363229][T28479] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10376'. [ 821.497549][ T6057] usb 2-1: Using ep0 maxpacket: 8 [ 821.537752][ T6057] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 821.547576][T28486] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10379'. [ 821.561756][ T6057] usb 2-1: config 0 has no interface number 0 [ 821.584349][ T6057] usb 2-1: config 0 interface 46 has no altsetting 0 [ 821.629926][ T6057] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=f3.33 [ 821.651658][ T6057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.692609][ T6057] usb 2-1: Product: syz [ 821.709040][ T6057] usb 2-1: Manufacturer: syz [ 821.727942][ T6057] usb 2-1: SerialNumber: syz [ 821.778308][ T6057] usb 2-1: config 0 descriptor?? [ 822.074334][ T6057] f81534a_ctrl 2-1:0.46: failed to set register 0x116: -5 [ 822.119918][ T6057] f81534a_ctrl 2-1:0.46: failed to enable ports: -5 [ 822.126628][ T6057] f81534a_ctrl 2-1:0.46: probe with driver f81534a_ctrl failed with error -5 [ 822.181494][ T6057] usb 2-1: USB disconnect, device number 27 [ 822.575832][T28518] netlink: 'syz.5.10392': attribute type 10 has an invalid length. [ 822.618363][T28518] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.625927][T28518] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.650149][T28521] ip6t_REJECT: ECHOREPLY is not supported [ 822.652045][ T30] kauditd_printk_skb: 35648 callbacks suppressed [ 822.652066][ T30] audit: type=1400 audit(2000000180.645:938619): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="/" dev="sysfs" ino=1 [ 822.666184][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.703483][ T5933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.716781][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.722319][T28523] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.723438][ C0] audit: audit_lost=225826 audit_rate_limit=0 audit_backlog_limit=64 [ 822.732858][ T30] audit: type=1400 audit(2000000180.645:938620): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="devices" dev="sysfs" ino=7 [ 822.738056][ C0] audit: backlog limit exceeded [ 822.750753][ T5933] audit: audit_lost=225827 audit_rate_limit=0 audit_backlog_limit=64 [ 822.782529][ T5206] audit: audit_lost=225828 audit_rate_limit=0 audit_backlog_limit=64 [ 822.793123][T28518] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.800886][T28518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.810652][T28518] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.817993][T28518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.943308][T28518] team0: Port device bridge0 added [ 823.253194][T28539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10400'. [ 823.834198][T28560] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 823.848113][T28559] netlink: 'syz.6.10411': attribute type 1 has an invalid length. [ 826.223965][T28636] bond0: option all_slaves_active: invalid value (223) [ 826.586556][T28649] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 826.595528][T28649] overlayfs: missing 'lowerdir' [ 827.716674][T28692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10466'. [ 827.791693][T28698] netlink: 'syz.5.10469': attribute type 2 has an invalid length. [ 827.836585][T28698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10469'. [ 827.997270][ T30] kauditd_printk_skb: 33207 callbacks suppressed [ 827.997290][ T30] audit: type=1400 audit(2000000185.659:956314): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28701 comm="syz.1.10474" name="newroot" dev="tmpfs" ino=2 [ 828.024248][T28706] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.031686][T28703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.038264][T28703] audit: audit_lost=231000 audit_rate_limit=0 audit_backlog_limit=64 [ 828.046708][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.071066][T28706] audit: audit_lost=231001 audit_rate_limit=0 audit_backlog_limit=64 [ 828.079891][ T5206] audit: audit_lost=231002 audit_rate_limit=0 audit_backlog_limit=64 [ 828.091224][ T30] audit: type=1400 audit(2000000185.659:956315): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=28701 comm="syz.1.10474" name="/" dev="devtmpfs" ino=1 [ 828.092747][T28706] audit: backlog limit exceeded [ 828.115437][T28703] audit: backlog limit exceeded [ 829.699965][T28760] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10501'. [ 830.039610][T28771] : renamed from bond_slave_0 (while UP) [ 830.075962][T28776] netlink: 'syz.1.10508': attribute type 3 has an invalid length. [ 830.105388][T28776] netlink: 'syz.1.10508': attribute type 1 has an invalid length. [ 830.113821][T28776] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10508'. [ 830.348964][T28785] program syz.7.10512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 830.812801][T28801] x_tables: unsorted entry at hook 3 [ 830.840498][ T6064] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 831.021781][ T6064] usb 2-1: Using ep0 maxpacket: 8 [ 831.036123][ T6064] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 831.065227][ T6064] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.113298][ T6064] usb 2-1: config 0 has no interface number 0 [ 831.137734][ T6064] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 831.178759][ T6064] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.222989][ T6064] usb 2-1: config 0 interface 52 has no altsetting 0 [ 831.254095][ T6064] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 831.275631][ T6064] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 831.306767][ T6064] usb 2-1: Manufacturer: syz [ 831.336254][ T6064] usb 2-1: config 