last executing test programs: 13.357074157s ago: executing program 2 (id=10310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '='}]}], {0x14}}, 0x70}}, 0x0) 13.168514034s ago: executing program 2 (id=10312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) 12.995999952s ago: executing program 2 (id=10315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) 12.858098991s ago: executing program 2 (id=10317): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 12.639193482s ago: executing program 2 (id=10319): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12.458613457s ago: executing program 2 (id=10321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @loopback}}}, &(0x7f00000001c0)=0x90) 6.105689342s ago: executing program 1 (id=10345): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "a5247d20"}]}}, 0x0}, 0x0) 4.439012547s ago: executing program 4 (id=10351): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) listen(r0, 0x0) 3.943030925s ago: executing program 4 (id=10353): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x9) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) 3.694838731s ago: executing program 1 (id=10354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.470892108s ago: executing program 3 (id=10356): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c060000) 3.400635526s ago: executing program 4 (id=10357): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c) ioctl$UI_END_FF_UPLOAD(r0, 0x8000552c, 0x0) 3.223894266s ago: executing program 1 (id=10358): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='smackfshat=^,smackfshat']) 2.846689214s ago: executing program 4 (id=10360): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x10003) 2.621225434s ago: executing program 1 (id=10361): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x2101) pread64(r0, &(0x7f0000000340)=""/109, 0x6d, 0x0) 2.599673691s ago: executing program 3 (id=10362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 2.180197005s ago: executing program 4 (id=10365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.139680661s ago: executing program 0 (id=10366): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) 2.089878565s ago: executing program 1 (id=10367): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0xe, 0x1, 0x7f, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}, 0x40) 1.854864243s ago: executing program 3 (id=10368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008400000000014000300686173683a69702c706f72742c6970000500050002"], 0x60}}, 0x0) 1.836280296s ago: executing program 4 (id=10369): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd05000040", 0x6}], 0x1, 0x0, 0x0) 1.677665669s ago: executing program 1 (id=10370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="7992f9", 0x3}], 0x1, 0x4, 0x8, 0xc) 1.641236219s ago: executing program 0 (id=10371): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000040)=0x10) 1.102997171s ago: executing program 0 (id=10372): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x894b, &(0x7f0000000300)) 909.099721ms ago: executing program 3 (id=10373): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 766.151479ms ago: executing program 0 (id=10374): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) 411.548788ms ago: executing program 0 (id=10375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 307.173574ms ago: executing program 3 (id=10376): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) getsockopt$bt_hci(r0, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 195.324353ms ago: executing program 0 (id=10377): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 0s ago: executing program 3 (id=10378): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008040, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): parsing attributes in process `syz.4.9184'. [ 570.803009][ T1168] uclogic 0003:145F:0212.0017: interface is invalid, ignoring [ 570.826204][ T1168] usb 2-1: USB disconnect, device number 17 [ 571.013966][ T937] usb 3-1: USB disconnect, device number 18 [ 571.282550][ T1168] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 571.462560][ T1168] usb 4-1: Using ep0 maxpacket: 16 [ 571.486702][ T1168] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 571.506328][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.524686][ T1168] usb 4-1: Product: syz [ 571.541022][ T1168] usb 4-1: Manufacturer: syz [ 571.557207][ T1168] usb 4-1: SerialNumber: syz [ 571.568270][ T1168] usb 4-1: config 0 descriptor?? [ 571.640350][ T1168] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 571.863346][ T1168] usb 4-1: USB disconnect, device number 23 [ 572.071275][T24877] tipc: Enabling of bearer rejected, failed to enable media [ 572.342514][ T5212] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 572.492653][ T5212] usb 2-1: Using ep0 maxpacket: 8 [ 572.509140][ T5212] usb 2-1: config 0 interface 0 has no altsetting 0 [ 572.535003][ T5212] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 572.562573][ T5212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.571108][ T5212] usb 2-1: Product: syz [ 572.590003][ T5212] usb 2-1: Manufacturer: syz [ 572.595537][ T5212] usb 2-1: SerialNumber: syz [ 572.611404][ T5212] usb 2-1: config 0 descriptor?? [ 572.634057][ T5212] gspca_main: se401-2.14.0 probing 047d:5003 [ 573.074718][ T937] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 573.286321][ T29] kauditd_printk_skb: 17129 callbacks suppressed [ 573.286344][ T29] audit: type=1400 audit(2000000137.616:200326): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=21849 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 [ 573.339637][ T29] audit: type=1400 audit(2000000137.616:200327): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21849 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 [ 573.387686][ T29] audit: type=1400 audit(2000000137.726:200328): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24925 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 573.440774][ T29] audit: type=1400 audit(2000000137.726:200329): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24925 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 573.475034][T21849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.486485][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.493211][ C1] audit: audit_lost=60261 audit_rate_limit=0 audit_backlog_limit=64 [ 573.501219][ C1] audit: backlog limit exceeded [ 573.508968][ T5228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.516605][ T5228] audit: audit_lost=60262 audit_rate_limit=0 audit_backlog_limit=64 [ 573.651754][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.676415][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.709641][ T937] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 573.722796][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.739196][ T937] usb 3-1: config 0 descriptor?? [ 573.833282][ T5212] usb 2-1: reset high-speed USB device number 18 using dummy_hcd [ 573.844398][T24936] netlink: 'syz.3.9229': attribute type 1 has an invalid length. [ 573.852223][T24936] netlink: 9352 bytes leftover after parsing attributes in process `syz.3.9229'. [ 573.877079][T24936] netlink: 'syz.3.9229': attribute type 1 has an invalid length. [ 573.886006][T24936] netlink: 'syz.3.9229': attribute type 2 has an invalid length. [ 573.896474][T24936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9229'. [ 574.179015][ T937] holtek 0003:1241:5015.0018: collection stack underflow [ 574.204151][ T937] holtek 0003:1241:5015.0018: item 0 1 0 12 parsing failed [ 574.217485][ T937] holtek 0003:1241:5015.0018: parse failed [ 574.227015][ T5212] usb 2-1: failed to restore interface 0 altsetting 104 (error=-71) [ 574.239987][ T937] holtek 0003:1241:5015.0018: probe with driver holtek failed with error -22 [ 574.250281][ T5212] gspca_se401: read req failed req 0x06 error -19 [ 574.262194][ T5212] usb 2-1: USB disconnect, device number 18 [ 574.412286][ T937] usb 3-1: USB disconnect, device number 19 [ 575.291301][T24970] netlink: 'syz.2.9244': attribute type 3 has an invalid length. [ 575.469998][T24975] pimreg: entered allmulticast mode [ 575.499925][T24976] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9247'. [ 575.515909][T24981] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9250'. [ 575.520545][T24976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 575.590389][T24975] pimreg: left allmulticast mode [ 575.629126][T24984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9253'. [ 575.707182][T24988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9252'. [ 576.273019][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 576.423104][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 576.433959][T25024] CUSE: DEVNAME unspecified [ 576.457502][ T46] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 576.477251][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.503033][ T46] usb 2-1: Product: syz [ 576.507288][ T46] usb 2-1: Manufacturer: syz [ 576.511942][ T46] usb 2-1: SerialNumber: syz [ 576.631103][ T46] usb 2-1: config 0 descriptor?? [ 576.846869][T25039] netlink: 'syz.4.9277': attribute type 4 has an invalid length. [ 576.872869][T25042] Bluetooth: MGMT ver 1.23 [ 576.890412][ T937] kernel write not supported for file /snd/seq (pid: 937 comm: kworker/0:2) [ 576.901892][T25043] tmpfs: Bad value for 'mpol' [ 577.048608][ T46] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 577.057062][ T46] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 577.354131][ T46] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 577.376178][ T46] usb 2-1: USB disconnect, device number 19 [ 577.770952][T25083] netlink: 'syz.1.9293': attribute type 1 has an invalid length. [ 578.145022][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 578.294051][T25109] audit_log_start: 20984 callbacks suppressed [ 578.294074][T25109] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.301002][T21849] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.314271][T21849] audit: audit_lost=63339 audit_rate_limit=0 audit_backlog_limit=64 [ 578.322302][T21849] audit: backlog limit exceeded [ 578.327410][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.327435][ C1] audit: audit_lost=63340 audit_rate_limit=0 audit_backlog_limit=64 [ 578.327457][ C1] audit: backlog limit exceeded [ 578.327572][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.327590][ C1] audit: audit_lost=63341 audit_rate_limit=0 audit_backlog_limit=64 [ 578.327622][ C1] audit: backlog limit exceeded [ 579.143268][ T46] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 579.323542][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 579.344716][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.367652][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.398927][ T46] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 579.417271][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.438190][ T46] usb 4-1: config 0 descriptor?? [ 579.579444][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9324'. [ 579.876397][ T46] megaworld 0003:07B5:0312.0019: unknown main item tag 0x0 [ 579.905344][ T46] megaworld 0003:07B5:0312.0019: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 579.932688][ T46] megaworld 0003:07B5:0312.0019: no inputs found [ 580.075838][ T46] usb 4-1: USB disconnect, device number 24 [ 580.928059][T25216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9349'. [ 580.999390][ T937] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 581.165000][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 581.169165][T25229] hfs: unable to parse mount options [ 581.181199][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.203792][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.223797][ T937] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 581.233282][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.256302][ T937] usb 4-1: config 0 descriptor?? [ 581.387292][ T1168] hid-generic 0000:0000:0000.001A: item fetching failed at offset 0/1 [ 581.418196][ T1168] hid-generic 0000:0000:0000.001A: probe with driver hid-generic failed with error -22 [ 581.784461][ T5212] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 581.913212][ T937] usb 4-1: USB disconnect, device number 25 [ 581.978256][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.993368][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.005264][ T5212] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 582.014564][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.030410][ T5212] usb 2-1: config 0 descriptor?? [ 582.461036][ T5212] hid-led 0003:1D34:000A.001C: unknown main item tag 0x0 [ 582.461084][ T5212] hid-led 0003:1D34:000A.001C: unbalanced delimiter at end of report description [ 582.461675][ T5212] hid-led 0003:1D34:000A.001C: probe with driver hid-led failed with error -22 [ 582.679126][ T46] usb 2-1: USB disconnect, device number 20 [ 583.153883][ T5212] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 583.309687][ T29] kauditd_printk_skb: 18607 callbacks suppressed [ 583.309708][ T29] audit: type=1400 audit(2000000147.645:224139): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25281 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 583.337336][ T5212] usb 3-1: Using ep0 maxpacket: 32 [ 583.358960][ T5212] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 583.368639][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.377306][ T29] audit: type=1400 audit(2000000147.675:224140): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25281 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 583.399883][ T5212] usb 3-1: config 0 descriptor?? [ 583.408794][ T29] audit: type=1400 audit(2000000147.675:224141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25281 comm="syz-executor" name="1867" dev="tmpfs" ino=9385 [ 583.410373][T23334] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.439371][T25266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.453965][T23334] audit: audit_lost=65574 audit_rate_limit=0 audit_backlog_limit=64 [ 583.471206][T23334] audit: backlog limit exceeded [ 583.477867][T23334] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.493203][T23917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.500649][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.510011][ T5212] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 584.064149][ T937] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 584.220656][ T5212] gspca_nw80x: reg_w err -71 [ 584.231240][ T5212] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 584.254261][ T937] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 584.263420][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.284183][ T5212] usb 3-1: USB disconnect, device number 20 [ 584.319971][ T937] usb 5-1: config 0 descriptor?? [ 584.330131][ T937] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input83 [ 584.418890][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9391'. [ 584.529820][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 584.568021][ T5212] usb 5-1: USB disconnect, device number 10 [ 584.706163][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.737534][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.786665][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 584.806265][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.854982][ T46] usb 2-1: config 0 descriptor?? [ 