last executing test programs: 6m38.695603493s ago: executing program 4 (id=8475): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 6m38.611002355s ago: executing program 4 (id=8478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd2b, 0x25dfd9fe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 6m38.518942069s ago: executing program 4 (id=8479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000100)='4', 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x3ff, 0x4) 6m38.371581701s ago: executing program 4 (id=8483): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 6m38.177440339s ago: executing program 4 (id=8487): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)="81c6", 0x2}], 0x2}, 0x4000040) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) 6m37.67934605s ago: executing program 4 (id=8494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x30, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6m37.324247321s ago: executing program 32 (id=8494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x30, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m34.669145232s ago: executing program 3 (id=10831): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 4m34.509039729s ago: executing program 3 (id=10834): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000000000)='4', 0x1}], 0x2) 4m33.76479478s ago: executing program 3 (id=10848): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) unshare(0x400) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000540)="3d438cfb9166", 0x6}], 0x1, 0x2, 0x101) 4m33.685909308s ago: executing program 3 (id=10850): r0 = syz_clone(0x1080000, 0x0, 0xfffffe81, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x14, 0x0) 4m33.50451862s ago: executing program 3 (id=10852): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m33.358403171s ago: executing program 3 (id=10855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 4m17.217787003s ago: executing program 33 (id=10855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 3.351435388s ago: executing program 0 (id=15145): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x5, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 2.983925243s ago: executing program 0 (id=15152): syz_usb_connect$uac1(0x6, 0xe8, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203010902d60003010870040904000000010100000a24010900800201020a2404040de91223a02609240306050301017f0c24020400008103ac0004cf0d2406050203040008000700000d240706010000d71228a2cbf708240401002fbca60904010000010200000904010101010200000b2402010502ff082f91fb07240108040200082402010002050a0e2402024602aff5084ad5b12f83072401040805000724015d03040009050109200080810a072501823f090009040200000102000009040201010102000009058209"], 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd7000fbdbdf250a00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}, 0x40000c0) 2.305092985s ago: executing program 1 (id=15164): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x90}}, 0x0) 2.26438165s ago: executing program 0 (id=15166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b78ba30fe361"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.159639703s ago: executing program 1 (id=15167): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 2.14111276s ago: executing program 0 (id=15168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) 1.979532113s ago: executing program 0 (id=15171): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 1.932231466s ago: executing program 1 (id=15173): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 1.819961051s ago: executing program 0 (id=15175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.797939738s ago: executing program 1 (id=15176): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) close(0x3) 1.772497842s ago: executing program 6 (id=15177): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) 1.55644235s ago: executing program 1 (id=15179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) 1.542707372s ago: executing program 5 (id=15180): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @local, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1f}}], 0x1, 0x0) 1.52366703s ago: executing program 6 (id=15181): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008aec1, &(0x7f0000000f80)=ANY=[@ANYRES16]) 1.402429792s ago: executing program 5 (id=15183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x1, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) 1.382232596s ago: executing program 1 (id=15184): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES16], 0x0) 1.375151064s ago: executing program 6 (id=15185): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) 1.22172547s ago: executing program 6 (id=15186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0) 1.194817394s ago: executing program 5 (id=15187): openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.048876774s ago: executing program 6 (id=15188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000) 1.021401849s ago: executing program 6 (id=15189): syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) 531.772214ms ago: executing program 2 (id=15194): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 450.921318ms ago: executing program 2 (id=15195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000580), &(0x7f0000000200)=""/28}, 0x20) 333.184646ms ago: executing program 2 (id=15196): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mbind(&(0x7f000041f000/0x400000)=nil, 0x400000, 0x3, &(0x7f0000000040), 0x8000000000000001, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 180.460233ms ago: executing program 5 (id=15197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) 179.539413ms ago: executing program 2 (id=15198): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 69.134756ms ago: executing program 5 (id=15199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01482cbd7000fddbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="20005e80080005"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8800) 68.821695ms ago: executing program 2 (id=15200): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x4}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x30}, 0x10) 23.297395ms ago: executing program 2 (id=15201): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 0s ago: executing program 5 (id=15202): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) close(r0) kernel console output (not intermixed with test programs): led to retrieve DualShock4 pairing info: -22 [ 821.689932][T25419] playstation 0003:054C:05C4.007D: Failed to get MAC address from DualShock4 [ 821.707505][T25419] playstation 0003:054C:05C4.007D: Failed to create dualshock4. [ 821.726390][T25419] playstation 0003:054C:05C4.007D: probe with driver playstation failed with error -22 [ 821.870352][T25419] usb 2-1: USB disconnect, device number 85 [ 822.229746][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.236177][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.761366][ T30] kauditd_printk_skb: 7556 callbacks suppressed [ 822.761386][ T30] audit: type=1400 audit(2000000132.536:1952928): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 822.796078][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.797435][ T1561] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.802752][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.802773][ C1] audit: audit_lost=446834 audit_rate_limit=0 audit_backlog_limit=64 [ 822.802788][ C1] audit: backlog limit exceeded [ 822.803919][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.824093][ T1561] audit: audit_lost=446835 audit_rate_limit=0 audit_backlog_limit=64 [ 822.824165][ C1] audit: audit_lost=446836 audit_rate_limit=0 audit_backlog_limit=64 [ 822.837646][ T1561] audit: backlog limit exceeded [ 823.479745][ T1593] loop7: detected capacity change from 0 to 524255232 [ 823.545916][ T1595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12754'. [ 824.378506][ T1631] loop7: detected capacity change from 0 to 524255232 [ 824.934158][ T1659] program syz.0.12783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.061759][ T1660] xt_CT: No such helper "snmp" [ 825.525200][ T1686] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12795'. [ 825.690764][ T5883] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 825.868200][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 825.895547][ T5883] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 825.922621][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 825.947773][ T5883] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 825.961001][ T1702] netlink: 'syz.0.12802': attribute type 9 has an invalid length. [ 825.971486][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.992983][ T5883] usb 6-1: Product: syz [ 826.001985][ T1702] macvlan2: entered promiscuous mode [ 826.007899][ T5883] usb 6-1: Manufacturer: syz [ 826.013617][ T1702] bond0: entered promiscuous mode [ 826.018734][ T1702] bond_slave_0: entered promiscuous mode [ 826.024981][ T5883] usb 6-1: SerialNumber: syz [ 826.033827][ T1702] bond_slave_1: entered promiscuous mode [ 826.040706][ T5883] usb 6-1: config 0 descriptor?? [ 826.050389][ T5883] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 826.063108][ T1702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 826.070690][ T5883] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 826.098812][ T1706] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 826.127081][ T1706] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 826.257459][T25419] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 826.455273][T25419] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 826.466283][T25419] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 826.478998][T25419] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 826.488448][T25419] usb 2-1: config 1 has no interface number 0 [ 826.507751][T25419] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 826.523510][T25419] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 826.540263][T25419] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 826.549665][T25419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.572087][T25419] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 826.650962][ T1727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12814'. [ 826.718665][ T5883] em28xx 6-1:0.0: chip ID is em2874 [ 826.937772][ T5883] usb 6-1: USB disconnect, device number 35 [ 826.949168][ T5883] em28xx 6-1:0.0: Disconnecting em28xx [ 826.964442][ T5883] em28xx 6-1:0.0: Freeing device [ 827.180365][T25419] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 827.412717][T25419] usb 2-1: USB disconnect, device number 86 [ 827.421634][T25419] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 827.640075][ T1756] program syz.0.12828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.710359][ T5883] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 827.899873][ T5883] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 827.918691][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.931192][ T5883] usb 3-1: Product: syz [ 827.936334][ T5883] usb 3-1: Manufacturer: syz [ 827.941587][ T5883] usb 3-1: SerialNumber: syz [ 827.955444][ T5883] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 828.049467][ T5902] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 828.116632][ T30] kauditd_printk_skb: 10556 callbacks suppressed [ 828.116649][ T30] audit: type=1400 audit(2000000137.540:1963059): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=23774 comm="syz-executor" path="/862/cgroup.net" dev="tmpfs" ino=4371 [ 828.183007][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.183088][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.189542][ C1] audit: audit_lost=446979 audit_rate_limit=0 audit_backlog_limit=64 [ 828.189558][ C1] audit: backlog limit exceeded [ 828.190131][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.198865][T29202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.204212][ C1] audit: audit_lost=446980 audit_rate_limit=0 audit_backlog_limit=64 [ 828.204231][ C1] audit: backlog limit exceeded [ 828.205998][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 828.294600][ T1777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12838'. [ 828.370948][ T1777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.553843][ T1785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 828.612164][ T1785] bond2: entered promiscuous mode [ 828.643552][ T1785] bond0: (slave bond2): Enslaving as an active interface with an up link [ 828.697499][ T1796] tap0: tun_chr_ioctl cmd 1074025673 [ 828.925154][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.947945][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.158684][ T5902] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 829.173381][ T5902] ath9k_htc: Failed to initialize the device [ 829.235187][ T5902] usb 3-1: ath9k_htc: USB layer deinitialized [ 829.270456][ T5930] usb 3-1: USB disconnect, device number 86 [ 829.360558][ T1822] syzkaller1: tun_chr_ioctl cmd 35108 [ 829.534437][ T1829] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 829.639704][ T1837] macsec2: entered allmulticast mode [ 829.649260][ T1837] hsr0: entered allmulticast mode [ 829.654520][ T1837] hsr_slave_0: entered allmulticast mode [ 829.661532][ T1837] hsr_slave_1: entered allmulticast mode [ 829.685160][ T1837] hsr0: left allmulticast mode [ 829.695994][ T1837] hsr_slave_0: left allmulticast mode [ 829.704442][ T1837] hsr_slave_1: left allmulticast mode [ 829.977117][ T5930] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 830.155979][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.185701][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.195895][ T5930] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 830.209221][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.221115][ T5930] usb 2-1: config 0 descriptor?? [ 830.413805][ T1869] siw: device registration error -23 [ 830.510385][ T5930] usbhid 2-1:0.0: can't add hid device: -71 [ 830.541403][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 830.558657][ T5930] usb 2-1: USB disconnect, device number 87 [ 830.646707][ T1877] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12885'. [ 830.924340][ T1887] netlink: 'syz.5.12890': attribute type 9 has an invalid length. [ 830.947325][ T1887] macvlan2: entered promiscuous mode [ 830.971267][ T1887] bond0: entered promiscuous mode [ 830.976353][ T1887] bond_slave_0: entered promiscuous mode [ 830.982749][ T1887] bond_slave_1: entered promiscuous mode [ 830.989901][ T1887] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 831.024517][ T5930] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 831.137288][ T1891] netlink: 'syz.5.12892': attribute type 1 has an invalid length. [ 831.145575][ T1891] netlink: 17 bytes leftover after parsing attributes in process `syz.5.12892'. [ 831.217100][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.257390][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.268850][ T5930] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 831.301143][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.324307][ T5930] usb 2-1: config 0 descriptor?? [ 831.336718][ T5930] hub 2-1:0.0: USB hub found [ 831.556809][ T5930] hub 2-1:0.0: 1 port detected [ 831.783801][ T5930] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 831.792568][ T5930] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 831.837283][ T5930] usbhid 2-1:0.0: can't add hid device: -71 [ 831.843287][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 831.882793][ T1920] netlink: 'syz.2.12906': attribute type 13 has an invalid length. [ 831.892462][ T5930] usb 2-1: USB disconnect, device number 88 [ 832.010570][ T1918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 832.030062][ T1918] bond1: entered promiscuous mode [ 832.036053][ T1918] bond0: (slave bond1): Enslaving as an active interface with an up link [ 832.048044][ T1920] macvtap0: entered promiscuous mode [ 832.072202][ T1920] macvtap0: refused to change device tx_queue_len [ 832.697345][ T5930] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 832.871924][ T5930] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 832.904588][ T5930] usb 3-1: config 0 has no interface number 0 [ 832.925092][ T5930] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 832.936820][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.946472][ T5930] usb 3-1: Product: syz [ 832.951580][ T5930] usb 3-1: Manufacturer: syz [ 832.956195][ T5930] usb 3-1: SerialNumber: syz [ 832.965666][ T5930] usb 3-1: config 0 descriptor?? [ 