0 descriptor?? [ 831.371437][T28818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10530'. [ 831.398059][ T6064] hub 2-1:0.52: bad descriptor, ignoring hub [ 831.404628][ T6064] hub 2-1:0.52: probe with driver hub failed with error -5 [ 831.425073][T28818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10530'. [ 831.657696][ T6064] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input86 [ 831.967286][ T6064] usb 2-1: USB disconnect, device number 28 [ 832.123392][ T6057] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 832.144946][T28841] comedi: No check for data length of config insn id 4 is implemented [ 832.157996][T28841] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 832.178049][T28841] comedi: Assuming n=15 is correct [ 832.318706][ T6057] usb 8-1: Using ep0 maxpacket: 16 [ 832.352396][ T6057] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.375579][T28846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10543'. [ 832.379880][ T6057] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 832.415133][ T6057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.466386][ T6057] usb 8-1: config 0 descriptor?? [ 832.587092][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10546'. [ 832.705805][ T6057] usbhid 8-1:0.0: can't add hid device: -71 [ 832.732196][ T6057] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 832.765622][ T6057] usb 8-1: USB disconnect, device number 9 [ 833.072409][T28868] netlink: 'syz.1.10554': attribute type 4 has an invalid length. [ 833.352201][ T30] kauditd_printk_skb: 33744 callbacks suppressed [ 833.352222][ T30] audit: type=1400 audit(2000000190.655:975599): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17861 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 833.360244][T17861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.378117][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.378141][ T5206] audit: audit_lost=235823 audit_rate_limit=0 audit_backlog_limit=64 [ 833.378159][ T5206] audit: backlog limit exceeded [ 833.378186][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.378202][ T5206] audit: audit_lost=235824 audit_rate_limit=0 audit_backlog_limit=64 [ 833.378219][ T5206] audit: backlog limit exceeded [ 833.378242][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.378258][ T5206] audit: audit_lost=235825 audit_rate_limit=0 audit_backlog_limit=64 [ 833.618493][T28880] bond1: entered promiscuous mode [ 833.938379][T28898] IPv6: NLM_F_CREATE should be specified when creating new route [ 834.698836][T28925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10582'. [ 834.945046][ T6064] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 835.127476][ T6064] usb 8-1: Using ep0 maxpacket: 16 [ 835.149814][ T6064] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 835.175480][ T6064] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.206873][ T6064] usb 8-1: Product: syz [ 835.214632][ T6119] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 835.227010][ T6064] usb 8-1: Manufacturer: syz [ 835.243561][ T6064] usb 8-1: SerialNumber: syz [ 835.268683][ T6064] r8152-cfgselector 8-1: Unknown version 0x0000 [ 835.298219][ T6064] r8152-cfgselector 8-1: config 0 descriptor?? [ 835.329181][T28945] netlink: 80 bytes leftover after parsing attributes in process `syz.6.10592'. [ 835.409078][T28948] netlink: 'syz.0.10593': attribute type 1 has an invalid length. [ 835.418451][T28949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10594'. [ 835.419113][ T6119] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 835.427796][T28948] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10593'. [ 835.457636][ T6119] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.479195][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10593'. [ 835.488899][ T6119] usb 2-1: config 0 has no interface number 0 [ 835.518913][ T6119] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 835.553255][ T6119] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.590571][ T6119] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 835.612236][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.634080][ T6119] usb 2-1: Product: syz [ 835.643600][ T6119] usb 2-1: Manufacturer: syz [ 835.652134][ T6119] usb 2-1: SerialNumber: syz [ 835.670141][ T6119] usb 2-1: config 0 descriptor?? [ 835.798071][ T5904] r8152-cfgselector 8-1: USB disconnect, device number 10 [ 836.132090][ T6119] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 836.169629][ T6119] usb 2-1: USB disconnect, device number 29 [ 836.273313][T28970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 836.914725][T28988] netlink: 100 bytes leftover after parsing attributes in process `syz.5.10613'. [ 837.009878][ T3092] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 837.190539][ T3092] usb 7-1: Using ep0 maxpacket: 16 [ 837.239641][ T3092] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 837.266045][ T3092] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.308900][ T3092] usb 7-1: config 0 has no interface number 0 [ 837.315655][ T3092] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 837.341004][ T3092] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 837.391009][ T3092] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 837.424960][ T3092] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 837.463365][ T3092] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 837.499937][ T3092] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 837.565399][ T3092] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 837.599622][ T3092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.633941][ T3092] usb 7-1: config 0 descriptor?? [ 837.664465][T28979] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 837.706176][ T3092] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 837.844204][T29015] netlink: 'syz.1.10627': attribute type 3 has an invalid length. [ 837.997529][ T6064] usb 7-1: USB disconnect, device number 8 [ 838.083244][T29021] netlink: 'syz.0.10630': attribute type 2 has an invalid length. [ 838.104335][T29021] netlink: 'syz.0.10630': attribute type 8 has an invalid length. [ 838.128008][T29021] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10630'. [ 838.644842][T29039] --map-set only usable from mangle table [ 838.708070][ T30] kauditd_printk_skb: 38864 callbacks suppressed [ 838.708094][ T30] audit: type=1400 audit(2000000195.669:995249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25884 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 838.719666][T29040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.734244][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.740953][T29036] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.782682][T29036] audit: audit_lost=242231 audit_rate_limit=0 audit_backlog_limit=64 [ 838.783544][ T5206] audit: audit_lost=242232 audit_rate_limit=0 audit_backlog_limit=64 [ 838.790814][T29036] audit: backlog limit exceeded [ 838.790848][T29036] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.820788][ T30] audit: type=1400 audit(2000000195.669:995250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25884 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 838.843796][T29040] audit: audit_lost=242233 audit_rate_limit=0 audit_backlog_limit=64 [ 838.877753][T29044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10639'. [ 839.316695][T29059] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.556259][T29069] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 839.923060][T29082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10657'. [ 840.114837][T29087] tmpfs: Bad value for 'mpol' [ 840.247998][T29090] CIFS mount error: No usable UNC path provided in device string! [ 840.247998][T29090] [ 840.332939][T29090] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 840.762858][T29112] netlink: 'syz.0.10668': attribute type 13 has an invalid length. [ 841.337583][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 841.529241][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 841.555928][ T5904] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 841.588015][ T5904] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 841.622724][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 841.661783][ T5904] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 841.685574][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.715235][ T5904] usb 1-1: Product: syz [ 841.741174][ T5904] usb 1-1: Manufacturer: syz [ 841.762953][ T5904] usb 1-1: SerialNumber: syz [ 841.795550][ T5904] usb 1-1: config 0 descriptor?? [ 842.307113][ T6120] usb 1-1: USB disconnect, device number 24 [ 842.354530][ T5904] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 842.375282][T29166] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10694'. [ 842.548250][ T5904] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.569854][ T5904] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.601124][ T5904] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 842.632469][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 842.652001][ T5904] usb 8-1: SerialNumber: syz [ 842.783839][T29175] netlink: 136 bytes leftover after parsing attributes in process `syz.5.10698'. [ 842.910248][ T5904] usb 8-1: 0:2 : does not exist [ 842.975083][ T5904] usb 8-1: USB disconnect, device number 11 [ 843.416214][T29192] syz_tun: entered allmulticast mode [ 843.694184][T29202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10712'. [ 843.719964][T29202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10712'. [ 843.987136][T29211] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10716'. [ 844.063494][ T30] kauditd_printk_skb: 35514 callbacks suppressed [ 844.063515][ T30] audit: type=1400 audit(2000000200.674:1014657): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="devices" dev="sysfs" ino=7 [ 844.083858][T17861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 844.096589][T29214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 844.109173][ T5206] audit: audit_backlog=66 > audit_backlog_limit=64 [ 844.115811][ T5206] audit: audit_lost=247603 audit_rate_limit=0 audit_backlog_limit=64 [ 844.122935][T29214] audit: audit_lost=247604 audit_rate_limit=0 audit_backlog_limit=64 [ 844.124907][T25791] audit: audit_backlog=66 > audit_backlog_limit=64 [ 844.138262][ T30] audit: type=1400 audit(2000000200.683:1014658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5206 comm="udevd" name="virtual" dev="sysfs" ino=1370 [ 844.139786][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 844.164425][ C0] audit: audit_lost=247605 audit_rate_limit=0 audit_backlog_limit=64 [ 844.544850][T29227] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10724'. [ 844.554252][T29227] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10724'. [ 844.966329][T29244] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.10732'. [ 845.964761][T29280] netlink: 176 bytes leftover after parsing attributes in process `syz.0.10750'. [ 847.469685][T29332] netlink: 'syz.1.10775': attribute type 1 has an invalid length. [ 847.569816][ T6119] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 847.756652][T29342] trusted_key: encrypted_key: insufficient parameters specified [ 