585.322098][ T46] apple 0003:05AC:027C.001D: unknown main item tag 0x4 [ 585.344580][ T46] apple 0003:05AC:027C.001D: hidraw0: USB HID vff.ff Device [HID 05ac:027c] on usb-dummy_hcd.1-1/input0 [ 585.532764][ T5264] usb 2-1: USB disconnect, device number 21 [ 586.054425][ T5264] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 586.206501][ T5264] usb 5-1: Using ep0 maxpacket: 8 [ 586.215823][ T5264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.247613][ T5264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.278156][ T5264] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 586.298494][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.311646][T25345] netlink: 'syz.1.9411': attribute type 27 has an invalid length. [ 586.328152][ T5264] usb 5-1: config 0 descriptor?? [ 586.787612][ T5264] wacom 0003:056A:003F.001E: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.4-1/input0 [ 586.989971][ T5264] usb 5-1: USB disconnect, device number 11 [ 587.180535][T25357] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9416'. [ 587.206173][T25357] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 587.944528][ T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 588.104461][ T5302] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 588.112465][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 588.136119][ T46] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 588.161508][ T46] usb 3-1: config 179 has no interface number 0 [ 588.181909][ T46] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 588.213805][ T46] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 588.233411][ T46] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 588.257437][ T46] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 588.291544][ T46] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 588.304480][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.316533][ T29] kauditd_printk_skb: 12540 callbacks suppressed [ 588.316553][ T29] audit: type=1400 audit(2000000152.654:235343): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5213 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 588.351109][ T5213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.358960][T25371] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.365691][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.373898][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.383870][T25371] audit: audit_lost=66025 audit_rate_limit=0 audit_backlog_limit=64 [ 588.401371][ T5302] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 588.410906][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.417631][T25371] audit: backlog limit exceeded [ 588.423100][ T27] audit: audit_lost=66026 audit_rate_limit=0 audit_backlog_limit=64 [ 588.431704][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.441226][ T27] audit: backlog limit exceeded [ 588.447277][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.455293][ T27] audit: audit_lost=66027 audit_rate_limit=0 audit_backlog_limit=64 [ 588.478689][T25369] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 588.499080][ T5302] usb 2-1: config 0 descriptor?? [ 588.934692][ T46] usb 3-1: USB disconnect, device number 21 [ 588.934738][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 588.948965][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 589.083512][ T5302] kone 0003:1E7D:2CED.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 589.292491][ T46] usb 2-1: USB disconnect, device number 22 [ 589.693664][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9431'. [ 589.987842][T25394] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 590.405750][T25403] program syz.0.9438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.684762][ T5302] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 590.867221][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.893650][ T5302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.932948][ T5302] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 590.955665][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 590.963590][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.015033][ T5302] usb 3-1: config 0 descriptor?? [ 591.137915][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 591.152104][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.204707][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.234963][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 591.292179][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.317448][ T25] usb 2-1: config 0 descriptor?? [ 591.492789][ T5302] wacom 0003:056A:0003.0020: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 591.580758][ T5302] wacom 0003:056A:0003.0020: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.2-1/input0 [ 591.619937][ T5302] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0003.0020/input/input87 [ 591.721820][ T5302] usb 3-1: USB disconnect, device number 22 [ 591.783796][ T25] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 591.813950][ T25] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 591.846587][ T25] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 591.874341][ T25] logitech 0003:046D:C29C.0021: unknown main item tag 0x0 [ 591.927906][ T25] logitech 0003:046D:C29C.0021: hidraw0: USB HID v0.08 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 592.020834][ T25] logitech 0003:046D:C29C.0021: no inputs found [ 592.085988][ T25] usb 2-1: USB disconnect, device number 23 [ 592.665991][T25430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9450'. [ 593.329514][T25440] audit_log_start: 17261 callbacks suppressed [ 593.329535][T25440] audit: audit_backlog=65 > audit_backlog_limit=64 [ 593.345133][ T29] audit: type=1400 audit(2000000157.654:243159): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 593.345303][T25440] audit: audit_lost=69179 audit_rate_limit=0 audit_backlog_limit=64 [ 593.364703][ T29] audit: type=1400 audit(2000000157.654:243160): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 593.364742][ T29] audit: type=1400 audit(2000000157.654:243161): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="112" dev="tmpfs" ino=574 [ 593.364777][ T29] audit: type=1400 audit(2000000157.654:243162): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23917 comm="syz-executor" path="/112/cgroup" dev="tmpfs" ino=575 [ 593.364812][ T29] audit: type=1400 audit(2000000157.654:243163): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 593.374785][T25440] audit: backlog limit exceeded [ 593.393276][ T29] audit: type=1400 audit(2000000157.654:243164): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 593.393318][ T29] audit: type=1400 audit(2000000157.654:243165): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="112" dev="tmpfs" ino=574 [ 593.629742][ T5216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 593.644991][ T5216] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 593.658055][ T5216] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 593.678101][ T5216] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 593.689468][ T5216] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 593.769926][ T5216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 593.810752][T25445] lo speed is unknown, defaulting to 1000 [ 593.985238][ T5302] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 594.047776][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9463'. [ 594.083656][T25459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9463'. [ 594.155304][ T5302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.203316][ T5302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 96, setting to 64 [ 594.251421][ T5302] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.287022][ T5302] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 594.325160][ T5302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.386021][ T5302] usb 5-1: config 0 descriptor?? [ 594.450479][T25454] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 594.882753][ T5302] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0022/input/input90 [ 595.080142][ T5302] uclogic 0003:28BD:0909.0022: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 595.213353][ T5302] usb 5-1: USB disconnect, device number 12 [ 595.474470][T25445] chnl_net:caif_netlink_parms(): no params data found [ 595.909715][ T5216] Bluetooth: hci6: command tx timeout [ 596.276660][T25445] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.300181][T25445] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.354091][T25445] bridge_slave_0: entered allmulticast mode [ 596.390958][T25445] bridge_slave_0: entered promiscuous mode [ 596.450296][T25445] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.485012][T25445] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.533507][T25445] bridge_slave_1: entered allmulticast mode [ 596.584361][T25445] bridge_slave_1: entered promiscuous mode [ 596.644063][T25445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.656842][T25445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.103443][T25445] team0: Port device team_slave_0 added [ 597.173899][T25445] team0: Port device team_slave_1 added [ 597.411599][T25445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.443562][T25445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.535282][T25445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.562700][T25445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.594816][T25445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.633130][T25445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.715774][ T25] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 597.790929][T25445] hsr_slave_0: entered promiscuous mode [ 597.811316][T25445] hsr_slave_1: entered promiscuous mode [ 597.827055][T25445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.852556][T25445] Cannot create hsr debugfs directory [ 597.877910][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.893354][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.948479][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 597.987447][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.996268][ T5216] Bluetooth: hci6: command tx timeout [ 598.040541][ T25] usb 3-1: config 0 descriptor?? [ 598.426523][ T29] kauditd_printk_skb: 14123 callbacks suppressed [ 598.426572][ T29] audit: type=1400 audit(2000000162.753:248214): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=5200 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.199 dest=33912 netif=eth0 [ 598.463506][T23917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 598.471751][ T25] audit: audit_backlog=65 > audit_backlog_limit=64 [ 598.480198][T25445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.492904][ T25] audit: audit_lost=72205 audit_rate_limit=0 audit_backlog_limit=64 [ 598.520474][T23917] audit: audit_lost=72206 audit_rate_limit=0 audit_backlog_limit=64 [ 598.538624][ T25] audit: backlog limit exceeded [ 598.554365][ T25] audit: audit_backlog=65 > audit_backlog_limit=64 [ 598.564935][ T25] audit: audit_lost=72207 audit_rate_limit=0 audit_backlog_limit=64 [ 598.577306][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 598.583871][ C1] audit: audit_lost=72208 audit_rate_limit=0 audit_backlog_limit=64 [ 598.632918][ T25] mcp2221 0003:04D8:00DD.0023: item fetching failed at offset 3/5 [ 598.684795][ T25] mcp2221 0003:04D8:00DD.0023: can't parse reports [ 598.706931][ T25] mcp2221 0003:04D8:00DD.0023: probe with driver mcp2221 failed with error -22 [ 598.763310][ T25] usb 3-1: USB disconnect, device number 23 [ 598.794834][T25445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.970697][T25445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.113268][T25445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.196753][T25536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9493'. [ 599.252606][T25536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9493'. [ 599.586924][T25445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 599.668113][T25445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 599.697946][T25445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 599.735086][T25445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 600.076177][ T5216] Bluetooth: hci6: command tx timeout [ 600.320392][T25445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.438435][T25445] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.492131][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.499338][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.573303][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.580566][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.088545][T25562] netlink: 209800 bytes leftover after parsing attributes in process `syz.4.9505'. [ 601.945461][T25445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.100614][T25582] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 602.100614][T25582] program syz.4.9512 not setting count and/or reply_len properly [ 602.147116][ T5216] Bluetooth: hci6: command tx timeout [ 602.243030][T25445] veth0_vlan: entered promiscuous mode [ 602.275878][T25445] veth1_vlan: entered promiscuous mode [ 602.519546][T25587] usb usb1: usbfs: process 25587 (syz.4.9515) did not claim interface 3 before use [ 602.732781][T25445] veth0_macvtap: entered promiscuous mode [ 602.776538][T25445] veth1_macvtap: entered promiscuous mode [ 602.843332][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.915623][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.948767][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.988721][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.042995][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.093142][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.436933][ T29] kauditd_printk_skb: 8562 callbacks suppressed [ 603.436954][ T29] audit: type=1400 audit(2000000167.762:252229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 603.436996][ T29] audit: type=1400 audit(2000000167.762:252230): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="133" dev="tmpfs" ino=679 [ 603.437035][ T29] audit: type=1400 audit(2000000167.762:252231): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 603.437073][ T29] audit: type=1400 audit(2000000167.772:252232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 603.437111][ T29] audit: type=1400 audit(2000000167.772:252233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="133" dev="tmpfs" ino=679 [ 603.437155][ T29] audit: type=1400 audit(2000000167.772:252234): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23917 comm="syz-executor" path="/133/cgroup" dev="tmpfs" ino=680 [ 603.437194][ T29] audit: type=1400 audit(2000000167.772:252235): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 603.437231][ T29] audit: type=1400 audit(2000000167.772:252236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 603.437269][ T29] audit: type=1400 audit(2000000167.772:252237): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23917 comm="syz-executor" name="133" dev="tmpfs" ino=679 [ 603.437305][ T29] audit: type=1400 audit(2000000167.772:252238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=23917 comm="syz-executor" name="133" dev="tmpfs" ino=679 [ 