833.062419][ T1962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 833.113236][ T1966] input: syz0 as /devices/virtual/input/input59 [ 833.195075][ T5930] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 833.238296][ T5930] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 833.269786][ T5930] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 833.278493][ T5930] usb 3-1: media controller created [ 833.336240][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 833.409367][ T5930] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 833.474498][ T30] kauditd_printk_skb: 10160 callbacks suppressed [ 833.474515][ T30] audit: type=1400 audit(2000000142.563:1972419): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29202 comm="syz-executor" name="322" dev="tmpfs" ino=1669 [ 833.508825][T29202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.509712][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.521963][ C1] audit: audit_lost=447249 audit_rate_limit=0 audit_backlog_limit=64 [ 833.530081][ C1] audit: backlog limit exceeded [ 833.531352][ T1971] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.536048][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.548757][ C1] audit: audit_lost=447250 audit_rate_limit=0 audit_backlog_limit=64 [ 833.557198][ C1] audit: backlog limit exceeded [ 833.562272][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 833.590607][ T5930] usb 3-1: USB disconnect, device number 87 [ 834.166552][ T1997] program syz.5.12943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 835.602868][ T2058] program syz.1.12973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 838.320882][ T2149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13001'. [ 838.331556][ T2122] cgroup: fork rejected by pids controller in /syz1 [ 838.443624][ T2158] tipc: Started in network mode [ 838.470923][ T2158] tipc: Node identity ac14140f, cluster identity 4711 [ 838.494074][ T2158] tipc: New replicast peer: 255.255.255.255 [ 838.516532][ T2158] tipc: Enabled bearer , priority 10 [ 838.560327][ T2163] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13005'. [ 838.633320][ T2163] tipc: Disabling bearer [ 838.832707][ T30] kauditd_printk_skb: 9363 callbacks suppressed [ 838.832725][ T30] audit: type=1400 audit(2000000147.568:1980721): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 838.861043][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.861572][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.867602][ T5840] audit: audit_lost=447606 audit_rate_limit=0 audit_backlog_limit=64 [ 838.874191][ C1] audit: audit_lost=447607 audit_rate_limit=0 audit_backlog_limit=64 [ 838.874206][ C1] audit: backlog limit exceeded [ 838.882212][ T2169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.914974][ T2170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 838.921604][ T2170] audit: audit_lost=447608 audit_rate_limit=0 audit_backlog_limit=64 [ 838.938774][ T30] audit: type=1400 audit(2000000147.568:1980722): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 840.825706][ T2219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13030'. [ 841.041734][ T5883] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 841.230438][ T5883] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 841.252322][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.288626][ T5883] usb 3-1: config 0 descriptor?? [ 841.313139][ T5883] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 842.196915][ T5883] gspca_sunplus: reg_w_riv err -71 [ 842.202883][ T5883] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 842.222575][ T5883] usb 3-1: USB disconnect, device number 88 [ 842.418497][ T2272] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13067'. [ 842.725701][ T2283] SET target dimension over the limit! [ 842.896821][ T2287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13062'. [ 843.251010][ T2300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.427724][ T2310] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13075'. [ 843.960832][ T5883] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 843.986990][ T2339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13087'. [ 844.131429][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 844.141293][ T5883] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 844.159934][ T2345] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 844.166685][ T2345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 844.176788][ T5883] usb 3-1: config 0 has no interface number 0 [ 844.183000][ T5883] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 844.195540][ T30] kauditd_printk_skb: 9101 callbacks suppressed [ 844.195555][ T30] audit: type=1400 audit(2000000152.572:1988956): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2349 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 844.223781][ T2345] vhci_hcd vhci_hcd.0: Device attached [ 844.231758][ T5883] usb 3-1: config 0 interface 85 has no altsetting 0 [ 844.240876][ T30] audit: type=1400 audit(2000000152.572:1988957): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2349 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 844.261582][ T2350] netlink: 'syz.5.13089': attribute type 5 has an invalid length. [ 844.271110][ T30] audit: type=1400 audit(2000000152.572:1988958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2349 comm="syz-executor" name="934" dev="tmpfs" ino=4731 [ 844.287328][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 844.291944][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 844.300831][ T5834] audit: audit_lost=447898 audit_rate_limit=0 audit_backlog_limit=64 [ 844.303432][ C1] audit: audit_lost=447899 audit_rate_limit=0 audit_backlog_limit=64 [ 844.311666][ T5834] audit: backlog limit exceeded [ 844.319552][ C1] audit: backlog limit exceeded [ 844.319932][ T2325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 844.340397][ T5883] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 844.350859][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.361401][ T5883] usb 3-1: Product: syz [ 844.365610][ T5883] usb 3-1: Manufacturer: syz [ 844.371072][ T5883] usb 3-1: SerialNumber: syz [ 844.380079][ T5883] usb 3-1: config 0 descriptor?? [ 844.484177][ T5930] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 844.543812][ T2358] binder: 2357:2358 ioctl 40046205 0 returned -22 [ 845.062882][ T5883] appletouch 3-1:0.85: Geyser mode initialized. [ 845.083989][ T5883] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input60 [ 845.298254][ T10] usb 3-1: USB disconnect, device number 89 [ 845.324584][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 845.905987][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 846.030286][ T2403] input: syz0 as /devices/virtual/input/input61 [ 846.091208][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.114454][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.135836][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 846.154835][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.165326][ T2405] dlm: no local IP address has been set [ 846.172014][ T2405] dlm: cannot start dlm midcomms -107 [ 846.183456][ T10] usb 6-1: config 0 descriptor?? [ 846.413290][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 846.420026][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 846.429911][ T10] usb 6-1: USB disconnect, device number 36 [ 846.899957][ T10] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 847.062630][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 847.073794][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.083813][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 847.093064][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.106208][ T10] usb 6-1: config 0 descriptor?? [ 847.115854][ T10] hub 6-1:0.0: USB hub found [ 847.359508][ T10] hub 6-1:0.0: 1 port detected [ 847.377498][ T2347] vhci_hcd: connection reset by peer [ 847.386698][ T3494] vhci_hcd: stop threads [ 847.412602][ T3494] vhci_hcd: release socket [ 847.431537][ T3494] vhci_hcd: disconnect device [ 847.575001][ T10] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 847.581778][ T10] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 847.621121][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 847.641047][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 847.672389][ T2432] netlink: 'syz.0.13123': attribute type 1 has an invalid length. [ 847.691314][ T2432] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13123'. [ 847.699540][ T10] usb 6-1: USB disconnect, device number 37 [ 848.067758][ T2447] can0: slcan on ttyS3. [ 848.165122][ T2447] can0 (unregistered): slcan off ttyS3. [ 848.249350][ T2453] sctp: [Deprecated]: syz.0.13132 (pid 2453) Use of int in maxseg socket option. [ 848.249350][ T2453] Use struct sctp_assoc_value instead [ 848.668858][ T2477] input: syz1 as /devices/virtual/input/input62 [ 848.801017][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13144'. [ 848.826077][ T2484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13144'. [ 848.889774][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13144'. [ 848.899785][ T2484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13144'. [ 848.908938][ T2484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13144'. [ 848.945310][ T2493] can0: slcan on ttyS3. [ 849.059814][ T2495] can0 (unregistered): slcan off ttyS3. [ 849.551835][ T30] kauditd_printk_skb: 7528 callbacks suppressed [ 849.551853][ T30] audit: type=1400 audit(2000000157.595:1995717): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2520 comm="syz-executor" name="2629" dev="tmpfs" ino=13271 [ 849.630839][ T30] audit: type=1400 audit(2000000157.595:1995718): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=2520 comm="syz-executor" name="2629" dev="tmpfs" ino=13271 [ 849.633968][ T2527] audit: audit_backlog=65 > audit_backlog_limit=64 [ 849.680263][ T2526] vivid-000: disconnect [ 849.694529][ T30] audit: type=1400 audit(2000000157.623:1995719): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2520 comm="syz-executor" name="2629" dev="tmpfs" ino=13271 [ 849.696575][ T2521] vivid-000: reconnect [ 849.738776][ T2527] audit: audit_lost=448157 audit_rate_limit=0 audit_backlog_limit=64 [ 849.747553][ T2527] audit: backlog limit exceeded [ 849.752741][ T2527] audit: audit_backlog=65 > audit_backlog_limit=64 [ 849.780250][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 849.786482][ T30] audit: type=1400 audit(2000000157.623:1995720): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=2520 comm="syz-executor" name="2629" dev="tmpfs" ino=13271 [ 849.806712][ T30] audit: type=1400 audit(2000000157.623:1995721): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=2520 comm="syz-executor" name="2629" dev="tmpfs" ino=13271 [ 849.926249][ T5930] vhci_hcd: vhci_device speed not set [ 850.065902][ T2535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13160'. [ 850.104030][ T2535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13160'. [ 850.116294][ T2535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13160'. [ 850.128560][ T2535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13160'. [ 850.148878][ T2535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13160'. [ 850.161048][ T5902] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 850.336859][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.358629][ T5902] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 850.375971][ T2549] can0: slcan on ttyS3. [ 850.380258][ T5902] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 850.393595][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.411436][ T5902] usb 6-1: config 0 descriptor?? [ 850.421248][ T5902] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 850.429981][ T2549] can0 (unregistered): slcan off ttyS3. [ 850.447114][ T5902] dvb-usb: bulk message failed: -22 (3/0) [ 850.470710][ T5902] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 850.496651][ T5902] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 850.516175][ T5902] usb 6-1: media controller created [ 850.535923][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.571468][ T5902] dvb-usb: bulk message failed: -22 (6/0) [ 850.584377][ T5902] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 850.612892][ T5902] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 850.648906][ T5902] dvb-usb: schedule remote query interval to 150 msecs. [ 850.663155][ T5902] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 850.754187][ T2566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13171'. [ 850.784409][ T2566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13171'. [ 850.839033][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 850.847054][ T5902] dvb-usb: error while querying for an remote control event. [ 850.968020][ T2574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13175'. [ 851.048041][ T5902] dvb-usb: bulk message failed: -22 (1/0) [ 851.053921][ T5902] dvb-usb: error while querying for an remote control event. [ 851.085567][ T5902] usb 6-1: USB disconnect, device number 38 [ 851.166025][ T5902] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 852.051434][ T2624] bond0: (slave bond2): Error -95 calling ndo_bpf [ 852.082519][ T2624] netlink: 'syz.0.13192': attribute type 10 has an invalid length. [ 852.254743][ T2640] syz.0.13199 (2640): /proc/2639/oom_adj is deprecated, please use /proc/2639/oom_score_adj instead. [ 852.929327][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 853.121899][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 853.136618][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.150315][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 853.160179][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 853.183828][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.201311][ T10] usb 2-1: config 0 descriptor?? [ 853.366343][ T2694] loop6: detected capacity change from 0 to 524287999 [ 853.656922][ T10] nzxt-smart2 0003:1E71:2009.007E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 854.091839][ T5902] usb 2-1: USB disconnect, device number 89 [ 854.783405][ T2742] loop2: detected capacity change from 0 to 6 [ 854.792170][ T2742] Dev loop2: unable to read RDB block 6 [ 854.798108][ T2742] loop2: unable to read partition table [ 854.810857][ T2742] loop2: partition table beyond EOD, truncated [ 854.825210][ T2742] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 854.882470][ T2744] netlink: 87 bytes leftover after parsing attributes in process `syz.5.13234'. [ 854.908644][ T30] kauditd_printk_skb: 9483 callbacks suppressed [ 854.908663][ T30] audit: type=1400 audit(2000000162.600:2004448): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=5840 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.218 dest=46840 netif=eth0 [ 854.948313][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.955393][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.959831][ T5834] audit: audit_lost=448411 audit_rate_limit=0 audit_backlog_limit=64 [ 854.962827][T23774] audit: audit_lost=448412 audit_rate_limit=0 audit_backlog_limit=64 [ 854.970652][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.970675][ C1] audit: audit_lost=448413 audit_rate_limit=0 audit_backlog_limit=64 [ 854.970692][ C1] audit: backlog limit exceeded [ 854.971859][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 854.971877][ C1] audit: audit_lost=448414 audit_rate_limit=0 audit_backlog_limit=64 [ 855.017732][ T2751] netlink: 'syz.1.13236': attribute type 10 has an invalid length. [ 855.039885][ T2751] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 855.071936][ T2753] program syz.5.13237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.279505][ T2761] netlink: 'syz.5.13241': attribute type 29 has an invalid length. [ 855.363924][ T2768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13244'. [ 855.564312][ T2777] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13248'. [ 856.573470][ T2829] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13266'. [ 856.810486][ T2842] program syz.0.13269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.189538][ T2859] netlink: 76 bytes leftover after parsing attributes in process `syz.5.13274'. [ 858.008047][ T5902] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 858.177399][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.225070][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.240012][ T5902] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.250964][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.272377][ T5902] usb 3-1: SerialNumber: syz [ 858.556548][ T5902] usb 3-1: 0:2 : does not exist [ 858.585458][ T5902] usb 3-1: USB disconnect, device number 90 [ 858.734356][ T2901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.922618][ T2907] program syz.1.13295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.266334][ T30] kauditd_printk_skb: 8015 callbacks suppressed [ 860.266353][ T30] audit: type=1400 audit(2000000167.613:2012050): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23774 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 860.279338][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.293205][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.306946][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.312579][ T5833] audit: audit_lost=448552 audit_rate_limit=0 audit_backlog_limit=64 [ 860.314019][T23774] audit: audit_lost=448553 audit_rate_limit=0 audit_backlog_limit=64 [ 860.322726][ T5833] audit: backlog limit exceeded [ 860.323026][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.331879][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 860.336532][ T30] audit: type=1400 audit(2000000167.613:2012051): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23774 comm="syz-executor" name="984" dev="tmpfs" ino=4986 [ 860.706001][ T2956] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13315'. [ 862.345411][ T3004] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 863.238321][ T3039] loop6: detected capacity change from 0 to 524287487 [ 863.246180][ T3039] buffer_io_error: 6 callbacks suppressed [ 863.246198][ T3039] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.260619][ T3039] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.280999][ T3039] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.318399][ T3045] C: renamed from team_slave_0 [ 863.331536][ T3039] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.345863][ T3045] netlink: 'syz.0.13357': attribute type 1 has an invalid length. [ 863.356523][ T3045] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13357'. [ 863.361443][ T3039] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.369169][ T3045] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 863.449049][ T3043] loop6: detected capacity change from 524287487 to 0 [ 863.459819][ T3039] Buffer I/O error on dev loop6, logical block 0, async page read [ 863.474483][ T3039] ldm_validate_partition_table(): Disk read failed. [ 863.505196][ T3039] Dev loop6: unable to read RDB block 0 [ 863.511081][ T3039] loop6: unable to read partition table [ 863.524332][ T3039] loop6: partition table beyond EOD, truncated [ 863.543783][ T3039] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 863.971668][ T3077] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13369'. [ 865.031799][ T5902] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 865.203963][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 865.216493][ T5902] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 865.245400][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 865.264173][ T5902] usb 2-1: SerialNumber: syz [ 865.286988][ T5902] usb 2-1: config 0 descriptor?? [ 865.305710][ T5902] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 865.329019][ T5902] usb 2-1: Detected FT232A [ 865.343403][ T5902] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 865.558801][ T10] usb 2-1: USB disconnect, device number 90 [ 865.577013][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 865.603485][ T10] ftdi_sio 2-1:0.0: device disconnected [ 865.618851][ T30] kauditd_printk_skb: 9092 callbacks suppressed [ 865.618869][ T30] audit: type=1400 audit(2000000172.618:2020420): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="090" dev="devtmpfs" ino=3490 [ 865.642052][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 865.650566][ C1] audit: audit_lost=448796 audit_rate_limit=0 audit_backlog_limit=64 [ 865.650739][ T30] audit: type=1400 audit(2000000172.637:2020421): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="002" dev="devtmpfs" ino=723 [ 865.658715][ C1] audit: backlog limit exceeded [ 865.678375][ T3126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 865.688048][ T30] audit: type=1400 audit(2000000172.637:2020422): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 865.690147][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 865.715602][ T30] audit: type=1400 audit(2000000172.637:2020423): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 865.718755][ T3126] audit: audit_lost=448797 audit_rate_limit=0 audit_backlog_limit=64 [ 865.820098][ T3131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.999707][ T3141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13400'. [ 866.132260][ T1208] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 866.301886][ T1208] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.325306][ T1208] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 866.355096][ T1208] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 866.387408][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.412234][ T1208] usb 3-1: config 0 descriptor?? [ 866.435841][ T1208] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 866.485194][ T1208] dvb-usb: bulk message failed: -22 (3/0) [ 866.523616][ T1208] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 866.571248][ T1208] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 866.578772][ T1208] usb 3-1: media controller created [ 866.604490][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.646984][ T1208] dvb-usb: bulk message failed: -22 (6/0) [ 866.698093][ T1208] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 866.746792][ T1208] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input64 [ 866.791031][ T1208] dvb-usb: schedule remote query interval to 150 msecs. [ 866.816223][ T1208] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 866.987426][ T1208] dvb-usb: bulk message failed: -22 (1/0) [ 866.995038][ T1208] dvb-usb: error while querying for an remote control event. [ 867.176370][ T10] IPVS: starting estimator thread 0... [ 867.188280][ T3186] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 867.196152][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 867.206713][ T10] dvb-usb: error while querying for an remote control event. [ 867.295358][ T5883] usb 3-1: USB disconnect, device number 91 [ 867.308516][ T3187] IPVS: using max 27 ests per chain, 64800 per kthread [ 867.319812][ T3191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13422'. [ 867.339239][ T5883] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 867.761789][ T3206] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 867.941008][ T3206] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.055946][ T3206] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.160074][ T3229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13437'. [ 868.213839][ T3206] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 868.441004][ T3206] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.478106][ T3206] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.619332][ T3206] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.671274][ T3206] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.558426][ T3271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13458'. [ 869.664574][ T3273] veth0_to_team: entered promiscuous mode [ 869.682616][ T3273] veth0_to_team: entered allmulticast mode [ 870.259152][ T5883] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 870.432818][ T5883] usb 3-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 870.455681][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 870.482165][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.514296][ T5883] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.545353][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.569194][ T5883] usb 3-1: Product: syz [ 870.573521][ T5883] usb 3-1: Manufacturer: syz [ 870.584718][ T5883] usb 3-1: SerialNumber: syz [ 870.834153][ T5883] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 870.847069][ T5883] cdc_ncm 3-1:1.0: bind() failure [ 870.864131][ T5883] usb 3-1: USB disconnect, device number 92 [ 870.979389][ T30] kauditd_printk_skb: 9878 callbacks suppressed [ 870.979407][ T30] audit: type=1400 audit(2000000177.641:2029708): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=3326 comm="syz-executor" name="oom_score_adj" dev="proc" ino=115673 [ 870.994822][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 871.007521][ T3326] audit: audit_backlog=65 > audit_backlog_limit=64 [ 871.007541][ T3326] audit: audit_lost=448996 audit_rate_limit=0 audit_backlog_limit=64 [ 871.007557][ T3326] audit: backlog limit exceeded [ 871.007807][ T3326] audit: audit_backlog=65 > audit_backlog_limit=64 [ 871.007821][ T3326] audit: audit_lost=448997 audit_rate_limit=0 audit_backlog_limit=64 [ 871.007834][ T3326] audit: backlog limit exceeded [ 871.007848][ T3326] audit: audit_backlog=65 > audit_backlog_limit=64 [ 871.007860][ T3326] audit: audit_lost=448998 audit_rate_limit=0 audit_backlog_limit=64 [ 871.062425][ T1208] kernel write not supported for file /input/event2 (pid: 1208 comm: kworker/0:2) [ 872.752697][ T3398] Invalid logical block size (7) [ 873.129053][ T3423] netlink: 1152 bytes leftover after parsing attributes in process `syz.0.13521'. [ 873.724035][ T3447] netlink: 'syz.0.13532': attribute type 1 has an invalid length. [ 873.746902][ T3447] nbd: error processing sock list [ 873.763372][ T3447] block nbd1: shutting down sockets [ 874.808940][ T3491] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 874.822408][ T3495] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 875.111062][ T3505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.957650][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13579'. [ 876.305288][ T3555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13584'. [ 876.332770][ T30] kauditd_printk_skb: 10822 callbacks suppressed [ 876.332787][ T30] audit: type=1400 audit(2000000182.655:2039767): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3559 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 876.410020][T29202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 876.459251][T29202] audit: audit_lost=449254 audit_rate_limit=0 audit_backlog_limit=64 [ 876.463899][ T3562] audit: audit_backlog=65 > audit_backlog_limit=64 [ 876.468273][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 876.468297][ C1] audit: audit_lost=449255 audit_rate_limit=0 audit_backlog_limit=64 [ 876.468314][ C1] audit: backlog limit exceeded [ 876.475976][ T30] audit: type=1400 audit(2000000182.655:2039768): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3559 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 876.476028][ T30] audit: type=1400 audit(2000000182.655:2039769): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3559 comm="syz-executor" name="2806" dev="tmpfs" ino=14171 [ 876.476067][ T30] audit: type=1400 audit(2000000182.655:2039770): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=3559 comm="syz-executor" opid=3559 ocomm="syz-executor" [ 876.701121][ T3569] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 876.732956][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13591'. [ 877.823692][ T3607] netem: incorrect gi model size [ 877.841326][ T3607] netem: change failed [ 878.224735][ T3621] bond_slave_0: entered promiscuous mode [ 878.231657][ T3621] bond_slave_1: entered promiscuous mode [ 878.261683][ T3621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 878.300254][ T3621] bond_slave_0: left promiscuous mode [ 878.306618][ T3621] bond_slave_1: left promiscuous mode [ 878.675326][ T3632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13619'. [ 878.720218][ T3632] macsec3: entered allmulticast mode [ 878.737617][ T3632] bridge0: entered allmulticast mode [ 878.748791][ T3632] bridge0: port 3(macsec3) entered blocking state [ 878.764398][ T3632] bridge0: port 3(macsec3) entered disabled state [ 878.798010][ T3632] bridge0: left allmulticast mode [ 879.117999][ T3643] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13622'. [ 880.442749][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13642'. [ 880.480725][ T3686] netem: change failed [ 880.736107][ T3702] program syz.5.13649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 880.858642][ T3708] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 880.960048][ T1208] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 881.186929][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 881.198535][ T1208] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 881.219394][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.241345][ T1208] usb 2-1: Product: syz [ 881.245804][ T1208] usb 2-1: Manufacturer: syz [ 881.257653][ T1208] usb 2-1: SerialNumber: syz [ 881.270245][ T1208] usb 2-1: config 0 descriptor?? [ 881.287250][ T1208] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 881.360375][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13663'. [ 881.370312][ T3730] netlink: 'syz.6.13663': attribute type 30 has an invalid length. [ 881.378550][ T3730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13663'. [ 881.569909][ T3736] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 881.578962][ T3736] macvtap1: entered allmulticast mode [ 881.594118][ T3736] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 881.612517][ T3736] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 881.620748][ T3736] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 881.689599][ T30] kauditd_printk_skb: 14199 callbacks suppressed [ 881.689615][ T30] audit: type=1400 audit(2000000187.659:2053183): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3739 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 881.712629][ T3740] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 881.724100][ T30] audit: type=1400 audit(2000000187.659:2053184): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3739 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 881.724155][ T30] audit: type=1400 audit(2000000187.659:2053185): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3739 comm="syz-executor" name="1064" dev="tmpfs" ino=5388 [ 881.766927][ T30] audit: type=1400 audit(2000000187.659:2053186): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=3739 comm="syz-executor" opid=3739 ocomm="syz-executor" [ 881.793256][ T30] audit: type=1400 audit(2000000187.659:2053187): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3739 comm="syz-executor" name="1064" dev="tmpfs" ino=5388 [ 881.798217][T29202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 881.808256][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 881.819176][T29202] audit: audit_lost=449518 audit_rate_limit=0 audit_backlog_limit=64 [ 881.824401][ C1] audit: audit_lost=449519 audit_rate_limit=0 audit_backlog_limit=64 [ 881.824424][ C1] audit: backlog limit exceeded [ 882.021291][ T3746] blkio.reset_stats is deprecated [ 882.155435][ T3748] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.198686][ T1208] gspca_stk1135: reg_w 0x5 err -71 [ 882.205134][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.212322][ T1208] gspca_stk1135: Sensor write failed [ 882.217966][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.233475][ T1208] gspca_stk1135: Sensor write failed [ 882.243293][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.260203][ T1208] gspca_stk1135: Sensor read failed [ 882.266415][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.273448][ T3752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13674'. [ 882.284676][ T1208] gspca_stk1135: Sensor read failed [ 882.292370][ T1208] gspca_stk1135: Detected sensor type unknown (0x0) [ 882.308402][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.315246][ T1208] gspca_stk1135: Sensor read failed [ 882.322089][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.329129][ T1208] gspca_stk1135: Sensor read failed [ 882.334654][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.344312][ T1208] gspca_stk1135: Sensor write failed [ 882.349935][ T1208] gspca_stk1135: serial bus timeout: status=0x00 [ 882.357898][ T1208] gspca_stk1135: Sensor write failed [ 882.364401][ T1208] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 882.372133][ T3748] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.385326][ T1208] usb 2-1: USB disconnect, device number 91 [ 882.469943][ T3748] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.555284][ T3748] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.654159][ T3748] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.672302][ T3748] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.689582][ T3748] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.708565][ T3748] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.900325][ T3765] program syz.5.13678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 883.211505][ T3777] Falling back ldisc for ptm0. [ 883.329535][ T3782] block nbd6: not configured, cannot reconfigure [ 884.376661][ T3814] netlink: 'syz.1.13699': attribute type 3 has an invalid length. [ 884.752190][ T3828] netlink: 'syz.1.13706': attribute type 1 has an invalid length. [ 884.761621][ T3828] netlink: 172 bytes leftover after parsing attributes in process `syz.1.13706'. [ 886.039415][ T3878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13742'. [ 886.050932][ T3878] nbd: couldn't find device at index 131080 [ 887.044513][ T30] kauditd_printk_skb: 8838 callbacks suppressed [ 887.044531][ T30] audit: type=1400 audit(2000000192.673:2061518): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=3904 comm="syz-executor" name="2582" dev="tmpfs" ino=13064 [ 887.081574][ T30] audit: type=1400 audit(2000000192.673:2061519): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3903 comm="syz-executor" name="5904" dev="proc" ino=119378 [ 887.090778][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 887.106223][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 887.115900][ T3906] audit: audit_backlog=65 > audit_backlog_limit=64 [ 887.118744][ C1] audit: audit_lost=449689 audit_rate_limit=0 audit_backlog_limit=64 [ 887.135366][ C1] audit: backlog limit exceeded [ 887.136213][ T3906] audit: audit_lost=449690 audit_rate_limit=0 audit_backlog_limit=64 [ 887.142137][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 887.157623][ C1] audit: audit_lost=449691 audit_rate_limit=0 audit_backlog_limit=64 [ 887.514739][ T3921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13748'. [ 887.761539][ T3935] netlink: 'syz.0.13757': attribute type 83 has an invalid length. [ 887.791964][ T5902] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 887.900323][ T3942] netlink: 'syz.0.13760': attribute type 10 has an invalid length. [ 887.917604][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 887.922860][ T3942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13760'. [ 887.925596][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 887.963940][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 887.972699][ T5902] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 887.988608][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.011181][ T5902] usb 6-1: config 0 descriptor?? [ 888.137078][ T3950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13763'. [ 888.469505][ T5902] microsoft 0003:045E:009D.007F: unknown main item tag 0x0 [ 888.497947][ T5902] microsoft 0003:045E:009D.007F: unknown main item tag 0x0 [ 888.517730][ T5902] microsoft 0003:045E:009D.007F: unknown main item tag 0x0 [ 888.532761][ T5902] microsoft 0003:045E:009D.007F: unknown main item tag 0x0 [ 888.552487][ T5902] microsoft 0003:045E:009D.007F: unknown main item tag 0x0 [ 888.576536][ T5902] microsoft 0003:045E:009D.007F: hidraw0: USB HID v0.03 Device [HID 045e:009d] on usb-dummy_hcd.5-1/input0 [ 888.625754][ T5902] microsoft 0003:045E:009D.007F: no inputs found [ 888.638629][ T5902] microsoft 0003:045E:009D.007F: could not initialize ff, continuing anyway [ 888.702057][ T5902] usb 6-1: USB disconnect, device number 39 [ 890.275165][ T4026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13797'. [ 890.475055][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13802'. [ 890.652386][ T4046] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.714331][ T4046] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.780168][ T4046] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.824273][ T4046] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.903434][ T4046] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.924577][ T4046] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.942774][ T4046] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 890.962358][ T4046] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.242267][ T4058] netlink: 'syz.2.13810': attribute type 2 has an invalid length. [ 891.271419][ T4058] ave_0: entered promiscuous mode [ 891.720428][ T4080] Falling back ldisc for ttyS3. [ 892.421262][ T30] kauditd_printk_skb: 10368 callbacks suppressed [ 892.421279][ T30] audit: type=1400 audit(2000000197.705:2071458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4098 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 892.445904][ T4099] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13830'. [ 892.459252][ T30] audit: type=1400 audit(2000000197.705:2071459): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4098 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 892.480138][ T30] audit: type=1400 audit(2000000197.705:2071460): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4098 comm="syz-executor" name="1109" dev="tmpfs" ino=5616 [ 892.504412][ T30] audit: type=1400 audit(2000000197.705:2071461): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=4098 comm="syz-executor" opid=4098 ocomm="syz-executor" [ 892.528891][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 892.536011][T23774] audit: audit_lost=449835 audit_rate_limit=0 audit_backlog_limit=64 [ 892.543904][ T30] audit: type=1400 audit(2000000197.705:2071462): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4098 comm="syz-executor" name="1109" dev="tmpfs" ino=5616 [ 892.549281][T23774] audit: backlog limit exceeded [ 892.577625][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 892.585111][T23774] audit: audit_lost=449836 audit_rate_limit=0 audit_backlog_limit=64 [ 893.959447][ T4161] netlink: 'syz.6.13856': attribute type 10 has an invalid length. [ 893.985782][ T4161] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13856'. [ 894.092858][ T4161] team0: Port device geneve0 added [ 894.318558][ T4176] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 894.360126][ T4176] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 894.369176][ T4176] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 894.704122][ T4195] netlink: 'syz.0.13872': attribute type 2 has an invalid length. [ 894.728728][ T4195] ave_0: entered promiscuous mode [ 894.822240][ T4199] netlink: 'syz.6.13873': attribute type 2 has an invalid length. [ 895.127162][ T4210] openvswitch: netlink: Multiple metadata blocks provided [ 895.912001][ T4240] netem: change failed [ 896.595852][ T4271] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13906'. [ 896.865884][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 896.896927][ T4278] team0: Port device batadv1 added [ 896.950459][ T4285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13913'. [ 896.980281][ T4285] netlink: 1 bytes leftover after parsing attributes in process `syz.5.13913'. [ 897.042348][ T4289] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.13915'. [ 897.148657][ T4294] sctp: [Deprecated]: syz.5.13918 (pid 4294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.148657][ T4294] Use struct sctp_sack_info instead [ 897.778251][ T30] kauditd_printk_skb: 11345 callbacks suppressed [ 897.778270][ T30] audit: type=1400 audit(2000000202.710:2082087): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=4319 comm="syz.5.13928" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 897.806898][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.813729][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 897.825768][ T26] audit: audit_lost=450077 audit_rate_limit=0 audit_backlog_limit=64 [ 897.835246][ T26] audit: backlog limit exceeded [ 897.841031][ T5930] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 897.845055][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 897.853107][ T4320] audit: audit_backlog=65 > audit_backlog_limit=64 [ 897.860622][ T26] audit: audit_lost=450078 audit_rate_limit=0 audit_backlog_limit=64 [ 897.866415][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 897.880371][ T30] audit: type=1400 audit(2000000202.710:2082088): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 897.882881][ C1] audit: audit_lost=450079 audit_rate_limit=0 audit_backlog_limit=64 [ 898.112387][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.151213][ T5930] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 898.161995][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.189936][ T5930] usb 6-1: config 0 descriptor?? [ 898.678837][ T5930] koneplus 0003:1E7D:2E22.0080: hidraw0: USB HID vff.fe Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 899.117100][ T5883] usb 6-1: USB disconnect, device number 40 [ 899.267538][ T4360] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13945'. [ 900.225371][ T5883] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 900.396374][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 900.424774][ T5883] usb 3-1: config 0 has no interfaces? [ 900.439010][ T5883] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 900.463794][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.497637][ T5883] usb 3-1: config 0 descriptor?? [ 900.634036][ T4409] input: syz1 as /devices/virtual/input/input67 [ 900.779310][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.811530][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.889150][ T10] usb 3-1: USB disconnect, device number 93 [ 902.159878][ T5883] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 902.341900][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 902.369010][ T5883] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 902.401520][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.436074][ T5883] usb 3-1: config 0 descriptor?? [ 902.564651][ T4486] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 902.572950][ T4486] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 902.599691][ T4486] vhci_hcd vhci_hcd.0: Device attached [ 902.613205][ T4487] vhci_hcd: connection closed [ 902.613794][T29877] vhci_hcd: stop threads [ 902.636126][T29877] vhci_hcd: release socket [ 902.645923][T29877] vhci_hcd: disconnect device [ 902.667551][ T5883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 902.687315][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.716683][ T5883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 902.732807][ T5883] usb 3-1: media controller created [ 902.767293][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.878839][ T5883] az6027: usb out operation failed. (-71) [ 902.892820][ T5883] az6027: usb out operation failed. (-71) [ 902.908207][ T5883] stb0899_attach: Driver disabled by Kconfig [ 902.914960][ T5883] az6027: no front-end attached [ 902.914960][ T5883] [ 902.924813][ T5883] az6027: usb out operation failed. (-71) [ 902.930964][ T5883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 902.941829][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 902.960987][ T5883] dvb-usb: schedule remote query interval to 400 msecs. [ 902.969049][ T5883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 902.980629][ T5883] usb 3-1: USB disconnect, device number 94 [ 903.032721][ T5883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 903.139359][ T30] kauditd_printk_skb: 9701 callbacks suppressed [ 903.139377][ T30] audit: type=1400 audit(2000000207.723:2090814): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4503 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.174635][ T30] audit: type=1400 audit(2000000207.723:2090815): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4503 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.199083][ T30] audit: type=1400 audit(2000000207.723:2090816): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4503 comm="syz-executor" name="1146" dev="tmpfs" ino=5803 [ 903.201097][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 903.226341][ T5834] audit: audit_lost=450405 audit_rate_limit=0 audit_backlog_limit=64 [ 903.230114][ T30] audit: type=1400 audit(2000000207.723:2090817): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=4503 comm="syz-executor" opid=4503 ocomm="syz-executor" [ 903.234996][ T5834] audit: backlog limit exceeded [ 903.259201][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 903.265181][ T30] audit: type=1400 audit(2000000207.723:2090818): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4503 comm="syz-executor" name="1146" dev="tmpfs" ino=5803 [ 903.268588][ T5834] audit: audit_lost=450406 audit_rate_limit=0 audit_backlog_limit=64 [ 903.748692][ T4525] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14022'. [ 904.666320][ T4551] netlink: 'syz.5.14034': attribute type 10 has an invalid length. [ 904.686605][ T4551] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.702491][ T4551] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.723962][ T4551] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.737112][ T4551] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.767485][ T4551] team0: Port device geneve1 added [ 905.141554][ T4571] netlink: 'syz.2.14045': attribute type 3 has an invalid length. [ 905.969918][ T4594] netlink: 36 bytes leftover after parsing attributes in process `syz.6.14053'. [ 906.006115][ T4594] bond0: option ad_select: unable to set because the bond device is up [ 906.419449][ T4608] netlink: 27 bytes leftover after parsing attributes in process `syz.1.14059'. [ 908.166847][ T4691] netlink: 152 bytes leftover after parsing attributes in process `syz.6.14099'. [ 908.488261][ T30] kauditd_printk_skb: 9778 callbacks suppressed [ 908.488279][ T30] audit: type=1400 audit(2000000213.733:2099741): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4702 comm="modprobe" name="/" dev="sda1" ino=2 [ 908.546122][ T4702] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.551398][ T4704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.563007][ T4702] audit: audit_lost=450692 audit_rate_limit=0 audit_backlog_limit=64 [ 908.563033][ T4702] audit: backlog limit exceeded [ 908.563271][ T4702] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.582517][ T4704] audit: audit_lost=450693 audit_rate_limit=0 audit_backlog_limit=64 [ 908.606032][ T30] audit: type=1400 audit(2000000213.752:2099742): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4704 comm="modprobe" name="/" dev="sda1" ino=2 [ 908.632747][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.639996][ T4702] audit: audit_lost=450694 audit_rate_limit=0 audit_backlog_limit=64 [ 908.985555][ T4714] netlink: 'syz.6.14108': attribute type 10 has an invalid length. [ 909.091206][ T4714] team0: Port device geneve1 added [ 909.792861][ T5883] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 909.963903][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 909.985407][ T5883] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 909.994074][ T5883] usb 2-1: config 0 has no interface number 0 [ 910.020690][ T5883] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 910.035165][ T5883] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 910.056065][ T5883] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 910.075996][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 910.097007][ T5883] usb 2-1: Product: syz [ 910.101593][ T5883] usb 2-1: SerialNumber: syz [ 910.117615][ T4760] program syz.5.14129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 910.118243][ T5883] usb 2-1: config 0 descriptor?? [ 910.142434][ T5883] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 910.153904][ T5883] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input69 [ 910.401569][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 910.403085][ T10] usb 2-1: USB disconnect, device number 92 [ 910.408757][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 910.470310][ T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 912.985108][ T4856] netlink: 'syz.6.14173': attribute type 25 has an invalid length. [ 913.010770][ T5883] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 913.175522][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 913.189699][ T5883] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 913.220844][ T5883] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 913.243750][ T5883] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 913.280234][ T5883] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 913.342316][ T5883] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 913.374436][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.677912][ T5883] usb 6-1: GET_CAPABILITIES returned 0 [ 913.711159][ T5883] usbtmc 6-1:16.0: can't read capabilities [ 913.857842][ T30] kauditd_printk_skb: 10063 callbacks