847.781621][ T6119] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 847.819777][ T6119] usb 7-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 847.849983][ T6119] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 11971, setting to 1024 [ 847.884038][ T6119] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 847.923024][ T6119] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 847.932181][ T6119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.940520][ T6120] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 847.982327][T29326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 847.987254][T29348] netlink: ct family unspecified [ 848.006185][T29348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 848.012336][ T6119] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.048001][ T6119] usb 7-1: invalid MIDI out EP 0 [ 848.072336][ T3092] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 848.127219][ T6120] usb 1-1: Using ep0 maxpacket: 16 [ 848.177797][ T6120] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 848.194472][ T6120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.226051][ T6119] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 848.247493][ T6120] usb 1-1: Product: syz [ 848.251769][ T6120] usb 1-1: Manufacturer: syz [ 848.255717][T29354] netlink: 'syz.1.10786': attribute type 1 has an invalid length. [ 848.264613][ T6120] usb 1-1: SerialNumber: syz [ 848.288322][ T6119] usb 7-1: USB disconnect, device number 9 [ 848.296062][T29354] netlink: 'syz.1.10786': attribute type 1 has an invalid length. [ 848.304346][ T3092] usb 8-1: Using ep0 maxpacket: 32 [ 848.340216][ T3092] usb 8-1: config 128 has an invalid interface number: 87 but max is 0 [ 848.367497][ T3092] usb 8-1: config 128 has no interface number 0 [ 848.396860][ T3092] usb 8-1: config 128 interface 87 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 848.424150][ T3092] usb 8-1: config 128 interface 87 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 848.458991][ T3092] usb 8-1: config 128 interface 87 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 848.512351][ T3092] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice=c5.9a [ 848.538572][ T3092] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.538855][ T6120] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 848.565462][ T3092] usb 8-1: Product: syz [ 848.581543][ T3092] usb 8-1: Manufacturer: syz [ 848.589906][ T3092] usb 8-1: SerialNumber: syz [ 848.611039][T29344] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 848.668720][ T6120] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 848.721447][ T6120] usb 1-1: USB disconnect, device number 25 [ 848.863416][ T3092] kvaser_usb 8-1:128.87: error -ENODEV: Cannot get usb endpoint(s) [ 848.894529][ T3092] usb 8-1: USB disconnect, device number 12 [ 848.949464][T29365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10791'. [ 848.984640][T29365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.119898][ T6119] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 849.240120][T29371] netlink: 92 bytes leftover after parsing attributes in process `syz.6.10794'. [ 849.293868][ T6119] usb 2-1: Using ep0 maxpacket: 8 [ 849.335250][ T6119] usb 2-1: unable to get BOS descriptor or descriptor too short [ 849.347526][ T6119] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 849.351906][T29373] gtp0: entered promiscuous mode [ 849.374391][ T6119] usb 2-1: config 8 has no interface number 0 [ 849.387589][ T6119] usb 2-1: config 8 interface 255 has no altsetting 0 [ 849.405760][T29373] gtp0: entered allmulticast mode [ 849.416659][ T6119] usb 2-1: string descriptor 0 read error: -22 [ 849.423335][ T30] kauditd_printk_skb: 32224 callbacks suppressed [ 849.423354][ T30] audit: type=1400 audit(2000000205.688:1033472): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25791 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 849.450490][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 849.457384][T29363] audit: audit_backlog=65 > audit_backlog_limit=64 [ 849.464566][ T6119] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 849.473898][T29363] audit: audit_lost=252076 audit_rate_limit=0 audit_backlog_limit=64 [ 849.482238][ T5206] audit: audit_lost=252077 audit_rate_limit=0 audit_backlog_limit=64 [ 849.490603][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.503903][ T5206] audit: backlog limit exceeded [ 849.510539][T29363] audit: backlog limit exceeded [ 849.515876][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 849.522433][ T5206] audit: audit_lost=252078 audit_rate_limit=0 audit_backlog_limit=64 [ 849.530762][ T30] audit: type=1400 audit(2000000205.688:1033473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25791 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 850.048133][ T6119] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 850.128048][ T6119] usb 2-1: USB disconnect, device number 30 [ 850.488287][ T6064] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 850.682538][ T6064] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 850.708305][ T6064] usb 1-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 850.731676][ T6064] usb 1-1: Product: syz [ 850.740392][ T6064] usb 1-1: Manufacturer: syz [ 850.752218][ T6064] usb 1-1: SerialNumber: syz [ 850.780769][ T6064] usb 1-1: config 0 descriptor?? [ 850.929122][ T6057] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 851.142274][ T6057] usb 7-1: config 0 has an invalid interface number: 138 but max is 0 [ 851.150561][ T6057] usb 7-1: config 0 has no interface number 0 [ 851.180494][ T6057] usb 