last executing test programs: 2m52.331449588s ago: executing program 1 (id=1416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000304006c000500190107000000080026006c09000056033300"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 2m52.26725803s ago: executing program 1 (id=1418): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m52.169159242s ago: executing program 1 (id=1421): connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x828101, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x30, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "dc1cec927976da9e1a0567efa37d"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4009}, 0x0) 2m52.089058654s ago: executing program 1 (id=1424): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2m52.027989553s ago: executing program 1 (id=1425): setresuid(0x0, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m51.635677866s ago: executing program 1 (id=1432): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x63, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 2m51.434128687s ago: executing program 32 (id=1432): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x63, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 4.77736076s ago: executing program 4 (id=4810): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000040)={0x40, 0x16, 0x6, "3042bce74bf6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.512364001s ago: executing program 2 (id=4824): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x8}]}}]}, 0x38}}, 0x44080) 3.454141064s ago: executing program 2 (id=4826): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000001140), 0x0, 0x0}) 3.394890381s ago: executing program 2 (id=4828): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x30, 0x2, {0x3, 0x23, 'E'}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x40, 0x15, 0xffffffffffffffae, "2b68f918bce42d1fa105b88ff64a1526a01749edc0bd21c5141f6ff84536bb8496f47e1ba6e4ddcb5bbe443e19937d8fc7e5"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x9}}) 3.106425137s ago: executing program 3 (id=4833): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "084418", 0x14, 0x6, 0x0, @remote, @local, {[], {{0xe00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.069195281s ago: executing program 3 (id=4834): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.727235543s ago: executing program 4 (id=4842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x1b78, &(0x7f0000019140)={0x0, 0x385a, 0x2, 0x3, 0x311}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 2.661509809s ago: executing program 4 (id=4843): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 2.519616657s ago: executing program 4 (id=4845): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(r0, &(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x262) 2.488076105s ago: executing program 4 (id=4846): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x39) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 2.153698376s ago: executing program 3 (id=4848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.075563456s ago: executing program 4 (id=4849): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fremovexattr(0xffffffffffffffff, 0x0) 1.900910541s ago: executing program 33 (id=4849): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fremovexattr(0xffffffffffffffff, 0x0) 1.890526017s ago: executing program 3 (id=4852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007b01"]) 1.741389596s ago: executing program 0 (id=4855): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf250200000000000000060007000b0000000c0008"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.650319002s ago: executing program 3 (id=4857): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000000)=[{0x0, 0xff7f}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 1.521522966s ago: executing program 0 (id=4859): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="5f444881", 0x4, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x3}, 0x1c) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x60) 1.422045414s ago: executing program 3 (id=4860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000401904000600000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffff37, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xb}, 0x0}, 0x0) 1.235327328s ago: executing program 5 (id=4863): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@setlink={0x28, 0x13, 0x1, 0x200000, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x20802}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0) 708.994982ms ago: executing program 5 (id=4864): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 596.36077ms ago: executing program 0 (id=4865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000050098031f"]) 585.507614ms ago: executing program 5 (id=4866): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 457.383511ms ago: executing program 5 (id=4867): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010003007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) 389.284423ms ago: executing program 0 (id=4868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000000c0), 0x10) 377.635554ms ago: executing program 5 (id=4869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 315.561504ms ago: executing program 2 (id=4870): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) 237.352223ms ago: executing program 2 (id=4871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r2, 0xb}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x104beed1, 0x0, 0x0, r2, 0x1f}) 187.596207ms ago: executing program 0 (id=4872): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000680)="0a6ca2e6", 0x4}], 0x1) shutdown(r0, 0x1) 109.466484ms ago: executing program 2 (id=4873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000100)={0xa4, 0x0, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000240)) 48.880663ms ago: executing program 0 (id=4874): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 0s ago: executing program 5 (id=4875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044080) kernel console output (not intermixed with test programs): 1': attribute type 2 has an invalid length. [ 220.967122][ T30] audit: type=1400 audit(220.595:917): avc: denied { search } for pid=12777 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.007588][T12790] netlink: 119 bytes leftover after