suppressed [ 913.857861][ T30] audit: type=1400 audit(2000000218.754:2108446): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4889 comm="syz.1.14187" name="newroot" dev="tmpfs" ino=2 [ 913.891697][ T30] audit: type=1400 audit(2000000218.754:2108447): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4889 comm="syz.1.14187" name="/" dev="devtmpfs" ino=1 [ 913.926264][ T1208] usb 6-1: USB disconnect, device number 41 [ 913.949912][ T30] audit: type=1400 audit(2000000218.754:2108448): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=4889 comm="syz.1.14187" name="mISDNtimer" dev="devtmpfs" ino=1269 [ 913.950481][ T26] audit: audit_backlog=65 > audit_backlog_limit=64 [ 913.984429][ T30] audit: type=1400 audit(2000000218.754:2108449): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4889 comm="syz.1.14187" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 [ 913.991882][ T4897] audit: audit_backlog=65 > audit_backlog_limit=64 [ 914.021096][T29202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 914.023816][ T4897] audit: audit_lost=451148 audit_rate_limit=0 audit_backlog_limit=64 [ 914.027825][T29202] audit: audit_lost=451149 audit_rate_limit=0 audit_backlog_limit=64 [ 914.027849][T29202] audit: backlog limit exceeded [ 915.101313][ T4938] netlink: 'syz.5.14208': attribute type 1 has an invalid length. [ 915.115003][ T4938] netlink: 'syz.5.14208': attribute type 1 has an invalid length. [ 915.162935][ T4934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14206'. [ 915.182807][ T4938] netlink: 216 bytes leftover after parsing attributes in process `syz.5.14208'. [ 915.423118][ T4950] loop2: detected capacity change from 0 to 7 [ 915.448911][ T4950] Dev loop2: unable to read RDB block 7 [ 915.454878][ T4950] loop2: unable to read partition table [ 915.465172][ T4950] loop2: partition table beyond EOD, truncated [ 915.474835][ T4950] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 915.651107][ T1208] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 915.666152][ T4961] binder: 4958:4961 ioctl c0306201 200000000340 returned -14 [ 915.822004][ T1208] usb 6-1: Using ep0 maxpacket: 32 [ 915.835428][ T1208] usb 6-1: config 0 interface 0 has no altsetting 0 [ 915.849738][ T4967] @: renamed from vlan0 [ 915.857863][ T1208] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 915.879138][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.909777][ T1208] usb 6-1: Product: syz [ 915.925126][ T1208] usb 6-1: Manufacturer: syz [ 915.948580][ T1208] usb 6-1: SerialNumber: syz [ 915.974807][ T1208] usb 6-1: config 0 descriptor?? [ 916.435986][ T1208] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 916.495935][ T5883] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 916.651282][ T1208] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 916.666910][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 916.674200][ T1208] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 916.685541][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.731229][ T5883] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 916.749383][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 916.795271][ T5883] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 916.803556][ T5883] usb 3-1: Product: syz [ 916.810705][ T5883] usb 3-1: Manufacturer: syz [ 916.820026][ T5883] usb 3-1: SerialNumber: syz [ 916.831753][ T5883] usb 3-1: config 0 descriptor?? [ 916.876449][ T1208] usb 6-1: USB disconnect, device number 42 [ 917.128373][ T5883] usb 3-1: USB disconnect, device number 95 [ 917.400754][ T5011] netlink: 'syz.0.14242': attribute type 25 has an invalid length. [ 917.586836][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14245'. [ 918.001870][ T5037] netlink: 'syz.2.14257': attribute type 14 has an invalid length. [ 918.387851][ T1208] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 918.479022][ T5050] openvswitch: netlink: Multiple metadata blocks provided [ 918.606813][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.626302][ T1208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.639807][ T1208] usb 6-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 918.653271][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.727179][ T1208] usb 6-1: config 0 descriptor?? [ 918.834908][ T5061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14268'. [ 918.846782][ T5061] netem: unknown loss type 13 [ 918.856299][ T5061] netem: change failed [ 918.870801][ T5064] team0: No ports can be present during mode change [ 919.166272][ T5075] IPVS: Error connecting to the multicast addr [ 919.184687][ T1208] ntrig 0003:1B96:000F.0081: unknown main item tag 0x0 [ 919.208783][ T1208] ntrig 0003:1B96:000F.0081: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.5-1/input0 [ 919.212014][ T30] kauditd_printk_skb: 9116 callbacks suppressed [ 919.212031][ T30] audit: type=1400 audit(2000000223.759:2116996): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 919.256034][ T30] audit: type=1400 audit(2000000223.759:2116997): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 919.278335][ T30] audit: type=1400 audit(2000000223.759:2116998): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 919.302941][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 919.302965][ T5833] audit: audit_lost=451340 audit_rate_limit=0 audit_backlog_limit=64 [ 919.302981][ T5833] audit: backlog limit exceeded [ 919.303006][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 919.303041][ T5833] audit: audit_lost=451341 audit_rate_limit=0 audit_backlog_limit=64 [ 919.303055][ T5833] audit: backlog limit exceeded [ 919.303074][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 919.409016][ T1208] ntrig 0003:1B96:000F.0081: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 919.638100][ T5883] usb 6-1: USB disconnect, device number 43 [ 919.873443][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14281'. [ 919.902566][ T5090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14281'. [ 921.217034][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14307'. [ 921.418812][ T5162] bridge0: port 3(syz_tun) entered blocking state [ 921.438010][ T5162] bridge0: port 3(syz_tun) entered disabled state [ 921.458796][ T5162] syz_tun: entered allmulticast mode [ 921.500808][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 921.522924][ T5162] syz_tun: entered promiscuous mode [ 921.734572][ T5883] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 921.742687][ T5159] syz.6.14311 (5159): drop_caches: 2 [ 921.749302][ T5159] syz.6.14311 (5159): drop_caches: 2 [ 921.797996][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 921.831487][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 921.841177][ T10] usb 2-1: config 0 has no interface number 0 [ 921.867768][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 921.890791][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.902061][ T10] usb 2-1: Product: syz [ 921.916402][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 921.932969][ T5883] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 921.936968][ T10] usb 2-1: Manufacturer: syz [ 921.947150][ T10] usb 2-1: SerialNumber: syz [ 921.953894][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.990284][ T5883] usb 3-1: config 0 has no interface number 0 [ 921.991207][ T10] usb 2-1: config 0 descriptor?? [ 921.999624][ T5883] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 922.017578][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 922.025596][ T5883] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 922.047322][ T5883] usb 3-1: config 0 interface 8 has no altsetting 0 [ 922.075651][ T5883] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 922.093149][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.103546][ T5883] usb 3-1: Product: syz [ 922.113540][ T5883] usb 3-1: Manufacturer: syz [ 922.122026][ T5883] usb 3-1: SerialNumber: syz [ 922.141656][ T5883] usb 3-1: config 0 descriptor?? [ 922.264846][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 922.308787][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 922.393913][ T5883] ath6kl: Failed to submit usb control message: -71 [ 922.401698][ T5883] ath6kl: unable to send the bmi data to the device: -71 [ 922.436773][ T5883] ath6kl: Unable to send get target info: -71 [ 922.465005][ T5883] ath6kl: Failed to init ath6kl core: -71 [ 922.477506][ T5883] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 922.512525][ T5883] usb 3-1: USB disconnect, device number 96 [ 922.807758][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 922.821397][ T10] usb 2-1: USB disconnect, device number 93 [ 922.844413][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 922.894960][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 922.908022][ T10] quatech2 2-1:0.51: device disconnected [ 923.262363][ T5223] o2cb: This node has not been configured. [ 923.292643][ T5223] o2cb: Cluster check failed. Fix errors before retrying. [ 923.309808][ T5223] (syz.6.14339,5223,0):user_dlm_register:674 ERROR: status = -22 [ 923.337467][ T5223] (syz.6.14339,5223,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 924.571798][ T30] kauditd_printk_skb: 9894 callbacks suppressed [ 924.571816][ T30] audit: type=1400 audit(2000000228.763:2126117): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 924.602804][ T5281] audit: audit_backlog=65 > audit_backlog_limit=64 [ 924.602856][ T5282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 924.610196][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 924.616182][ T5282] audit: audit_lost=451601 audit_rate_limit=0 audit_backlog_limit=64 [ 924.616197][ T5282] audit: backlog limit exceeded [ 924.616695][ T5281] audit: audit_lost=451602 audit_rate_limit=0 audit_backlog_limit=64 [ 924.623967][ T5840] audit: audit_lost=451603 audit_rate_limit=0 audit_backlog_limit=64 [ 924.651417][ T5282] audit: audit_backlog=65 > audit_backlog_limit=64 [ 924.656772][ T30] audit: type=1400 audit(2000000228.763:2126118): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 924.789898][ T5288] tap0: tun_chr_ioctl cmd 2147767506 [ 925.776998][ T5336] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 925.800390][ T5336] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 925.851480][ T5336] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 925.865497][ T5336] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 925.878771][ T5340] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 925.905182][ T5340] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 925.923933][ T5345] sp0: Synchronizing with TNC [ 925.935474][ T5340] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 925.943918][ T5340] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 925.956956][ T5345] sp0: Found TNC [ 926.608328][ T5373] netlink: 'syz.0.14406': attribute type 10 has an invalid length. [ 926.641525][ T5373] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14406'. [ 926.786574][ T5382] netlink: 'syz.5.14410': attribute type 1 has an invalid length. [ 926.822215][ T5382] netlink: 'syz.5.14410': attribute type 2 has an invalid length. [ 926.836504][ T5382] netlink: 'syz.5.14410': attribute type 1 has an invalid length. [ 926.845819][ T5382] netlink: 1156 bytes leftover after parsing attributes in process `syz.5.14410'. [ 927.122852][ T5397] 9pnet_fd: p9_fd_create_unix (5397): problem connecting socket: ./file0: -13 [ 927.294305][ T5407] netem: change failed [ 927.321703][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14423'. [ 927.354446][ T5409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14423'. [ 927.673917][ T5419] syz.5.14429: attempt to access beyond end of device [ 927.673917][ T5419] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 927.707323][ T5419] FAT-fs (loop11): unable to read boot sector [ 927.814526][ T5427] trusted_key: encrypted_key: keyword 'upw' not recognized [ 927.920161][ T5429] netlink: 'syz.0.14433': attribute type 44 has an invalid length. [ 928.021427][ T5155] Bluetooth: hci5: command 0x0405 tx timeout [ 928.248676][ T5444] netlink: 'syz.6.14439': attribute type 12 has an invalid length. [ 928.260360][ T5444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14439'. [ 929.512939][ T5487] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 929.930933][ T30] kauditd_printk_skb: 11776 callbacks suppressed [ 929.930974][ T30] audit: type=1400 audit(2000000233.786:2136577): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 929.941682][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 929.961311][ T30] audit: type=1400 audit(2000000233.786:2136578): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 929.961362][ T30] audit: type=1400 audit(2000000233.786:2136579): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 929.961402][ T30] audit: type=1400 audit(2000000233.786:2136580): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5834 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 929.961442][ T30] audit: type=1400 audit(2000000233.786:2136581): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5834 comm="syz-executor" name="2985" dev="tmpfs" ino=15082 [ 929.961477][ T30] audit: type=1400 audit(2000000233.786:2136582): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5834 comm="syz-executor" path="/2985" dev="tmpfs" ino=15082 [ 929.968971][ T5834] audit: audit_lost=452043 audit_rate_limit=0 audit_backlog_limit=64 [ 929.995302][ T30] audit: type=1400 audit(2000000233.786:2136583): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5834 comm="syz-executor" path="/2985" dev="tmpfs" ino=15082 [ 930.016439][ T5834] audit: backlog limit exceeded [ 930.036020][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.211058][ T5512] tap0: tun_chr_ioctl cmd 1074025677 [ 930.219280][ T5512] tap0: linktype set to 823 [ 930.392998][ T5930] kernel read not supported for file /dsp (pid: 5930 comm: kworker/1:6) [ 932.125104][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 932.332886][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 932.346900][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.383457][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.413965][ T10] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.456734][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 932.463625][ T10] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 932.521051][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.564966][ T10] usb 6-1: config 0 descriptor?? [ 933.031626][ T10] hid-udraw 0003:20D6:CB17.0082: unknown main item tag 0x0 [ 933.066519][ T10] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0082/input/input70 [ 933.166463][ T10] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0082/input/input71 [ 933.244957][ T10] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0082/input/input72 [ 933.316029][ T10] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0082/input/input73 [ 933.383798][ T10] hid-udraw 0003:20D6:CB17.0082: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0 [ 933.440677][ T10] usb 6-1: USB disconnect, device number 44 [ 934.211262][ T5930] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 934.381591][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 934.390188][ T5930] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 934.410648][ T5930] usb 6-1: config 0 has no interface number 0 [ 934.418278][ T5930] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 934.440453][ T5930] usb 6-1: config 0 interface 196 has no altsetting 0 [ 934.476753][ T5930] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 934.498959][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.527675][ T5930] usb 6-1: Product: syz [ 934.532926][ T5930] usb 6-1: Manufacturer: syz [ 934.538018][ T5930] usb 6-1: SerialNumber: syz [ 934.547245][ T5930] usb 6-1: config 0 descriptor?? [ 934.555353][ T5636] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 934.902487][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14536'. [ 934.993644][ T5674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14538'. [ 935.013426][ T5930] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 935.035385][ T5930] ipheth 6-1:0.196: probe with driver ipheth failed with error -22 [ 935.090327][ T5676] tun0: tun_chr_ioctl cmd 1074025676 [ 935.098560][ T5676] tun0: owner set to 0 [ 935.231061][ T5930] usb 6-1: USB disconnect, device number 45 [ 935.279763][ T30] kauditd_printk_skb: 8829 callbacks suppressed [ 935.279802][ T30] audit: type=1400 audit(2000000238.800:2144906): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=5683 comm="syz-executor" name="oom_score_adj" dev="proc" ino=128538 [ 935.333651][ T30] audit: type=1400 audit(2000000238.800:2144907): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5684 comm="syz-executor" name="622" dev="tmpfs" ino=3184 [ 935.356328][ T30] audit: type=1400 audit(2000000238.800:2144908): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5684 comm="syz-executor" name="622" dev="tmpfs" ino=3184 [ 935.378023][ T30] audit: type=1400 audit(2000000238.800:2144909): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=5684 comm="syz-executor" name="622" dev="tmpfs" ino=3184 [ 935.400616][ T5686] program syz.1.14543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 935.424153][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.432103][ T5833] audit: audit_lost=452213 audit_rate_limit=0 audit_backlog_limit=64 [ 935.441830][ T30] audit: type=1400 audit(2000000238.800:2144910): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5684 comm="syz-executor" name="622" dev="tmpfs" ino=3184 [ 935.444138][T29202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.463233][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 935.476705][T29202] audit: audit_lost=452214 audit_rate_limit=0 audit_backlog_limit=64 [ 935.682422][ T5696] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 936.573617][ T5735] loop6: detected capacity change from 0 to 524287487 [ 936.581315][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.590605][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.616285][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.640404][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.664879][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.693056][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.723547][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.739503][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.758359][ T5735] ldm_validate_partition_table(): Disk read failed. [ 936.774062][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.798157][ T5735] Buffer I/O error on dev loop6, logical block 0, async page read [ 936.814689][ T5735] Dev loop6: unable to read RDB block 0 [ 936.844720][ T5735] loop6: unable to read partition table [ 936.873039][ T5735] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 939.768008][ T5852] program syz.5.14614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 939.796374][ T5854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14615'. [ 940.218580][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 940.261357][ T5930] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 940.394498][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.419792][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.432412][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 940.438871][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 940.449812][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.455002][ T5930] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 940.467983][ T10] usb 6-1: config 0 descriptor?? [ 940.483618][ T5930] usb 3-1: config 0 has no interface number 0 [ 940.496572][ T5930] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 940.509814][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.518630][ T5930] usb 3-1: Product: syz [ 940.524038][ T5930] usb 3-1: Manufacturer: syz [ 940.530893][ T5930] usb 3-1: SerialNumber: syz [ 940.542305][ T5930] usb 3-1: config 0 descriptor?? [ 940.562837][ T5930] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 940.634900][ T30] kauditd_printk_skb: 9860 callbacks suppressed [ 940.634917][ T30] audit: type=1400 audit(2000000243.795:2153912): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29202 comm="syz-executor" name="636" dev="tmpfs" ino=3254 [ 940.670424][ T30] audit: type=1400 audit(2000000243.823:2153913): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=29202 comm="syz-executor" path="/636/cgroup.net" dev="tmpfs" ino=3257 [ 940.718988][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 940.728017][ T30] audit: type=1400 audit(2000000243.823:2153914): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29202 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 940.728900][ T5901] audit: audit_backlog=65 > audit_backlog_limit=64 [ 940.756572][ T5865] audit: audit_backlog=65 > audit_backlog_limit=64 [ 940.757494][ T5834] audit: audit_lost=452501 audit_rate_limit=0 audit_backlog_limit=64 [ 940.771110][ T5865] audit: audit_lost=452502 audit_rate_limit=0 audit_backlog_limit=64 [ 940.776700][ T5834] audit: backlog limit exceeded [ 940.784163][ T30] audit: type=1400 audit(2000000243.823:2153915): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=29202 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 940.814294][ T5930] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 940.847451][ T5930] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 941.035217][ T10] cp2112 0003:10C4:EA90.0083: unknown main item tag 0x0 [ 941.055786][ T10] cp2112 0003:10C4:EA90.0083: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 941.133512][ T5918] syz.6.14633 (5918) used greatest stack depth: 19280 bytes left [ 941.239512][ T5920] kvm: user requested TSC rate below hardware speed [ 941.246899][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 941.256419][ T5930] usb 3-1: USB disconnect, device number 97 [ 941.259204][ T10] cp2112 0003:10C4:EA90.0083: Part Number: 0x00 Device Version: 0x00 [ 941.275649][ T5930] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 941.301404][ T5930] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 941.330977][ T5930] quatech2 3-1:0.51: device disconnected [ 941.471143][ T10] cp2112 0003:10C4:EA90.0083: error requesting SMBus config [ 941.502225][ T10] cp2112 0003:10C4:EA90.0083: probe with driver cp2112 failed with error -71 [ 941.526811][ T10] usb 6-1: USB disconnect, device number 46 [ 942.502305][ T5968] overlayfs: missing 'workdir' [ 942.780202][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14657'. [ 943.473159][ T5930] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 943.661558][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 943.673705][ T5930] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 943.698023][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.726517][ T5930] pvrusb2: Hardware description: Terratec Grabster AV400 [ 943.745301][ T5930] pvrusb2: ********** [ 943.755006][ T5930] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 943.777736][ T5930] pvrusb2: Important functionality might not be entirely working. [ 943.786649][ T5930] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 943.802064][ T5930] pvrusb2: ********** [ 943.950495][ T2343] pvrusb2: Invalid write control endpoint [ 944.043764][ T2343] pvrusb2: Invalid write control endpoint [ 944.056497][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 944.071524][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 944.083608][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 944.094903][ T2343] pvrusb2: Device being rendered inoperable [ 944.107916][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 944.116771][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 944.132017][ T2343] pvrusb2: Attached sub-driver cx25840 [ 944.138685][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 944.150233][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 944.181969][ T5930] usb 2-1: USB disconnect, device number 94 [ 944.622720][ T10] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 944.795575][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 944.824844][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 944.857379][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 944.899529][ T6040] macvtap1: entered promiscuous mode [ 944.912377][ T6040] macvtap1: entered allmulticast mode [ 944.919295][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 944.930523][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.940132][ T10] usb 6-1: Product: syz [ 944.944910][ T10] usb 6-1: Manufacturer: syz [ 944.952424][ T10] usb 6-1: SerialNumber: syz [ 944.969082][ T10] usb 6-1: config 0 descriptor?? [ 944.976560][ T6031] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 944.984865][ T6031] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 945.002248][ T10] usb 6-1: ucan: probing device on interface #0 [ 945.067033][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14688'. [ 945.263422][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14692'. [ 945.427219][ T6059] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.14695'. [ 945.469901][ T6059] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 945.538793][T29877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 945.573444][ T1208] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 945.594010][T29877] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 945.651449][ T10] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 945.693540][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 945.783405][ T6073] netlink: 'syz.6.14702': attribute type 25 has an invalid length. [ 945.801917][ T6073] netlink: 'syz.6.14702': attribute type 8 has an invalid length. [ 945.878233][ T10] usb 6-1: USB disconnect, device number 47 [ 945.996507][ T30] kauditd_printk_skb: 8940 callbacks suppressed [ 945.996524][ T30] audit: type=1400 audit(2000000248.818:2162349): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6082 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 946.043263][ T30] audit: type=1400 audit(2000000248.818:2162350): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6082 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 946.067787][ T30] audit: type=1400 audit(2000000248.818:2162351): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6082 comm="syz-executor" name="651" dev="tmpfs" ino=3329 [ 946.070499][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 946.096923][ T30] audit: type=1400 audit(2000000248.818:2162352): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=6082 comm="syz-executor" opid=6082 ocomm="syz-executor" [ 946.103686][ T5834] audit: audit_lost=452672 audit_rate_limit=0 audit_backlog_limit=64 [ 946.130918][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 946.130997][ T6085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 946.138969][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 946.138992][ C1] audit: audit_lost=452673 audit_rate_limit=0 audit_backlog_limit=64 [ 946.139006][ C1] audit: backlog limit exceeded [ 947.162554][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14722'. [ 947.552482][ T5930] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 947.618710][ T6134] cifs: Unknown parameter 'mode' [ 947.725341][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 947.739826][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 947.774888][ T5930] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 947.800566][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.823331][ T5930] usb 3-1: Product: syz [ 947.827552][ T5930] usb 3-1: Manufacturer: syz [ 947.854757][ T5930] usb 3-1: SerialNumber: syz [ 947.895372][ T5930] usb 3-1: config 0 descriptor?? [ 947.903574][ T5930] hub 3-1:0.0: bad descriptor, ignoring hub [ 947.920115][ T5930] hub 3-1:0.0: probe with driver hub failed with error -5 [ 947.948717][ T5930] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76 [ 948.384189][ T6162] netlink: 'syz.1.14744': attribute type 3 has an invalid length. [ 948.417332][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14744'. [ 948.443262][ T6162] netlink: 'syz.1.14744': attribute type 3 has an invalid length. [ 948.467577][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14744'. [ 948.493525][ T5930] usb 3-1: USB disconnect, device number 98 [ 948.639334][ T6173] netlink: 'syz.6.14749': attribute type 10 has an invalid length. [ 948.658243][ T6173] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 948.813944][ T5930] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 948.977789][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 949.011333][ T5930] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 949.030705][ T5930] usb 6-1: config 0 has no interface number 0 [ 949.051849][ T5930] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 949.070824][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.086501][ T5930] usb 6-1: Product: syz [ 949.099142][ T5930] usb 6-1: Manufacturer: syz [ 949.109313][ T5930] usb 6-1: SerialNumber: syz [ 949.142451][ T5930] usb 6-1: config 0 descriptor?? [ 949.160715][ T5930] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 949.175917][ T6194] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14758'. [ 949.197280][ T6194] nbd: illegal input index -65456 [ 949.383192][ T5930] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 949.428704][ T5930] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 949.559983][ T6206] netlink: 146840 bytes leftover after parsing attributes in process `syz.6.14764'. [ 949.594927][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 949.846158][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 949.846645][ T10] usb 6-1: USB disconnect, device number 48 [ 949.880734][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 949.913873][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 949.926120][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 949.957445][ T10] quatech2 6-1:0.51: device disconnected [ 949.979991][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14773'. [ 951.347393][ T30] kauditd_printk_skb: 9525 callbacks suppressed [ 951.347412][ T30] audit: type=1400 audit(2000000253.813:2171422): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=6273 comm="syz-executor" name="675" dev="tmpfs" ino=3450 [ 951.398652][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 951.398729][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 951.406773][ T6275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 951.414533][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 951.426782][ C1] audit: audit_lost=452826 audit_rate_limit=0 audit_backlog_limit=64 [ 951.434932][ C1] audit: backlog limit exceeded [ 951.435107][ T6275] audit: audit_lost=452827 audit_rate_limit=0 audit_backlog_limit=64 [ 951.440722][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 951.448466][ T5833] audit: audit_lost=452828 audit_rate_limit=0 audit_backlog_limit=64 [ 951.705265][ T6288] sock: sock_set_timeout: `syz.6.14799' (pid 6288) tries to set negative timeout [ 951.872130][T25419] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 952.065942][T25419] usb 3-1: config 0 has an invalid interface number: 227 but max is 0 [ 952.084524][T25419] usb 3-1: config 0 has no interface number 0 [ 952.099944][T25419] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 952.119664][T25419] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 952.131943][T25419] usb 3-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 952.156553][T25419] usb 3-1: config 0 interface 227 has no altsetting 0 [ 952.185516][T25419] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 952.205799][T25419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.242747][T25419] usb 3-1: Product: syz [ 952.245650][ T6312] input: syz0 as /devices/virtual/input/input77 [ 952.252840][T25419] usb 3-1: Manufacturer: syz [ 952.265160][T25419] usb 3-1: SerialNumber: syz [ 952.288223][T25419] usb 3-1: config 0 descriptor?? [ 952.294612][ T6282] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 952.311741][T25419] usbtouchscreen 3-1:0.227: probe with driver usbtouchscreen failed with error -90 [ 952.480522][T29204] Bluetooth: hci5: command 0x0405 tx timeout [ 953.576211][T25419] usb 3-1: USB disconnect, device number 99 [ 953.597600][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 953.616150][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 954.309476][ T6390] tipc: New replicast peer: 255.255.255.255 [ 954.316210][ T6390] tipc: Enabled bearer , priority 10 [ 954.547843][ T6401] netlink: 'syz.1.14848': attribute type 1 has an invalid length. [ 954.592983][ T6401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.506012][ T5930] tipc: Node number set to 4293722112 [ 955.703508][ T6438] Attempt to restore checkpoint with obsolete wellknown handles [ 955.805654][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14867'. [ 956.569762][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14880'. [ 956.579569][T25419] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 956.619977][ T6471] bond0: option miimon: invalid value (18446744072166047744) [ 956.627787][ T6471] bond0: option miimon: allowed values 0 - 2147483647 [ 956.711144][ T30] kauditd_printk_skb: 10223 