7-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 851.203755][ T6057] usb 7-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 851.239875][ T6064] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 851.268596][ T6064] asix 1-1:0.0: probe with driver asix failed with error -71 [ 851.276543][ T6057] usb 7-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 4 [ 851.296462][ T6057] usb 7-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid maxpacket 1152, setting to 1023 [ 851.308961][ T6057] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 851.339880][ T6057] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.357769][ T6064] usb 1-1: USB disconnect, device number 26 [ 851.422693][ T6057] usb 7-1: config 0 descriptor?? [ 851.685497][ T6057] usb 7-1: string descriptor 0 read error: -71 [ 851.704287][ T6057] usbtest 7-1:0.138: Linux gadget zero [ 851.729119][T29432] netlink: 'syz.5.10824': attribute type 21 has an invalid length. [ 851.743725][ T6057] usbtest 7-1:0.138: full-speed {control in/out bulk-out iso-in} tests (+alt) [ 851.835384][ T6057] usb 7-1: USB disconnect, device number 10 [ 852.250416][T29441] xt_nfacct: accounting object `syz1' does not exists [ 852.648073][ T6064] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 852.650489][T29450] netlink: 'syz.6.10832': attribute type 6 has an invalid length. [ 852.840929][ T6064] usb 6-1: Using ep0 maxpacket: 8 [ 852.889526][ T6064] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 852.947024][ T6064] usb 6-1: config 0 has no interface number 0 [ 852.977092][ T6064] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 853.033074][ T6064] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.068469][ T6064] usb 6-1: Product: syz [ 853.072719][ T6064] usb 6-1: Manufacturer: syz [ 853.140895][ T6064] usb 6-1: SerialNumber: syz [ 853.168238][T29459] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 853.185683][ T6064] usb 6-1: config 0 descriptor?? [ 853.454827][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.472772][ T6064] ath6kl: Failed to submit usb control message: -71 [ 853.515430][ T6064] ath6kl: unable to send the bmi data to the device: -71 [ 853.522551][ T6064] ath6kl: Unable to send get target info: -71 [ 853.617531][ T6064] ath6kl: Failed to init ath6kl core: -71 [ 853.668774][ T6064] ath6kl_usb 6-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 853.767031][ T6064] usb 6-1: USB disconnect, device number 33 [ 853.892969][T29473] netlink: 2 bytes leftover after parsing attributes in process `syz.7.10843'. [ 853.989285][T29476] xt_hashlimit: invalid interval [ 853.989958][T29473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.052196][T29478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10845'. [ 854.104910][ T6274] udevd[6274]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.725143][ T6115] udevd[6115]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.774754][ T30] kauditd_printk_skb: 62896 callbacks suppressed [ 854.774773][ T30] audit: type=1400 audit(2000000210.683:1057379): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6899 comm="udevd" name="/" dev="sda1" ino=2 [ 854.787281][T26540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.799566][ T5935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.799586][ T5935] audit: audit_lost=265076 audit_rate_limit=0 audit_backlog_limit=64 [ 854.799603][ T5935] audit: backlog limit exceeded [ 854.799626][ T5935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.799640][ T5935] audit: audit_lost=265077 audit_rate_limit=0 audit_backlog_limit=64 [ 854.799657][ T5935] audit: backlog limit exceeded [ 854.806702][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.814437][ T6473] audit: audit_backlog=66 > audit_backlog_limit=64 [ 855.172400][ T6899] udevd[6899]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.805661][T29517] x_tables: duplicate entry at hook 1 [ 856.496005][T29534] autofs4:pid:29534:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 857.152108][T29551] xt_TCPMSS: Only works on TCP SYN packets [ 858.871617][T29601] netlink: 'syz.7.10902': attribute type 10 has an invalid length. [ 860.141389][ T30] kauditd_printk_skb: 77353 callbacks suppressed [ 860.141409][ T30] audit: type=1400 audit(2000000215.716:1081347): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6216 comm="udevd" name="/" dev="sda1" ino=2 [ 860.146632][ T5935] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.147830][ T30] audit: type=1400 audit(2000000215.716:1081348): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6216 comm="udevd" name="/" dev="sysfs" ino=1 [ 860.193378][ T5206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.201603][ T6473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.205653][ T6216] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.210224][ T6473] audit: audit_lost=282874 audit_rate_limit=0 audit_backlog_limit=64 [ 860.214658][ T6216] audit: audit_lost=282875 audit_rate_limit=0 audit_backlog_limit=64 [ 860.224069][T29637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.240781][ T5206] audit: audit_lost=282876 audit_rate_limit=0 audit_backlog_limit=64 [ 860.261503][T29639] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 861.261517][T29670] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 861.268123][T29670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 861.341259][T29670] vhci_hcd vhci_hcd.0: Device attached [ 861.353281][T29671] vhci_hcd: connection closed [ 861.354847][ T36] vhci_hcd: stop threads [ 861.388395][ T36] vhci_hcd: release socket [ 861.434639][ T36] vhci_hcd: disconnect device [ 862.572708][ T6120] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 862.717630][ T6064] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 862.747425][ T6120] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 862.788416][ T6120] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.813662][ T6120] usb 8-1: Product: syz [ 862.818824][ T6120] usb 8-1: Manufacturer: syz [ 862.841577][ T6120] usb 8-1: SerialNumber: syz [ 862.889073][ T6120] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 862.899441][ T6064] usb 7-1: Using ep0 maxpacket: 8 [ 862.910963][ T6064] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 862.975606][ T6064] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 863.029711][ T6119] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 863.041476][ T6064] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 863.107173][ T6064] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.189382][T29718] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10960'. [ 863.214713][ T6064] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 863.225617][ T6064] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.241995][T29718] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10960'. [ 863.291277][ T6064] usb 7-1: Product: syz [ 863.327573][ T6064] usb 7-1: Manufacturer: syz [ 863.355000][ T6064] usb 7-1: SerialNumber: syz [ 863.392109][ T6064] usb 7-1: config 0 descriptor?? [ 863.538808][ T6064] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input89 [ 863.555414][ T5915] usb 8-1: USB disconnect, device number 13 [ 863.577619][T29722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10962'. [ 863.679609][T29702] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 863.686216][T29702] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 863.724448][T29702] vhci_hcd vhci_hcd.0: Device attached [ 863.768014][T29727] vhci_hcd: connection closed [ 863.772157][ T6064] imon:send_packet: packet tx failed (-71) [ 863.775973][ T3557] vhci_hcd: stop threads [ 863.808747][ T6064] imon 7-1:0.0: panel buttons/knobs setup failed [ 863.829022][ T3557] vhci_hcd: release socket [ 863.848234][ T3557] vhci_hcd: disconnect device [ 864.107338][ T6064] rc_core: IR keymap rc-imon-pad not found [ 864.113361][ T6064] Registered IR keymap rc-empty [ 864.144860][ T6119] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 864.150387][T29735] xt_limit: Overflow, try lower: 65536/2147483648 [ 864.170133][ T6064] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 864.177837][ T6119] ath9k_htc: Failed to initialize the device [ 864.235681][ T5915] usb 8-1: ath9k_htc: USB layer deinitialized [ 864.256923][ T6064] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 864.310289][ T6064] imon:send_packet: packet tx failed (-71) [ 864.364287][ T6064] imon 7-1:0.0: remote input dev register failed [ 864.371133][ T6064] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 864.458701][ T6064] imon 7-1:0.0: unable to initialize intf0, err 0 [ 864.470521][ T6064] imon:imon_probe: failed to initialize context! [ 864.476923][ T6064] imon 7-1:0.0: unable to register, err -19 [ 864.492085][ T5904] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 864.577675][ T6064] usb 7-1: USB disconnect, device number 11 [ 864.709174][ T5904] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 864.745042][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.815212][ T5904] usb 6-1: config 0 descriptor?? [ 864.854473][ T5904] cp210x 6-1:0.0: cp210x converter detected [ 864.911494][T29751] comedi comedi2: board detection failed [ 865.289930][ T5904] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 865.346088][ T5904] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 865.368540][ T5915] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 865.402576][ T5904] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 865.464090][ T5904] usb 6-1: cp210x converter now attached to ttyUSB0 [ 865.507712][ T30] kauditd_printk_skb: 50121 callbacks suppressed [ 865.507732][ T30] audit: type=1400 audit(2000000220.730:1103741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6216 comm="udevd" name="/" dev="sda1" ino=2 [ 865.510028][ T5932] audit: audit_backlog=65 > audit_backlog_limit=64 [ 865.514150][ T30] audit: type=1400 audit(2000000220.730:1103742): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6216 comm="udevd" name="/" dev="sysfs" ino=1 [ 865.547754][ T5904] usb 6-1: USB disconnect, device number 34 [ 865.557754][ T6473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 865.563934][ T5933] audit: audit_backlog=65 > audit_backlog_limit=64 [ 865.570032][ T5922] audit: audit_backlog=66 > audit_backlog_limit=64 [ 865.583979][ T5206] audit: audit_backlog=66 > audit_backlog_limit=64 [ 865.588422][ T6216] audit: audit_backlog=67 > audit_backlog_limit=64 [ 865.590506][ T5206] audit: audit_lost=292120 audit_rate_limit=0 audit_backlog_limit=64 [ 865.590526][ T5206] audit: backlog limit exceeded [ 865.646971][ T5915] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 865.666656][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.680030][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 865.688536][ T5904] cp210x 6-1:0.0: device disconnected [ 865.743825][ T5915] usb 7-1: config 0 descriptor?? [ 865.975000][ T5915] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 866.190773][ T5915] [drm:udl_init] *ERROR* Selecting channel failed [ 866.249603][ T5915] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 866.291510][ T5915] [drm] Initialized udl on minor 2 [ 866.313524][ T5915] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 866.363013][ T5915] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 866.384457][ T6064] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 866.440120][ T5915] usb 7-1: USB disconnect, device number 12 [ 866.449313][ T6064] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 866.457388][ T6064] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 866.548267][ T31] INFO: task syz.3.8982:25424 blocked for more than 143 seconds. [ 866.556999][ T31] Not tainted 6.16.0-rc7-syzkaller #0 [ 866.562973][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 866.598525][ T31] task:syz.3.8982 state:D stack:26184 pid:25424 tgid:25422 ppid:5936 task_flags:0x400040 flags:0x00004004 [ 866.645492][ T31] Call Trace: [ 866.655452][ T31] [ 866.665211][ T31] __schedule+0x16aa/0x4c90 [ 866.692882][ T31] ? __lock_acquire+0xab9/0xd20 [ 866.715703][ T31] ? schedule+0x165/0x360 [ 866.748748][ T31] ? __pfx___schedule+0x10/0x10 [ 866.796148][ T31] ? schedule+0x91/0x360 [ 866.813763][ T31] schedule+0x165/0x360 [ 866.839920][ T31] schedule_preempt_disabled+0x13/0x30 [ 866.876028][ T31] __mutex_lock+0x724/0xe80 [ 866.911712][ T31] ? __mutex_lock+0x51b/0xe80 [ 866.948274][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 866.971134][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 866.991089][ T31] ? stack_trace_save+0x9c/0xe0 [ 867.021274][ T31] nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 867.057425][ T31] ? kasan_save_track+0x4f/0x80 [ 867.082227][ T31] ? kasan_save_track+0x3e/0x80 [ 867.108885][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 867.120105][ T31] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 867.152264][ T31] ? kmalloc_reserve+0x136/0x290 [ 867.188563][ T31] ? __alloc_skb+0x142/0x2d0 [ 867.219407][ T31] ? netlink_dump+0x1b1/0xe60 [ 867.224196][ T31] ? genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 867.254911][ T31] ? genl_rcv_msg+0x5da/0x790 [ 867.259707][ T31] ? netlink_rcv_skb+0x208/0x470 [ 867.318981][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 867.336783][ T31] ? __sock_sendmsg+0x21c/0x270 [ 867.350206][ T31] ? ____sys_sendmsg+0x505/0x830 [ 867.369376][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 867.380461][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 867.392419][ T31] ? do_syscall_64+0xfa/0x3b0 [ 867.403333][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.421208][ T31] ? __alloc_skb+0x142/0x2d0 [ 867.425941][ T31] ? rcu_is_watching+0x15/0xb0 [ 867.430888][ T31] ? trace_kmalloc+0x1f/0xd0 [ 867.436151][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 867.443022][ T31] ? __build_skb_around+0x257/0x3e0 [ 867.448406][ T31] genl_dumpit+0x10b/0x1b0 [ 867.452893][ T31] netlink_dump+0x6de/0xe60 [ 867.457734][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 867.463119][ T31] ? genl_start+0x499/0x6c0 [ 867.468810][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 867.474175][ T31] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 867.483538][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 867.490831][ T31] ? genl_get_cmd+0x496/0x910 [ 867.495608][ T31] ? __pfx_genl_start+0x10/0x10 [ 867.501696][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 867.508081][ T31] ? __pfx_genl_done+0x10/0x10 [ 867.513253][ T31] genl_rcv_msg+0x5da/0x790 [ 867.522144][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.527329][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 867.536323][ T31] netlink_rcv_skb+0x208/0x470 [ 867.542175][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.547350][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 867.558375][ T31] ? down_read+0x1ad/0x2e0 [ 867.567575][ T31] genl_rcv+0x28/0x40 [ 867.576108][ T31] netlink_unicast+0x759/0x8e0 [ 867.580979][ T31] netlink_sendmsg+0x805/0xb30 [ 867.597380][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.608954][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.620415][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.630342][ T31] __sock_sendmsg+0x21c/0x270 [ 867.640493][ T31] ____sys_sendmsg+0x505/0x830 [ 867.645371][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.653222][ T31] ? import_iovec+0x74/0xa0 [ 867.659467][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 867.664309][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.671049][ T31] ? __fget_files+0x2a/0x420 [ 867.675790][ T31] ? __fget_files+0x3a0/0x420 [ 867.682227][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 867.687328][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.695209][ T31] ? rcu_is_watching+0x15/0xb0 [ 867.701814][ T31] ? do_syscall_64+0xbe/0x3b0 [ 867.706565][ T31] do_syscall_64+0xfa/0x3b0 [ 867.715599][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.721241][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.727454][ T31] ? clear_bhb_loop+0x60/0xb0 [ 867.732736][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.738776][ T31] RIP: 0033:0x7fa49638e9a9 [ 867.743727][ T31] RSP: 002b:00007fa49723f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.753708][ T31] RAX: ffffffffffffffda RBX: 00007fa4965b5fa0 RCX: 00007fa49638e9a9 [ 867.761785][ T31] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 867.770302][ T31] RBP: 00007fa496410d69 R08: 0000000000000000 R09: 0000000000000000 [ 867.778622][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.789693][ T31] R13: 0000000000000000 R14: 00007fa4965b5fa0 R15: 00007ffdbc76cd48 [ 867.799085][ T31] [ 867.802214][ T31] [ 867.802214][ T31] Showing all locks held in the system: [ 867.819943][ T31] 2 locks held by kworker/u8:1/13: [ 867.825141][ T31] 1 lock held by khungtaskd/31: [ 867.841542][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 