last executing test programs: 4m25.289877748s ago: executing program 1 (id=13607): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f00005e1000/0x2000)=nil, 0x2000}) 4m25.208752756s ago: executing program 1 (id=13609): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) 4m25.042175139s ago: executing program 1 (id=13612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9) 4m24.858880083s ago: executing program 1 (id=13614): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, {0x2, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) 4m24.733797068s ago: executing program 1 (id=13617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m24.597590029s ago: executing program 1 (id=13619): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x168, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40004}, 0x40000c1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58030000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d140309800800014000000009b80102"], 0x380}}, 0x0) 4m8.429482283s ago: executing program 32 (id=13619): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x168, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40004}, 0x40000c1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58030000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d140309800800014000000009b80102"], 0x380}}, 0x0) 3m38.825146931s ago: executing program 4 (id=14143): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x13) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, 0x0) 3m38.409247748s ago: executing program 4 (id=14148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0xba, 0x75, 0x99, 0x8, 0xa257, 0x2013, 0xe87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0xb0, 0x80, [{{0x9, 0x4, 0xff, 0x3, 0x0, 0xb9, 0x5c, 0xcf, 0x4}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 3m36.65391781s ago: executing program 4 (id=14170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 3m36.4205102s ago: executing program 4 (id=14172): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f00000008c0)=0x79, 0x4) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 3m36.271499617s ago: executing program 4 (id=14174): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000132000/0x1000)=nil], &(0x7f0000000040)=[0x1], &(0x7f0000000080), 0x2) 3m35.449485113s ago: executing program 4 (id=14182): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 3m19.325293604s ago: executing program 33 (id=14182): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 47.175810168s ago: executing program 0 (id=16266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'R'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 46.697503714s ago: executing program 0 (id=16271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 46.438226006s ago: executing program 0 (id=16275): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 46.221018686s ago: executing program 0 (id=16278): unshare(0x2040400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0) 45.946575911s ago: executing program 0 (id=16281): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 45.671960179s ago: executing program 0 (id=16284): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) close(r0) 36.552996789s ago: executing program 3 (id=16388): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(blake2s-224,ecb(cast5))\x00'}, 0x24) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -922337203685477953'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 36.228827217s ago: executing program 3 (id=16392): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000000)) 35.892444722s ago: executing program 3 (id=16396): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000004c0)="650ea8ea7bc273dfaeab968586dd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 35.634640239s ago: executing program 3 (id=16398): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000010000000000000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 35.399849369s ago: executing program 3 (id=16400): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) process_vm_writev(0x0, &(0x7f0000000200), 0x10000000000003a2, 0x0, 0x48, 0x0) 34.097912151s ago: executing program 3 (id=16410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 29.268091364s ago: executing program 34 (id=16284): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) close(r0) 17.911932673s ago: executing program 35 (id=16410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 3.723295455s ago: executing program 7 (id=16708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)={0x98, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0xa, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x2a0c}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x98}}, 0x0) 3.46323643s ago: executing program 7 (id=16712): r0 = syz_io_uring_setup(0x18c3, &(0x7f0000000140)={0x0, 0xb, 0x1, 0x3, 0x37c}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x16c7, 0x7c73, 0x9, 0x0, 0x0) 2.96132899s ago: executing program 2 (id=16720): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4) 2.737797115s ago: executing program 7 (id=16723): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000240)={@my=0x1}) 2.380721535s ago: executing program 7 (id=16727): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x786d) 2.091814152s ago: executing program 2 (id=16731): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) 2.080274955s ago: executing program 7 (id=16732): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1.826086772s ago: executing program 2 (id=16735): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x23, 0x14, {0x14, 0xc, "54a1802026f50922859b5c6cb1e3014db7da"}}, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1.640055818s ago: executing program 7 (id=16736): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c500000000000109022400010000000009041c0001030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "c1cd7bc4"}]}}, 0x0}, 0x0) 1.516143847s ago: executing program 8 (id=16739): socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0xee01, 0xffffffffffffffff) setfsuid(0x0) 1.420454416s ago: executing program 6 (id=16740): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYRES32], 0x38}}, 0x40040) 1.269512557s ago: executing program 8 (id=16741): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000080)) 1.268735797s ago: executing program 6 (id=16742): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 1.132069384s ago: executing program 8 (id=16743): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') getdents64(r0, &(0x7f0000000000)=""/77, 0x4d) getdents64(r0, 0xffffffffffffffff, 0x43) 1.085787393s ago: executing program 5 (id=16744): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x18000}], 0x1, 0x10142, 0x0) 1.045500525s ago: executing program 2 (id=16745): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) 1.029865398s ago: executing program 6 (id=16746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) 875.8967ms ago: executing program 5 (id=16747): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a000105"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 858.02682ms ago: executing program 8 (id=16748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 811.660423ms ago: executing program 6 (id=16749): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c7", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/165, 0xa5}], 0x1}, 0x9}], 0x1, 0x400100c3, 0x0) 674.182062ms ago: executing program 5 (id=16750): capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000140)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/109) 673.30559ms ago: executing program 2 (id=16751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 612.660708ms ago: executing program 6 (id=16752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000380)={0x81, 0x0, 0x1}) 539.348489ms ago: executing program 8 (id=16753): setrlimit(0x40000000000008, &(0x7f0000000000)={0x2, 0x8d96}) r0 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000877000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) 465.352725ms ago: executing program 5 (id=16754): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x2, 0x0, &(0x7f0000000340)) timer_delete(0x0) 405.799925ms ago: executing program 2 (id=16755): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) 335.203628ms ago: executing program 5 (id=16756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x14, r1, 0x601, 0x400000}, 0x14}}, 0x0) 306.63585ms ago: executing program 8 (id=16757): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000000c0003000000000000000038040007800c00020000000080"], 0x30}}, 0x0) 218.414858ms ago: executing program 6 (id=16758): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x3a0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1800, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/251}, 0x20) 0s ago: executing program 5 (id=16759): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002bc0)=""/4117, 0x1015}, {&(0x7f0000000700)=""/4081, 0xff1}, {&(0x7f00000004c0)=""/147, 0x93}], 0x3}, 0xa002) kernel console output (not intermixed with test programs): audit_backlog=66 > audit_backlog_limit=64 [ 1024.358477][ T30] audit: type=1400 audit(1014.776:1644498): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31844 comm="udevd" name="003" dev="devtmpfs" ino=727 [ 1024.364409][ C0] audit: audit_lost=136476 audit_rate_limit=0 audit_backlog_limit=64 [ 1024.385854][ T4980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1024.391012][ C0] audit: backlog limit exceeded [ 1024.676648][ T5926] uclogic 0003:5543:0042.0026: item fetching failed at offset 0/3 [ 1024.688312][ T5926] uclogic 0003:5543:0042.0026: parse failed [ 1024.694891][ T5926] uclogic 0003:5543:0042.0026: probe with driver uclogic failed with error -22 [ 1024.898328][ T5926] usb 3-1: USB disconnect, device number 52 [ 1025.349984][ T5988] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1025.536018][ T5988] usb 4-1: Using ep0 maxpacket: 16 [ 1025.556200][ T5988] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 1025.574471][ T5988] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 1025.588218][ T5004] netlink: 'syz.6.14766': attribute type 3 has an invalid length. [ 1025.596193][ T5988] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 1025.617435][ T5988] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 1025.626670][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1025.643351][ T5988] usb 4-1: Product: syz [ 1025.650455][ T5988] usb 4-1: SerialNumber: syz [ 1025.670568][ T5988] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1025.676888][ T5988] r8152-cfgselector 4-1: config 0 descriptor?? [ 1025.707017][ T5988] hub 4-1:0.0: bad descriptor, ignoring hub [ 1025.721444][ T5988] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1026.117697][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14770'. [ 1026.231316][ T5988] r8152-cfgselector 4-1: reset high-speed USB device number 58 using dummy_hcd [ 1026.793943][ T5883] r8152-cfgselector 4-1: USB disconnect, device number 58 [ 1027.200044][ T5045] tipc: Invalid UDP bearer configuration [ 1027.200104][ T5045] tipc: Enabling of bearer rejected, failed to enable media [ 1027.355012][ T5049] netlink: 'syz.0.14787': attribute type 1 has an invalid length. [ 1027.751916][ T5060] netlink: 348 bytes leftover after parsing attributes in process `syz.2.14792'. [ 1028.309451][ T5081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14803'. [ 1028.535594][ T478] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1028.738798][ T478] usb 3-1: Using ep0 maxpacket: 32 [ 1028.751473][ T478] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.781940][ T478] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1028.805559][ T478] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1028.822803][ T478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.851271][ T478] usb 3-1: Product: syz [ 1028.857999][ T478] usb 3-1: Manufacturer: syz [ 1028.863197][ T478] usb 3-1: SerialNumber: syz [ 1029.133462][ T478] usb 3-1: 0:2 : does not exist [ 1029.200890][ T478] usb 3-1: USB disconnect, device number 53 [ 1029.365298][T31844] udevd[31844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1029.647705][ T30] kauditd_printk_skb: 31465 callbacks suppressed [ 1029.647727][ T30] audit: type=1400 audit(1019.781:1666257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31844 comm="udevd" name="dev" dev="sysfs" ino=8 [ 1029.656746][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1029.679950][T31844] audit: audit_lost=139714 audit_rate_limit=0 audit_backlog_limit=64 [ 1029.688066][T31844] audit: backlog limit exceeded [ 1029.693317][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1029.699880][ C0] audit: audit_lost=139715 audit_rate_limit=0 audit_backlog_limit=64 [ 1029.708220][ C0] audit: backlog limit exceeded [ 1029.713659][ T5116] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1029.720206][ T5116] audit: audit_lost=139716 audit_rate_limit=0 audit_backlog_limit=64 [ 1029.724162][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1030.187717][ T5134] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14827'. [ 1030.363663][ T5143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14829'. [ 1032.085445][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14859'. [ 1032.315707][ T5905] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1032.344948][ T5905] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1032.389902][ T5905] usb 6-1: USB disconnect, device number 2 [ 1032.726635][T22578] Bluetooth: hci5: command 0x0419 tx timeout [ 1032.779619][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1032.954838][ T5905] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1032.954878][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.954902][ T5905] usb 6-1: Product: syz [ 1032.954921][ T5905] usb 6-1: Manufacturer: syz [ 1032.954939][ T5905] usb 6-1: SerialNumber: syz [ 1032.962196][ T5905] usb 6-1: config 0 descriptor?? [ 1032.995110][ T5905] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 003 [ 1033.202342][ T5905] (null): failure setting delay to 10us [ 1033.229279][ T5905] i2c-tiny-usb 6-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1033.262635][ T5905] usb 6-1: USB disconnect, device number 3 [ 1034.972035][ T5279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14891'. [ 1035.003818][ T30] kauditd_printk_skb: 22262 callbacks suppressed [ 1035.003834][ T30] audit: type=1400 audit(1024.747:1682643): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31873 comm="udevd" name="by-diskseq" dev="devtmpfs" ino=1391 [ 1035.015267][T31873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1035.030364][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1035.055218][ T30] audit: type=1400 audit(1024.794:1682710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31873 comm="udevd" name="/" dev="sda1" ino=2 [ 1035.056273][ T5280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1035.073680][ T30] audit: type=1400 audit(1024.794:1682711): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31873 comm="udevd" name="/" dev="devtmpfs" ino=1 [ 1035.081531][ T5193] audit: audit_lost=141654 audit_rate_limit=0 audit_backlog_limit=64 [ 1035.108994][ T5281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1035.117806][ T5281] audit: audit_lost=141655 audit_rate_limit=0 audit_backlog_limit=64 [ 1035.134922][ T5281] audit: backlog limit exceeded [ 1036.371938][ T5926] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1036.554203][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1036.572536][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1036.603452][ T5926] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1036.639101][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.672133][ T5926] usb 3-1: config 0 descriptor?? [ 1036.991600][T14841] bond0 (unregistering): Released all slaves [ 1037.019324][T14841] bond1 (unregistering): Released all slaves [ 1037.042575][T14841] bond2 (unregistering): Released all slaves [ 1037.075792][ T5284] netlink: 'syz.0.14893': attribute type 3 has an invalid length. [ 1037.152790][ T5926] mcp2200 0003:04D8:00DF.0027: USB HID v1.ff Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 1037.245291][T14841] : left promiscuous mode [ 1037.451709][ T5883] usb 3-1: USB disconnect, device number 54 [ 1037.580424][T14841] tipc: Left network mode [ 1038.472365][ T5366] syz.6.14931 (5366): drop_caches: 4 [ 1038.714045][ T5371] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1039.333473][ T5391] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1039.359201][T14841] hsr_slave_0: left promiscuous mode [ 1039.394458][T14841] hsr_slave_1: left promiscuous mode [ 1039.411448][T14841] veth0_macvtap: left allmulticast mode [ 1039.451056][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14944'. [ 1040.365554][ T30] kauditd_printk_skb: 22635 callbacks suppressed [ 1040.365575][ T30] audit: type=1400 audit(1029.808:1699072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2915 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1040.375579][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1040.398992][ T30] audit: type=1400 audit(1029.808:1699073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2915 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1040.418654][ T30] audit: type=1400 audit(1029.808:1699074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2915 comm="syz-executor" name="177" dev="tmpfs" ino=915 [ 1040.439678][ T30] audit: type=1400 audit(1029.808:1699075): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=2915 comm="syz-executor" path="/177/cgroup.cpu" dev="tmpfs" ino=917 [ 1040.441288][ T5193] audit: audit_lost=143748 audit_rate_limit=0 audit_backlog_limit=64 [ 1040.468189][ T5419] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1040.474939][ T5419] audit: audit_lost=143749 audit_rate_limit=0 audit_backlog_limit=64 [ 1040.483011][ T5419] audit: backlog limit exceeded [ 1040.487889][ T5193] audit: backlog limit exceeded [ 1040.873324][ T5926] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1041.066153][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 1041.088506][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1041.118017][ T5926] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1041.141361][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.152287][ T5926] usb 6-1: Product: syz [ 1041.156572][ T5926] usb 6-1: Manufacturer: syz [ 1041.162212][ T5926] usb 6-1: SerialNumber: syz [ 1041.179567][ T5926] usb 6-1: config 0 descriptor?? [ 1041.654058][ T5926] gs_usb 6-1:0.0: Configuring for 163 interfaces [ 1041.666387][ T5926] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 1041.687522][ T5926] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 1041.880138][ T478] usb 6-1: USB disconnect, device number 4 [ 1042.208082][T14843] smc: removing ib device syz2 [ 1042.228942][ T5418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14955'. [ 1042.582418][ T5430] netlink: 'syz.3.14961': attribute type 27 has an invalid length. [ 1042.999317][ T5446] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14967'. [ 1043.115154][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14968'. [ 1044.366976][ T5483] usb usb8: usbfs: process 5483 (syz.3.14983) did not claim interface 0 before use [ 1045.281964][ T5508] netlink: 72 bytes leftover after parsing attributes in process `syz.6.14995'. [ 1045.717824][ T30] kauditd_printk_skb: 23315 callbacks suppressed [ 1045.717847][ T30] audit: type=1400 audit(1034.793:1717050): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5835 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 [ 1045.765311][ T5517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1045.778902][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1045.794189][ T5518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1045.797938][ T4191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1045.800765][ T5518] audit: audit_lost=145523 audit_rate_limit=0 audit_backlog_limit=64 [ 1045.807968][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1045.822485][ C0] audit: audit_lost=145524 audit_rate_limit=0 audit_backlog_limit=64 [ 1045.828660][ T30] audit: type=1400 audit(1034.812:1717073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sda1" ino=2 [ 1045.830573][ C0] audit: backlog limit exceeded [ 1046.313249][ T5532] autofs4:pid:5532:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1047.404628][ T478] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1047.571396][ T5578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.611429][ T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1047.611470][ T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.611514][ T478] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1047.611541][ T478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.620220][ T478] usb 3-1: config 0 descriptor?? [ 1047.838778][ T5584] ip6tnl3: entered promiscuous mode [ 1047.838819][ T5584] ip6tnl3: entered allmulticast mode [ 1047.846287][ T5584] team0: Refused to change device type [ 1048.081142][ T478] logitech-hidpp-device 0003:046D:C262.0028: item fetching failed at offset 0/3 [ 1048.081977][ T478] logitech-hidpp-device 0003:046D:C262.0028: hidpp_probe:parse failed [ 1048.082100][ T478] logitech-hidpp-device 0003:046D:C262.0028: probe with driver logitech-hidpp-device failed with error -22 [ 1048.137843][ T5587] [U] ^C [ 1048.301028][ T5926] usb 3-1: USB disconnect, device number 55 [ 1048.484723][ T478] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1048.640894][ T5598] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 1048.660589][ T5598] CUSE: unknown device info "3ܟ,̘" [ 1048.667918][ T478] usb 6-1: Using ep0 maxpacket: 16 [ 1048.668609][ T5598] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 1048.668609][ T5598] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 1048.699356][ T5598] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 1048.710768][ T478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.710805][ T478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.710830][ T478] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1048.710875][ T478] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1048.710900][ T478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.714746][ T478] usb 6-1: config 0 descriptor?? [ 1048.769012][ T5598] CUSE: DEVNAME unspecified [ 1048.773021][ T5883] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1048.965465][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 1048.979058][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.010183][ T5883] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1049.040224][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.070675][ T5883] usb 4-1: config 0 descriptor?? [ 1049.296133][ T478] hid-multitouch 0003:0457:07DA.0029: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 1049.518521][ T478] usb 6-1: USB disconnect, device number 5 [ 1049.553246][ T5883] apple 0003:05AC:024B.002A: unknown main item tag 0x5 [ 1049.561810][ T5883] apple 0003:05AC:024B.002A: unknown main item tag 0x6 [ 1049.585336][ T5883] apple 0003:05AC:024B.002A: invalid report_size 24312 [ 1049.594184][ T5883] apple 0003:05AC:024B.002A: item 0 2 1 7 parsing failed [ 1049.618583][ T5883] apple 0003:05AC:024B.002A: parse failed [ 1049.625188][ T5883] apple 0003:05AC:024B.002A: probe with driver apple failed with error -22 [ 1049.776665][ T5883] usb 4-1: USB disconnect, device number 59 [ 1049.833185][ T5607] fido_id[5607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1050.589713][ T5625] program syz.3.15050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1051.089737][ T30] kauditd_printk_skb: 28857 callbacks suppressed [ 1051.089758][ T30] audit: type=1400 audit(1039.845:1735964): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5636 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1051.120468][ T5636] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1051.134256][ T4191] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1051.143222][ T5636] audit: audit_lost=148848 audit_rate_limit=0 audit_backlog_limit=64 [ 1051.151412][ T4191] audit: audit_lost=148849 audit_rate_limit=0 audit_backlog_limit=64 [ 1051.151439][ T4191] audit: backlog limit exceeded [ 1051.151462][ T4191] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1051.151476][ T4191] audit: audit_lost=148850 audit_rate_limit=0 audit_backlog_limit=64 [ 1051.151493][ T4191] audit: backlog limit exceeded [ 1051.151616][ T4191] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1052.374768][ T5666] rdma_op ffff8880776ab9f0 conn xmit_rdma 0000000000000000 [ 1052.576190][ T5670] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1052.811561][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15075'. [ 1053.154916][ T5687] netlink: 'syz.5.15079': attribute type 1 has an invalid length. [ 1053.177888][ T5687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1053.185335][ T5687] IPv6: NLM_F_CREATE should be set when creating new route [ 1053.192798][ T5687] IPv6: NLM_F_CREATE should be set when creating new route [ 1053.216015][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15081'. [ 1054.212677][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15096'. [ 1054.350722][ T5727] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1054.513289][ T5731] [U] [ [ 1054.751145][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.758737][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.767417][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.783946][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.454810][ T5883] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1055.680347][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.700581][ T5883] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1055.733460][ T5883] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1055.742632][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.815670][ T5883] usb 3-1: config 0 descriptor?? [ 1055.839350][ T5883] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1055.861217][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 1055.894045][ T5883] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1055.933897][ T5883] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1055.960000][ T5883] usb 3-1: media controller created [ 1055.992040][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1056.049396][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 1056.086167][ T5883] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1056.113376][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input104 [ 1056.170089][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 1056.190207][ T5883] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1056.238888][ T5883] usb 3-1: USB disconnect, device number 56 [ 1056.345418][ T5883] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1056.438249][ T30] kauditd_printk_skb: 25904 callbacks suppressed [ 1056.438282][ T30] audit: type=1400 audit(1044.839:1755315): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1056.463648][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1056.470225][ T5193] audit: audit_lost=151036 audit_rate_limit=0 audit_backlog_limit=64 [ 1056.485080][ T478] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1056.491276][ T5193] audit: backlog limit exceeded [ 1056.491318][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1056.491335][ T5193] audit: audit_lost=151037 audit_rate_limit=0 audit_backlog_limit=64 [ 1056.513241][ T30] audit: type=1400 audit(1044.849:1755316): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="virtual" dev="sysfs" ino=1369 [ 1056.527392][ T5193] audit: backlog limit exceeded [ 1056.540114][ T5781] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1056.550268][ T5776] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1056.727045][ T478] usb 4-1: Using ep0 maxpacket: 16 [ 1056.748881][ T478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.790353][ T478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 1056.817257][ T478] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.846665][ T478] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1056.897115][ T478] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1056.920949][ T478] usb 4-1: Manufacturer: syz [ 1056.943292][ T478] usb 4-1: config 0 descriptor?? [ 1057.171380][ T478] usb 4-1: USB disconnect, device number 60 [ 1058.597863][ T5883] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1058.768978][ T3133] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1058.779650][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 1058.798683][ T5883] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1058.819458][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.838616][ T5883] usb 6-1: Product: syz [ 1058.850388][ T5883] usb 6-1: Manufacturer: syz [ 1058.867405][ T5883] usb 6-1: SerialNumber: syz [ 1058.885636][ T5883] usb 6-1: config 0 descriptor?? [ 1058.913974][ T5883] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1058.953426][ T3133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.976102][ T3133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.002844][ T3133] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1059.034056][ T3133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.076471][ T3133] usb 4-1: config 0 descriptor?? [ 1059.368053][ T5883] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1059.549061][ T3133] cypress 0003:04B4:DE61.002B: item fetching failed at offset 5/7 [ 1059.590738][ T5905] usb 6-1: USB disconnect, device number 6 [ 1059.601062][ T3133] cypress 0003:04B4:DE61.002B: parse failed [ 1059.614184][ T5905] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1059.623434][ T5905] visor 6-1:0.0: device disconnected [ 1059.643684][ T3133] cypress 0003:04B4:DE61.002B: probe with driver cypress failed with error -22 [ 1059.785786][ T3133] usb 4-1: USB disconnect, device number 61 [ 1061.802174][ T30] kauditd_printk_skb: 21792 callbacks suppressed [ 1061.802199][ T30] audit: type=1400 audit(1049.863:1770744): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sysfs" ino=1 [ 1061.888032][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.917991][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.940226][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.955470][ T5835] audit: audit_lost=153160 audit_rate_limit=0 audit_backlog_limit=64 [ 1061.955497][ T5835] audit: backlog limit exceeded [ 1061.955521][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.955538][ T5835] audit: audit_lost=153161 audit_rate_limit=0 audit_backlog_limit=64 [ 1061.955557][ T5835] audit: backlog limit exceeded [ 1061.955580][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1063.719212][ T3133] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1063.911950][ T3133] usb 6-1: Using ep0 maxpacket: 16 [ 1063.933497][ T3133] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.953850][ T3133] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.998854][ T3133] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1064.008227][ T3133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.016276][ T3133] usb 6-1: Product: syz [ 1064.050202][ T3133] usb 6-1: Manufacturer: syz [ 1064.055044][ T3133] usb 6-1: SerialNumber: syz [ 1064.135713][ T5905] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1064.306745][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1064.319983][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.333135][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1064.408844][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1064.435471][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.476914][ T5905] usb 3-1: config 0 descriptor?? [ 1064.505838][ T5969] option changes via remount are deprecated (pid=5967 comm=syz.3.15193) [ 1064.518790][ T3133] usb 6-1: cannot find UAC_HEADER [ 1064.631323][ T3133] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1064.790849][ T5973] pimreg3: entered allmulticast mode [ 1064.794852][ T3133] usb 6-1: USB disconnect, device number 7 [ 1064.941803][T31844] udevd[31844]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.972961][ T5905] logitech 0003:046D:C623.002C: unknown main item tag 0x6 [ 1064.984065][ T5905] logitech 0003:046D:C623.002C: collection stack underflow [ 1065.000327][ T5905] logitech 0003:046D:C623.002C: item 0 4 0 12 parsing failed [ 1065.020476][ T5905] logitech 0003:046D:C623.002C: parse failed [ 1065.050510][ T5905] logitech 0003:046D:C623.002C: probe with driver logitech failed with error -22 [ 1065.116576][ T5982] random: crng reseeded on system resumption [ 1065.214332][ T5926] usb 3-1: USB disconnect, device number 57 [ 1066.648159][ T5926] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1066.830339][ T5926] usb 4-1: Using ep0 maxpacket: 8 [ 1066.843538][ T5926] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1066.875061][ T5926] usb 4-1: config 179 has no interface number 0 [ 1066.881529][ T5926] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1066.922464][ T5926] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1066.952241][ T5926] usb 4-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.986189][ T5926] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1067.014782][ T5926] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1067.039882][ T6028] netlink: 'syz.0.15218': attribute type 32 has an invalid length. [ 1067.047808][ T5926] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1067.075631][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15218'. [ 1067.075869][ T5926] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1067.084875][ T6028] (unnamed net_device) (uninitialized): option coupled_control: invalid value (255) [ 1067.104188][ T3133] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1067.133294][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.155749][ T30] kauditd_printk_skb: 24184 callbacks suppressed [ 1067.155767][ T30] audit: type=1400 audit(1054.876:1785986): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1067.173846][ T5926] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input105 [ 1067.204271][ T4191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1067.204919][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1067.210860][ T4191] audit: audit_lost=156144 audit_rate_limit=0 audit_backlog_limit=64 [ 1067.217397][ C0] audit: audit_lost=156145 audit_rate_limit=0 audit_backlog_limit=64 [ 1067.217418][ C0] audit: backlog limit exceeded [ 1067.218279][T31844] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1067.228004][ T4191] audit: backlog limit exceeded [ 1067.242910][ T26] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1067.246389][ T4191] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1067.346175][ T5178] input input105: unable to receive magic message: -110 [ 1067.359432][ T3133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1067.395788][ T3133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.466334][ T3133] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1067.475860][ T5926] usb 4-1: USB disconnect, device number 62 [ 1067.481914][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1067.516496][ T3133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.516963][ T5926] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1067.574760][ T3133] usb 6-1: config 0 descriptor?? [ 1067.651484][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15224'. [ 1068.071492][ T3133] nzxt-kraken2 0003:1E71:170E.002D: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.5-1/input0 [ 1068.312437][ T3133] usb 6-1: USB disconnect, device number 8 [ 1068.483941][ T6052] fido_id[6052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1070.312652][ T6111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1070.319668][ T6111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1070.368951][ T6111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1070.376825][ T6111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1070.465113][ T6111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1070.471581][ T6111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1070.527201][ T6111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1070.533746][ T6111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1070.597810][ T6111] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1070.604445][ T6111] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1072.115473][ T6171] netlink: 260 bytes leftover after parsing attributes in process `syz.0.15285'. [ 1072.482281][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15291'. [ 1072.507901][ T30] kauditd_printk_skb: 30015 callbacks suppressed [ 1072.507923][ T30] audit: type=1400 audit(1059.880:1805352): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2915 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1072.515192][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.534417][ T6186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.540747][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.553275][ C0] audit: audit_lost=159697 audit_rate_limit=0 audit_backlog_limit=64 [ 1072.561315][ T6186] audit: audit_lost=159698 audit_rate_limit=0 audit_backlog_limit=64 [ 1072.561408][ C0] audit: backlog limit exceeded [ 1072.573838][ T6187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.575014][T31844] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1072.580792][ T6187] audit: audit_lost=159699 audit_rate_limit=0 audit_backlog_limit=64 [ 1072.974678][ T6185] syz.3.15291 (6185) used greatest stack depth: 17992 bytes left [ 1073.127009][ T3404] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1073.309241][ T3404] usb 3-1: Using ep0 maxpacket: 32 [ 1073.329063][ T3404] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 1073.363225][ T3404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.433461][ T3404] usb 3-1: config 0 descriptor?? [ 1073.686937][ T6218] [U] Ϧ:Kț.G8X4QTZ.|| [ 1074.160293][ T3404] usb 3-1: string descriptor 0 read error: -71 [ 1074.164222][ T3404] uclogic 0003:256C:006E.002E: failed retrieving string descriptor #200: -71 [ 1074.164290][ T3404] uclogic 0003:256C:006E.002E: failed retrieving pen parameters: -71 [ 1074.164311][ T3404] uclogic 0003:256C:006E.002E: failed probing pen v2 parameters: -71 [ 1074.164369][ T3404] uclogic 0003:256C:006E.002E: failed probing parameters: -71 [ 1074.164480][ T3404] uclogic 0003:256C:006E.002E: probe with driver uclogic failed with error -71 [ 1074.185280][ T3404] usb 3-1: USB disconnect, device number 58 [ 1074.428501][ T6228] CUSE: DEVNAME unspecified [ 1074.849962][ T6245] netlink: 'syz.5.15319': attribute type 21 has an invalid length. [ 1075.356849][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15328'. [ 1075.382833][ T6263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15328'. [ 1076.675434][ T6314] trusted_key: encrypted_key: hex blob is missing [ 1077.901213][ T30] kauditd_printk_skb: 22423 callbacks suppressed [ 1077.901236][ T30] audit: type=1400 audit(1064.922:1821032): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6328 comm="syz.5.15358" saddr=10.128.0.169 src=30008 daddr=10.128.1.154 dest=43320 netif=eth0 [ 1077.954055][ T30] audit: type=1400 audit(1064.960:1821033): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6344 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1077.971767][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.006089][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.011544][ T30] audit: type=1400 audit(1064.960:1821034): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6344 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1078.014374][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.032893][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.038156][ C0] audit: audit_lost=161948 audit_rate_limit=0 audit_backlog_limit=64 [ 1078.038179][ C0] audit: backlog limit exceeded [ 1078.039241][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1078.329142][ T6357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15371'. [ 1078.349360][ T6357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15371'. [ 1079.209802][ T478] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1079.384307][ T478] usb 4-1: Using ep0 maxpacket: 32 [ 1079.424808][ T478] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.450134][ T478] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1079.498516][ T478] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1079.506329][ T478] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1079.527598][ T478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.564520][ T478] usb 4-1: config 0 descriptor?? [ 1080.042566][ T478] asus 0003:048D:CE50.002F: item fetching failed at offset 2/5 [ 1080.068565][ T478] asus 0003:048D:CE50.002F: Asus hid parse failed: -22 [ 1080.086876][ T478] asus 0003:048D:CE50.002F: probe with driver asus failed with error -22 [ 1080.272922][ T478] usb 4-1: USB disconnect, device number 63 [ 1080.790500][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15408'. [ 1081.754844][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15422'. [ 1081.924527][ T6464] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1081.931128][ T6464] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1081.991822][ T6464] vhci_hcd vhci_hcd.0: Device attached [ 1082.174356][ T478] vhci_hcd: vhci_device speed not set [ 1082.256537][ T3133] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1082.287127][ T478] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 1082.420002][ T3133] usb 3-1: Using ep0 maxpacket: 32 [ 1082.445693][ T3133] usb 3-1: config 0 has no interfaces? [ 1082.458356][ T3133] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1082.512030][ T3133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.552735][ T3133] usb 3-1: config 0 descriptor?? [ 1082.827955][ T5926] usb 3-1: USB disconnect, device number 59 [ 1082.834578][ T6466] vhci_hcd: cannot find a urb of seqnum 32 max seqnum 2 [ 1082.860028][T14833] vhci_hcd: stop threads [ 1082.876213][T14833] vhci_hcd: release socket [ 1082.892258][T14833] vhci_hcd: disconnect device [ 1083.261274][ T5193] audit_log_start: 29662 callbacks suppressed [ 1083.261281][ T30] audit: type=1400 audit(1069.927:1840925): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1083.261295][ T5193] audit: audit_backlog=64 > audit_backlog_limit=64 [ 1083.261404][ T30] audit: type=1400 audit(1069.927:1840926): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5193 comm="udevd" path="/sys/devices/virtual/block/loop6/slaves" dev="sysfs" ino=15657 [ 1083.271412][ T5193] audit: audit_lost=165208 audit_rate_limit=0 audit_backlog_limit=64 [ 1083.309328][ T4191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.315896][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.329869][ T6510] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.337166][ T5835] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1083.343168][ T30] audit: type=1400 audit(1069.927:1840927): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sda1" ino=2 [ 1083.350179][T31844] audit: audit_lost=165209 audit_rate_limit=0 audit_backlog_limit=64 [ 1084.341733][ T5926] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1084.513106][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 1084.546128][ T5926] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1084.584947][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1084.610061][ T5926] usb 4-1: Product: syz [ 1084.616110][ T5926] usb 4-1: Manufacturer: syz [ 1084.636549][ T5926] usb 4-1: SerialNumber: syz [ 1084.662656][ T5926] usb 4-1: config 0 descriptor?? [ 1084.972534][ T5926] usb 4-1: USB disconnect, device number 64 [ 1084.984040][ T6563] Bluetooth: MGMT ver 1.23 [ 1085.070207][T31873] udevd[31873]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.762351][ T6588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15482'. [ 1086.201898][ T5905] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1086.330340][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15491'. [ 1086.391904][ T6608] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1086.415266][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1086.423111][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.438308][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.474193][ T5905] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1086.524081][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.575196][ T5905] usb 3-1: config 0 descriptor?? [ 1087.096418][ T5905] gt683r_led 0003:1770:FF00.0030: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 1087.283961][ T5926] usb 3-1: USB disconnect, device number 60 [ 1087.333277][ T3404] gt683r_led 0003:1770:FF00.0030: failed to send set report request: -19 [ 1087.435288][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15507'. [ 1087.651835][ T6631] fido_id[6631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1087.794436][ T478] vhci_hcd: vhci_device speed not set [ 1088.607421][ T30] kauditd_printk_skb: 35571 callbacks suppressed [ 1088.607443][ T30] audit: type=1400 audit(1074.931:1862666): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6662 comm="syz-executor" name="293" dev="tmpfs" ino=1509 [ 1088.637731][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1088.638976][ T6663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1088.652150][ T6665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1088.658001][ T6666] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1088.659061][ T6665] audit: audit_lost=169821 audit_rate_limit=0 audit_backlog_limit=64 [ 1088.659082][ T6665] audit: backlog limit exceeded [ 1088.659102][ T6665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1088.659117][ T6665] audit: audit_lost=169822 audit_rate_limit=0 audit_backlog_limit=64 [ 1088.659134][ T6665] audit: backlog limit exceeded [ 1089.440802][ T3133] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1089.633403][ T3133] usb 4-1: Using ep0 maxpacket: 8 [ 1089.652854][ T3133] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1089.673983][ T3133] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 1089.685635][ T3133] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1089.704431][ T3133] usb 4-1: config 4 has no interface number 0 [ 1089.716503][ T3133] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1089.741788][ T3133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.762119][ T3133] usb 4-1: Product: syz [ 1089.766363][ T3133] usb 4-1: Manufacturer: syz [ 1089.771022][ T3133] usb 4-1: SerialNumber: syz [ 1090.076219][ T3133] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 1090.087006][ T3133] usb 4-1: No valid video chain found. [ 1090.122586][ T3133] usb 4-1: USB disconnect, device number 65 [ 1090.187268][ T6707] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.15538'. [ 1090.586877][ T6718] use of bytesused == 0 is deprecated and will be removed in the future, [ 1090.606720][ T6718] use the actual size instead. [ 1091.418883][ T5905] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1091.611039][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1091.632144][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.658180][ T5905] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1091.679024][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.704817][ T5905] usb 3-1: config 0 descriptor?? [ 1091.710068][ T3133] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1091.910500][ T3133] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1091.928932][ T3133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.940550][ T3133] usb 6-1: Product: syz [ 1091.951343][ T3133] usb 6-1: Manufacturer: syz [ 1091.956170][ T3133] usb 6-1: SerialNumber: syz [ 1091.970098][ T3133] usb 6-1: config 0 descriptor?? [ 1092.195220][ T5905] cypress 0003:04B4:0001.0031: unexpected long global item [ 1092.252445][ T5905] cypress 0003:04B4:0001.0031: parse failed [ 1092.274108][ T5905] cypress 0003:04B4:0001.0031: probe with driver cypress failed with error -22 [ 1092.296226][ T3133] usb 6-1: USB disconnect, device number 9 [ 1092.409376][ T3404] usb 3-1: USB disconnect, device number 61 [ 1093.292484][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15578'. [ 1093.323066][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15578'. [ 1093.431532][ T6796] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15580'. [ 1093.863014][ T6810] tipc: Enabling of bearer rejected, failed to enable media [ 1093.963188][ T30] kauditd_printk_skb: 29934 callbacks suppressed [ 1093.963209][ T30] audit: type=1400 audit(1079.944:1884150): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5823 comm="syz-executor" name="3020" dev="tmpfs" ino=15185 [ 1093.997890][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1094.006104][ T5823] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1094.006728][ T6814] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1094.012804][ T5827] audit: audit_lost=172641 audit_rate_limit=0 audit_backlog_limit=64 [ 1094.020890][ T6814] audit: audit_lost=172642 audit_rate_limit=0 audit_backlog_limit=64 [ 1094.020912][ T6814] audit: backlog limit exceeded [ 1094.032137][ T30] audit: type=1400 audit(1079.944:1884151): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5823 comm="syz-executor" name="cgroup" dev="tmpfs" ino=15186 [ 1094.062549][ T5823] audit: audit_lost=172643 audit_rate_limit=0 audit_backlog_limit=64 [ 1094.062575][ T5823] audit: backlog limit exceeded [ 1094.782919][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15600'. [ 1095.214335][ T6852] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15605'. [ 