callbacks suppressed [ 956.711162][ T30] audit: type=1400 audit(2000000258.836:2181004): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6474 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 956.754041][ T30] audit: type=1400 audit(2000000258.836:2181005): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6474 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 956.775542][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.777750][T25419] usb 3-1: Using ep0 maxpacket: 16 [ 956.789114][ T30] audit: type=1400 audit(2000000258.836:2181006): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6474 comm="syz-executor" name="1290" dev="tmpfs" ino=6534 [ 956.810839][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.819514][ T30] audit: type=1400 audit(2000000258.836:2181007): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=6474 comm="syz-executor" opid=6474 ocomm="syz-executor" [ 956.846188][ T30] audit: type=1400 audit(2000000258.836:2181008): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6474 comm="syz-executor" name="1290" dev="tmpfs" ino=6534 [ 956.848348][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.869752][ T6461] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.883844][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.892416][ C1] audit: audit_lost=453043 audit_rate_limit=0 audit_backlog_limit=64 [ 956.894185][ T6478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.911627][T25419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.924470][T25419] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 956.951303][T25419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.975113][T25419] usb 3-1: config 0 descriptor?? [ 956.996952][ T6480] bond0: (slave bond1): Error -95 calling ndo_bpf [ 957.397947][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14889'. [ 957.468454][T25419] creative-sb0540 0003:041E:3100.0084: unknown main item tag 0x0 [ 957.494270][T25419] creative-sb0540 0003:041E:3100.0084: item fetching failed at offset 3/5 [ 957.515176][T25419] creative-sb0540 0003:041E:3100.0084: parse failed [ 957.536112][T25419] creative-sb0540 0003:041E:3100.0084: probe with driver creative-sb0540 failed with error -22 [ 957.707002][T25419] usb 3-1: USB disconnect, device number 100 [ 957.817403][ T6510] netlink: 408 bytes leftover after parsing attributes in process `syz.5.14899'. [ 958.338534][ T5930] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 958.366844][ T6531] netlink: 'syz.1.14907': attribute type 9 has an invalid length. [ 958.377430][ T6531] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.14907'. [ 958.509608][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 958.529739][ T5930] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 958.561952][ T5930] usb 6-1: config 0 has no interface number 0 [ 958.578003][ T5930] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 958.606345][ T5930] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 958.626883][ T5930] usb 6-1: config 0 interface 126 has no altsetting 0 [ 958.644199][ T5930] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 958.672022][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.688656][ T5930] usb 6-1: Product: syz [ 958.703461][ T5930] usb 6-1: Manufacturer: syz [ 958.708993][ T5930] usb 6-1: SerialNumber: syz [ 958.757095][ T5930] usb 6-1: config 0 descriptor?? [ 958.763308][ T6519] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 958.791892][ T6519] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 959.065564][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 959.280967][ T5930] ir_usb 6-1:0.126: IR Dongle converter detected [ 959.503094][ T5930] usb 6-1: IRDA class descriptor not found, device not bound [ 959.732135][ T5930] usb 6-1: USB disconnect, device number 49 [ 959.887428][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14935'. [ 959.927732][ T6595] gtp0: entered promiscuous mode [ 959.945840][ T6595] gtp0: entered allmulticast mode [ 960.690646][ T5930] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 960.829454][T25419] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 960.869004][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.880965][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 960.908183][ T5930] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 960.929779][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 960.944793][ T5930] usb 3-1: SerialNumber: syz [ 960.993260][T25419] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.021569][T25419] usb 6-1: config 0 has no interfaces? [ 961.053984][T25419] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 961.086028][T25419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.098658][T25419] usb 6-1: config 0 descriptor?? [ 961.194931][ T5930] usb 3-1: 0:2 : does not exist [ 961.241149][ T5930] usb 3-1: USB disconnect, device number 101 [ 961.330686][T25419] usb 6-1: USB disconnect, device number 50 [ 962.059432][ T30] kauditd_printk_skb: 10447 callbacks suppressed [ 962.059452][ T30] audit: type=1400 audit(2000000263.840:2191068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6684 comm="modprobe" name="/" dev="sda1" ino=2 [ 962.059498][ T6684] audit: audit_backlog=65 > audit_backlog_limit=64 [ 962.066674][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 962.087667][ T6684] audit: audit_lost=453174 audit_rate_limit=0 audit_backlog_limit=64 [ 962.109006][ T6684] audit: backlog limit exceeded [ 962.109274][ T6685] audit: audit_backlog=65 > audit_backlog_limit=64 [ 962.119769][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 962.121652][ T30] audit: type=1400 audit(2000000263.840:2191069): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5840 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 962.129592][ T5840] audit: audit_lost=453175 audit_rate_limit=0 audit_backlog_limit=64 [ 962.151703][ T6685] audit: audit_lost=453176 audit_rate_limit=0 audit_backlog_limit=64 [ 962.619173][ T6701] sctp: [Deprecated]: syz.0.14984 (pid 6701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 962.619173][ T6701] Use struct sctp_sack_info instead [ 962.871656][ T5930] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 962.899198][ T6708] loop9: detected capacity change from 0 to 8 [ 962.917334][ T6708] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 962.922855][ T6708] loop9: partition table partially beyond EOD, truncated [ 962.936146][ T6708] loop9: p1 size 81768186 extends beyond EOD, truncated [ 963.053351][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 963.076929][ T5930] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 963.099771][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.135950][ T5930] usb 6-1: config 0 descriptor?? [ 963.234104][ T6718] vlan0: entered promiscuous mode [ 963.377259][ T5930] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 963.410068][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 963.454329][ T5930] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 963.483901][ T5930] usb 6-1: media controller created [ 963.544523][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 963.597471][ T5930] az6027: usb out operation failed. (-71) [ 963.620647][ T5930] az6027: usb out operation failed. (-71) [ 963.626811][ T5930] stb0899_attach: Driver disabled by Kconfig [ 963.642024][ T5930] az6027: no front-end attached [ 963.642024][ T5930] [ 963.649815][ T5930] az6027: usb out operation failed. (-71) [ 963.663014][ T5930] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 963.677944][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input79 [ 963.693093][ T5930] dvb-usb: schedule remote query interval to 400 msecs. [ 963.700853][ T5930] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 963.715180][ T5930] usb 6-1: USB disconnect, device number 51 [ 963.754243][ T5930] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 964.684480][ T6756] ieee802154 phy1 wpan1: encryption failed: -126 [ 964.752330][ T6760] futex_wake_op: syz.2.15012 tries to shift op by 32; fix this program [ 965.084810][T25419] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 965.257961][T25419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 965.279614][T25419] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 965.299050][T25419] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 965.308557][T25419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.321920][T25419] usb 6-1: Product: syz [ 965.326761][T25419] usb 6-1: Manufacturer: syz [ 965.333703][T25419] usb 6-1: SerialNumber: syz [ 965.354866][T25419] usb 6-1: config 0 descriptor?? [ 965.367671][T25419] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 965.683797][T25419] usb 6-1: USB disconnect, device number 52 [ 965.918390][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 966.099892][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 966.107625][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 966.123561][ T10] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 966.133054][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.141050][ T10] usb 2-1: Product: syz [ 966.145264][ T10] usb 2-1: Manufacturer: syz [ 966.150145][ T10] usb 2-1: SerialNumber: syz [ 966.158871][ T10] usb 2-1: config 0 descriptor?? [ 966.167124][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 966.173262][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 966.183075][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.415270][ T30] kauditd_printk_skb: 7438 callbacks suppressed [ 967.415287][ T30] audit: type=1400 audit(2000000268.854:2198045): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5833 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 967.445902][ T30] audit: type=1400 audit(2000000268.873:2198046): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23774 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 967.453331][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 967.466359][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 967.472681][T23774] audit: audit_backlog=65 > audit_backlog_limit=64 [ 967.479176][ C1] audit: audit_lost=453331 audit_rate_limit=0 audit_backlog_limit=64 [ 967.479197][ C1] audit: backlog limit exceeded [ 967.484411][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 967.506150][ C1] audit: audit_lost=453332 audit_rate_limit=0 audit_backlog_limit=64 [ 967.506153][T23774] audit: audit_lost=453333 audit_rate_limit=0 audit_backlog_limit=64 [ 967.739409][ T6841] ipvlan2: entered promiscuous mode [ 967.745230][ T6841] ipvlan2: entered allmulticast mode [ 967.767671][ T6841] macvlan1: entered allmulticast mode [ 967.774159][ T6841] veth1_vlan: entered allmulticast mode [ 968.016150][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15055'. [ 968.395900][ T6869] loop9: detected capacity change from 0 to 7 [ 968.419014][ T6869] buffer_io_error: 6 callbacks suppressed [ 968.419033][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.433683][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.441931][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.450008][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.460797][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.471354][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.483084][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.493528][ T6869] ldm_validate_partition_table(): Disk read failed. [ 968.502552][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.512952][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.523255][ T6869] Buffer I/O error on dev loop9, logical block 0, async page read [ 968.533833][ T6869] Dev loop9: unable to read RDB block 0 [ 968.542416][ T6869] loop9: unable to read partition table [ 968.550994][ T6869] loop9: partition table beyond EOD, truncated [ 968.557507][ T6869] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 968.557507][ T6869] ) failed (rc=-5) [ 968.902651][ T5883] usb 2-1: USB disconnect, device number 95 [ 969.061256][ T5902] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 969.244625][ T5902] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.268306][ T5902] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 969.281562][ T5902] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 969.292793][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 969.329115][ T5902] usb 6-1: SerialNumber: syz [ 969.600104][ T5902] usb 6-1: 0:2 : does not exist [ 969.621283][ T5902] usb 6-1: USB disconnect, device number 53 [ 970.931512][ T6953] sctp: [Deprecated]: syz.0.15103 (pid 6953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.931512][ T6953] Use struct sctp_sack_info instead [ 971.177977][ T5902] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 971.370739][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 971.386231][ T5902] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 971.406179][ T5902] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 971.434842][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 971.456588][ T5902] usb 3-1: config 1 has no interface number 0 [ 971.462751][ T5902] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 971.481068][ T5902] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 971.499214][ T5902] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 971.515089][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.541245][ T5902] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 971.769473][ T5902] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 972.259330][ T10] usb 3-1: USB disconnect, device number 102 [ 972.267192][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 972.785390][ T30] kauditd_printk_skb: 9041 callbacks suppressed [ 972.785409][ T30] audit: type=1400 audit(2000000273.877:2206289): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7007 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 972.818170][ T5840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 972.818254][ T7009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 972.834944][ T7009] audit: audit_lost=453600 audit_rate_limit=0 audit_backlog_limit=64 [ 972.839008][ T5840] audit: audit_lost=453601 audit_rate_limit=0 audit_backlog_limit=64 [ 972.843973][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 972.844000][ C1] audit: audit_lost=453602 audit_rate_limit=0 audit_backlog_limit=64 [ 972.844017][ C1] audit: backlog limit exceeded [ 972.844130][ T7010] audit: audit_backlog=65 > audit_backlog_limit=64 [ 972.844147][ T7010] audit: audit_lost=453603 audit_rate_limit=0 audit_backlog_limit=64 [ 973.686256][ T7044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15145'. [ 973.751042][ T7044] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 973.955033][ T7054] random: crng reseeded on system resumption [ 974.344717][ T7076] mkiss: ax0: crc mode is auto. [ 974.492035][ T5902] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 974.674120][ T7069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.699496][ T7069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.741768][ T5155] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 974.741934][ T5155] Bluetooth: hci4: adv larger than maximum supported [ 974.754072][ T5155] Bluetooth: hci4: Malformed LE Event: 0x0d [ 974.771437][ T5902] usb 6-1: unable to get BOS descriptor or descriptor too short [ 974.803168][ T5902] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 974.810921][ T5902] usb 6-1: can't read configurations, error -71 [ 975.892815][ T5883] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 976.069231][ T5883] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 976.078398][ T5883] usb 2-1: config 0 has no interface number 0 [ 976.089255][ T5883] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 976.104861][ T5883] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 976.119230][ T5883] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 976.135003][ T5883] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 976.147467][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 976.163430][ T5883] usb 2-1: Product: syz [ 976.167740][ T5883] usb 2-1: SerialNumber: syz [ 976.170544][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 976.185713][ T5883] usb 2-1: config 0 descriptor?? [ 976.196185][ T5883] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 976.212939][ T5883] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input81 [ 976.435361][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.445624][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.454665][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.463009][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.471365][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.478998][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.487236][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.494477][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.502091][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.509418][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.517211][ T5883] usb 2-1: USB disconnect, device number 96 [ 976.524366][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 976.544468][ T5883] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 976.821747][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15199'. [ 976.922776][ T7161] sp0: Synchronizing with TNC [ 976.934981][T29877] [ 976.937493][T29877] ===================================================== [ 976.944590][T29877] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 976.952486][T29877] 6.16.0-rc6-syzkaller #0 Not tainted [ 976.957855][T29877] ----------------------------------------------------- [ 976.965743][T29877] kworker/u8:18/29877 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 976.974767][T29877] ffffffff8ece0ab8 (disc_data_lock){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x480 [ 976.986929][T29877] [ 976.986929][T29877] and this task is already holding: [ 976.994716][T29877] ffffffff99dcafd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 977.004378][T29877] which would create a new lock dependency: [ 977.010715][T29877] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 977.018558][T29877] [ 977.018558][T29877] but this new dependency connects a HARDIRQ-irq-safe lock: [ 977.028730][T29877] (&port_lock_key){-.