867.853059][ T31] 2 locks held by getty/5595: [ 867.858884][ T31] #0: ffff888030ac30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 867.871365][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 867.884713][ T31] 2 locks held by syz.4.8921/25296: [ 867.890425][ T31] #0: ffffffff8f570170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 867.900012][ T31] #1: ffffffff8e41a568 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 867.912412][ T31] 3 locks held by syz.3.8982/25424: [ 867.918071][ T31] #0: ffffffff8f570170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 867.927588][ T31] #1: ffff88805632f6d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 867.941043][ T31] #2: ffffffff8e41a568 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xd9/0x1280 [ 867.954925][ T31] [ 867.958386][ T31] ============================================= [ 867.958386][ T31] [ 867.968520][ T31] NMI backtrace for cpu 0 [ 867.968534][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 867.968551][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 867.968561][ T31] Call Trace: [ 867.968567][ T31] [ 867.968575][ T31] dump_stack_lvl+0x189/0x250 [ 867.968595][ T31] ? __wake_up_klogd+0xd9/0x110 [ 867.968620][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.968637][ T31] ? __pfx__printk+0x10/0x10 [ 867.968666][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 867.968692][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 867.968713][ T31] ? _printk+0xcf/0x120 [ 867.968735][ T31] ? __pfx__printk+0x10/0x10 [ 867.968757][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 867.968782][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 867.968808][ T31] watchdog+0xfee/0x1030 [ 867.968831][ T31] ? watchdog+0x1de/0x1030 [ 867.968860][ T31] kthread+0x711/0x8a0 [ 867.968882][ T31] ? __pfx_watchdog+0x10/0x10 [ 867.968904][ T31] ? __pfx_kthread+0x10/0x10 [ 867.968926][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 867.968950][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 867.968972][ T31] ? __pfx_kthread+0x10/0x10 [ 867.968994][ T31] ret_from_fork+0x3fc/0x770 [ 867.969011][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 867.969030][ T31] ? __switch_to_asm+0x39/0x70 [ 867.969048][ T31] ? __switch_to_asm+0x33/0x70 [ 867.969066][ T31] ? __pfx_kthread+0x10/0x10 [ 867.969087][ T31] ret_from_fork_asm+0x1a/0x30 [ 867.969117][ T31] [ 867.969123][ T31] Sending NMI from CPU 0 to CPUs 1: [ 868.125485][ C1] NMI backtrace for cpu 1 [ 868.125503][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 868.125525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 868.125537][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 868.125562][ C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bd 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 868.125580][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 868.125601][ C1] RAX: 831fcddbd3d5a600 RBX: ffffffff81976908 RCX: 831fcddbd3d5a600 [ 868.125616][ C1] RDX: 0000000000000001 RSI: ffffffff8d982a96 RDI: ffffffff8be1b9c0 [ 868.125629][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 868.125642][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b2f0 [ 868.125656][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad4b40 [ 868.125668][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 868.125683][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.125695][ C1] CR2: 00007f81b21802d8 CR3: 0000000075a86000 CR4: 00000000003526f0 [ 868.125712][ C1] Call Trace: [ 868.125721][ C1] [ 868.125728][ C1] default_idle+0x13/0x20 [ 868.125762][ C1] default_idle_call+0x74/0xb0 [ 868.125787][ C1] do_idle+0x1e8/0x510 [ 868.125807][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.125828][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.125847][ C1] ? __pfx_do_idle+0x10/0x10 [ 868.125874][ C1] ? do_idle+0x4ef/0x510 [ 868.125896][ C1] cpu_startup_entry+0x44/0x60 [ 868.125916][ C1] start_secondary+0x101/0x110 [ 868.125942][ C1] common_startup_64+0x13e/0x147 [ 868.125976][ C1] [ 868.127679][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 868.127707][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 868.127737][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 868.127754][ T31] Call Trace: [ 868.127765][ T31] [ 868.127777][ T31] dump_stack_lvl+0x99/0x250 [ 868.127810][ T31] ? __asan_memcpy+0x40/0x70 [ 868.127849][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 868.127877][ T31] ? __pfx__printk+0x10/0x10 [ 868.127928][ T31] panic+0x2db/0x790 [ 868.127970][ T31] ? __pfx_panic+0x10/0x10 [ 868.127997][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 868.128034][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 868.128069][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 868.128110][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 868.128157][ T31] watchdog+0x102d/0x1030 [ 868.128198][ T31] ? watchdog+0x1de/0x1030 [ 868.128245][ T31] kthread+0x711/0x8a0 [ 868.128283][ T31] ? __pfx_watchdog+0x10/0x10 [ 868.128319][ T31] ? __pfx_kthread+0x10/0x10 [ 868.128356][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 868.128397][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.128420][ T31] ? __pfx_kthread+0x10/0x10 [ 868.128456][ T31] ret_from_fork+0x3fc/0x770 [ 868.128484][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 868.128518][ T31] ? __switch_to_asm+0x39/0x70 [ 868.128548][ T31] ? __switch_to_asm+0x33/0x70 [ 868.128579][ T31] ? __pfx_kthread+0x10/0x10 [ 868.128615][ T31] ret_from_fork_asm+0x1a/0x30 [ 868.128664][ T31] [ 868.453490][ T31] Kernel Offset: disabled [ 868.457827][ T31] Rebooting in 86400 seconds..