1095.230913][ T6852] netlink: 'syz.2.15605': attribute type 5 has an invalid length. [ 1095.782449][ T6875] netlink: 'syz.5.15615': attribute type 3 has an invalid length. [ 1096.999598][ T3404] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1097.253115][ T3404] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1097.267386][ T3404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.275476][ T3404] usb 6-1: Product: syz [ 1097.319654][ T3404] usb 6-1: Manufacturer: syz [ 1097.342735][ T3404] usb 6-1: SerialNumber: syz [ 1097.354839][ T3404] usb 6-1: config 0 descriptor?? [ 1097.372843][ T3404] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1097.817212][ T3404] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input107 [ 1098.061427][ T3133] usb 6-1: USB disconnect, device number 10 [ 1098.306680][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.314566][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.449607][ T6937] bridge_slave_0: left allmulticast mode [ 1098.469412][ T6937] bridge_slave_0: left promiscuous mode [ 1098.489054][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.518829][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15647'. [ 1098.541938][ T6937] bridge_slave_1: left allmulticast mode [ 1098.547660][ T6937] bridge_slave_1: left promiscuous mode [ 1098.555519][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.574675][ T6937] bond0: (slave bond_slave_0): Releasing backup interface [ 1098.598728][ T6937] bond0: (slave bond_slave_1): Releasing backup interface [ 1098.650469][ T6937] team0: Port device team_slave_0 removed [ 1098.693858][ T6937] team0: Port device team_slave_1 removed [ 1098.716982][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.727741][ T6950] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15649'. [ 1098.750562][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.752919][ T6950] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15649'. [ 1098.793445][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.858767][ T6937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.097894][ T6937] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.112409][ T6937] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.122728][ T6937] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.132482][ T6937] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.328952][ T30] kauditd_printk_skb: 27670 callbacks suppressed [ 1099.328975][ T30] audit: type=1400 audit(1084.949:1902476): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1099.356004][ T30] audit: type=1400 audit(1084.949:1902477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1099.375926][ T30] audit: type=1400 audit(1084.949:1902478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="3309" dev="tmpfs" ino=16648 [ 1099.419151][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1099.419816][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1099.428619][ T5835] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1099.432433][ C0] audit: audit_lost=175759 audit_rate_limit=0 audit_backlog_limit=64 [ 1099.447536][ T30] audit: type=1400 audit(1084.949:1902479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1099.447589][ T30] audit: type=1400 audit(1084.949:1902480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1099.466348][ C0] audit: backlog limit exceeded [ 1099.714148][ T6970] IPVS: Unknown mcast interface: bridge_slave_0 [ 1100.420362][ T3133] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1100.545251][ T6996] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1100.551874][ T6996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1100.613095][ T6996] vhci_hcd vhci_hcd.0: Device attached [ 1100.616264][ T3133] usb 3-1: Using ep0 maxpacket: 8 [ 1100.652431][ T3133] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1100.676961][ T3133] usb 3-1: config 179 has no interface number 0 [ 1100.694275][ T3133] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1100.723488][ T3133] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1100.751556][ T3133] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1100.781074][ T3133] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1100.810539][ T3133] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1100.838890][ T3133] usb 3-1: config 179 interface 65 has no altsetting 0 [ 1100.861390][ T3133] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1100.869311][ T3404] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1100.874250][ T3133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.944337][ T5926] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 1100.954257][ T3133] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input108 [ 1101.081523][ T5178] input input108: unable to receive magic message: -110 [ 1101.112694][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1101.131761][ T5178] input input108: unable to receive magic message: -32 [ 1101.159006][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.185932][ T5926] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 1101.204428][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.221291][ T5988] usb 3-1: USB disconnect, device number 62 [ 1101.221331][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1101.235858][ T5988] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1101.236197][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1101.293665][ T5926] usb 4-1: config 0 descriptor?? [ 1101.808136][ T5926] logitech-hidpp-device 0003:046D:C090.0032: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.3-1/input0 [ 1102.017997][ T5926] usb 4-1: USB disconnect, device number 66 [ 1102.053036][ T7022] fido_id[7022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1103.431264][ T7056] pim6reg: entered allmulticast mode [ 1103.773308][ T6997] vhci_hcd: connection reset by peer [ 1103.820334][T14847] vhci_hcd: stop threads [ 1103.825632][T14847] vhci_hcd: release socket [ 1103.832355][T14847] vhci_hcd: disconnect device [ 1104.677566][ T30] kauditd_printk_skb: 26949 callbacks suppressed [ 1104.677587][ T30] audit: type=1400 audit(1089.972:1921245): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7088 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1104.705859][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1104.717954][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1104.726467][ T5193] audit: audit_lost=178489 audit_rate_limit=0 audit_backlog_limit=64 [ 1104.737287][T31844] audit: audit_lost=178490 audit_rate_limit=0 audit_backlog_limit=64 [ 1104.749387][ T5193] audit: backlog limit exceeded [ 1104.756573][T31844] audit: backlog limit exceeded [ 1104.760712][ T30] audit: type=1400 audit(1089.972:1921246): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7088 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1104.766050][T31873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1104.799972][ T7087] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1104.921063][ T5926] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1105.106731][ T5926] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 253, using maximum allowed: 30 [ 1105.145713][ T5926] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.205854][ T5926] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1105.249168][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1105.277979][ T5926] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1105.316880][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.351393][ T5926] usb 4-1: config 0 descriptor?? [ 1105.831920][ T5926] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 1105.873915][ T5926] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 1105.902677][ T5926] creative-sb0540 0003:041E:3100.0033: unknown main item tag 0x0 [ 1105.935213][ T5926] creative-sb0540 0003:041E:3100.0033: No inputs registered, leaving [ 1105.974706][ T5926] creative-sb0540 0003:041E:3100.0033: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 1106.034312][ T5926] usb 4-1: USB disconnect, device number 67 [ 1106.150639][ T5905] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1106.276076][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15725'. [ 1106.287871][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15725'. [ 1106.297965][ T7117] fido_id[7117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1106.343051][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1106.352176][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.354676][ T3404] vhci_hcd: vhci_device speed not set [ 1106.384823][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.438470][ T5905] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1106.476022][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.505524][ T5905] usb 6-1: config 0 descriptor?? [ 1106.783966][ T7134] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20004 [ 1106.977077][ T5905] hid_mf 0003:0079:1801.0034: item fetching failed at offset 0/2 [ 1107.006387][ T5905] hid_mf 0003:0079:1801.0034: HID parse failed. [ 1107.027582][ T5905] hid_mf 0003:0079:1801.0034: probe with driver hid_mf failed with error -22 [ 1107.190119][ T672] usb 6-1: USB disconnect, device number 11 [ 1107.981877][ T7160] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.15741'. [ 1109.105377][ T7188] netlink: 52 bytes leftover after parsing attributes in process `syz.3.15754'. [ 1109.115035][ T5905] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1109.304250][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1109.322423][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.346195][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.400621][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1109.421323][ T7192] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1109.430761][ T7192] team0: Device ipvlan2 is already an upper device of the team interface [ 1109.446587][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1109.459806][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.479852][ T5905] usb 3-1: config 0 descriptor?? [ 1109.972016][ T5905] microsoft 0003:045E:07DA.0035: unbalanced collection at end of report description [ 1110.010667][ T5905] microsoft 0003:045E:07DA.0035: parse failed [ 1110.016971][ T5905] microsoft 0003:045E:07DA.0035: probe with driver microsoft failed with error -22 [ 1110.032778][ T30] kauditd_printk_skb: 27932 callbacks suppressed [ 1110.032796][ T30] audit: type=1400 audit(1094.985:1941138): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sda1" ino=2 [ 1110.048205][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1110.058017][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1110.071502][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1110.071936][T31844] audit: audit_lost=181172 audit_rate_limit=0 audit_backlog_limit=64 [ 1110.080486][ T5823] audit: audit_lost=181173 audit_rate_limit=0 audit_backlog_limit=64 [ 1110.092291][T31844] audit: backlog limit exceeded [ 1110.094719][ T2915] audit: audit_lost=181174 audit_rate_limit=0 audit_backlog_limit=64 [ 1110.100542][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1110.108199][ T30] audit: type=1400 audit(1094.985:1941139): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="tmpfs" ino=1 [ 1110.203799][ T5905] usb 3-1: USB disconnect, device number 63 [ 1110.426781][ T3404] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1110.609860][ T3404] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1110.618557][ T3404] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1110.645574][ T3404] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1110.667176][ T3404] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1110.696387][ T3404] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1110.723503][ T3404] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1110.747526][ T3404] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1110.755596][ T3404] usb 6-1: Product: syz [ 1110.779721][ T3404] usb 6-1: Manufacturer: syz [ 1110.795197][ T3404] cdc_wdm 6-1:1.0: skipping garbage [ 1110.800496][ T3404] cdc_wdm 6-1:1.0: skipping garbage [ 1110.824305][ T3404] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1110.830284][ T3404] cdc_wdm 6-1:1.0: Unknown control protocol [ 1110.964501][ T7227] netlink: 'syz.0.15774': attribute type 23 has an invalid length. [ 1111.054380][ T3404] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1111.087481][ T3404] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1111.273541][ T3404] usb 6-1: USB disconnect, device number 12 [ 1111.401994][ T7235] fido_id[7235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1112.116594][ T5905] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1112.289697][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1112.316723][ T5905] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1112.342890][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.395135][ T5905] usb 4-1: config 0 descriptor?? [ 1112.412430][ T7262] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1112.878252][ T5905] hid-retrode 0003:0403:97C1.0037: unknown main item tag 0x0 [ 1112.938308][ T5905] hid-retrode 0003:0403:97C1.0037: unknown main item tag 0x0 [ 1112.969824][ T5905] hid-retrode 0003:0403:97C1.0037: unknown main item tag 0x0 [ 1112.991045][ T5905] hid-retrode 0003:0403:97C1.0037: unknown main item tag 0x0 [ 1113.012688][ T5905] hid-retrode 0003:0403:97C1.0037: unknown main item tag 0x0 [ 1113.034245][ T5905] hid-retrode 0003:0403:97C1.0037: hidraw0: USB HID v1.01 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 1113.084841][ T7296] netlink: 'syz.2.15805': attribute type 3 has an invalid length. [ 1113.153000][ T5905] usb 4-1: USB disconnect, device number 68 [ 1113.430001][ T7299] fido_id[7299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1113.609779][ T7309] program syz.6.15811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.029747][ T3404] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1114.079530][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 1114.110856][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 1114.246836][ T3404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.267776][ T3404] usb 6-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 1114.297444][ T3404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.325056][ T3404] usb 6-1: config 0 descriptor?? [ 1114.492176][ T672] libceph: connect (1)[c::]:6789 error -101 [ 1114.500982][ T672] libceph: mon0 (1)[c::]:6789 connect error [ 1114.796968][ T7315] ceph: No mds server is up or the cluster is laggy [ 1114.812363][ T3404] wacom 0003:056A:032B.0038: unbalanced collection at end of report description [ 1114.853727][ T3404] wacom 0003:056A:032B.0038: parse failed [ 1114.884633][ T3404] wacom 0003:056A:032B.0038: probe with driver wacom failed with error -22 [ 1115.029246][ T3404] usb 6-1: USB disconnect, device number 13 [ 1115.347991][ T7357] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15831'. [ 1115.360530][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15831'. [ 1115.390257][ T30] kauditd_printk_skb: 25137 callbacks suppressed [ 1115.390277][ T30] audit: type=1400 audit(1099.990:1958086): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sysfs" ino=1 [ 1115.429807][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1115.430295][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1115.437070][ T7358] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1115.448709][ T30] audit: type=1400 audit(1100.018:1958087): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1115.449714][ T5823] audit: audit_lost=183905 audit_rate_limit=0 audit_backlog_limit=64 [ 1115.473222][ T5193] audit: audit_lost=183906 audit_rate_limit=0 audit_backlog_limit=64 [ 1115.477695][ T7358] audit: audit_lost=183907 audit_rate_limit=0 audit_backlog_limit=64 [ 1115.489882][ T5193] audit: backlog limit exceeded [ 1115.494441][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1115.558312][ T3404] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1115.729800][ T3404] usb 4-1: Using ep0 maxpacket: 32 [ 1115.742994][ T3404] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1115.773758][ T3404] usb 4-1: config 0 has no interface number 0 [ 1115.796871][ T3404] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1115.828041][ T3404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.836157][ T3404] usb 4-1: Product: syz [ 1115.874196][ T3404] usb 4-1: Manufacturer: syz [ 1115.884708][ T3404] usb 4-1: SerialNumber: syz [ 1115.915472][ T3404] usb 4-1: config 0 descriptor?? [ 1115.955845][ T3404] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1115.995463][ T3404] usb 4-1: selecting invalid altsetting 1 [ 1116.018832][ T3404] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1116.062671][ T3404] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1116.104375][ T3404] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1116.112769][ T3404] usb 4-1: media controller created [ 1116.207010][ T3404] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.328415][ T3404] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1116.336081][ T3404] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1116.374421][ T3404] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1116.529636][ T3404] usb 4-1: USB disconnect, device number 69 [ 1116.695392][ T7381] IPVS: Scheduler module ip_vs_sip not found [ 1117.384673][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15855'. [ 1117.414485][ T7411] nbd: socks must be embedded in a SOCK_ITEM attr [ 1117.912013][ T7426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.010387][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15880'. [ 1119.033224][ T3404] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1119.152022][ T7468] netlink: 277 bytes leftover after parsing attributes in process `syz.6.15882'. [ 1119.214548][ T3404] usb 6-1: Using ep0 maxpacket: 16 [ 1119.223099][ T3404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.248374][ T478] libceph: connect (1)[c::]:6789 error -101 [ 1119.251216][ T3404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.268130][ T3404] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1119.281726][ T3404] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1119.282541][ T478] libceph: mon0 (1)[c::]:6789 connect error [ 1119.291198][ T3404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.321879][ T3404] usb 6-1: config 0 descriptor?? [ 1119.331002][ T478] libceph: connect (1)[c::]:6789 error -101 [ 1119.390608][ T478] libceph: mon0 (1)[c::]:6789 connect error [ 1119.484911][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15886'. [ 1119.707380][ T478] libceph: connect (1)[c::]:6789 error -101 [ 1119.717253][ T478] libceph: mon0 (1)[c::]:6789 connect error [ 1119.815797][ T3404] hid-multitouch 0003:0457:07DA.0039: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 1120.009073][ T3404] usb 6-1: USB disconnect, device number 14 [ 1120.062743][ T7470] ceph: No mds server is up or the cluster is laggy [ 1120.373435][ T7495] fido_id[7495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1120.743435][ T30] kauditd_printk_skb: 35265 callbacks suppressed [ 1120.743458][ T30] audit: type=1400 audit(1104.994:1978997): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="virtual" dev="sysfs" ino=1369 [ 1120.758650][ T5827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1120.775549][ T5193] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1120.780016][ T4191] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1120.782079][ T5193] audit: audit_lost=188693 audit_rate_limit=0 audit_backlog_limit=64 [ 1120.796822][ T4191] audit: audit_lost=188694 audit_rate_limit=0 audit_backlog_limit=64 [ 1120.796845][ T4191] audit: backlog limit exceeded [ 1120.796913][ T4191] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1120.796930][ T4191] audit: audit_lost=188695 audit_rate_limit=0 audit_backlog_limit=64 [ 1120.796948][ T4191] audit: backlog limit exceeded [ 1121.299422][ T5905] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1121.536875][ T5905] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1121.555875][ T5905] usb 6-1: config 0 has no interface number 0 [ 1121.584100][ T5905] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1121.607711][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.646693][ T5905] usb 6-1: Product: syz [ 1121.663695][ T5905] usb 6-1: Manufacturer: syz [ 1121.668458][ T5905] usb 6-1: SerialNumber: syz [ 1121.728160][ T5905] usb 6-1: config 0 descriptor?? [ 1121.975338][ T5905] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 1121.997756][ T5905] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 1122.016770][ T5905] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 1122.029140][ T5905] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 1122.066556][ T5905] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1122.458937][ T5905] usb 6-1: USB disconnect, device number 15 [ 1122.513630][ T5905] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1122.555643][ T5905] keyspan 6-1:0.133: device disconnected [ 1122.649841][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15921'. [ 1122.686235][ T7560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.081970][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15925'. [ 1123.127826][ T7568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15925'. [ 1123.459835][ T3404] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1123.662020][ T3404] usb 6-1: Using ep0 maxpacket: 32 [ 1123.677120][ T3404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.705169][ T5926] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1123.712955][ T3404] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1123.730189][ T3404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.765822][ T3404] usb 6-1: config 0 descriptor?? [ 1123.908292][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.926093][ T7597] lo: left allmulticast mode [ 1123.940603][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.961768][ T5926] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1123.978179][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.017232][ T5926] usb 4-1: config 0 descriptor?? [ 1124.111852][ T7597] team0: Port device syz_tun removed [ 1124.142783][ T7597] bridge0: port 3(batadv0) entered disabled state [ 1124.150330][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.220583][ T7597] team0: Port device bridge0 removed [ 1124.310122][ T3404] stadia 0003:18D1:9400.003A: unknown main item tag 0x3 [ 1124.341720][ T7597] batadv0: left allmulticast mode [ 1124.350169][ T7597] batadv0: left promiscuous mode [ 1124.355730][ T7597] bridge0: port 3(batadv0) entered disabled state [ 1124.356199][ T3404] stadia 0003:18D1:9400.003A: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.5-1/input0 [ 1124.386459][ T3404] stadia 0003:18D1:9400.003A: no inputs found [ 1124.393767][ T3404] stadia 0003:18D1:9400.003A: force feedback init failed [ 1124.455234][ T7597] bridge_slave_0: left allmulticast mode [ 1124.472315][ T7597] bridge_slave_0: left promiscuous mode [ 1124.482797][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.484768][ T5926] hid-led 0003:0FC5:B080.003B: unknown main item tag 0x1 [ 1124.506532][ T5891] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1124.555204][ T7597] bridge_slave_1: left allmulticast mode [ 1124.558626][ T3404] usb 6-1: USB disconnect, device number 16 [ 1124.567630][ T7597] bridge_slave_1: left promiscuous mode [ 1124.567867][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.581071][ T5926] hid-led 0003:0FC5:B080.003B: item fetching failed at offset 2/3 [ 1124.603656][ T5926] hid-led 0003:0FC5:B080.003B: probe with driver hid-led failed with error -22 [ 1124.664959][ T7606] fido_id[7606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1124.699959][ T7597] bond0: (slave bond_slave_0): Releasing backup interface [ 1124.729424][ T5891] usb 3-1: config 4 has an invalid interface number: 47 but max is 2 [ 1124.733390][ T478] usb 4-1: USB disconnect, device number 70 [ 1124.751364][ T5891] usb 3-1: config 4 has an invalid interface number: 195 but max is 2 [ 1124.774595][ T7597] bond0: (slave bond_slave_1): Releasing backup interface [ 1124.795506][ T5891] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.820236][ T7609] Invalid logical block size (-5) [ 1124.822430][ T5891] usb 3-1: config 4 has 2 interfaces, different from the descriptor's value: 3 [ 1124.842551][ T5891] usb 3-1: config 4 has no interface number 0 [ 1124.850841][ T5891] usb 3-1: config 4 has no interface number 1 [ 1124.872727][ T5891] usb 3-1: config 4 interface 47 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1124.900640][ T7597] team0: Port device team_slave_0 removed [ 1124.901456][ T5891] usb 3-1: config 4 interface 47 altsetting 9 endpoint 0xA has invalid wMaxPacketSize 0 [ 1124.954739][ T5891] usb 3-1: config 4 interface 47 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 1124.981263][ T7597] team0: Port device team_slave_1 removed [ 1124.987103][ T5891] usb 3-1: config 4 interface 195 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1125.016578][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.019068][ T5891] usb 3-1: config 4 interface 195 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1125.055916][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.056618][ T5891] usb 3-1: config 4 interface 47 has no altsetting 0 [ 1125.095759][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1125.099792][ T5891] usb 3-1: config 4 interface 195 has no altsetting 0 [ 1125.109430][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.125151][ T5891] usb 3-1: New USB device found, idVendor=4dc1, idProduct=952e, bcdDevice=df.6c [ 1125.163173][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.171860][ T5891] usb 3-1: Product: syz [ 1125.176130][ T5891] usb 3-1: Manufacturer: syz [ 1125.185688][ T5891] usb 3-1: SerialNumber: syz [ 1125.305638][ T7597] team0: Port device wlan1 removed [ 1125.335498][ T7597] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1125.349993][ T7597] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1125.368509][ T7597] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1125.379321][ T7597] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1125.434289][ T7597] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1125.461535][ T7597] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1125.476512][ T7597] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1125.493378][ T5891] usb 3-1: USB disconnect, device number 64 [ 1125.510643][ T7597] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1125.528176][ T7597] geneve5: left allmulticast mode [ 1126.021941][ T7627] sp0: Synchronizing with TNC [ 1126.105291][ T30] kauditd_printk_skb: 25595 callbacks suppressed [ 1126.105312][ T30] audit: type=1400 audit(1110.008:1998143): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1126.115824][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1126.144399][ T5193] audit: audit_lost=190846 audit_rate_limit=0 audit_backlog_limit=64 [ 1126.152589][ T5193] audit: backlog limit exceeded [ 1126.174331][ T30] audit: type=1400 audit(1110.008:1998144): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="virtual" dev="sysfs" ino=1369 [ 1126.180543][ T5835] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1126.197819][ T4191] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1126.200223][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1126.206584][ T4191] audit: audit_lost=190847 audit_rate_limit=0 audit_backlog_limit=64 [ 1126.212656][ C0] audit: audit_lost=190848 audit_rate_limit=0 audit_backlog_limit=64 [ 1127.330063][ T7658] program syz.5.15968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1127.421671][ T7664] netlink: 'syz.0.15970': attribute type 8 has an invalid length. [ 1131.304772][ T7780] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.16027'. [ 1131.463900][T31844] audit_log_start: 30177 callbacks suppressed [ 1131.463905][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1131.463921][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1131.463937][T31844] audit: audit_lost=194266 audit_rate_limit=0 audit_backlog_limit=64 [ 1131.470082][ T30] audit: type=1400 audit(1115.021:2018070): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sysfs" ino=1 [ 1131.470140][ T30] audit: type=1400 audit(1115.021:2018071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1131.470186][ T30] audit: type=1400 audit(1115.021:2018072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="virtual" dev="sysfs" ino=1369 [ 1131.470232][ T30] audit: type=1400 audit(1115.021:2018073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="block" dev="sysfs" ino=13134 [ 1131.470278][ T30] audit: type=1400 audit(1115.021:2018074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sda1" ino=2 [ 1131.470322][ T30] audit: type=1400 audit(1115.021:2018075): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sysfs" ino=1 [ 1131.516211][T31844] audit: backlog limit exceeded [ 1131.968486][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16034'. [ 1132.148198][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16035'. [ 1132.380486][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16038'. [ 1132.977231][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16045'. [ 1132.986442][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16045'. [ 1133.103655][ T7825] netlink: 47 bytes leftover after parsing attributes in process `syz.6.16048'. [ 1133.317370][ T672] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1133.500320][ T672] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 1133.523566][ T672] usb 6-1: config 0 has no interface number 0 [ 1133.560717][ T672] usb 6-1: config 0 interface 98 has no altsetting 0 [ 1133.609181][ T672] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1133.628615][ T672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.674555][ T672] usb 6-1: Product: syz [ 1133.704175][ T672] usb 6-1: Manufacturer: syz [ 1133.708864][ T672] usb 6-1: SerialNumber: syz [ 1133.729145][ T672] usb 6-1: config 0 descriptor?? [ 1133.998953][ T672] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1134.129556][ T7854] mkiss: ax0: crc mode is auto. [ 1134.418967][ T7861] sp0: Synchronizing with TNC [ 1134.438296][ T7861] sp0: Found TNC [ 1134.450814][ T7860] [U] ` [ 1134.474895][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16065'. [ 1134.749302][ T672] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 1135.200004][ T672] usb 6-1: failed to restore interface 98 altsetting 4 (error=-71) [ 1135.240338][ T672] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1135.259087][ T672] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1135.270462][ T3404] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1135.292651][ T3404] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1135.312896][ T672] usb 6-1: USB disconnect, device number 17 [ 1135.932379][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16084'. [ 1136.108748][ T7907] netlink: 'syz.6.16086': attribute type 10 has an invalid length. [ 1136.129624][ T7907] netlink: 152 bytes leftover after parsing attributes in process `syz.6.16086'. [ 1136.145375][ T7911] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1136.203713][ T7911] net_ratelimit: 66 callbacks suppressed [ 1136.203734][ T7911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1136.516827][ T7923] team0: Refused to change device type [ 1136.812691][ T30] kauditd_printk_skb: 30952 callbacks suppressed [ 1136.812712][ T30] audit: type=1400 audit(1120.026:2037446): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sda1" ino=2 [ 1136.820597][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1136.843885][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1136.843906][T31844] audit: audit_lost=198128 audit_rate_limit=0 audit_backlog_limit=64 [ 1136.843924][T31844] audit: backlog limit exceeded [ 1136.843947][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1136.843962][T31844] audit: audit_lost=198129 audit_rate_limit=0 audit_backlog_limit=64 [ 1136.843978][T31844] audit: backlog limit exceeded [ 1136.843999][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1136.844014][T31844] audit: audit_lost=198130 audit_rate_limit=0 audit_backlog_limit=64 [ 1138.254577][ T7983] gtp0: entered promiscuous mode [ 1138.278577][ T7983] gtp0: entered allmulticast mode [ 1138.447976][ T5926] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1138.621639][ T5926] usb 6-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 1138.621693][ T5926] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.621720][ T5926] usb 6-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1138.621750][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1138.621786][ T5926] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1138.621811][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.648681][ T5926] usb 6-1: config 0 descriptor?? [ 1138.924352][ T8001] netlink: 'syz.3.16130': attribute type 3 has an invalid length. [ 1138.924398][ T8001] netlink: 'syz.3.16130': attribute type 1 has an