603.476479][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.476509][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.476530][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.476548][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.478305][T25445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.492895][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.492922][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.492935][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.492950][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.492964][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.492979][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.493012][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.493028][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.493046][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.493063][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.493078][T25445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.493095][T25445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.494306][T25445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.507798][T25445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.507842][T25445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.507874][T25445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.507912][T25445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.820155][ T5283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.820196][ T5283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.971045][ T1048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.971075][ T1048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.915786][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9533'. [ 604.984184][T25634] tipc: Started in network mode [ 604.984208][T25634] tipc: Node identity , cluster identity 4711 [ 607.224417][ T937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 607.418387][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.418431][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.418458][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 607.418501][ T937] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 607.418529][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.439860][ T937] usb 5-1: config 0 descriptor?? [ 607.856256][ T937] kye 0003:0458:0087.0024: item fetching failed at offset 0/2 [ 607.867032][ T937] kye 0003:0458:0087.0024: parse failed [ 607.867099][ T937] kye 0003:0458:0087.0024: probe with driver kye failed with error -22 [ 608.074637][ T937] usb 5-1: USB disconnect, device number 13 [ 608.405766][T25714] netlink: 'syz.3.9571': attribute type 178 has an invalid length. [ 608.450859][ T29] kauditd_printk_skb: 8177 callbacks suppressed [ 608.450878][ T29] audit: type=1400 audit(2000000172.782:259057): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25717 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 608.502099][ T4668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.511646][ T29] audit: type=1400 audit(2000000172.782:259058): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25717 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 608.521821][ T4668] audit: audit_lost=74178 audit_rate_limit=0 audit_backlog_limit=64 [ 608.546629][T25719] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.556325][T25445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.563718][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 608.570353][ C1] audit: audit_lost=74179 audit_rate_limit=0 audit_backlog_limit=64 [ 608.578486][ C1] audit: backlog limit exceeded [ 608.583845][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.184261][T25771] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 610.707506][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 610.787460][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 610.870995][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.912220][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.959518][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.037515][ T25] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 611.067298][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.116669][ T25] usb 2-1: config 0 descriptor?? [ 611.578682][ T25] hid-udraw 0003:20D6:CB17.0025: unbalanced delimiter at end of report description [ 611.616318][ T25] hid-udraw 0003:20D6:CB17.0025: parse failed [ 611.648944][ T25] hid-udraw 0003:20D6:CB17.0025: probe with driver hid-udraw failed with error -22 [ 611.670160][T25802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9611'. [ 611.706784][T25802] nbd: socks must be embedded in a SOCK_ITEM attr [ 611.770401][ T25] usb 2-1: USB disconnect, device number 24 [ 612.297555][ T937] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 612.481211][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 612.576751][ T937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 612.594556][ T937] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 612.604821][ T937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 612.616148][ T937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 612.692796][ T937] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 612.702536][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.719813][ T937] usb 4-1: Product: syz [ 612.724099][ T937] usb 4-1: Manufacturer: syz [ 612.757372][ T937] usb 4-1: SerialNumber: syz [ 612.834000][ T937] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 612.913579][ T5212] usb 4-1: USB disconnect, device number 26 [ 612.957704][ T5264] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 613.007388][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 613.117473][ T5264] usb 2-1: Using ep0 maxpacket: 16 [ 613.126398][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.138010][ T5264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.149288][ T5264] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 613.167523][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.182181][ T5264] usb 2-1: config 0 descriptor?? [ 613.192817][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 613.217324][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 613.246962][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 613.261818][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.295260][T25827] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 613.315092][ T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 613.463931][ T29] kauditd_printk_skb: 12803 callbacks suppressed [ 613.463953][ T29] audit: type=1400 audit(2000000177.791:266918): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23334 comm="udevd" name="/" dev="sda1" ino=2 [ 613.489826][T23334] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.496401][T23334] audit: audit_lost=75835 audit_rate_limit=0 audit_backlog_limit=64 [ 613.525063][T23334] audit: backlog limit exceeded [ 613.537414][T23334] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.543997][T23334] audit: audit_lost=75836 audit_rate_limit=0 audit_backlog_limit=64 [ 613.557400][ T29] audit: type=1400 audit(2000000177.791:266919): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23334 comm="udevd" name="/" dev="sysfs" ino=1 [ 613.578865][T25445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.586482][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 613.593120][ C1] audit: audit_lost=75837 audit_rate_limit=0 audit_backlog_limit=64 [ 613.720986][ T5264] holtek_kbd 0003:04D9:A055.0026: unknown main item tag 0x0 [ 613.771068][ T5264] holtek_kbd 0003:04D9:A055.0026: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 613.925269][ T46] usb 2-1: USB disconnect, device number 25 [ 613.992559][ T25] usb 3-1: USB disconnect, device number 24 [ 614.371805][T25847] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 614.387719][T25847] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 614.434347][T25847] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 614.448872][T25847] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 614.462024][T25847] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 614.542920][T25847] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 614.779211][T25862] netlink: 'syz.2.9638': attribute type 10 has an invalid length. [ 614.803196][T25862] bridge0: port 3(team0) entered disabled state [ 614.809753][T25862] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.816972][T25862] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.844101][T25862] bridge0: port 3(team0) entered blocking state [ 614.850616][T25862] bridge0: port 3(team0) entered forwarding state [ 614.857319][T25862] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.864577][T25862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.872091][T25862] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.879323][T25862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.934587][T25862] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 614.985906][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9638'. [ 615.005728][T25863] bridge0: port 3(team0) entered disabled state [ 615.036516][T25863] bridge_slave_1: left allmulticast mode [ 615.047620][T25863] bridge_slave_1: left promiscuous mode [ 615.057009][T25863] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.141938][T25863] bridge_slave_0: left allmulticast mode [ 615.151372][T25863] bridge_slave_0: left promiscuous mode [ 615.157159][T25863] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.201491][T25863] bond0: (slave bridge0): Releasing backup interface [ 615.276603][T25868] netlink: 'syz.3.9639': attribute type 29 has an invalid length. [ 615.296425][T25871] netlink: 'syz.3.9639': attribute type 29 has an invalid length. [ 615.784039][T25895] mkiss: ax0: crc mode is auto. [ 615.917734][ T937] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 616.087706][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 616.096197][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.119795][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.145796][ T937] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 616.157398][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.179393][ T937] usb 5-1: config 0 descriptor?? [ 616.387762][ T5216] Bluetooth: hci5: command 0x0c1a tx timeout [ 616.468473][ T5216] Bluetooth: hci6: command 0x0c1a tx timeout [ 616.557829][ T5264] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 616.659869][ T937] logitech 0003:046D:CA04.0027: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 616.675611][ T937] logitech 0003:046D:CA04.0027: no inputs found [ 616.711170][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 616.744226][ T5264] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 616.761653][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.799512][ T5264] usb 3-1: config 0 descriptor?? [ 616.899890][ T5212] usb 5-1: USB disconnect, device number 14 [ 617.057935][ T937] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 617.233616][ T5264] razer 0003:1532:010E.0028: unknown main item tag 0xe [ 617.278557][ T5264] razer 0003:1532:010E.0028: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 617.311954][ T937] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 617.322288][ T937] usb 4-1: config 0 has no interface number 0 [ 617.336312][ T937] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0xD has invalid maxpacket 40068, setting to 64 [ 617.377575][ T937] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 617.409281][ T937] usb 4-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 617.435845][ T9] usb 3-1: USB disconnect, device number 25 [ 617.470489][ T937] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 617.514468][ T937] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 617.547557][ T937] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=17.65 [ 617.590727][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.639637][ T937] usb 4-1: config 0 descriptor?? [ 617.699472][T25931] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 617.741970][T25945] tipc: Failed to obtain node identity [ 617.747732][T25945] tipc: Enabling of bearer rejected, failed to enable media [ 617.809300][ T937] adutux 4-1:0.110: ADU100 now attached to /dev/usb/adutux0 [ 618.469252][ T5216] Bluetooth: hci5: command 0x0c1a tx timeout [ 618.484705][ T29] kauditd_printk_skb: 21284 callbacks suppressed [ 618.484725][ T29] audit: type=1400 audit(2000000182.811:278336): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25445 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 618.491233][T25445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.491258][T25445] audit: audit_lost=79144 audit_rate_limit=0 audit_backlog_limit=64 [ 618.491277][T25445] audit: backlog limit exceeded [ 618.491508][T25445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.517466][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.517497][ C1] audit: audit_lost=79145 audit_rate_limit=0 audit_backlog_limit=64 [ 618.517519][ C1] audit: backlog limit exceeded [ 618.517625][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.517643][ C1] audit: audit_lost=79146 audit_rate_limit=0 audit_backlog_limit=64 [ 618.548238][ T5230] Bluetooth: hci6: command 0x0c1a tx timeout [ 618.660910][ T5302] usb 4-1: USB disconnect, device number 27 [ 619.031543][T25978] netlink: 'syz.1.9694': attribute type 1 has an invalid length. [ 619.067538][T25978] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9694'. [ 619.860028][T26011] openvswitch: netlink: nsh attr 64 is out of range max 3 [ 620.073327][T26022] netlink: 'syz.4.9713': attribute type 3 has an invalid length. [ 620.088174][T26022] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.9713'. [ 620.549289][ T5230] Bluetooth: hci5: command 0x0c1a tx timeout [ 620.629446][ T5216] Bluetooth: hci6: command 0x0c1a tx timeout [ 620.838302][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 621.318574][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 621.346694][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 621.356366][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.376970][ T9] usb 3-1: config 0 descriptor?? [ 621.402149][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 623.488587][ T5228] audit_log_start: 144630 callbacks suppressed [ 623.488610][ T5228] audit: audit_backlog=66 > audit_backlog_limit=64 [ 623.501647][ T5228] audit: audit_lost=124941 audit_rate_limit=0 audit_backlog_limit=64 [ 623.509819][ T5228] audit: backlog limit exceeded [ 623.514811][ T5228] audit: audit_backlog=66 > audit_backlog_limit=64 [ 623.521427][ T5228] audit: audit_lost=124942 audit_rate_limit=0 audit_backlog_limit=64 [ 623.529712][ T5228] audit: backlog limit exceeded [ 623.534592][ T5228] audit: audit_backlog=66 > audit_backlog_limit=64 [ 623.541235][ T5228] audit: audit_lost=124943 audit_rate_limit=0 audit_backlog_limit=64 [ 623.549390][ T5228] audit: backlog limit exceeded [ 623.554275][ T5228] audit: audit_backlog=66 > audit_backlog_limit=64 [ 624.878769][ T5216] Bluetooth: hci6: command 0x0c1a tx timeout [ 625.093691][T26053] netlink: 'syz.3.9727': attribute type 12 has an invalid length. [ 625.125501][T26053] netlink: 'syz.3.9727': attribute type 11 has an invalid length. [ 625.148772][T26053] netlink: 188824 bytes leftover after parsing attributes in process `syz.3.9727'. [ 625.239246][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.246651][ T1270] sl0 selects TX queue 0, but real number of TX queues is 0 [ 625.276230][ T9] gspca_sq930x: ucbus_write failed -110 [ 625.281981][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 625.452434][ T9] usb 3-1: USB disconnect, device number 26 [ 625.669778][T26062] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9730'. [ 625.682549][T26062] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 628.499126][ T5228] audit_log_start: 343842 callbacks suppressed [ 628.499149][ T5228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.512098][ T5228] audit: audit_lost=239161 audit_rate_limit=0 audit_backlog_limit=64 [ 628.520324][ T5228] audit: backlog limit exceeded [ 628.525299][ T5228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.532010][ T5228] audit: audit_lost=239162 audit_rate_limit=0 audit_backlog_limit=64 [ 628.540160][ T5228] audit: backlog limit exceeded [ 628.545254][ T5228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.552052][ T5228] audit: audit_lost=239163 audit_rate_limit=0 audit_backlog_limit=64 [ 628.560267][ T5228] audit: backlog limit exceeded [ 628.565251][ T5228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.509868][ T29] kauditd_printk_skb: 366505 callbacks suppressed [ 633.509890][ T29] audit: type=1400 audit(2000000197.839:287370): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26074 comm="sed" name="/" dev="sda1" ino=2 [ 633.574771][T26074] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.583144][ T4668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.617522][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.618613][ T5205] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.624133][ C1] audit: audit_lost=361223 audit_rate_limit=0 audit_backlog_limit=64 [ 633.631091][ T5205] audit: audit_lost=361224 audit_rate_limit=0 audit_backlog_limit=64 [ 633.631125][ T5205] audit: backlog limit exceeded [ 633.652139][ T4668] audit: audit_lost=361225 audit_rate_limit=0 audit_backlog_limit=64 [ 633.652280][ C1] audit: backlog limit exceeded [ 634.096173][T26077] netlink: 'syz.2.9738': attribute type 4 has an invalid length. [ 634.114767][T26077] netlink: 'syz.2.9738': attribute type 2 has an invalid length. [ 634.450697][ T5216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 634.463231][ T5216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 634.482544][ T5216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 634.523529][ T5216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 634.538639][ T5216] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 634.552658][ T5216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 634.567639][T26093] tipc: Enabling of bearer rejected, failed to enable media [ 635.458494][T26090] lo speed is unknown, defaulting to 1000 [ 636.021078][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.032133][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.727549][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.738568][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.900596][ T5230] Bluetooth: hci7: command tx timeout [ 637.149732][T26171] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 637.253734][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.310581][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.361486][T26183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9771'. [ 637.439853][ T62] bridge0: port 3(netdevsim0) entered disabled state [ 637.608790][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 637.640214][ T62] bridge0: port 3(netdevsim0) entered disabled state [ 637.710040][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.752243][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.823536][T26090] chnl_net:caif_netlink_parms(): no params data found [ 638.118968][T26090] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.139542][T26090] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.166398][T26090] bridge_slave_0: entered allmulticast mode [ 638.183278][T26090] bridge_slave_0: entered promiscuous mode [ 638.253377][T26090] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.279025][T26090] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.305528][T26090] bridge_slave_1: entered allmulticast mode [ 638.322098][T26090] bridge_slave_1: entered promiscuous mode [ 638.440443][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 638.523928][T26111] audit_log_start: 17440 callbacks suppressed [ 638.523950][T26111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.537131][T26095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.543965][ T29] audit: type=1400 audit(2000000202.838:293584): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4668 comm="udevd" name="platform" dev="sysfs" ino=15 [ 638.547603][ T62] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.562850][T26095] audit: audit_lost=364980 audit_rate_limit=0 audit_backlog_limit=64 [ 638.562875][T26095] audit: backlog limit exceeded [ 638.562916][T26095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.562932][T26095] audit: audit_lost=364981 audit_rate_limit=0 audit_backlog_limit=64 [ 638.562950][T26095] audit: backlog limit exceeded [ 638.562975][T26095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.649430][T26090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.663001][T26090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.690506][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 638.770523][ T62] macvlan1: left allmulticast mode [ 638.775717][ T62] veth1_vlan: left allmulticast mode [ 638.780697][ T937] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 638.781730][ T1168] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 638.799917][ T46] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 638.812157][ T62] macvlan1: left promiscuous mode [ 638.817414][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.825826][ T62] bridge0: port 4(macvlan1) entered disabled state [ 638.836160][ T62] bridge_slave_1: left allmulticast mode [ 638.849019][ T62] bridge_slave_1: left promiscuous mode [ 638.855619][ T46] usb 5-1: config 0 descriptor?? [ 638.856970][ T9] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 638.887125][ T46] cp210x 5-1:0.0: cp210x converter detected [ 638.887469][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.919308][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 638.929908][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.943345][ T62] bridge_slave_0: left allmulticast mode [ 638.949099][ T62] bridge_slave_0: left promiscuous mode [ 638.958536][ T5230] Bluetooth: hci7: command tx timeout [ 638.976200][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.982494][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.994266][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.994302][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.004931][ T1168] usb 3-1: Using ep0 maxpacket: 32 [ 639.017235][ T937] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 639.047550][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.071590][ T937] usb 4-1: config 0 descriptor?? [ 639.091309][ T1168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.113319][ T1168] usb 3-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 639.123609][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.143522][ T1168] usb 3-1: config 0 descriptor?? [ 639.250397][ C0] hrtimer: interrupt took 139970 ns [ 639.386464][ T9] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 639.394638][ T9] usb 2-1: No valid video chain found. [ 639.506633][ T46] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 639.526906][ T46] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 639.549447][ T46] usb 5-1: cp210x converter now attached to ttyUSB0 [ 639.574479][ T1168] wacom 0003:056A:0015.002A: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 639.577194][ T937] playstation 0003:054C:0BA0.0029: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 639.590826][ T5302] usb 2-1: USB disconnect, device number 26 [ 639.610646][ T46] usb 5-1: USB disconnect, device number 15 [ 639.651054][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 639.661841][ T1168] wacom 0003:056A:0015.002A: hidraw1: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.2-1/input0 [ 639.709764][ T46] cp210x 5-1:0.0: device disconnected [ 639.747522][ T1168] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0015.002A/input/input91 [ 639.757807][ T937] playstation 0003:054C:0BA0.0029: Failed to retrieve feature with reportID 18: -71 [ 639.805247][ T937] playstation 0003:054C:0BA0.0029: Failed to retrieve DualShock4 pairing info: -71 [ 639.825027][ T937] playstation 0003:054C:0BA0.0029: Failed to get MAC address from DualShock4 [ 639.866290][ T937] playstation 0003:054C:0BA0.0029: Failed to create dualshock4. [ 639.893294][ T937] playstation 0003:054C:0BA0.0029: probe with driver playstation failed with error -71 [ 639.917162][ T937] usb 4-1: USB disconnect, device number 28 [ 639.934186][ T1168] usb 3-1: USB disconnect, device number 27 [ 640.561281][ T937] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 640.733888][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 640.744033][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.773955][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.804471][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.840712][ T937] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 640.871008][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.889633][ T937] usb 5-1: config 0 descriptor?? [ 640.902882][ T937] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input94 [ 640.949811][ T4653] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.031024][ T5230] Bluetooth: hci7: command tx timeout [ 641.118010][ T4653] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.191314][T26232] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.210232][ T4653] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 641.238718][ T937] usb 5-1: USB disconnect, device number 16 [ 642.447875][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.471484][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.498307][ T62] bond0 (unregistering): Released all slaves [ 642.570922][ T62] bond1 (unregistering): Released all slaves [ 642.596655][ T62] bond2 (unregistering): Released all slaves [ 642.654053][ T62] bond3 (unregistering): Released all slaves [ 642.715165][T26090] team0: Port device team_slave_0 added [ 642.779089][T26271] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 642.782886][T26090] team0: Port device team_slave_1 added [ 642.838021][T26271] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 642.994495][ T62] ɶƣ0GCTw: left promiscuous mode [ 643.093675][T26090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.112132][ T5216] Bluetooth: hci7: command tx timeout [ 643.130557][T26090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.262444][T26090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.287847][ T62] : left promiscuous mode [ 643.440095][T26090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.464208][T26090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.481469][T26294] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 643.481469][T26294] [ 643.536834][ T29] kauditd_printk_skb: 19699 callbacks suppressed [ 643.536856][ T29] audit: type=1400 audit(2000000207.858:306801): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26293 comm="sed" name="/" dev="sda1" ino=2 [ 643.549408][T26293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.570900][T26090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.581742][T26293] audit: audit_lost=367187 audit_rate_limit=0 audit_backlog_limit=64 [ 643.589847][T26293] audit: backlog limit exceeded [ 643.611043][T26293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.617625][T26293] audit: audit_lost=367188 audit_rate_limit=0 audit_backlog_limit=64 [ 643.621808][T26295] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.626114][T26293] audit: backlog limit exceeded [ 643.633605][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.637141][T26293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.835244][T26277] syz.1.9812 (26277): drop_caches: 2 [ 644.278595][T26090] hsr_slave_0: entered promiscuous mode [ 644.455087][T26312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9822'. [ 644.583944][T26090] hsr_slave_1: entered promiscuous mode [ 644.607147][T26090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.644031][T26090] Cannot create hsr debugfs directory [ 645.191430][ T5216] Bluetooth: hci7: command 0x0405 tx timeout [ 645.264773][T26323] [U] V3Fپ"S/4:XTZWTLW= [ 645.287064][T26319] program syz.4.9825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.318423][T26323] [U] J"E:" [ 645.322551][T26323] [U] [ 645.644301][T26327] netlink: 'syz.1.9828': attribute type 1 has an invalid length. [ 645.790834][ T62] hsr_slave_0: left promiscuous mode [ 645.810096][ T62] hsr_slave_1: left promiscuous mode [ 645.822816][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.840686][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.852561][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.872370][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.959651][ T62] veth0_macvtap: left promiscuous mode [ 646.011303][ T62] veth1_vlan: left promiscuous mode [ 646.018439][ T62] veth0_vlan: left promiscuous mode [ 647.621639][ T46] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 647.801085][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.824091][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.880174][ T46] usb 2-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 647.903662][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.915063][ T46] usb 2-1: config 0 descriptor?? [ 648.051585][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 648.222176][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 648.231443][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.253110][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.284951][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 648.295059][ T9] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 648.311458][ T9] usb 3-1: Product: syz [ 648.317490][ T9] usb 3-1: Manufacturer: syz [ 648.334764][ T9] usb 3-1: config 0 descriptor?? [ 648.398811][ T46] wacom 0003:056A:00BC.002B: unknown main item tag 0x0 [ 648.432363][ T46] wacom 0003:056A:00BC.002B: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 648.486801][ T46] wacom 0003:056A:00BC.002B: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.1-1/input0 [ 648.551251][ T46] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BC.002B/input/input95 [ 648.558569][ T29] kauditd_printk_skb: 8351 callbacks suppressed [ 648.558593][ T29] audit: type=1400 audit(2000000212.867:313140): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26110 comm="udevd" name="/" dev="sysfs" ino=1 [ 648.568157][T26095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.581716][T26364] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.600928][T26110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.608344][T26111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.616038][ T29] audit: type=1400 audit(2000000212.887:313141): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4668 comm="udevd" name="/" dev="sda1" ino=2 [ 648.616999][ T4668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.634187][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 648.634209][ C1] audit: audit_lost=367862 audit_rate_limit=0 audit_backlog_limit=64 [ 648.634240][ C1] audit: backlog limit exceeded [ 648.698124][ T46] usb 2-1: USB