parsing attributes in process `syz.4.3101'. [ 221.052431][ T30] audit: type=1400 audit(220.625:918): avc: denied { read } for pid=12778 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.128840][ T30] audit: type=1400 audit(220.625:919): avc: denied { open } for pid=12778 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.153256][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.176326][ T30] audit: type=1400 audit(220.625:920): avc: denied { getattr } for pid=12778 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.387308][T12814] lo: entered promiscuous mode [ 221.401584][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 221.427057][T12814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.609752][ T971] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 221.658362][T12831] netlink: 'syz.3.3116': attribute type 3 has an invalid length. [ 221.684309][T12831] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3116'. [ 221.779689][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.952087][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.960647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.086008][T12861] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3127'. [ 222.250034][ T5870] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 222.304852][T12878] input: syz0 as /devices/virtual/input/input49 [ 222.433211][ T5870] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.451810][ T5870] usb 6-1: config 0 has no interface number 0 [ 222.462314][ T5870] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.514249][ T5870] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.541289][ T5870] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 222.587884][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.605649][T12894] team0: Device gtp0 is of different type [ 222.632332][ T5870] usb 6-1: config 0 descriptor?? [ 222.819291][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.853127][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3141'. [ 223.061631][ T5870] uclogic 0003:28BD:0905.0027: Interface probing failed: -22 [ 223.089274][ T5870] uclogic 0003:28BD:0905.0027: interface is invalid, ignoring [ 223.264188][ T5871] usb 6-1: USB disconnect, device number 17 [ 223.303327][T12935] 9p: Unknown Cache mode or invalid value f [ 223.520128][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 223.602651][T12956] openvswitch: netlink: IPv4 tunnel dst address is zero [ 223.637599][T12959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.696353][ T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.726369][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.748088][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.768887][ T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 223.777072][ T24] usb 4-1: Product: syz [ 223.796296][ T24] usb 4-1: Manufacturer: syz [ 223.806860][ T24] usb 4-1: SerialNumber: syz [ 223.818773][T12971] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 223.826568][ T24] usb 4-1: config 0 descriptor?? [ 223.838345][ T24] usb 4-1: selecting invalid altsetting 0 [ 223.844486][T12971] macvlan3: entered allmulticast mode [ 223.849982][T12971] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 223.860706][T12971] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 223.867963][T12971] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 223.876967][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.898921][ T971] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 224.031279][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3173'. [ 224.054877][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.074194][ T5870] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 224.091966][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.098119][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3175'. [ 224.103613][ T5873] usb 4-1: USB disconnect, device number 34 [ 224.122200][ T971] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 224.132899][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.156367][ T971] usb 5-1: config 0 descriptor?? [ 224.258964][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 224.270791][ T5870] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 224.279379][ T5870] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 224.286622][ T5870] usb 1-1: config 0 has no interface number 0 [ 224.295359][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 224.304918][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.323414][ T5870] usb 1-1: Product: syz [ 224.337497][ T5870] usb 1-1: Manufacturer: syz [ 224.349061][ T5870] usb 1-1: SerialNumber: syz [ 224.360067][ T5870] usb 1-1: config 0 descriptor?? [ 224.375659][ T5870] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 224.382134][ T5870] usb 1-1: No valid video chain found. [ 224.583023][ T971] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 224.608587][ T971] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 224.621640][ T5870] usb 1-1: USB disconnect, device number 34 [ 224.631453][ T971] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0028/input/input50 [ 224.651056][ T971] cm6533_jd 0003:0D8C:0022.0028: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 224.701513][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3183'. [ 224.712251][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3183'. [ 224.834470][ T5870] usb 5-1: USB disconnect, device number 31 [ 224.879501][T13017] rtc_cmos 00:00: Alarms can be up to one day in the future [ 224.900550][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.428850][ T971] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 225.580648][ T971] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 225.590403][ T5870] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 225.601973][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.615532][ T971] usb 6-1: config 0 descriptor?? [ 225.758974][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 225.772865][ T5870] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 225.786575][ T5870] usb 1-1: config 0 has no interface number 0 [ 225.795173][ T5870] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 225.805545][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.813684][ T5870] usb 1-1: Product: syz [ 225.818150][ T5870] usb 1-1: Manufacturer: syz [ 225.822935][ T5870] usb 1-1: SerialNumber: syz [ 225.836225][ T5870] usb 1-1: config 0 descriptor?? [ 225.844165][ T5870] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 225.940597][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.042333][ T971] apple 0003:05AC:027D.0029: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.5-1/input0 [ 226.074493][ T5870] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 226.087260][ T5870] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 226.287167][ T5871] usb 6-1: USB disconnect, device number 18 [ 226.335112][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.354110][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.579374][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 226.588309][ T5870] usb 1-1: USB disconnect, device number 35 [ 226.599454][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 226.613624][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 226.625851][ T5870] quatech2 1-1:0.51: device disconnected [ 226.856123][T13101] kvm: kvm [13100]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008e) [ 226.979242][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.067865][T13113] netlink: 'syz.4.3232': attribute type 5 has an invalid length. [ 227.244883][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 227.244898][ T30] audit: type=1400 audit(227.225:959): avc: denied { shutdown } for pid=13123 comm="syz.5.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.492608][ T5873] kernel read not supported for file /dsp (pid: 5873 comm: kworker/0:5) [ 227.543823][T13138] kvm: user requested TSC rate below hardware speed [ 227.803720][T13152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3248'. [ 228.024318][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.151061][T13168] sp0: Synchronizing with TNC [ 228.340263][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.348570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.365670][ T30] audit: type=1400 audit(228.345:960): avc: denied { write } for pid=13179 comm="syz.4.3262" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 228.689749][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.819101][ T5908] kernel read not supported for file /dsp1 (pid: 5908 comm: kworker/1:6) [ 228.941914][T13210] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3276'. [ 228.969085][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3276'. [ 228.981190][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.989490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.059246][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.329121][ T30] audit: type=1400 audit(229.305:961): avc: denied { append } for pid=13231 comm="syz.4.3286" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 229.491275][T13235] xt_hashlimit: max too large, truncated to 1048576 [ 229.630612][ T6421] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.958481][T13247] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 230.035174][T13247] CIFS mount error: No usable UNC path provided in device string! [ 230.035174][T13247] [ 230.085495][T13247] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 230.099061][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.557904][T13278] dvmrp1: entered allmulticast mode [ 230.642221][T13283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3307'. [ 230.661193][ T5873] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 230.822464][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 230.834533][ T5873] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 230.846843][ T5873] usb 6-1: config 0 has no interface number 0 [ 230.859016][ T5873] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 230.869923][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.878255][ T5873] usb 6-1: Product: syz [ 230.882587][ T5873] usb 6-1: Manufacturer: syz [ 230.887639][ T5873] usb 6-1: SerialNumber: syz [ 230.895200][ T5873] usb 6-1: config 0 descriptor?? [ 230.904396][ T5873] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.125619][ T5873] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 231.154509][ T5873] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 231.204937][ T5871] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 231.350722][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.359521][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.399295][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 231.411568][ T5871] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 231.421980][ T5871] usb 4-1: config 0 has no interface number 0 [ 231.428084][ T30] audit: type=1400 audit(231.405:962): avc: denied { write } for pid=13322 comm="syz.0.3326" name="cgroup.subtree_control" dev="cgroup2" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.451914][ T5871] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.468418][ T5871] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.487474][ T30] audit: type=1400 audit(231.405:963): avc: denied { open } for pid=13322 comm="syz.0.3326" path="" dev="cgroup2" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.511014][ T30] audit: type=1400 audit(231.415:964): avc: denied { ioctl } for pid=13322 comm="syz.0.3326" path="" dev="cgroup2" ino=360 ioctlcmd=0x54c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 231.539662][ T5871] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 231.548722][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 231.556910][ T5871] usb 4-1: Product: syz [ 231.561111][ T5871] usb 4-1: SerialNumber: syz [ 231.567596][ T5871] usb 4-1: config 0 descriptor?? [ 231.572880][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 231.575199][ T5871] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 231.583706][ T971] usb 6-1: USB disconnect, device number 19 [ 231.588205][ T5871] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input52 [ 231.613443][ T971] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 231.634740][ T971] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 231.647560][ T971] quatech2 6-1:0.51: device disconnected [ 231.715413][ T6463] Bluetooth: hci5: Frame reassembly failed (-84) [ 231.726016][T13331] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 231.783411][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 231.992166][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.992195][ T5871] usb 4-1: USB disconnect, device number 35 [ 231.999133][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 232.016260][ T5871] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 232.083528][T13314] [U]  [ 232.185698][ T30] audit: type=1400 audit(232.165:965): avc: denied { setopt } for pid=13338 comm="syz.4.3334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 232.303322][T13345] input: syz0 as /devices/virtual/input/input53 [ 232.373797][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3338'. [ 232.388838][ T971] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 232.549412][ T971] usb 6-1: Using ep0 maxpacket: 32 [ 232.572341][ T971] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 232.583340][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.601924][ T971] usb 6-1: config 0 descriptor?? [ 232.609936][ T971] gspca_main: sunplus-2.14.0 probing 041e:400b [ 232.624255][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3345'. [ 232.701872][ T5871] IPVS: starting estimator thread 0... [ 232.731709][ T30] audit: type=1400 audit(232.705:966): avc: denied { ioctl } for pid=13370 comm="syz.3.3348" path="socket:[42308]" dev="sockfs" ino=42308 ioctlcmd=0x8b18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 232.755783][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.803706][T13369] IPVS: using max 45 ests per chain, 108000 per kthread [ 232.868292][T13379] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3352'. [ 232.881069][T13379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3352'. [ 233.087031][ T30] audit: type=1326 audit(233.065:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.128876][ T30] audit: type=1326 audit(233.095:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.151577][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.180926][ T30] audit: type=1326 audit(233.095:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.203686][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.215748][ T30] audit: type=1326 audit(233.095:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.240678][ T30] audit: type=1326 audit(233.095:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.294764][ T30] audit: type=1326 audit(233.095:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.317546][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.348998][ T30] audit: type=1326 audit(233.095:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.351508][ T6443] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.395091][ T30] audit: type=1326 audit(233.095:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.417848][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.449777][ T971] gspca_sunplus: reg_r err -71 [ 233.455194][ T971] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 233.465036][ T971] usb 6-1: USB disconnect, device number 20 [ 233.475974][ T30] audit: type=1326 audit(233.095:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13390 comm="syz.4.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 233.498750][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.778937][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 233.782056][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 233.876428][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'. [ 234.038379][T13424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.334155][T13443] 9p: Unknown access argument c: -22 [ 234.568173][ T5137] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 234.750493][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3394'. [ 235.389701][ T971] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 235.548941][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 235.567064][ T971] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 235.581540][ T971] usb 5-1: config 0 has no interface number 0 [ 235.615450][ T971] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 235.634829][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.657969][T13522] delete_channel: no stack [ 235.661190][ T971] usb 5-1: Product: syz [ 235.667928][ T971] usb 5-1: Manufacturer: syz [ 235.667982][T13521] delete_channel: no stack [ 235.677996][ T971] usb 5-1: SerialNumber: syz [ 235.691250][ T971] usb 5-1: config 0 descriptor?? [ 235.707730][ T971] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.914791][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3426'. [ 235.922777][ T971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 235.949012][ T971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 236.138948][ T5137] Bluetooth: unknown link type 255 [ 236.144678][ T5137] Bluetooth: hci0: connection err: -111 [ 236.160897][T13551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.339868][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 236.348497][ T5870] usb 5-1: USB disconnect, device number 32 [ 236.368678][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 236.398061][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 236.413702][ T5870] quatech2 5-1:0.51: device disconnected [ 236.534694][ T5137] Bluetooth: hci1: Malformed Event: 0x13 [ 236.549143][ T5871] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 236.597263][T13568] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 236.718847][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 236.726054][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 236.741683][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 236.756318][ T5871] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 236.769453][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.782329][ T5871] usb 1-1: config 0 descriptor?? [ 236.806792][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3440'. [ 236.989131][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3444'. [ 237.235694][ T5871] kovaplus 0003:1E7D:2D50.