invalid length. [ 1138.924415][ T8001] __nla_validate_parse: 2 callbacks suppressed [ 1138.924428][ T8001] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.16130'. [ 1139.234204][ T5926] pantherlord 0003:0810:0001.003C: hidraw0: USB HID v8.00 Device [HID 0810:0001] on usb-dummy_hcd.5-1/input0 [ 1139.271238][ T5926] pantherlord 0003:0810:0001.003C: no output reports found [ 1139.428323][ T478] usb 6-1: USB disconnect, device number 18 [ 1139.611061][ T8008] fido_id[8008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1139.849573][ T8021] overlayfs: conflicting options: nfs_export=on,index=off [ 1141.114659][ T8064] sp0: Synchronizing with TNC [ 1142.168485][ T8100] nbd: must specify a device to reconfigure [ 1142.177158][T32587] audit_log_start: 28190 callbacks suppressed [ 1142.177177][T32587] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.177363][ T30] audit: type=1400 audit(1125.030:2056668): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31844 comm="udevd" name="udev" dev="tmpfs" ino=9 [ 1142.184746][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.191361][ T8102] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.213455][T32587] audit: audit_lost=201121 audit_rate_limit=0 audit_backlog_limit=64 [ 1142.227876][ T8101] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.232922][ T2915] audit: audit_lost=201122 audit_rate_limit=0 audit_backlog_limit=64 [ 1142.248255][T32587] audit: backlog limit exceeded [ 1142.253814][ T30] audit: type=1400 audit(1125.039:2056669): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31844 comm="udevd" name="data" dev="tmpfs" ino=14 [ 1142.259437][T32587] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.562084][ T8114] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 1142.562084][ T8114] [ 1142.606019][ T3133] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 1142.776544][ T8120] usb usb8: usbfs: process 8120 (syz.3.16188) did not claim interface 0 before use [ 1142.790476][ T3133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1142.810975][ T3133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.836727][ T3133] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1142.858145][ T3133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.887355][ T3133] usb 3-1: config 0 descriptor?? [ 1143.303553][ T8130] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1143.315501][ T8130] batman_adv: batadv0: Adding interface: gretap1 [ 1143.322011][ T8130] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.347555][ C0] vkms_vblank_simulate: vblank timer overrun [ 1143.354285][ T8130] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1143.366278][ T5905] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1143.382911][ T3133] steelseries 0003:1038:1410.003D: unknown main item tag 0x0 [ 1143.407763][ T3133] steelseries 0003:1038:1410.003D: unknown main item tag 0x0 [ 1143.418628][ T3133] steelseries 0003:1038:1410.003D: unknown main item tag 0x0 [ 1143.426163][ T3133] steelseries 0003:1038:1410.003D: unknown main item tag 0x0 [ 1143.447976][ T3133] steelseries 0003:1038:1410.003D: unknown main item tag 0x0 [ 1143.457535][ T3133] steelseries 0003:1038:1410.003D: unknown main item tag 0x0 [ 1143.465538][ T3133] steelseries 0003:1038:1410.003D: unknown main item tag 0x0 [ 1143.483517][ T3133] steelseries 0003:1038:1410.003D: missing HID_OUTPUT_REPORT 0 [ 1143.547400][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 1143.554899][ T5905] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1143.568266][ T5905] usb 6-1: config 0 has no interface number 0 [ 1143.574446][ T5905] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.593693][ T5905] usb 6-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.603940][ T5905] usb 6-1: config 0 interface 8 has no altsetting 0 [ 1143.610655][ T5905] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1143.619885][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.631774][ T5905] usb 6-1: config 0 descriptor?? [ 1143.649318][ T5891] usb 3-1: USB disconnect, device number 65 [ 1144.097775][ T5905] uclogic 0003:5543:0522.003E: item fetching failed at offset 2/5 [ 1144.135617][ T5905] uclogic 0003:5543:0522.003E: parse failed [ 1144.141708][ T5905] uclogic 0003:5543:0522.003E: probe with driver uclogic failed with error -22 [ 1144.331598][ T5905] usb 6-1: USB disconnect, device number 19 [ 1144.619020][ T8158] netlink: 'syz.3.16206': attribute type 4 has an invalid length. [ 1145.428697][ T5905] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1145.638999][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1145.695826][ T5905] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1145.715955][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.747126][ T5905] usb 3-1: config 0 descriptor?? [ 1146.193002][ T5891] kernel write not supported for file /input/event0 (pid: 5891 comm: kworker/1:4) [ 1146.243190][ T5905] glorious 0003:258A:0036.003F: unknown main item tag 0x1 [ 1146.286081][ T5905] glorious 0003:258A:0036.003F: reserved main item tag 0xd [ 1146.293480][ T5905] glorious 0003:258A:0036.003F: item fetching failed at offset 4/5 [ 1146.360281][ T5905] glorious 0003:258A:0036.003F: probe with driver glorious failed with error -22 [ 1146.463551][ T5905] usb 3-1: USB disconnect, device number 66 [ 1147.524702][ T30] kauditd_printk_skb: 29948 callbacks suppressed [ 1147.524729][ T30] audit: type=1400 audit(1130.053:2076214): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8240 comm="syz-executor" name="3336" dev="tmpfs" ino=16763 [ 1147.549981][ C0] vkms_vblank_simulate: vblank timer overrun [ 1147.563265][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1147.570212][ T8240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1147.570235][ T8240] audit: audit_lost=204592 audit_rate_limit=0 audit_backlog_limit=64 [ 1147.585094][ T5193] audit: audit_lost=204593 audit_rate_limit=0 audit_backlog_limit=64 [ 1147.585531][ T8242] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1147.593272][ T8240] audit: backlog limit exceeded [ 1147.593558][ T8240] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1147.612158][ T5193] audit: backlog limit exceeded [ 1147.617162][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1148.925797][ T3133] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1149.036856][ T8287] netlink: 'syz.3.16267': attribute type 1 has an invalid length. [ 1149.071304][ T8287] netlink: 'syz.3.16267': attribute type 2 has an invalid length. [ 1149.108159][ T3133] usb 6-1: Using ep0 maxpacket: 8 [ 1149.134088][ T3133] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.155537][ T3133] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.219997][ T3133] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1149.238608][ T3133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1149.269470][ T3133] usb 6-1: SerialNumber: syz [ 1149.292707][ T8294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16272'. [ 1149.303582][ T3133] cdc_acm 6-1:1.0: skipping garbage [ 1149.308877][ T3133] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1149.383245][ T3133] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 1149.396441][ T3133] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1149.547706][ T3133] usb 6-1: USB disconnect, device number 20 [ 1149.820410][ T8310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1151.490467][ T3133] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1151.693903][ T3133] usb 3-1: Using ep0 maxpacket: 8 [ 1151.702263][ T3133] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1151.723060][ T3133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.769640][ T3133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.791314][ T3133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1151.819947][ T3133] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1151.843571][ T3133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.870433][ T3133] usb 3-1: config 0 descriptor?? [ 1152.366116][ T3133] hid (null): report_id 0 is invalid [ 1152.421552][ T3133] redragon 0003:0C45:760B.0040: report_id 0 is invalid [ 1152.428567][ T3133] redragon 0003:0C45:760B.0040: item 0 1 1 8 parsing failed [ 1152.478638][ T3133] redragon 0003:0C45:760B.0040: probe with driver redragon failed with error -22 [ 1152.616580][ T5891] usb 3-1: USB disconnect, device number 67 [ 1152.644233][ T5926] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1152.723622][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16310'. [ 1152.839876][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1152.867486][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1152.880082][ T30] kauditd_printk_skb: 43027 callbacks suppressed [ 1152.880100][ T30] audit: type=1400 audit(1135.057:2099308): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=31844 comm="udevd" path="/run/udev/data" dev="tmpfs" ino=14 [ 1152.891613][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1152.919424][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1152.921069][ T5926] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1152.935705][ T5823] audit: audit_lost=211239 audit_rate_limit=0 audit_backlog_limit=64 [ 1152.935729][ T5823] audit: backlog limit exceeded [ 1152.935767][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1152.935780][ T5823] audit: audit_lost=211240 audit_rate_limit=0 audit_backlog_limit=64 [ 1152.935796][ T5823] audit: backlog limit exceeded [ 1152.935821][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1152.935835][ T5823] audit: audit_lost=211241 audit_rate_limit=0 audit_backlog_limit=64 [ 1152.935851][ T5823] audit: backlog limit exceeded [ 1152.990638][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.019901][ T5926] usb 6-1: config 0 descriptor?? [ 1153.036872][ T8365] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1153.490567][ T5926] aureal 0003:0755:2626.0041: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 1153.528907][ T5926] aureal 0003:0755:2626.0041: unknown main item tag 0x6 [ 1153.555848][ T5926] aureal 0003:0755:2626.0041: report_id 29495 is invalid [ 1153.567787][ T5926] aureal 0003:0755:2626.0041: item 0 2 1 8 parsing failed [ 1153.578180][ T5926] aureal 0003:0755:2626.0041: probe with driver aureal failed with error -22 [ 1153.766597][ T3133] usb 6-1: USB disconnect, device number 21 [ 1155.995108][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16348'. [ 1156.876030][ T8477] delete_channel: no stack [ 1156.895869][ T8476] delete_channel: no stack [ 1157.711594][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16371'. [ 1157.760201][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16371'. [ 1158.059986][ T8502] ALSA: seq fatal error: cannot create timer (-22) [ 1158.235858][ T30] kauditd_printk_skb: 51284 callbacks suppressed [ 1158.235878][ T30] audit: type=1400 audit(1140.062:2125267): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=5823 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 [ 1158.237704][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1158.242829][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1158.262457][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1158.268540][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1158.287518][ C0] audit: audit_lost=219684 audit_rate_limit=0 audit_backlog_limit=64 [ 1158.295661][ C0] audit: backlog limit exceeded [ 1158.302597][ T30] audit: type=1400 audit(1140.062:2125268): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5823 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1158.323020][ T5823] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1158.329694][ T5823] audit: audit_lost=219685 audit_rate_limit=0 audit_backlog_limit=64 [ 1158.830080][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16383'. [ 1159.689873][ T3133] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 1159.876268][ T3133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1159.911840][ T3133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.967366][ T3133] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1159.997255][ T3133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.053655][ T3133] usb 3-1: config 0 descriptor?? [ 1160.528816][ T3133] lenovo 0003:17EF:6047.0042: unknown main item tag 0x0 [ 1160.570825][ T3133] lenovo 0003:17EF:6047.0042: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 1160.747421][ T5905] usb 3-1: USB disconnect, device number 68 [ 1161.098349][ T8561] fido_id[8561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1162.195351][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16411'. [ 1162.201618][ T8585] gfs2: path_lookup on c:::!(>yo=O-FmSH_Y8yu [ 1162.201618][ T8585] FãzR #xI6BYCg)'!A{g [ 1162.201618][ T8585] }m]x%{qm*PN~%U5JhBoGhN].L.`$ returned error -2 [ 1162.215382][ T8583] netlink: 84 bytes leftover after parsing attributes in process `syz.5.16411'. [ 1162.274984][ T8583] vlan1: entered allmulticast mode [ 1162.288866][ T8583] veth0_vlan: entered allmulticast mode [ 1162.844309][ T3133] IPVS: starting estimator thread 0... [ 1162.972080][ T8596] IPVS: using max 26 ests per chain, 62400 per kthread [ 1163.592389][ T30] kauditd_printk_skb: 50745 callbacks suppressed [ 1163.592408][ T30] audit: type=1400 audit(1145.075:2149557): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5823 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 [ 1163.604485][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1163.624920][ T5823] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1163.632279][T31844] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1163.640510][ T8616] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1163.644257][T31844] audit: audit_lost=228506 audit_rate_limit=0 audit_backlog_limit=64 [ 1163.648829][ T8615] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1163.660848][T31844] audit: backlog limit exceeded [ 1163.663247][ T5823] audit: audit_lost=228507 audit_rate_limit=0 audit_backlog_limit=64 [ 1163.669888][ T5193] audit: audit_lost=228508 audit_rate_limit=0 audit_backlog_limit=64 [ 1164.204661][ T8629] netlink: 'syz.5.16431': attribute type 10 has an invalid length. [ 1164.257515][ T8629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.265362][ T8629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.282663][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16431'. [ 1164.376527][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.383987][ T8629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.391592][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.398880][ T8629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.476163][ T8629] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1164.517899][ T8631] bridge_slave_1: left allmulticast mode [ 1164.583977][ T8631] bridge_slave_1: left promiscuous mode [ 1164.609560][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.623739][ T8631] bridge_slave_0: left allmulticast mode [ 1164.652227][ T8631] bridge_slave_0: left promiscuous mode [ 1164.674450][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.772591][ T8631] bond0: (slave bridge0): Releasing backup interface [ 1166.266174][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16449'. [ 1166.291239][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16449'. [ 1166.382420][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16450'. [ 1167.141678][ T8681] netlink: 'syz.2.16457': attribute type 1 has an invalid length. [ 1167.863373][ T7268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1167.865864][ T7268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1167.867356][ T7268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1167.869457][ T7268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1167.870153][ T7268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1168.086533][ T8701] binder_alloc: binder_alloc_mmap_handler: 8700 2000003d8000-2000003d9000 already mapped failed -16 [ 1168.253310][ T8703] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16467'. [ 1168.518044][ T8710] binder: 8709:8710 ioctl c018620c 200000000000 returned -22 [ 1168.948119][ T30] kauditd_printk_skb: 40279 callbacks suppressed [ 1168.948140][ T30] audit: type=1400 audit(1150.070:2171490): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5193 comm="udevd" name="/" dev="sda1" ino=2 [ 1168.974318][ T8724] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1168.997878][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1169.004716][ C0] audit: audit_lost=234616 audit_rate_limit=0 audit_backlog_limit=64 [ 1169.005877][ T5193] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1169.012881][ C0] audit: backlog limit exceeded [ 1169.013713][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1169.013733][ C0] audit: audit_lost=234617 audit_rate_limit=0 audit_backlog_limit=64 [ 1169.013752][ C0] audit: backlog limit exceeded [ 1169.018466][ T5827] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1169.518195][ T8697] chnl_net:caif_netlink_parms(): no params data found [ 1169.697039][ T5905] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1169.779149][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.822701][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.840458][ T8697] bridge_slave_0: entered allmulticast mode [ 1169.857370][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 1169.875146][ T8697] bridge_slave_0: entered promiscuous mode [ 1169.884344][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.904922][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.914732][ T5905] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1169.927919][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.938088][ T8697] bridge_slave_1: entered allmulticast mode [ 1169.948903][ T5905] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1169.963660][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1169.972952][ T5905] usb 6-1: Product: syz [ 1169.977811][ T5905] usb 6-1: Manufacturer: syz [ 1169.983716][ T8697] bridge_slave_1: entered promiscuous mode [ 1169.990535][ T5905] usb 6-1: SerialNumber: syz [ 1170.038293][ T5905] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input111 [ 1170.081489][ T8541] Bluetooth: hci0: command tx timeout [ 1170.264770][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.301541][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.361715][ T5905] usb 6-1: USB disconnect, device number 22 [ 1170.482761][ T5905] appletouch 6-1:1.0: input: appletouch disconnected [ 1170.656626][ T8697] team0: Port device team_slave_0 added [ 1170.698958][ T8697] team0: Port device team_slave_1 added [ 1170.801357][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1170.809441][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.837285][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1170.850108][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.858145][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1170.911141][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.150760][ T8697] hsr_slave_0: entered promiscuous mode [ 1171.162492][ T8697] hsr_slave_1: entered promiscuous mode [ 1171.168988][ T8697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1171.195930][ T8697] Cannot create hsr debugfs directory [ 1171.546250][ T5905] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1171.632984][ T8697] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1171.657300][ T8697] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1171.668203][ T8697] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1171.682389][ T8697] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1171.717460][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 1171.726932][ T5905] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1171.752639][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1171.759363][ T5905] usb 6-1: New USB device found, idVendor=0b05, idProduct=1869, bcdDevice= 0.00 [ 1171.777797][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.798726][ T5905] usb 6-1: config 0 descriptor?? [ 1171.918706][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1171.954308][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.979195][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.986460][ T5442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.004387][T14833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.011605][T14833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.209132][ T3133] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1172.265268][ T5905] asus 0003:0B05:1869.0043: unbalanced delimiter at end of report description [ 1172.285394][ T5905] asus 0003:0B05:1869.0043: Asus hid parse failed: -22 [ 1172.292877][ T5905] asus 0003:0B05:1869.0043: probe with driver asus failed with error -22 [ 1172.305463][ T8541] Bluetooth: hci0: command tx timeout [ 1172.372731][ T3133] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1172.386921][ T3133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.399666][ T3133] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1172.409824][ T3133] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1172.418496][ T3133] usb 3-1: Manufacturer: syz [ 1172.427445][ T3133] usb 3-1: config 0 descriptor?? [ 1172.459917][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.499168][ T5905] usb 6-1: USB disconnect, device number 23 [ 1172.594285][ T3133] rc_core: IR keymap rc-hauppauge not found [ 1172.606660][ T3133] Registered IR keymap rc-empty [ 1172.613073][ T3133] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1172.633791][ T3133] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input112 [ 1172.889581][ C0] igorplugusb 3-1:0.0: receive overflow, at least 31 lost [ 1173.134719][ T3133] usb 3-1: USB disconnect, device number 69 [ 1173.284458][ T8697] veth0_vlan: entered promiscuous mode [ 1173.309004][ T8697] veth1_vlan: entered promiscuous mode [ 1173.404535][ T8697] veth0_macvtap: entered promiscuous mode [ 1173.432558][ T8697] veth1_macvtap: entered promiscuous mode [ 1173.457840][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.478775][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.529451][ T8697] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.557792][ T8697] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.572151][ T8697] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.582692][ T8697] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.781194][T28353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.811870][T28353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.921415][T14833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.938808][T14833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.305254][ T30] kauditd_printk_skb: 29566 callbacks suppressed [ 1174.305274][ T30] audit: type=1400 audit(1155.093:2190093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="3511" dev="tmpfs" ino=17664 [ 1174.332107][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1174.334593][ T8819] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1174.339268][ T5193] audit: audit_lost=238282 audit_rate_limit=0 audit_backlog_limit=64 [ 1174.355106][ T8820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1174.366044][ T8819] audit: audit_lost=238283 audit_rate_limit=0 audit_backlog_limit=64 [ 1174.369867][ T30] audit: type=1400 audit(1155.093:2190094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5827 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1174.393095][ T8820] audit: audit_lost=238284 audit_rate_limit=0 audit_backlog_limit=64 [ 1174.393116][ T8820] audit: backlog limit exceeded [ 1174.393247][ T8820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1174.409483][ T8821] fuse: Invalid rootmode [ 1174.528989][ T8541] Bluetooth: hci0: command tx timeout [ 1174.614375][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1174.753484][ T8831] netlink: 'syz.6.16517': attribute type 2 has an invalid length. [ 1174.933064][ T8834] ubi: mtd0 is already attached to ubi31 [ 1175.566235][ T8851] netlink: 'syz.5.16526': attribute type 2 has an invalid length. [ 1175.625499][ T8851] netlink: 244 bytes leftover after parsing attributes in process `syz.5.16526'. [ 1176.143263][ T3133] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1176.316519][ T3133] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1176.353411][ T3133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1176.389944][ T3133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1176.442248][ T3133] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1176.470805][ T3133] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1176.481381][ T3133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.493344][ T3133] usb 6-1: config 0 descriptor?? [ 1176.512475][ T8858] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1176.752490][ T8541] Bluetooth: hci0: command tx timeout [ 1176.989373][ T3133] plantronics 0003:047F:FFFF.0044: reserved main item tag 0xd [ 1177.031523][ T3133] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1177.045854][ T3133] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1177.058822][ T3133] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1177.078095][ T3133] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1177.096840][ T3133] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 1177.118198][ T3133] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 1177.143596][ T3133] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1177.246771][ T3133] usb 6-1: USB disconnect, device number 24 [ 1177.467946][ T8893] fido_id[8893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1177.514901][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16549'. [ 1178.052084][ T8912] tipc: Started in network mode [ 1178.073532][ T8912] tipc: Node identity @, cluster identity 1024 [ 1178.096998][ T8912] tipc: Enabling of bearer rejected, failed to enable media [ 1178.344098][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16559'. [ 1178.865890][ T8934] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1178.878228][ T8932] IPVS: stopping backup sync thread 8934 ... [ 1178.966403][ T7268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1178.980086][ T7268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1178.990959][ T7268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1179.010165][ T7268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1179.025427][ T7268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1179.191748][ T8944] netlink: 'syz.2.16569': attribute type 8 has an invalid length. [ 1179.555487][ T8954] netlink: 'syz.7.16574': attribute type 7 has an invalid length. [ 1179.564769][ T8954] netlink: 'syz.7.16574': attribute type 8 has an invalid length. [ 1179.599794][ T8954] netlink: 224 bytes leftover after parsing attributes in process `syz.7.16574'. [ 1179.663561][ T30] kauditd_printk_skb: 35206 callbacks suppressed [ 1179.663581][ T30] audit: type=1400 audit(1160.098:2210387): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=31844 comm="udevd" name="devices" dev="sysfs" ino=7 [ 1179.680590][T31844] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1179.689432][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1179.697706][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1179.708986][ C0] audit: audit_lost=243256 audit_rate_limit=0 audit_backlog_limit=64 [ 1179.714424][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1179.717127][ C0] audit: backlog limit exceeded [ 1179.723604][ T5193] audit: audit_lost=243257 audit_rate_limit=0 audit_backlog_limit=64 [ 1179.729266][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1179.729300][ C0] audit: audit_lost=243258 audit_rate_limit=0 audit_backlog_limit=64 [ 1179.815045][ T8956] sp0: Synchronizing with TNC [ 1180.864998][ T8938] chnl_net:caif_netlink_parms(): no params data found [ 1181.001513][ T8996] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16593'. [ 1181.048785][ T8996] netem: unknown loss type 12 [ 1181.074266][ T8996] netem: change failed [ 1181.285685][ T7268] Bluetooth: hci2: command tx timeout [ 1181.621736][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.651173][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.695035][ T8938] bridge_slave_0: entered allmulticast mode [ 1181.714161][ T8938] bridge_slave_0: entered promiscuous mode [ 1181.724752][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.732037][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.739740][ T8938] bridge_slave_1: entered allmulticast mode [ 1181.747720][ T8938] bridge_slave_1: entered promiscuous mode [ 1181.887778][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.934961][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.083359][ T8938] team0: Port device team_slave_0 added [ 1182.106826][ T8938] team0: Port device team_slave_1 added [ 1182.349257][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.370465][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.467800][ T8938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.522373][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.533981][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.559933][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.678803][ T8938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.173118][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16621'. [ 1183.281062][ T8938] hsr_slave_0: entered promiscuous mode [ 1183.313769][ T8938] hsr_slave_1: entered promiscuous mode [ 1183.341618][ T8938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.368158][ T8938] Cannot create hsr debugfs directory [ 1183.510158][ T7268] Bluetooth: hci2: command tx timeout [ 1184.232741][ T8938] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1184.246225][ T9089] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1184.270453][ T5891] kernel write not supported for file task/81/attr/keycreate (pid: 5891 comm: kworker/1:4) [ 1184.298261][ T8938] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1184.349813][ T8938] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1184.383476][ T8938] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1184.702221][ T8938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.774126][ T8938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.818295][T14843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.825546][T14843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.830384][ T9103] netlink: 32 bytes leftover after parsing attributes in process `syz.7.16639'. [ 1184.937115][T14843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.944748][T14843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.017321][ T30] kauditd_printk_skb: 32226 callbacks suppressed [ 1185.017341][ T30] audit: type=1400 audit(1165.111:2228463): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=8697 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1185.025546][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.046563][T32587] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.049967][T31843] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.050000][T31843] audit: audit_lost=247976 audit_rate_limit=0 audit_backlog_limit=64 [ 1185.050017][T31843] audit: backlog limit exceeded [ 1185.050044][T31843] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1185.073778][ T8697] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1185.076924][T31844] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1185.085355][T31873] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1185.732897][ T7268] Bluetooth: hci2: command tx timeout [ 1186.245138][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.963451][ T9144] aaaaaaaaa: renamed from lo (while UP) [ 1187.505266][ T9161] pimreg: entered allmulticast mode [ 1187.567978][ T9161] pimreg: left allmulticast mode [ 1187.948295][ T8938] veth0_vlan: entered promiscuous mode [ 1187.965597][ T7268] Bluetooth: hci2: command tx timeout [ 1187.981011][ T8938] veth1_vlan: entered promiscuous mode [ 1188.101491][ T9173] usb usb8: usbfs: process 9173 (syz.5.16668) did not claim interface 0 before use [ 1188.167977][ T8938] veth0_macvtap: entered promiscuous mode [ 1188.227479][ T8938] veth1_macvtap: entered promiscuous mode [ 1188.328151][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.401304][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.468495][ T8938] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.501885][ T8938] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.510728][ T8938] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.561163][ T8938] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.921615][ T9196] program syz.5.16677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1189.017479][T14843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.046426][T14843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.145368][ T5442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.168030][ T5442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.200010][ T9201] vimc link validate: Scaler:src:4096x1764 (0x33424752, 4, 0, 3, 2) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1189.584574][ T9208] Bluetooth: MGMT ver 1.23 [ 1189.648186][ T478] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1189.796893][ T9213] hsr0: entered promiscuous mode [ 1189.802682][ T9211] hsr0: left promiscuous mode [ 1189.871865][ T478] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1189.881381][ T478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.889440][ T478] usb 3-1: Product: syz [ 1189.925222][ T478] usb 3-1: Manufacturer: syz [ 1189.929917][ T478] usb 3-1: SerialNumber: syz [ 1189.961549][ T478] usb 3-1: config 0 descriptor?? [ 1189.990969][ T478] ch341 3-1:0.0: ch341-uart converter detected [ 1190.383119][ T30] kauditd_printk_skb: 44014 callbacks suppressed [ 1190.383140][ T30] audit: type=1400 audit(1170.125:2250885): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5193 comm="udevd" name="loop8" dev="sysfs" ino=15852 [ 1190.415699][ T8938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1190.422348][ T8938] audit: audit_lost=255177 audit_rate_limit=0 audit_backlog_limit=64 [ 1190.427167][T31873] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1190.438465][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1190.438843][ T5193] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1190.445009][ C0] audit: audit_lost=255178 audit_rate_limit=0 audit_backlog_limit=64 [ 1190.445030][ C0] audit: backlog limit exceeded [ 1190.445553][ C0] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1190.452901][ T9206] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1190.753015][ T478] usb 3-1: failed to send control message: -71 [ 1190.763413][ T478] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1190.782137][ T478] usb 3-1: USB disconnect, device number 70 [ 1190.799649][ T478] ch341 3-1:0.0: device disconnected [ 1190.980827][ T9234] netlink: 87 bytes leftover after parsing attributes in process `syz.8.16695'. [ 1192.262831][ T9263] netlink: 60 bytes leftover after parsing attributes in process `syz.7.16708'. [ 1192.288941][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16708'. [ 1192.299130][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16708'. [ 1192.749442][ T9277] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16716'. [ 1193.687210][ T7268] Bluetooth: hci2: command tx timeout [ 1194.341215][ T9321] IPVS: Unknown mcast interface: pimreg1 [ 1194.583212][ T9327] sp0: Synchronizing with TNC [ 1195.739696][ T30] kauditd_printk_skb: 31426 callbacks suppressed [ 1195.739718][ T30] audit: type=1400 audit(1175.139:2271448): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5193 comm="udevd" path="/sys/devices/virtual/block/loop6" dev="sysfs" ino=15612 [ 1195.775103][ T5193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1195.781725][ T5193] audit: audit_lost=258801 audit_rate_limit=0 audit_backlog_limit=64 [ 1195.791101][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1195.791732][ T8938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1195.804940][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1195.811515][ C0] audit: audit_lost=258802 audit_rate_limit=0 audit_backlog_limit=64 [ 1195.819762][ C0] audit: backlog limit exceeded [ 1195.825250][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1195.825577][ T31] INFO: task kworker/u8:11:14835 blocked for more than 143 seconds. SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 1195.831786][ C0] audit: audit_lost=258803 audit_rate_limit=0 audit_backlog_limit=64 [ 1195.953679][ T31] Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 [ 1195.961427][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1196.027798][ T31] task:kworker/u8:11 state:D stack:21160 pid:14835 tgid:14835 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1196.093309][ T31] Workqueue: ib-unreg-wq ib_unregister_work [ 1196.099321][ T31] Call Trace: [ 1196.145723][ T31] [ 1196.148757][ T31] __schedule+0x16a2/0x4cb0 [ 1196.153446][ T31] ? schedule+0x165/0x360 [ 1196.179972][ T31] ? __lock_acquire+0xab9/0xd20 [ 1196.184924][ T31] ? __pfx___schedule+0x10/0x10 [ 1196.209565][ T31] ? schedule+0x91/0x360 [ 1196.213916][ T31] schedule+0x165/0x360 [ 1196.218096][ T31] schedule_timeout+0x9a/0x270 [ 1196.223463][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1196.229383][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1196.235097][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.240381][ T31] ? wait_for_completion+0x267/0x5d0 [ 1196.246326][ T31] wait_for_completion+0x2bf/0x5d0 [ 1196.251646][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1196.257915][ T31] ? up_write+0x1c4/0x420 [ 1196.262335][ T31] ? remove_client_context+0xc0/0x1e0 [ 1196.268405][ T31] disable_device+0x1c6/0x320 [ 1196.274295][ T31] ? __pfx_disable_device+0x10/0x10 [ 1196.279616][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 1196.285504][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1196.290868][ T31] ib_unregister_work+0x19/0x30 [ 1196.296212][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1196.301995][ T31] process_scheduled_works+0xade/0x17b0 [ 1196.308076][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1196.314175][ T31] worker_thread+0x8a0/0xda0 [ 1196.319274][ T31] kthread+0x70e/0x8a0 [ 1196.323406][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1196.329046][ T31] ? __pfx_kthread+0x10/0x10 [ 1196.333726][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1196.339437][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.344706][ T31] ? __pfx_kthread+0x10/0x10 [ 1196.349833][ T31] ret_from_fork+0x3f9/0x770 [ 1196.354840][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1196.360457][ T31] ? __switch_to_asm+0x39/0x70 [ 1196.365273][ T31] ? __switch_to_asm+0x33/0x70 [ 1196.370703][ T31] ? __pfx_kthread+0x10/0x10 [ 1196.375353][ T31] ret_from_fork_asm+0x1a/0x30 [ 1196.381838][ T31] [ 1196.466584][ T31] [ 1196.466584][ T31] Showing all locks held in the system: [ 1196.531975][ T31] 1 lock held by khungtaskd/31: [ 1196.536970][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1196.637399][ T31] 3 locks held by kworker/1:2/3404: [ 1196.642698][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1196.691347][T14841] unregister_netdevice: waiting for wg1 to become free. Usage count = 3 [ 1196.700046][T14841] ref_tracker: wg1@ffff88807bbb8610 has 1/1 users at [ 1196.700046][T14841] ib_device_set_netdev+0x31f/0x6d0 [ 1196.700046][T14841] siw_newlink+0x405/0xd70 [ 1196.700046][T14841] nldev_newlink+0x4a2/0x5a0 [ 1196.700046][T14841] rdma_nl_rcv+0x6ab/0x980 [ 1196.700046][T14841] netlink_unicast+0x758/0x8d0 [ 1196.700046][T14841] netlink_sendmsg+0x805/0xb30 [ 1196.700046][T14841] __sock_sendmsg+0x21c/0x270 [ 1196.700046][T14841] ____sys_sendmsg+0x505/0x830 [ 1196.700046][T14841] ___sys_sendmsg+0x21f/0x2a0 [ 1196.700046][T14841] __x64_sys_sendmsg+0x19b/0x260 [ 1196.700046][T14841] do_syscall_64+0xfa/0x3b0 [ 1196.700046][T14841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.700046][T14841] [ 1196.711987][ T31] #1: [ 1196.769434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1197.066374][ T31] ffffc9000baf7bc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.130254][ T31] #2: ffffffff8dfe4450 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xff/0x210 [ 1197.203837][ T31] 1 lock held by udevd/5193: [ 1197.208550][ T31] 2 locks held by getty/5582: [ 1197.213281][ T31] #0: ffff8880353fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1197.332127][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1197.342379][ T31] 1 lock held by syz-executor/5827: [ 1197.407772][ T31] 2 locks held by kworker/0:5/5905: [ 1197.413136][ T31] 4 locks held by kworker/1:6/5926: [ 1197.450041][ T31] 3 locks held by kworker/u8:11/14835: [ 1197.455881][ T31] #0: ffff888022a95148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.513994][ T31] #1: ffffc9001ba3fbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.548277][ T31] #2: ffff8880564b06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1197.574504][ T31] 4 locks held by kworker/u8:13/14841: [ 1197.587348][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1197.616472][ T31] #1: ffffc9001ba8fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1197.639612][ T31] #2: ffffffff8f4f1410 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1197.658984][ T31] #3: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1197.691848][ T31] 1 lock held by syz-executor/2915: [ 1197.700745][ T31] #0: ffffffff8f4fe008 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1197.749020][ T31] 1 lock held by syz.6.15114/5761: [ 1197.766769][ T31] #0: ffffffff8f4fe008 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1197.820941][ T31] 2 locks held by syz.3.16410/8581: [ 1197.845265][ T31] #0: ffffffff8f4f1410 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1197.871886][ T31] #1: ffff8880564b06d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 1197.909639][ T31] 5 locks held by syz-executor/8938: [ 1197.915877][ T31] #0: ffff888052164d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1197.953801][ T31] #1: ffff888052164078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1198.005802][ T31] #2: ffffffff8f666068 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1198.015969][ T31] #3: ffff888029ef4b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1198.066315][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1198.088201][ T31] 3 locks held by syz.7.16736/9320: [ 1198.093531][ T31] #0: ffff8880285b0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1198.116012][ T31] #1: ffff8880285b0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1198.128937][ T31] #2: ffffffff8f666068 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1198.207198][ T31] [ 1198.212743][ T31] ============================================= [ 1198.212743][ T31] [ 1198.234384][ T5827] team0: Port device syz_tun removed [ 1198.251347][ T31] NMI backtrace for cpu 0 [ 1198.251372][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1198.251397][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.251410][ T31] Call Trace: [ 1198.251419][ T31] [ 1198.251429][ T31] dump_stack_lvl+0x189/0x250 [ 1198.251464][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1198.251490][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1198.251522][ T31] ? __pfx__printk+0x10/0x10 [ 1198.251557][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1198.251588][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1198.251612][ T31] ? _printk+0xcf/0x120 [ 1198.251639][ T31] ? __pfx__printk+0x10/0x10 [ 1198.251663][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1198.251693][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1198.251724][ T31] watchdog+0xfee/0x1030 [ 1198.251760][ T31] ? watchdog+0x1de/0x1030 [ 1198.251796][ T31] kthread+0x70e/0x8a0 [ 1198.251822][ T31] ? __pfx_watchdog+0x10/0x10 [ 1198.251848][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.251872][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1198.251901][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1198.251930][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.251953][ T31] ret_from_fork+0x3f9/0x770 [ 1198.251985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1198.252021][ T31] ? __switch_to_asm+0x39/0x70 [ 1198.252040][ T31] ? __switch_to_asm+0x33/0x70 [ 1198.252059][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.252082][ T31] ret_from_fork_asm+0x1a/0x30 [ 1198.252120][ T31] [ 1198.404216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.411257][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1198.417601][ C1] NMI backtrace for cpu 1 [ 1198.417619][ C1] CPU: 1 UID: 0 PID: 31844 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1198.417643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.417655][ C1] RIP: 0010:trace_irq_enable+0x11/0x110 [ 1198.417683][ C1] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 53 66 90 65 8b 05 e8 c9 d1 10 83 f8 08 73 3c <89> c3 c1 e8 06 48 8d 3c c5 f0 e3 9f 8f be 08 00 00 00 e8 a8 ca 59 [ 1198.417700][ C1] RSP: 0018:ffffc9000396f700 EFLAGS: 00000097 [ 1198.417718][ C1] RAX: 0000000000000001 RBX: ffffffff85432755 RCX: ffff88802dcada00 [ 1198.417732][ C1] RDX: 0000000000000000 RSI: ffffffff8db5a486 RDI: ffffffff85432a8e [ 1198.417746][ C1] RBP: ffffc9000396f898 R08: 0000000000000000 R09: ffffffff85432755 [ 1198.417759][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fc7f R12: dffffc0000000000 [ 1198.417774][ C1] R13: 0000000000000017 R14: ffff8880b8736070 R15: 0000000000000200 [ 1198.417787][ C1] FS: 00007efd8296b880(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 1198.417804][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1198.417818][ C1] CR2: 0000562954963478 CR3: 0000000031310000 CR4: 00000000003526f0 [ 1198.417834][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1198.417846][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1198.417858][ C1] Call Trace: [ 1198.417866][ C1] [ 1198.417874][ C1] ? get_random_u32+0x155/0x940 [ 1198.417895][ C1] trace_hardirqs_on+0x18/0x40 [ 1198.417916][ C1] get_random_u32+0x48e/0x940 [ 1198.417941][ C1] ? __pfx_get_random_u32+0x10/0x10 [ 1198.417960][ C1] ? inode_set_ctime_current+0x740/0xb40 [ 1198.417993][ C1] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1198.418024][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1198.418043][ C1] ? from_vfsgid+0x72/0xa0 [ 1198.418067][ C1] shmem_get_inode+0x3ce/0xe90 [ 1198.418097][ C1] shmem_mknod+0x18c/0x3e0 [ 1198.418125][ C1] ? __pfx_shmem_create+0x10/0x10 [ 1198.418150][ C1] path_openat+0x14f1/0x3830 [ 1198.418168][ C1] ? arch_stack_walk+0xfc/0x150 [ 1198.418216][ C1] ? __pfx_path_openat+0x10/0x10 [ 1198.418233][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.418265][ C1] do_filp_open+0x1fa/0x410 [ 1198.418282][ C1] ? __lock_acquire+0xab9/0xd20 [ 1198.418307][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 1198.418340][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1198.418364][ C1] ? alloc_fd+0x64c/0x6c0 [ 1198.418394][ C1] do_sys_openat2+0x121/0x1c0 [ 1198.418424][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1198.418467][ C1] __x64_sys_openat+0x138/0x170 [ 1198.418500][ C1] do_syscall_64+0xfa/0x3b0 [ 1198.418530][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.418547][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1198.418567][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1198.418588][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.418618][ C1] RIP: 0033:0x7efd822a7407 [ 1198.418633][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1198.418649][ C1] RSP: 002b:00007ffe69f23450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1198.418667][ C1] RAX: ffffffffffffffda RBX: 00007efd8296b880 RCX: 00007efd822a7407 [ 1198.418681][ C1] RDX: 0000000000080241 RSI: 00007ffe69f239b0 RDI: ffffffffffffff9c [ 1198.418694][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1198.418705][ C1] R10: 00000000000001b6 R11: 0000000000000202 R12: 0000562945fc3dfc [ 1198.418718][ C1] R13: 0000562945fc3dfc R14: 0000000000000001 R15: 0000562945fde140 [ 1198.418741][ C1] [ 1198.782773][ C0] vkms_vblank_simulate: vblank timer overrun [ 1198.793021][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1198.799931][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1198.811769][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1198.821863][ T31] Call Trace: [ 1198.825176][ T31] [ 1198.828141][ T31] dump_stack_lvl+0x99/0x250 [ 1198.832785][ T31] ? __asan_memcpy+0x40/0x70 [ 1198.837420][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1198.842667][ T31] ? __pfx__printk+0x10/0x10 [ 1198.847315][ T31] panic+0x2db/0x790 [ 1198.851436][ T31] ? __pfx_panic+0x10/0x10 [ 1198.855899][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1198.861756][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1198.867205][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1198.873413][ T31] watchdog+0x102d/0x1030 [ 1198.877789][ T31] ? watchdog+0x1de/0x1030 [ 1198.882268][ T31] kthread+0x70e/0x8a0 [ 1198.886377][ T31] ? __pfx_watchdog+0x10/0x10 [ 1198.891096][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.895723][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1198.900965][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1198.906208][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.910832][ T31] ret_from_fork+0x3f9/0x770 [ 1198.915462][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1198.920620][ T31] ? __switch_to_asm+0x39/0x70 [ 1198.925473][ T31] ? __switch_to_asm+0x33/0x70 [ 1198.930283][ T31] ? __pfx_kthread+0x10/0x10 [ 1198.934915][ T31] ret_from_fork_asm+0x1a/0x30 [ 1198.939730][ T31] [ 1198.943152][ T31] Kernel Offset: disabled [ 1198.947497][ T31] Rebooting in 86400 seconds..