disconnect, device number 27 [ 648.891931][ T9] kovaplus 0003:1E7D:2D50.002C: item fetching failed at offset 5/7 [ 648.932227][ T9] kovaplus 0003:1E7D:2D50.002C: parse failed [ 648.950976][ T9] kovaplus 0003:1E7D:2D50.002C: probe with driver kovaplus failed with error -22 [ 649.103529][ T5264] usb 3-1: USB disconnect, device number 28 [ 649.694048][ T62] team0 (unregistering): Port device team_slave_1 removed [ 649.827006][ T62] team0 (unregistering): Port device team_slave_0 removed [ 650.557646][ T62] team0 (unregistering): Port device batadv0 removed [ 650.905017][T26386] bond0: (slave bridge0): Releasing backup interface [ 650.926866][T26386] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.934219][T26386] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.002539][T26386] team0: Port device bond0 removed [ 651.018431][T26386] bridge_slave_0: left allmulticast mode [ 651.036958][T26386] bridge_slave_0: left promiscuous mode [ 651.051963][T26386] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.074629][T26386] bridge_slave_1: left allmulticast mode [ 651.080341][T26386] bridge_slave_1: left promiscuous mode [ 651.102679][T26386] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.134592][T26386] bond0: (slave bond_slave_0): Releasing backup interface [ 651.175621][T26386] bond0: (slave bond_slave_1): Releasing backup interface [ 651.224240][T26386] team0: Port device team_slave_0 removed [ 651.268363][T26386] team0: Port device team_slave_1 removed [ 651.283748][T26386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.291247][T26386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.333619][T26386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.351338][T26386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.402702][T26386] bond0: (slave wlan1): Releasing backup interface [ 651.433311][T26389] netlink: 'syz.4.9854': attribute type 10 has an invalid length. [ 651.451898][T26389] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9854'. [ 651.460993][T26389] team0: entered promiscuous mode [ 651.485368][T26389] bridge0: port 1(team0) entered blocking state [ 651.497706][T26389] bridge0: port 1(team0) entered disabled state [ 651.506832][T26389] team0: entered allmulticast mode [ 651.913300][T26416] tipc: Started in network mode [ 651.931603][T26416] tipc: Node identity be93f0982b9b, cluster identity 4711 [ 651.956923][T26416] tipc: Enabled bearer , priority 0 [ 652.469508][T26437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9869'. [ 652.630277][ T62] IPVS: stop unused estimator thread 0... [ 652.732485][ T5264] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 652.922092][ T5264] usb 4-1: Using ep0 maxpacket: 32 [ 652.939215][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.949417][T26090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 653.000850][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.005425][T26090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 653.030154][ T5264] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 653.061056][T26090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 653.062055][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.079203][ T9] tipc: Node number set to 2500391064 [ 653.094540][T26090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 653.132854][ T5264] usb 4-1: config 0 descriptor?? [ 653.414654][T26090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.437106][T26090] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.450689][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.457904][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.503053][T26461] usb usb9: usbfs: process 26461 (syz.2.9876) did not claim interface 0 before use [ 653.551784][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.558973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.568516][ T29] kauditd_printk_skb: 16422 callbacks suppressed [ 653.568536][ T29] audit: type=1400 audit(2000000217.896:323026): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26462 comm="syz.4.9877" name="newroot" dev="tmpfs" ino=2 [ 653.637553][T26464] 9pnet_fd: Insufficient options for proto=fd [ 653.657160][ T5211] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.665445][ T29] audit: type=1400 audit(2000000217.926:323027): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26465 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 653.681894][T26463] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.689345][T26467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.691764][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 653.700501][ T5211] audit: audit_lost=370051 audit_rate_limit=0 audit_backlog_limit=64 [ 653.715050][T26467] audit: audit_lost=370052 audit_rate_limit=0 audit_backlog_limit=64 [ 653.722232][ T4650] audit: audit_lost=370053 audit_rate_limit=0 audit_backlog_limit=64 [ 653.723579][T26467] audit: backlog limit exceeded [ 654.031733][ T5264] usb 4-1: USB disconnect, device number 29 [ 654.574035][T26491] gretap0: entered promiscuous mode [ 654.574284][T26491] macvlan2: entered allmulticast mode [ 654.574304][T26491] gretap0: entered allmulticast mode [ 654.612304][T26491] gretap0: left allmulticast mode [ 654.612476][T26491] gretap0: left promiscuous mode [ 654.785651][T26090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.975013][T26090] veth0_vlan: entered promiscuous mode [ 654.980769][T26090] veth1_vlan: entered promiscuous mode [ 655.061516][T26090] veth0_macvtap: entered promiscuous mode [ 655.074329][T26090] veth1_macvtap: entered promiscuous mode [ 655.087518][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.087548][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.087567][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.087585][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.087600][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.087617][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.087632][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.087649][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.089001][T26090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.091232][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.091256][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.091270][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.091287][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.091305][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.091322][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.091337][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.091353][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.091368][T26090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.091385][T26090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.095464][T26090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.098316][T26090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.098356][T26090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.098390][T26090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.098423][T26090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.409527][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.409557][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.449837][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.449865][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.010686][ T5264] IPVS: starting estimator thread 0... [ 657.113554][T26559] IPVS: using max 17 ests per chain, 40800 per kthread [ 657.240677][T26572] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.9907'. [ 657.292819][T26572] openvswitch: netlink: Actions may not be safe on all matching packets [ 657.449523][T26578] netlink: 'syz.4.9910': attribute type 1 has an invalid length. [ 657.492933][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9910'. [ 658.572644][ T29] kauditd_printk_skb: 18545 callbacks suppressed [ 658.572664][ T29] audit: type=1400 audit(2000000222.896:334582): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26619 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 658.581566][T26620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.599478][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.612070][T26620] audit: audit_lost=372396 audit_rate_limit=0 audit_backlog_limit=64 [ 658.620296][T26620] audit: backlog limit exceeded [ 658.626695][T26620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 658.633850][T26620] audit: audit_lost=372397 audit_rate_limit=0 audit_backlog_limit=64 [ 658.642081][T26620] audit: backlog limit exceeded [ 658.642455][ T4650] audit: audit_lost=372398 audit_rate_limit=0 audit_backlog_limit=64 [ 658.647360][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 659.193464][ T5212] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 659.362771][ T5212] usb 2-1: Using ep0 maxpacket: 16 [ 659.412823][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.438957][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.466321][ T5212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.479638][ T5212] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.489075][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.505705][ T5212] usb 2-1: config 0 descriptor?? [ 659.675265][T26648] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9936'. [ 659.985271][ T5212] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 659.992617][ T5212] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 660.044736][ T5212] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002E/input/input98 [ 660.300617][ T5212] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 660.377889][ T5212] usb 2-1: USB disconnect, device number 28 [ 661.423254][ T5212] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 661.443060][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 661.566988][T26711] 9pnet_fd: p9_fd_create_tcp (26711): problem binding to privport [ 661.623163][ T5212] usb 3-1: Using ep0 maxpacket: 32 [ 661.635157][ T5212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.646502][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.663025][ T5212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.689324][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.709535][ T5212] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 661.718770][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 661.743609][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.760667][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.780496][ T5212] usb 3-1: config 0 descriptor?? [ 661.789074][ T9] usb 2-1: config 0 descriptor?? [ 662.228603][ T9] cougar 0003:060B:700A.002F: item fetching failed at offset 4/5 [ 662.263136][ T9] cougar 0003:060B:700A.002F: parse failed [ 662.269201][ T9] cougar 0003:060B:700A.002F: probe with driver cougar failed with error -22 [ 662.441464][ T5212] ft260 0003:0403:6030.0030: failed to retrieve chip version [ 662.453312][ T5212] ft260 0003:0403:6030.0030: probe with driver ft260 failed with error -71 [ 662.453320][ T1168] usb 2-1: USB disconnect, device number 29 [ 662.510492][ T5212] usb 3-1: USB disconnect, device number 29 [ 663.588305][ T29] kauditd_printk_skb: 18400 callbacks suppressed [ 663.588328][ T29] audit: type=1400 audit(2000000227.915:347470): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26763 comm="modprobe" name="/" dev="sda1" ino=2 [ 663.634706][T26763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.642163][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.642304][T23917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.648778][ C1] audit: audit_lost=374299 audit_rate_limit=0 audit_backlog_limit=64 [ 663.648802][ C1] audit: backlog limit exceeded [ 663.649265][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.656881][T26766] audit: audit_backlog=65 > audit_backlog_limit=64 [ 663.663688][ C1] audit: audit_lost=374300 audit_rate_limit=0 audit_backlog_limit=64 [ 663.663729][ C1] audit: backlog limit exceeded [ 664.363223][T26786] lo speed is unknown, defaulting to 1000 [ 664.369455][T26786] lo speed is unknown, defaulting to 1000 [ 664.391926][T26786] lo speed is unknown, defaulting to 1000 [ 664.451642][T26786] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 664.505345][T26786] lo speed is unknown, defaulting to 1000 [ 664.532784][T26786] lo speed is unknown, defaulting to 1000 [ 664.546711][T26786] lo speed is unknown, defaulting to 1000 [ 664.564448][T26786] lo speed is unknown, defaulting to 1000 [ 664.571320][T26786] lo speed is unknown, defaulting to 1000 [ 664.593123][T26786] lo speed is unknown, defaulting to 1000 [ 664.600691][T26786] lo speed is unknown, defaulting to 1000 [ 665.329281][T26825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10015'. [ 665.386925][T26827] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x31384142, 8, 0, 0, 0) [ 666.373986][ T46] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 666.545748][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 666.572283][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.598352][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.620784][ T46] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 666.658245][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.694361][ T46] usb 3-1: config 0 descriptor?? [ 667.125512][ T46] lenovo 0003:17EF:6009.0031: unknown main item tag 0x0 [ 667.155672][ T46] lenovo 0003:17EF:6009.0031: unknown main item tag 0x0 [ 667.162734][ T46] lenovo 0003:17EF:6009.0031: unknown main item tag 0x0 [ 667.193247][ T46] lenovo 0003:17EF:6009.0031: unknown main item tag 0x0 [ 667.210652][ T46] lenovo 0003:17EF:6009.0031: unknown main item tag 0x0 [ 667.239434][ T46] lenovo 0003:17EF:6009.0031: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0 [ 667.369295][ T5212] usb 3-1: USB disconnect, device number 30 [ 668.361081][ T5212] IPVS: starting estimator thread 0... [ 668.595049][ C1] audit_log_start: 14765 callbacks suppressed [ 668.595072][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.608359][ C1] audit: audit_lost=375808 audit_rate_limit=0 audit_backlog_limit=64 [ 668.616594][ C1] audit: backlog limit exceeded [ 668.622132][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.624243][T26909] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.628691][ C1] audit: audit_lost=375809 audit_rate_limit=0 audit_backlog_limit=64 [ 668.628711][ C1] audit: backlog limit exceeded [ 668.644360][T26906] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.658021][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 668.663922][T26909] audit: audit_lost=375810 audit_rate_limit=0 audit_backlog_limit=64 [ 668.784068][T26902] IPVS: using max 23 ests per chain, 55200 per kthread [ 668.794673][ T46] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 669.004380][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 669.068353][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.098810][ T46] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 669.164171][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.186793][ T46] usb 3-1: config 0 descriptor?? [ 669.614496][ T46] lenovo 0003:17EF:60A3.0032: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 669.845430][ T5212] usb 3-1: USB disconnect, device number 31 [ 669.874003][ T937] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 670.119217][ T937] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45 [ 670.164037][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.199988][ T937] usb 2-1: Product: syz [ 670.215930][ T937] usb 2-1: Manufacturer: syz [ 670.220613][ T937] usb 2-1: SerialNumber: syz [ 670.247762][ T937] usb 2-1: config 0 descriptor?? [ 670.311051][ T937] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 670.319373][ T937] usb 2-1: No valid video chain found. [ 670.513894][ T937] usb 2-1: USB disconnect, device number 30 [ 671.157794][T26882] coredump: 4126(syz.4.10037): written to core: VMAs: 35, size 84836352; core: 62108718 bytes, pos 84844544 [ 671.374348][ T1168] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 671.613134][ T1168] usb 3-1: Using ep0 maxpacket: 8 [ 671.620145][T26985] netlink: 'syz.1.10077': attribute type 4 has an invalid length. [ 671.662235][ T1168] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 671.674316][ T1168] usb 3-1: config 0 has no interface number 0 [ 671.680480][ T1168] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.714605][ T1168] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 671.727444][ T1168] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 671.743986][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.776791][ T1168] usb 3-1: config 0 descriptor?? [ 671.807358][ T1168] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 672.020921][T26971] iowarrior 3-1:0.1: Error -90 while submitting URB [ 672.035792][T26995] debugfs: Bad value for 'uid' [ 672.053695][ T5212] usb 3-1: USB disconnect, device number 32 [ 672.063945][ T5212] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 672.070953][T26995] debugfs: Bad value for 'uid' [ 672.363896][T27003] use of bytesused == 0 is deprecated and will be removed in the future, [ 672.373120][T27003] use the actual size instead. [ 672.689773][T27017] netlink: 110 bytes leftover after parsing attributes in process `syz.1.10094'. [ 673.134434][ T5212] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 673.197323][ T1168] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 673.295024][ T5212] usb 2-1: Using ep0 maxpacket: 8 [ 673.302668][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.324058][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.344515][ T5212] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 673.356668][ T1168] usb 3-1: Using ep0 maxpacket: 8 [ 673.365101][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.405517][ T5212] usb 2-1: config 0 descriptor?? [ 673.411515][ T1168] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 673.445636][ T1168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.484412][ T1168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.494719][ T1168] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 673.528937][ T1168] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 673.548390][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.566731][ T1168] usb 3-1: config 0 descriptor?? [ 673.597757][T27041] team0: Port device syz_tun added [ 673.607122][ T29] kauditd_printk_skb: 16389 callbacks suppressed [ 673.607150][ T29] audit: type=1400 audit(2000000237.934:369127): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4668 comm="udevd" name="/" dev="sda1" ino=2 [ 673.638603][ T4668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.657291][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.663971][ C1] audit: audit_lost=377507 audit_rate_limit=0 audit_backlog_limit=64 [ 673.665864][ T4668] audit: audit_lost=377508 audit_rate_limit=0 audit_backlog_limit=64 [ 673.672162][ C1] audit: backlog limit exceeded [ 673.685130][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.685152][ T4650] audit: audit_lost=377509 audit_rate_limit=0 audit_backlog_limit=64 [ 673.685170][ T4650] audit: backlog limit exceeded [ 673.685220][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.829405][ T5212] logitech 0003:046D:C20E.0033: rdesc size test failed for formula gp [ 673.870293][ T5212] logitech 0003:046D:C20E.0033: unbalanced delimiter at end of report description [ 673.911371][ T5212] logitech 0003:046D:C20E.0033: parse failed [ 673.920275][ T5212] logitech 0003:046D:C20E.0033: probe with driver logitech failed with error -22 [ 674.002222][ T1168] apple 0003:05AC:0246.0034: report_id 0 is invalid [ 674.045387][ T1168] apple 0003:05AC:0246.0034: item 0 1 1 8 parsing failed [ 674.053109][ T1168] apple 0003:05AC:0246.0034: parse failed [ 674.057369][ T5212] usb 2-1: USB disconnect, device number 31 [ 674.081161][ T1168] apple 0003:05AC:0246.0034: probe with driver apple failed with error -22 [ 674.224650][ T1168] usb 3-1: USB disconnect, device number 33 [ 675.435252][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 675.685944][T27107] sp0: Synchronizing with TNC [ 677.429115][T27149] netlink: 248 bytes leftover after parsing attributes in process `syz.1.10157'. [ 677.622424][T27154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10160'. [ 678.122837][T27171] syz.1.10168: attempt to access beyond end of device [ 678.122837][T27171] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 678.170591][T27171] F2FS-fs (loop3): Unable to read 1th superblock [ 678.185052][T27171] syz.1.10168: attempt to access beyond end of device [ 678.185052][T27171] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 678.210335][T27171] F2FS-fs (loop3): Unable to read 2th superblock [ 678.633588][ T29] kauditd_printk_skb: 10540 callbacks suppressed [ 678.633618][ T29] audit: type=1400 audit(2000000242.953:377777): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=25445 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 678.656522][ T5211] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.659823][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 678.668239][T25445] audit: audit_backlog=66 > audit_backlog_limit=64 [ 678.672800][ C1] audit: audit_lost=378142 audit_rate_limit=0 audit_backlog_limit=64 [ 678.680388][ T4650] audit: audit_backlog=66 > audit_backlog_limit=64 [ 678.687506][ C1] audit: backlog limit exceeded [ 678.688248][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 678.694746][ T4650] audit: audit_lost=378143 audit_rate_limit=0 audit_backlog_limit=64 [ 678.698996][ C1] audit: audit_lost=378144 audit_rate_limit=0 audit_backlog_limit=64 [ 678.835157][ T1168] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 679.008124][ T1168] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 679.027869][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.041786][ T1168] usb 2-1: config 0 descriptor?? [ 679.459387][ T1168] [drm:udl_init] *ERROR* Selecting channel failed [ 679.504412][ T1168] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 679.523658][ T1168] [drm] Initialized udl on minor 2 [ 679.556540][ T1168] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 679.583610][ T1168] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 679.594579][ T46] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 679.623133][ T46] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 679.631663][ T1168] usb 2-1: USB disconnect, device number 32 [ 679.648564][ T46] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 679.934253][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10193'. [ 680.445928][ T5267] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 680.612569][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.613838][ T5230] Bluetooth: hci7: unexpected event for opcode 0x1804 [ 680.640416][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.685309][ T5267] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 680.718576][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.757005][ T5267] usb 3-1: config 0 descriptor?? [ 680.767665][ T46] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 680.931614][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.947391][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.977094][ T46] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 680.999187][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.023511][ T46] usb 2-1: config 0 descriptor?? [ 681.375010][ T5267] hid-led 0003:27B8:01ED.0035: probe with driver hid-led failed with error -71 [ 681.402576][ T5267] usb 3-1: USB disconnect, device number 34 [ 681.443593][ T46] wacom 0003:056A:0059.0036: unknown main item tag 0x0 [ 681.482023][ T46] wacom 0003:056A:0059.0036: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.1-1/input0 [ 681.655713][ T46] usb 2-1: USB disconnect, device number 33 [ 681.711459][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10217'. [ 682.229752][T27296] ubi0: detaching mtd0 [ 682.273379][T27296] ubi0: mtd0 is detached [ 682.458399][T27304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10230'. [ 682.798941][T27320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10238'. [ 682.821195][T27320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10238'. [ 683.325877][ T5267] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 683.511081][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 683.545806][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 683.575646][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.605700][ T5267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.644633][ T29] kauditd_printk_skb: 16306 callbacks suppressed [ 683.644655][ T29] audit: type=1400 audit(2000000247.963:389489): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27344 comm="syz.3.10252" name="newroot" dev="tmpfs" ino=2 [ 683.645631][ T5267] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 683.662298][ T29] audit: type=1400 audit(2000000247.963:389490): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27344 comm="syz.3.10252" name="/" dev="devtmpfs" ino=1 [ 683.701451][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.722570][ T5267] usb 3-1: config 0 descriptor?? [ 683.728866][T27349] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.736184][T27349] audit: audit_lost=379687 audit_rate_limit=0 audit_backlog_limit=64 [ 683.744266][T27349] audit: backlog limit exceeded [ 683.749887][ T4668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.765754][T26110] audit: audit_backlog=66 > audit_backlog_limit=64 [ 683.770736][ T4668] audit: audit_lost=379688 audit_rate_limit=0 audit_backlog_limit=64 [ 683.772303][T26110] audit: audit_lost=379689 audit_rate_limit=0 audit_backlog_limit=64 [ 683.789320][T26230] audit: audit_backlog=66 > audit_backlog_limit=64 [ 684.552797][T27363] netlink: 160 bytes leftover after parsing attributes in process `syz.0.10258'. [ 684.620670][T27363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10258'. [ 684.648242][ T5230] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 684.659352][ T5230] Bluetooth: hci7: Injecting HCI hardware error event [ 684.675276][ T5216] Bluetooth: hci7: hardware error 0x00 [ 684.808353][T27367] siw: device registration error -23 [ 685.295867][ T937] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 685.431754][ T5267] usbhid 3-1:0.0: can't add hid device: -71 [ 685.442106][ T5267] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 685.462298][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.486234][ T5267] usb 3-1: USB disconnect, device number 35 [ 685.494172][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.534814][ T937] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 685.554329][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.583933][ T937] usb 4-1: config 0 descriptor?? [ 685.595949][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 685.681420][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.755908][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 685.764624][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.780737][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.801247][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 685.843939][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 685.869085][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.902109][ T9] usb 5-1: config 0 descriptor?? [ 686.050398][ T937] sony 0003:054C:024B.0037: unknown main item tag 0x0 [ 686.084277][ T937] sony 0003:054C:024B.0037: unknown main item tag 0x0 [ 686.114835][ T937] sony 0003:054C:024B.0037: unknown main item tag 0x0 [ 686.146613][ T937] sony 0003:054C:024B.0037: unknown main item tag 0x0 [ 686.184604][ T937] sony 0003:054C:024B.0037: unknown main item tag 0x0 [ 686.270109][ T937] sony 0003:054C:024B.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 686.326026][ T937] sony 0003:054C:024B.0037: failed to claim input [ 686.351771][ T9] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 686.390667][ T9] microsoft 0003:045E:07DA.0038: ignoring exceeding usage max [ 686.406782][ T937] usb 4-1: USB disconnect, device number 30 [ 686.441244][ T9] microsoft 0003:045E:07DA.0038: No inputs registered, leaving [ 686.496688][ T9] microsoft 0003:045E:07DA.0038: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 686.556026][ T9] microsoft 0003:045E:07DA.0038: no inputs found [ 686.583371][ T9] microsoft 0003:045E:07DA.0038: could not initialize ff, continuing anyway [ 686.620763][ T9] usb 5-1: USB disconnect, device number 17 [ 686.806907][ T5216] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 687.153167][T27411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10283'. [ 687.163289][T27411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10283'. [ 687.426044][ T1168] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 687.607021][ T1168] usb 2-1: Using ep0 maxpacket: 8 [ 687.619886][ T1168] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 687.636441][ T1168] usb 2-1: config 0 has no interface number 0 [ 687.653552][ T1168] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.695416][ T1168] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 687.717883][ T1168] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 687.746493][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.749601][T27292] coredump: 122(syz.0.10223): written to core: VMAs: 35, size 84836352; core: 62116910 bytes, pos 84844544 [ 687.797358][ T1168] usb 2-1: config 0 descriptor?? [ 687.816948][ T1168] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 687.836926][T27435] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10294'. [ 687.887570][T27435] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 688.043730][T27413] iowarrior 2-1:0.1: Error -90 while submitting URB [ 688.065128][ T1168] usb 2-1: USB disconnect, device number 34 [ 688.074314][T27440] xt_hashlimit: max too large, truncated to 1048576 [ 688.087517][ T1168] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 688.654313][ T29] kauditd_printk_skb: 15377 callbacks suppressed [ 688.654339][ T29] audit: type=1400 audit(2000000252.972:399112): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=27451 comm="syz.4.10304" path="/dev/raw-gadget" dev="devtmpfs" ino=732 [ 688.707767][T23917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.716902][T27452] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.718897][ T29] audit: type=1400 audit(2000000253.002:399113): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=24 comm="ksoftirqd/1" saddr=10.128.0.169 src=30008 daddr=10.128.1.199 dest=33912 netif=eth0 [ 688.723753][T27452] audit: audit_lost=381617 audit_rate_limit=0 audit_backlog_limit=64 [ 688.771603][T23917] audit: audit_lost=381618 audit_rate_limit=0 audit_backlog_limit=64 [ 688.780846][T25445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.781255][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.787687][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 