-.}-{3:3} [ 977.028753][T29877] [ 977.028753][T29877] ... which became HARDIRQ-irq-safe at: [ 977.043055][T29877] lock_acquire+0x120/0x360 [ 977.048495][T29877] _raw_spin_lock_irqsave+0xa7/0xf0 [ 977.054057][T29877] serial8250_handle_irq+0x6b/0xbb0 [ 977.059926][T29877] serial8250_default_handle_irq+0xbf/0x1b0 [ 977.066274][T29877] serial8250_interrupt+0xa5/0x1d0 [ 977.072643][T29877] __handle_irq_event_percpu+0x28c/0x980 [ 977.078996][T29877] handle_irq_event+0x8b/0x1e0 [ 977.083940][T29877] handle_edge_irq+0x267/0x9c0 [ 977.089155][T29877] __common_interrupt+0x140/0x250 [ 977.094793][T29877] common_interrupt+0xb6/0xe0 [ 977.099560][T29877] asm_common_interrupt+0x26/0x40 [ 977.104650][T29877] pv_native_safe_halt+0x13/0x20 [ 977.110374][T29877] default_idle+0x13/0x20 [ 977.114842][T29877] default_idle_call+0x74/0xb0 [ 977.119702][T29877] do_idle+0x1e8/0x510 [ 977.123862][T29877] cpu_startup_entry+0x44/0x60 [ 977.128885][T29877] rest_init+0x2de/0x300 [ 977.133343][T29877] start_kernel+0x47d/0x500 [ 977.138647][T29877] x86_64_start_reservations+0x24/0x30 [ 977.144288][T29877] x86_64_start_kernel+0x143/0x1c0 [ 977.149665][T29877] common_startup_64+0x13e/0x147 [ 977.156079][T29877] [ 977.156079][T29877] to a HARDIRQ-irq-unsafe lock: [ 977.165345][T29877] (disc_data_lock){.+.+}-{3:3} [ 977.165373][T29877] [ 977.165373][T29877] ... which became HARDIRQ-irq-unsafe at: [ 977.181108][T29877] ... [ 977.181118][T29877] lock_acquire+0x120/0x360 [ 977.189349][T29877] _raw_read_lock+0x36/0x50 [ 977.195762][T29877] sixpack_receive_buf+0x5c/0x1450 [ 977.201591][T29877] tty_ldisc_receive_buf+0x119/0x160 [ 977.207755][T29877] tty_port_default_receive_buf+0x6e/0xa0 [ 977.214445][T29877] flush_to_ldisc+0x247/0x720 [ 977.219660][T29877] process_scheduled_works+0xade/0x17b0 [ 977.225910][T29877] worker_thread+0x8a0/0xda0 [ 977.231212][T29877] kthread+0x711/0x8a0 [ 977.236071][T29877] ret_from_fork+0x3fc/0x770 [ 977.240839][T29877] ret_from_fork_asm+0x1a/0x30 [ 977.245857][T29877] [ 977.245857][T29877] other info that might help us debug this: [ 977.245857][T29877] [ 977.257418][T29877] Possible interrupt unsafe locking scenario: [ 977.257418][T29877] [ 977.266747][T29877] CPU0 CPU1 [ 977.273785][T29877] ---- ---- [ 977.281368][T29877] lock(disc_data_lock); [ 977.286143][T29877] local_irq_disable(); [ 977.294290][T29877] lock(&port_lock_key); [ 977.303840][T29877] lock(disc_data_lock); [ 977.311482][T29877] [ 977.315479][T29877] lock(&port_lock_key); [ 977.321209][T29877] [ 977.321209][T29877] *** DEADLOCK *** [ 977.321209][T29877] [ 977.330587][T29877] 6 locks held by kworker/u8:18/29877: [ 977.336310][T29877] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 977.348964][T29877] #1: ffffc9000ebffbc0 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 977.362366][T29877] #2: ffff888024b90ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x720 [ 977.372811][T29877] #3: ffff8880797d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 977.382845][T29877] #4: ffffffff99dcafd8 (&port_lock_key){-.-.}-{3:3}, at: uart_port_ref_lock+0xc4/0x3b0 [ 977.394700][T29877] #5: ffff8880797d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90 [ 977.404616][T29877] [ 977.404616][T29877] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 977.415682][T29877] -> (&port_lock_key){-.-.}-{3:3} { [ 977.421341][T29877] IN-HARDIRQ-W at: [ 977.425593][T29877] lock_acquire+0x120/0x360 [ 977.432990][T29877] _raw_spin_lock_irqsave+0xa7/0xf0 [ 977.440475][T29877] serial8250_handle_irq+0x6b/0xbb0 [ 977.448458][T29877] serial8250_default_handle_irq+0xbf/0x1b0 [ 977.457751][T29877] serial8250_interrupt+0xa5/0x1d0 [ 977.465647][T29877] __handle_irq_event_percpu+0x28c/0x980 [ 977.474398][T29877] handle_irq_event+0x8b/0x1e0 [ 977.482548][T29877] handle_edge_irq+0x267/0x9c0 [ 977.489626][T29877] __common_interrupt+0x140/0x250 [ 977.496501][T29877] common_interrupt+0xb6/0xe0 [ 977.503208][T29877] asm_common_interrupt+0x26/0x40 [ 977.511397][T29877] pv_native_safe_halt+0x13/0x20 [ 977.519465][T29877] default_idle+0x13/0x20 [ 977.526434][T29877] default_idle_call+0x74/0xb0 [ 977.533381][T29877] do_idle+0x1e8/0x510 [ 977.540850][T29877] cpu_startup_entry+0x44/0x60 [ 977.548346][T29877] rest_init+0x2de/0x300 [ 977.555382][T29877] start_kernel+0x47d/0x500 [ 977.562591][T29877] x86_64_start_reservations+0x24/0x30 [ 977.570147][T29877] x86_64_start_kernel+0x143/0x1c0 [ 977.578405][T29877] common_startup_64+0x13e/0x147 [ 977.586307][T29877] IN-SOFTIRQ-W at: [ 977.590632][T29877] lock_acquire+0x120/0x360 [ 977.597093][T29877] _raw_spin_lock_irqsave+0xa7/0xf0 [ 977.604783][T29877] serial8250_handle_irq+0x6b/0xbb0 [ 977.612260][T29877] serial8250_default_handle_irq+0xbf/0x1b0 [ 977.620435][T29877] serial8250_interrupt+0xa5/0x1d0 [ 977.628406][T29877] __handle_irq_event_percpu+0x28c/0x980 [ 977.636155][T29877] handle_irq_event+0x8b/0x1e0 [ 977.643624][T29877] handle_edge_irq+0x267/0x9c0 [ 977.650562][T29877] __common_interrupt+0x140/0x250 [ 977.657715][T29877] common_interrupt+0x5e/0xe0 [ 977.664583][T29877] asm_common_interrupt+0x26/0x40 [ 977.671637][T29877] lock_acquire+0x175/0x360 [ 977.677883][T29877] unwind_next_frame+0xc2/0x2390 [ 977.684926][T29877] arch_stack_walk+0x11c/0x150 [ 977.691612][T29877] stack_trace_save+0x9c/0xe0 [ 977.697953][T29877] kasan_save_track+0x3e/0x80 [ 977.704376][T29877] kasan_save_free_info+0x46/0x50 [ 977.711227][T29877] __kasan_slab_free+0x62/0x70 [ 977.718188][T29877] kmem_cache_free+0x18f/0x400 [ 977.724822][T29877] rcu_core+0xca8/0x1710 [ 977.730849][T29877] handle_softirqs+0x283/0x870 [ 977.737601][T29877] __irq_exit_rcu+0xca/0x1f0 [ 977.744819][T29877] irq_exit_rcu+0x9/0x30 [ 977.750995][T29877] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 977.758638][T29877] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 977.766970][T29877] pv_native_safe_halt+0x13/0x20 [ 977.773959][T29877] default_idle+0x13/0x20 [ 977.780503][T29877] default_idle_call+0x74/0xb0 [ 977.787197][T29877] do_idle+0x1e8/0x510 [ 977.793197][T29877] cpu_startup_entry+0x44/0x60 [ 977.799718][T29877] rest_init+0x2de/0x300 [ 977.805813][T29877] start_kernel+0x47d/0x500 [ 977.812210][T29877] x86_64_start_reservations+0x24/0x30 [ 977.820305][T29877] x86_64_start_kernel+0x143/0x1c0 [ 977.827249][T29877] common_startup_64+0x13e/0x147 [ 977.834440][T29877] INITIAL USE at: [ 977.839926][T29877] lock_acquire+0x120/0x360 [ 977.846818][T29877] _raw_spin_lock_irqsave+0xa7/0xf0 [ 977.854214][T29877] serial8250_do_set_termios+0x4bb/0x1c20 [ 977.862251][T29877] uart_set_options+0x3c2/0x5b0 [ 977.869110][T29877] serial8250_console_setup+0x2f4/0x3c0 [ 977.876992][T29877] univ8250_console_setup+0x43a/0x540 [ 977.884729][T29877] try_enable_preferred_console+0x4e4/0x650 [ 977.892842][T29877] register_console+0x551/0xf90 [ 977.899462][T29877] univ8250_console_init+0x52/0x90 [ 977.907899][T29877] console_init+0x1a1/0x670 [ 977.914765][T29877] start_kernel+0x2cc/0x500 [ 977.921323][T29877] x86_64_start_reservations+0x24/0x30 [ 977.929217][T29877] x86_64_start_kernel+0x143/0x1c0 [ 977.936510][T29877] common_startup_64+0x13e/0x147 [ 977.943307][T29877] } [ 977.947152][T29877] ... key at: [] port_lock_key+0x0/0x20 [ 977.955239][T29877] [ 977.955239][T29877] the dependencies between the lock to be acquired [ 977.955250][T29877] and HARDIRQ-irq-unsafe lock: [ 977.969247][T29877] -> (disc_data_lock){.+.+}-{3:3} { [ 977.974766][T29877] HARDIRQ-ON-R at: [ 977.979020][T29877] lock_acquire+0x120/0x360 [ 977.985609][T29877] _raw_read_lock+0x36/0x50 [ 977.992492][T29877] sixpack_receive_buf+0x5c/0x1450 [ 978.000509][T29877] tty_ldisc_receive_buf+0x119/0x160 [ 978.007755][T29877] tty_port_default_receive_buf+0x6e/0xa0 [ 978.015807][T29877] flush_to_ldisc+0x247/0x720 [ 978.022140][T29877] process_scheduled_works+0xade/0x17b0 [ 978.029422][T29877] worker_thread+0x8a0/0xda0 [ 978.035933][T29877] kthread+0x711/0x8a0 [ 978.041819][T29877] ret_from_fork+0x3fc/0x770 [ 978.048671][T29877] ret_from_fork_asm+0x1a/0x30 [ 978.056052][T29877] SOFTIRQ-ON-R at: [ 978.060918][T29877] lock_acquire+0x120/0x360 [ 978.067189][T29877] _raw_read_lock+0x36/0x50 [ 978.073538][T29877] sixpack_receive_buf+0x5c/0x1450 [ 978.080916][T29877] tty_ldisc_receive_buf+0x119/0x160 [ 978.088012][T29877] tty_port_default_receive_buf+0x6e/0xa0 [ 978.095667][T29877] flush_to_ldisc+0x247/0x720 [ 978.102015][T29877] process_scheduled_works+0xade/0x17b0 [ 978.109236][T29877] worker_thread+0x8a0/0xda0 [ 978.115566][T29877] kthread+0x711/0x8a0 [ 978.121293][T29877] ret_from_fork+0x3fc/0x770 [ 978.127605][T29877] ret_from_fork_asm+0x1a/0x30 [ 978.134541][T29877] INITIAL USE at: [ 978.138421][T29877] lock_acquire+0x120/0x360 [ 978.144497][T29877] _raw_write_lock_irq+0xa2/0xf0 [ 978.151254][T29877] sixpack_close+0x2c/0x280 [ 978.157461][T29877] tty_ldisc_kill+0xa3/0x1a0 [ 978.163704][T29877] tty_ldisc_release+0x174/0x200 [ 978.170303][T29877] tty_release_struct+0x2a/0xd0 [ 978.176885][T29877] tty_release+0xcb0/0x1640 [ 978.182950][T29877] __fput+0x449/0xa70 [ 978.189197][T29877] task_work_run+0x1d4/0x260 [ 978.195781][T29877] exit_to_user_mode_loop+0xec/0x110 [ 978.202848][T29877] do_syscall_64+0x2bd/0x3b0 [ 978.209088][T29877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.216799][T29877] INITIAL READ USE at: [ 978.221387][T29877] lock_acquire+0x120/0x360 [ 978.227873][T29877] _raw_read_lock+0x36/0x50 [ 978.234443][T29877] sixpack_receive_buf+0x5c/0x1450 [ 978.241621][T29877] tty_ldisc_receive_buf+0x119/0x160 [ 978.248915][T29877] tty_port_default_receive_buf+0x6e/0xa0 [ 978.256750][T29877] flush_to_ldisc+0x247/0x720 [ 978.263457][T29877] process_scheduled_works+0xade/0x17b0 [ 978.271102][T29877] worker_thread+0x8a0/0xda0 [ 978.277713][T29877] kthread+0x711/0x8a0 [ 978.283968][T29877] ret_from_fork+0x3fc/0x770 [ 978.290652][T29877] ret_from_fork_asm+0x1a/0x30 [ 978.297418][T29877] } [ 978.299900][T29877] ... key at: [] disc_data_lock+0x18/0x100 [ 978.307784][T29877] ... acquired at: [ 978.311678][T29877] lock_acquire+0x120/0x360 [ 978.316336][T29877] _raw_read_lock+0x36/0x50 [ 978.321276][T29877] sixpack_write_wakeup+0x30/0x480 [ 978.326755][T29877] tty_wakeup+0xbe/0x100 [ 978.332148][T29877] tty_port_default_wakeup+0xa2/0xf0 [ 978.338971][T29877] serial8250_tx_chars+0x72e/0x970 [ 978.346257][T29877] __start_tx+0x33b/0x480 [ 978.351121][T29877] __uart_start+0x23c/0x440 [ 978.356859][T29877] uart_write+0xdc/0x130 [ 978.361570][T29877] sixpack_receive_buf+0x447/0x1450 [ 978.366935][T29877] tty_ldisc_receive_buf+0x119/0x160 [ 978.372475][T29877] tty_port_default_receive_buf+0x6e/0xa0 [ 978.378383][T29877] flush_to_ldisc+0x247/0x720 [ 978.383324][T29877] process_scheduled_works+0xade/0x17b0 [ 978.389188][T29877] worker_thread+0x8a0/0xda0 [ 978.394227][T29877] kthread+0x711/0x8a0 [ 978.398587][T29877] ret_from_fork+0x3fc/0x770 [ 978.404060][T29877] ret_from_fork_asm+0x1a/0x30 [ 978.410107][T29877] [ 978.412499][T29877] [ 978.412499][T29877] stack backtrace: [ 978.420408][T29877] CPU: 0 UID: 0 PID: 29877 Comm: kworker/u8:18 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 978.420425][T29877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 978.420434][T29877] Workqueue: events_unbound flush_to_ldisc [ 978.420457][T29877] Call Trace: [ 978.420468][T29877] [ 978.420476][T29877] dump_stack_lvl+0x189/0x250 [ 978.420490][T29877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 978.420501][T29877] ? __pfx__printk+0x10/0x10 [ 978.420516][T29877] validate_chain+0x1f05/0x2140 [ 978.420533][T29877] __lock_acquire+0xab9/0xd20 [ 978.420543][T29877] ? sixpack_write_wakeup+0x30/0x480 [ 978.420555][T29877] lock_acquire+0x120/0x360 [ 978.420564][T29877] ? sixpack_write_wakeup+0x30/0x480 [ 978.420576][T29877] ? ldsem_down_read_trylock+0x137/0x1a0 [ 978.420588][T29877] ? tty_ldisc_ref+0x1c/0x90 [ 978.420599][T29877] _raw_read_lock+0x36/0x50 [ 978.420612][T29877] ? sixpack_write_wakeup+0x30/0x480 [ 978.420622][T29877] sixpack_write_wakeup+0x30/0x480 [ 978.420634][T29877] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 978.420644][T29877] tty_wakeup+0xbe/0x100 [ 978.420653][T29877] tty_port_default_wakeup+0xa2/0xf0 [ 978.420666][T29877] serial8250_tx_chars+0x72e/0x970 [ 978.420683][T29877] __start_tx+0x33b/0x480 [ 978.420699][T29877] __uart_start+0x23c/0x440 [ 978.420714][T29877] uart_write+0xdc/0x130 [ 978.420832][T29877] sixpack_receive_buf+0x447/0x1450 [ 978.420985][T29877] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 978.420997][T29877] tty_ldisc_receive_buf+0x119/0x160 [ 978.421011][T29877] tty_port_default_receive_buf+0x6e/0xa0 [ 978.421024][T29877] flush_to_ldisc+0x247/0x720 [ 978.421036][T29877] ? process_scheduled_works+0x9ef/0x17b0 [ 978.421048][T29877] process_scheduled_works+0xade/0x17b0 [ 978.421065][T29877] ? __pfx_process_scheduled_works+0x10/0x10 [ 978.421079][T29877] worker_thread+0x8a0/0xda0 [ 978.421095][T29877] kthread+0x711/0x8a0 [ 978.421108][T29877] ? __pfx_worker_thread+0x10/0x10 [ 978.421121][T29877] ? __pfx_kthread+0x10/0x10 [ 978.421132][T29877] ? _raw_spin_unlock_irq+0x23/0x50 [ 978.421145][T29877] ? lockdep_hardirqs_on+0x9c/0x150 [ 978.421158][T29877] ? __pfx_kthread+0x10/0x10 [ 978.421169][T29877] ret_from_fork+0x3fc/0x770 [ 978.421179][T29877] ? __pfx_ret_from_fork+0x10/0x10 [ 978.421190][T29877] ? __switch_to_asm+0x39/0x70 [ 978.421201][T29877] ? __switch_to_asm+0x33/0x70 [ 978.421211][T29877] ? __pfx_kthread+0x10/0x10 [ 978.421223][T29877] ret_from_fork_asm+0x1a/0x30 [ 978.421238][T29877] [ 978.688105][ T30] kauditd_printk_skb: 7999 callbacks suppressed [ 978.688122][ T30] audit: type=1400 audit(2000000279.153:2213524): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=3494 comm="kworker/u8:7" saddr=10.128.0.169 src=30008 daddr=10.128.0.218 dest=46840 netif=eth0 [ 978.718336][ T30] audit: type=1400 audit(2000000279.153:2213525): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=3494 comm="kworker/u8:7" saddr=10.128.0.169 src=30008 daddr=10.128.0.218 dest=46840 netif=eth0 [ 978.741737][ T30] audit: type=1400 audit(2000000279.153:2213526): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=3494 comm="kworker/u8:7" saddr=10.128.0.169 src=30008 daddr=10.128.0.218 dest=46840 netif=eth0 [ 978.765206][ T30] audit: type=1400 audit(2000000279.153:2213527): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=3494 comm="kworker/u8:7" saddr=10.128.0.169 src=30008 daddr=10.128.0.218 dest=46840 netif=eth0 [ 978.800944][ T30] audit: type=1400 audit(2000000279.508:2213528): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5834 comm="syz-executor" opid=7126 ocomm="syz.1.15184" [ 978.819687][ T30] audit: type=1400 audit(2000000279.508:2213529): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=5834 comm="syz-executor" opid=7126 ocomm="syz.1.15184" [ 978.859225][ T5834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 978.866058][ T5834] audit: audit_lost=453858 audit_rate_limit=0 audit_backlog_limit=64 [ 978.874951][ T5834] audit: backlog limit exceeded [ 978.875845][ T5833] audit: audit_backlog=65 > audit_backlog_limit=64