688.794032][ C1] audit: audit_lost=381619 audit_rate_limit=0 audit_backlog_limit=64 [ 688.809818][ C1] audit: backlog limit exceeded [ 688.996669][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 689.004240][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 689.036303][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 689.062934][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 689.101790][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 689.132508][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 689.152137][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 689.165659][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 689.182895][ T9] usb 5-1: Product: syz [ 689.188737][ T9] usb 5-1: Manufacturer: syz [ 689.193388][ T9] usb 5-1: SerialNumber: syz [ 689.220872][ T9] usb 5-1: config 0 descriptor?? [ 689.239408][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 689.259925][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 689.462710][T27478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10314'. [ 689.537937][T27452] ldusb 5-1:0.0: Write buffer overflow, 448 bytes dropped [ 689.576283][ T46] usb 5-1: USB disconnect, device number 18 [ 689.595678][ T46] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 689.617161][T27480] trusted_key: encrypted_key: key user:syz not found [ 690.236498][ T46] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 690.439041][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 690.461445][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 690.493167][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 690.522731][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 690.567665][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 690.608899][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 690.618346][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 690.657613][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 690.693006][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 690.730718][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 690.784178][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 690.818774][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 690.895421][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 690.924638][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 690.971475][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 691.048584][ T46] usb 2-1: string descriptor 0 read error: -22 [ 691.063174][ T46] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 691.094538][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.167960][ T46] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 691.534374][ T5295] usb 2-1: USB disconnect, device number 35 [ 691.592513][T27511] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 693.656746][ T5211] audit_log_start: 216629 callbacks suppressed [ 693.656768][ T5211] audit: audit_backlog=66 > audit_backlog_limit=64 [ 693.669728][ T5211] audit: audit_lost=450193 audit_rate_limit=0 audit_backlog_limit=64 [ 693.677911][ T5211] audit: backlog limit exceeded [ 693.682809][ T5211] audit: audit_backlog=66 > audit_backlog_limit=64 [ 693.689449][ T5211] audit: audit_lost=450194 audit_rate_limit=0 audit_backlog_limit=64 [ 693.691222][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 693.697626][ T5211] audit: backlog limit exceeded [ 693.704080][ C1] audit: audit_lost=450195 audit_rate_limit=0 audit_backlog_limit=64 [ 693.709057][ T5211] audit: audit_backlog=66 > audit_backlog_limit=64 [ 693.717033][ C1] audit: backlog limit exceeded [ 696.758552][ T5212] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 696.957247][ T5212] usb 2-1: Using ep0 maxpacket: 16 [ 696.969823][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.017234][ T5212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.027085][ C1] sched: DL replenish lagged too much [ 697.107233][ T5212] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 697.152872][ T5212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.229090][ T5212] usb 2-1: config 0 descriptor?? [ 697.703462][ T5212] cypress 0003:04B4:0001.0039: unknown main item tag 0x0 [ 697.808168][ T5212] cypress 0003:04B4:0001.0039: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 697.955573][ T5212] usb 2-1: USB disconnect, device number 36 [ 698.669644][ T29] kauditd_printk_skb: 96249 callbacks suppressed [ 698.669666][ T29] audit: type=1400 audit(2000000262.991:418199): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5211 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 698.704146][ T5211] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.728713][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.736683][T27560] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.744187][T26090] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.757391][ T4650] audit: audit_lost=479759 audit_rate_limit=0 audit_backlog_limit=64 [ 698.765529][ T4650] audit: backlog limit exceeded [ 698.768910][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.776923][ C1] audit: audit_lost=479760 audit_rate_limit=0 audit_backlog_limit=64 [ 698.785069][ C1] audit: backlog limit exceeded [ 699.491390][T27570] tmpfs: Unknown parameter 'smackfshat' [ 701.691513][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 701.703703][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 701.715292][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 701.723843][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 701.733447][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 701.741291][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 703.772852][ T29] kauditd_printk_skb: 8257 callbacks suppressed [ 703.772885][ T29] audit: type=1400 audit(2000000268.030:422272): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=5295 comm="kworker/1:4" saddr=10.128.0.169 src=30008 daddr=10.128.1.199 dest=33912 netif=eth0 [ 703.853549][ T5230] Bluetooth: hci2: command tx timeout [ 707.082794][ T29] audit: type=1400 audit(2000000268.160:422273): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5213 comm="syz-executor" opid=27588 ocomm="syz.4.10369" [ 710.388412][ T29] audit: type=1400 audit(2000000268.160:422274): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5213 comm="syz-executor" opid=27588 ocomm="syz.4.10369" [ 713.386824][ T5200] audit: audit_backlog=65 > audit_backlog_limit=64 [ 713.401095][ T5200] audit: audit_lost=481157 audit_rate_limit=0 audit_backlog_limit=64 [ 713.417077][ T5200] audit: backlog limit exceeded [ 713.430957][ T4668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 713.437528][ T4668] audit: audit_lost=481158 audit_rate_limit=0 audit_backlog_limit=64 [ 713.453832][ T29] audit: type=1400 audit(2000000268.240:422275): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=5295 comm="kworker/1:4" saddr=10.128.0.169 src=30008 daddr=10.128.1.199 dest=33912 netif=eth0 [ 714.209913][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 714.216497][ C1] audit: audit_lost=481159 audit_rate_limit=0 audit_backlog_limit=64 [ 714.224639][ C1] audit: backlog limit exceeded [ 715.603058][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 715.603083][ T29] audit: type=1400 audit(2000000268.290:422276): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=23917 comm="syz-executor" opid=27593 ocomm="syz.1.10370" [ 715.997298][ T5200] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.011027][ T5200] audit: audit_lost=481162 audit_rate_limit=0 audit_backlog_limit=64 [ 716.019155][ T5200] audit: backlog limit exceeded [ 716.043615][ T29] audit: type=1400 audit(2000000268.290:422277): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=23917 comm="syz-executor" opid=27593 ocomm="syz.1.10370" [ 716.477402][T23905] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.483996][T23905] audit: audit_lost=481163 audit_rate_limit=0 audit_backlog_limit=64 [ 716.492105][T23905] audit: backlog limit exceeded [ 716.722297][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 716.728891][ C1] audit: audit_lost=481164 audit_rate_limit=0 audit_backlog_limit=64 [ 720.718757][ C1] audit_log_start: 50 callbacks suppressed [ 720.718781][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 720.731252][ C1] audit: audit_lost=481181 audit_rate_limit=0 audit_backlog_limit=64 [ 720.739351][ C1] audit: backlog limit exceeded [ 721.216400][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 721.223024][ C1] audit: audit_lost=481182 audit_rate_limit=0 audit_backlog_limit=64 [ 721.231157][ C1] audit: backlog limit exceeded [ 721.730173][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 721.736771][ C1] audit: audit_lost=481183 audit_rate_limit=0 audit_backlog_limit=64 [ 721.744930][ C1] audit: backlog limit exceeded [ 721.980531][ T5230] Bluetooth: hci2: command tx timeout [ 722.053724][ T4668] audit: audit_backlog=66 > audit_backlog_limit=64 [ 727.657073][ T4668] audit_log_lost: 76 callbacks suppressed [ 727.657099][ T4668] audit: audit_lost=481185 audit_rate_limit=0 audit_backlog_limit=64 [ 728.792395][ T29] audit: type=1400 audit(2000000290.458:422351): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="@" object="_" requested=w pid=12 comm="kworker/u8:1" saddr=10.128.0.169 src=30008 daddr=10.128.1.199 dest=33912 netif=eth0 [ 732.535500][ T29] audit: type=1400 audit(2000000290.888:422352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5213 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 732.578512][ T4668] audit: backlog limit exceeded [ 735.355151][ T29] audit: type=1400 audit(2000000290.888:422353): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5213 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 749.254877][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 749.261466][ C1] audit: audit_lost=481186 audit_rate_limit=0 audit_backlog_limit=64 [ 749.269635][ C1] audit: backlog limit exceeded [ 749.746777][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 749.753406][ C1] audit: audit_lost=481187 audit_rate_limit=0 audit_backlog_limit=64 [ 749.761515][ C1] audit: backlog limit exceeded [ 750.248667][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 750.255318][ C1] audit: audit_lost=481188 audit_rate_limit=0 audit_backlog_limit=64 [ 750.263467][ C1] audit: backlog limit exceeded [ 750.749489][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 754.264130][ C1] audit_log_start: 20 callbacks suppressed [ 754.264155][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 754.276611][ C1] audit: audit_lost=481196 audit_rate_limit=0 audit_backlog_limit=64 [ 754.284773][ C1] audit: backlog limit exceeded [ 754.763099][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 754.769753][ C1] audit: audit_lost=481197 audit_rate_limit=0 audit_backlog_limit=64 [ 754.777908][ C1] audit: backlog limit exceeded [ 755.257713][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 755.264349][ C1] audit: audit_lost=481198 audit_rate_limit=0 audit_backlog_limit=64 [ 755.272485][ C1] audit: backlog limit exceeded [ 755.764966][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 759.765944][ C1] audit_log_start: 23 callbacks suppressed [ 759.765969][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 759.778433][ C1] audit: audit_lost=481207 audit_rate_limit=0 audit_backlog_limit=64 [ 759.786594][ C1] audit: backlog limit exceeded [ 760.257037][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 760.263633][ C1] audit: audit_lost=481208 audit_rate_limit=0 audit_backlog_limit=64 [ 760.271794][ C1] audit: backlog limit exceeded [ 760.763557][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 760.770218][ C1] audit: audit_lost=481209 audit_rate_limit=0 audit_backlog_limit=64 [ 760.778367][ C1] audit: backlog limit exceeded [ 761.274199][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.267303][ C1] audit_log_start: 44 callbacks suppressed [ 765.267328][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.279770][ C1] audit: audit_lost=481225 audit_rate_limit=0 audit_backlog_limit=64 [ 765.287923][ C1] audit: backlog limit exceeded [ 765.777190][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.783783][ C1] audit: audit_lost=481226 audit_rate_limit=0 audit_backlog_limit=64 [ 765.791939][ C1] audit: backlog limit exceeded [ 766.263936][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.270565][ C1] audit: audit_lost=481227 audit_rate_limit=0 audit_backlog_limit=64 [ 766.278738][ C1] audit: backlog limit exceeded [ 766.777725][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 770.276030][ C1] audit_log_start: 20 callbacks suppressed [ 770.276055][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 770.288494][ C1] audit: audit_lost=481235 audit_rate_limit=0 audit_backlog_limit=64 [ 770.296643][ C1] audit: backlog limit exceeded [ 770.780498][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 770.787124][ C1] audit: audit_lost=481236 audit_rate_limit=0 audit_backlog_limit=64 [ 770.795234][ C1] audit: backlog limit exceeded [ 771.270866][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.277495][ C1] audit: audit_lost=481237 audit_rate_limit=0 audit_backlog_limit=64 [ 771.285650][ C1] audit: backlog limit exceeded [ 771.777171][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 775.783525][ C1] audit_log_start: 23 callbacks suppressed [ 775.783551][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 775.796018][ C1] audit: audit_lost=481246 audit_rate_limit=0 audit_backlog_limit=64 [ 775.804178][ C1] audit: backlog limit exceeded [ 776.278740][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.285326][ C1] audit: audit_lost=481247 audit_rate_limit=0 audit_backlog_limit=64 [ 776.293480][ C1] audit: backlog limit exceeded [ 776.779692][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.786326][ C1] audit: audit_lost=481248 audit_rate_limit=0 audit_backlog_limit=64 [ 776.794441][ C1] audit: backlog limit exceeded [ 777.287311][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 780.790602][ C1] audit_log_start: 20 callbacks suppressed [ 780.790627][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 780.803071][ C1] audit: audit_lost=481256 audit_rate_limit=0 audit_backlog_limit=64 [ 780.811314][ C1] audit: backlog limit exceeded [ 781.287284][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.294140][ C1] audit: audit_lost=481257 audit_rate_limit=0 audit_backlog_limit=64 [ 781.302477][ C1] audit: backlog limit exceeded [ 781.783654][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.790293][ C1] audit: audit_lost=481258 audit_rate_limit=0 audit_backlog_limit=64 [ 781.798448][ C1] audit: backlog limit exceeded [ 782.287067][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.297956][ C1] audit_log_start: 23 callbacks suppressed [ 786.297981][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.310432][ C1] audit: audit_lost=481267 audit_rate_limit=0 audit_backlog_limit=64 [ 786.318588][ C1] audit: backlog limit exceeded [ 786.798507][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.805089][ C1] audit: audit_lost=481268 audit_rate_limit=0 audit_backlog_limit=64 [ 786.813325][ C1] audit: backlog limit exceeded [ 787.294168][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 787.300803][ C1] audit: audit_lost=481269 audit_rate_limit=0 audit_backlog_limit=64 [ 787.308945][ C1] audit: backlog limit exceeded [ 787.634868][ T29] audit: type=1400 audit(2000000290.888:422354): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5213 comm="syz-executor" name="fs" dev="sysfs" ino=2 [ 790.878905][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 791.475452][ T5230] Bluetooth: hci2: command tx timeout [ 791.802604][ C1] audit_log_start: 24 callbacks suppressed [ 791.802629][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.815173][ C1] audit: audit_lost=481278 audit_rate_limit=0 audit_backlog_limit=64 [ 791.823345][ C1] audit: backlog limit exceeded [ 792.304075][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.310713][ C1] audit: audit_lost=481279 audit_rate_limit=0 audit_backlog_limit=64 [ 792.318878][ C1] audit: backlog limit exceeded [ 792.450731][T25445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.457315][T25445] audit: audit_lost=481280 audit_rate_limit=0 audit_backlog_limit=64 [ 792.798855][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.805458][ C1] audit: audit_lost=481281 audit_rate_limit=0 audit_backlog_limit=64 [ 813.693954][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 826.385693][ C1] audit_log_start: 71 callbacks suppressed [ 826.385720][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 826.398265][ C1] audit: audit_lost=481282 audit_rate_limit=0 audit_backlog_limit=64 [ 826.406451][ C1] audit: backlog limit exceeded [ 826.894607][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 826.901199][ C1] audit: audit_lost=481283 audit_rate_limit=0 audit_backlog_limit=64 [ 826.909358][ C1] audit: backlog limit exceeded [ 827.400263][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 827.406903][ C1] audit: audit_lost=481284 audit_rate_limit=0 audit_backlog_limit=64 [ 827.415060][ C1] audit: backlog limit exceeded [ 827.887407][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 831.401097][ C1] audit_log_start: 20 callbacks suppressed [ 831.401121][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 831.413648][ C1] audit: audit_lost=481292 audit_rate_limit=0 audit_backlog_limit=64 [ 831.421753][ C1] audit: backlog limit exceeded [ 831.900768][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 831.907421][ C1] audit: audit_lost=481293 audit_rate_limit=0 audit_backlog_limit=64 [ 831.915575][ C1] audit: backlog limit exceeded [ 832.394870][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 832.401461][ C1] audit: audit_lost=481294 audit_rate_limit=0 audit_backlog_limit=64 [ 832.409635][ C1] audit: backlog limit exceeded [ 832.902758][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 836.412728][ C1] audit_log_start: 20 callbacks suppressed [ 836.412755][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 836.425329][ C1] audit: audit_lost=481302 audit_rate_limit=0 audit_backlog_limit=64 [ 836.433465][ C1] audit: backlog limit exceeded [ 836.908979][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 836.915626][ C1] audit: audit_lost=481303 audit_rate_limit=0 audit_backlog_limit=64 [ 836.923787][ C1] audit: backlog limit exceeded [ 837.409256][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 837.415983][ C1] audit: audit_lost=481304 audit_rate_limit=0 audit_backlog_limit=64 [ 837.424130][ C1] audit: backlog limit exceeded [ 837.913494][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 841.908441][ C1] audit_log_start: 23 callbacks suppressed [ 841.908467][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 841.920917][ C1] audit: audit_lost=481313 audit_rate_limit=0 audit_backlog_limit=64 [ 841.929088][ C1] audit: backlog limit exceeded [ 842.408821][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 842.415551][ C1] audit: audit_lost=481314 audit_rate_limit=0 audit_backlog_limit=64 [ 842.423711][ C1] audit: backlog limit exceeded [ 842.907822][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 842.914478][ C1] audit: audit_lost=481315 audit_rate_limit=0 audit_backlog_limit=64 [ 842.922595][ C1] audit: backlog limit exceeded [ 843.420072][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 846.354309][ T30] INFO: task syz.1.10370:27593 blocked for more than 144 seconds. [ 846.362207][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 846.534230][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.542984][ T30] task:syz.1.10370 state:D stack:24672 pid:27593 tgid:27593 ppid:23917 flags:0x00004004 [ 846.594696][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.814315][ T30] Call Trace: [ 846.817675][ T30] [ 846.820711][ T30] __schedule+0x1843/0x4b00 [ 846.894295][ T30] ? __pfx___schedule+0x10/0x10 [ 847.144242][ T30] ? __pfx_lock_release+0x10/0x10 [ 847.149373][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 847.174504][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 847.174528][ T29] audit: type=1400 audit(2000000411.284:422490): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=27617 comm="syz-executor" opid=27617 ocomm="syz-executor" [ 847.284274][ T30] ? schedule+0x90/0x320 [ 847.288624][ T30] schedule+0x14b/0x320 [ 847.292839][ T30] schedule_preempt_disabled+0x13/0x30 [ 847.604619][ T30] __mutex_lock+0x6a7/0xd70 [ 847.609223][ T30] ? __mutex_lock+0x52a/0xd70 [ 847.613942][ T30] ? rcu_barrier+0x4c/0x530 [ 847.694421][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 847.699619][ T30] ? __mutex_unlock_slowpath+0x6f9/0x750 [ 847.781631][ T29] audit: type=1400 audit(2000000411.324:422491): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="root" dev="sda1" ino=1206 [ 848.024553][ T29] audit: type=1400 audit(2000000411.324:422492): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="root" dev="sda1" ino=1206 [ 848.084441][T25445] audit: backlog limit exceeded [ 848.257668][ T29] audit: type=1400 audit(2000000411.324:422493): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="syz-executor" dev="sda1" ino=1923 [ 848.374726][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 848.380815][ T30] rcu_barrier+0x4c/0x530 [ 848.385427][ T30] netdev_run_todo+0x3a0/0x1000 [ 848.390333][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 848.434616][ T29] audit: type=1400 audit(2000000411.324:422494): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=27617 comm="syz-executor" path="/root/syz-executor" dev="sda1" ino=1923 [ 848.484566][ T30] ? netdev_state_change+0xa8/0x1a0 [ 848.489857][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 848.515696][T27617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 848.522358][T27617] audit: audit_lost=481330 audit_rate_limit=0 audit_backlog_limit=64 [ 848.564506][T27617] audit: backlog limit exceeded [ 848.569529][T27617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 848.594563][ T5232] Bluetooth: hci2: command 0x0419 tx timeout [ 848.664681][ T30] ? tun_chr_close+0x105/0x1b0 [ 848.706417][ T30] ? tun_chr_close+0x105/0x1b0 [ 848.711279][ T30] tun_chr_close+0x137/0x1b0 [ 848.784705][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 848.789911][ T30] __fput+0x23f/0x880 [ 848.794055][ T30] task_work_run+0x24f/0x310 [ 848.881267][ T30] ? __pfx_task_work_run+0x10/0x10 [ 848.898718][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 848.927607][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 848.933342][ T30] do_syscall_64+0x100/0x230 [ 848.979901][ T30] ? clear_bhb_loop+0x35/0x90 [ 848.991936][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.024571][ T30] RIP: 0033:0x7fc72f97def9 [ 849.029073][ T30] RSP: 002b:00007ffc98064598 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 849.068309][ T30] RAX: 0000000000000000 RBX: 00007fc72fb37a80 RCX: 00007fc72f97def9 [ 849.121605][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 849.144931][ T30] RBP: 00007fc72fb37a80 R08: 00007fc72fb22000 R09: 00007ffc9806488f [ 849.152988][ T30] R10: 00000000005fa534 R11: 0000000000000246 R12: 00000000000ab6eb [ 849.214550][ T30] R13: 00007ffc980646a0 R14: 0000000000000032 R15: ffffffffffffffff [ 849.222719][ T30] [ 849.259315][ T30] INFO: task syz-executor:27599 blocked for more than 146 seconds. [ 849.375261][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 849.405627][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 849.414402][ T30] task:syz-executor state:D stack:24992 pid:27599 tgid:27599 ppid:27581 flags:0x00000000 [ 849.552702][ T30] Call Trace: [ 849.564777][ T30] [ 849.567783][ T30] __schedule+0x1843/0x4b00 [ 849.572360][ T30] ? __pfx___schedule+0x10/0x10 [ 849.634548][ T30] ? __pfx_lock_release+0x10/0x10 [ 849.640210][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 849.774803][ T30] ? schedule+0x90/0x320 [ 849.779147][ T30] schedule+0x14b/0x320 [ 849.783374][ T30] schedule_preempt_disabled+0x13/0x30 [ 849.934685][ T30] __mutex_lock+0x6a7/0xd70 [ 849.939305][ T30] ? __mutex_lock+0x52a/0xd70 [ 849.944099][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 850.085560][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 850.090712][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 850.182804][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 850.223801][ T30] ? __lock_acquire+0x1384/0x2050 [ 850.283372][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 850.344649][ T30] netlink_rcv_skb+0x1e3/0x430 [ 850.349602][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 850.474731][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.480150][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 850.591594][ T30] netlink_unicast+0x7f6/0x990 [ 850.644723][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 850.650109][ T30] ? __virt_addr_valid+0x183/0x530 [ 850.744708][ T5232] Bluetooth: hci2: command 0x0419 tx timeout [ 850.754732][ T30] ? __check_object_size+0x49c/0x900 [ 850.760180][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 850.851735][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.885531][ T30] ? __might_fault+0xaa/0x120 [ 850.890308][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.973593][ T30] __sock_sendmsg+0x221/0x270 [ 850.995568][ T30] __sys_sendto+0x398/0x4f0 [ 851.000175][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 851.094835][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 851.100928][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 851.215953][ T30] ? exc_page_fault+0x590/0x8c0 [ 851.221083][ T30] __x64_sys_sendto+0xde/0x100 [ 851.329713][ T30] do_syscall_64+0xf3/0x230 [ 851.344896][ T30] ? clear_bhb_loop+0x35/0x90 [ 851.349670][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.445035][ T30] RIP: 0033:0x7fe095d7fd8c [ 851.449646][ T30] RSP: 002b:00007fff5847fdc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 851.684918][ T30] RAX: ffffffffffffffda RBX: 00007fe096a64620 RCX: 00007fe095d7fd8c [ 851.692984][ T30] RDX: 0000000000000028 RSI: 00007fe096a64670 RDI: 0000000000000003 [ 851.833770][ T30] RBP: 0000000000000000 R08: 00007fff5847fe14 R09: 000000000000000c [ 851.964352][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 852.074870][ T30] R13: 0000000000000000 R14: 00007fe096a64670 R15: 0000000000000000 [ 852.082982][ T30] [ 852.201045][ T30] INFO: task syz.0.10377:27609 blocked for more than 149 seconds. [ 852.357606][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 852.475733][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 852.484508][ T30] task:syz.0.10377 state:D stack:26752 pid:27609 tgid:27608 ppid:26090 flags:0x00000004 [ 852.714958][ T30] Call Trace: [ 852.718320][ T30] [ 852.721290][ T30] __schedule+0x1843/0x4b00 [ 852.734191][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 852.734211][ T29] audit: type=1400 audit(2000000417.033:422636): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4650 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 [ 852.889577][ T30] ? __pfx___schedule+0x10/0x10 [ 852.894528][ T30] ? __pfx_lock_release+0x10/0x10 [ 852.995013][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 853.000594][ T30] ? schedule+0x90/0x320 [ 853.085076][ T30] schedule+0x14b/0x320 [ 853.089333][ T30] schedule_preempt_disabled+0x13/0x30 [ 853.185025][ T30] __mutex_lock+0x6a7/0xd70 [ 853.189644][ T30] ? __mutex_lock+0x52a/0xd70 [ 853.194378][ T30] ? rtnl_dumpit+0x99/0x200 [ 853.315282][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 853.320426][ T30] ? __alloc_skb+0x28f/0x440 [ 853.415165][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 853.420251][ T30] ? __pfx_neightbl_dump_info+0x10/0x10 [ 853.505002][ T30] rtnl_dumpit+0x99/0x200 [ 853.509438][ T30] netlink_dump+0x647/0xd80 [ 853.514011][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 853.635099][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 853.640248][ T30] __netlink_dump_start+0x5a2/0x790 [ 853.745000][ T30] ? __pfx_neightbl_dump_info+0x10/0x10 [ 853.750651][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 853.845095][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 853.850656][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 853.935141][ T30] ? __pfx_neightbl_dump_info+0x10/0x10 [ 853.940887][ T30] ? ref_tracker_free+0x643/0x7e0 [ 854.045915][ T30] netlink_rcv_skb+0x1e3/0x430 [ 854.050786][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 854.155213][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 854.160649][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 854.255266][ T30] netlink_unicast+0x7f6/0x990 [ 854.295163][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 854.301417][ T30] ? __virt_addr_valid+0x183/0x530 [ 854.402307][ T30] ? __check_object_size+0x49c/0x900 [ 854.475308][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 854.480197][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.585194][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.590592][ T30] __sock_sendmsg+0x221/0x270 [ 854.705114][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 854.745174][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.750576][ T30] __sys_sendmsg+0x2aa/0x390 [ 854.846081][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 854.851344][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 854.993320][ T30] ? do_syscall_64+0x100/0x230 [ 855.035190][ T30] ? do_syscall_64+0xb6/0x230 [ 855.039972][ T30] do_syscall_64+0xf3/0x230 [ 855.044525][ T30] ? clear_bhb_loop+0x35/0x90 [ 855.195639][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.201648][ T30] RIP: 0033:0x7f9c82b7def9 [ 855.315278][ T30] RSP: 002b:00007f9c83a33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.405264][ T30] RAX: ffffffffffffffda RBX: 00007f9c82d35f80 RCX: 00007f9c82b7def9 [ 855.413334][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 855.562901][ T30] RBP: 00007f9c82bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 855.581642][ T29] audit: type=1400 audit(2000000419.883:422637): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="/" dev="sda1" ino=2 [ 855.687616][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.795648][ T30] R13: 0000000000000000 R14: 00007f9c82d35f80 R15: 00007ffc50ae6b58 [ 855.803995][ T30] [ 855.835401][ T29] audit: type=1400 audit(2000000419.973:422638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="/" dev="sysfs" ino=1 [ 855.945283][ T30] [ 855.945283][ T30] Showing all locks held in the system: [ 855.953078][ T30] 1 lock held by khungtaskd/30: [ 856.106160][ T29] audit: type=1400 audit(2000000419.973:422639): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27617 comm="syz-executor" name="kernel" dev="sysfs" ino=1361 [ 856.155252][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 856.325358][ T30] 3 locks held by kworker/u8:6/1067: [ 856.330712][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850