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 237.569206][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 237.620992][ T5871] kovaplus 0003:1E7D:2D50.002A: couldn't init struct kovaplus_device [ 237.631142][ T5871] kovaplus 0003:1E7D:2D50.002A: couldn't install mouse [ 237.640252][ T5871] kovaplus 0003:1E7D:2D50.002A: probe with driver kovaplus failed with error -71 [ 237.652401][ T5871] usb 1-1: USB disconnect, device number 36 [ 237.721653][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 237.729421][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.739290][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.766998][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.777047][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.795686][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.813888][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.875601][T13621] input: syz0 as /devices/virtual/input/input54 [ 237.994339][T13631] netlink: 82 bytes leftover after parsing attributes in process `syz.2.3465'. [ 238.051050][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 238.058840][ T24] usbtmc 6-1:16.0: can't read capabilities [ 238.234430][T13643] tap0: tun_chr_ioctl cmd 1074025672 [ 238.286820][T13643] tap0: ignored: set checksum disabled [ 238.296314][ T24] usb 6-1: USB disconnect, device number 21 [ 238.435789][T13659] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 238.475792][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 238.475807][ T30] audit: type=1400 audit(238.455:989): avc: denied { append } for pid=13661 comm="syz.3.3482" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 238.534160][ T30] audit: type=1400 audit(238.515:990): avc: denied { mount } for pid=13666 comm="syz.0.3484" name="/" dev="hugetlbfs" ino=42941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 238.643623][ T30] audit: type=1400 audit(238.605:991): avc: denied { mount } for pid=13670 comm="syz.3.3485" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 238.665002][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.673224][ T30] audit: type=1400 audit(238.655:992): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 238.716458][ T971] kernel write not supported for file /input/event2 (pid: 971 comm: kworker/0:2) [ 238.853950][T13679] netlink: 'syz.5.3489': attribute type 2 has an invalid length. [ 238.934931][ T30] audit: type=1400 audit(238.915:993): avc: denied { setattr } for pid=13681 comm="syz.5.3491" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 239.019705][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3494'. [ 239.028591][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'. [ 239.270631][ T30] audit: type=1400 audit(239.255:994): avc: denied { map } for pid=13700 comm="syz.4.3500" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 239.539784][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3507'. [ 239.781145][ T30] audit: type=1400 audit(239.765:995): avc: denied { accept } for pid=13730 comm="syz.3.3514" laddr=fe80::12 lport=37333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.802345][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.814614][ T30] audit: type=1400 audit(239.795:996): avc: denied { read } for pid=13726 comm="syz.0.3512" laddr=fe80::f lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.855255][ T30] audit: type=1400 audit(239.835:997): avc: denied { name_bind } for pid=13733 comm="syz.3.3515" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 240.390779][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3523'. [ 240.427684][ T30] audit: type=1326 audit(240.405:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13752 comm="syz.5.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 241.228835][ T971] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 241.379847][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 241.393604][ T971] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 241.403478][ T971] usb 4-1: config 0 has no interface number 0 [ 241.412014][ T971] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.429552][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.437695][ T971] usb 4-1: Product: syz [ 241.444171][ T971] usb 4-1: Manufacturer: syz [ 241.452486][ T971] usb 4-1: SerialNumber: syz [ 241.460943][ T971] usb 4-1: config 0 descriptor?? [ 241.474842][ T971] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 241.687130][ T971] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 241.705713][ T971] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 242.133945][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 242.134191][ T24] usb 4-1: USB disconnect, device number 36 [ 242.168711][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 242.188215][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 242.203861][ T24] quatech2 4-1:0.51: device disconnected [ 242.508823][T13863] @: renamed from vlan0 (while UP) [ 242.589102][ T971] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 242.751512][ T971] usb 6-1: Using ep0 maxpacket: 8 [ 242.763486][ T971] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 242.777046][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.792283][ T971] usb 6-1: Product: syz [ 242.796466][ T971] usb 6-1: Manufacturer: syz [ 242.801404][ T971] usb 6-1: SerialNumber: syz [ 242.807927][ T971] usb 6-1: config 0 descriptor?? [ 242.820276][ T971] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 243.018870][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 243.020631][ T971] gspca_sn9c2028: read1 error -32 [ 243.036080][ T971] gspca_sn9c2028: read1 error -32 [ 243.041386][T13893] input: syz0 as /devices/virtual/input/input55 [ 243.089093][ T5873] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 243.181794][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 243.194255][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.202250][ T24] usb 4-1: Product: syz [ 243.206382][ T24] usb 4-1: Manufacturer: syz [ 243.211611][ T24] usb 4-1: SerialNumber: syz [ 243.217452][ T24] usb 4-1: config 0 descriptor?? [ 243.248490][ T5871] usb 6-1: USB disconnect, device number 22 [ 243.248813][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 243.261984][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.273200][ T5873] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 243.282267][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.293101][ T5873] usb 5-1: config 0 descriptor?? [ 243.431852][ T24] usb 4-1: ignoring: probably an ADSL modem [ 243.716017][ T5873] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 243.811214][T13903] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3593'. [ 243.833643][ T24] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 243.904131][T13907] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3595'. [ 244.054233][ T24] usb 4-1: USB disconnect, device number 37 [ 244.082421][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 244.082436][ T30] audit: type=1400 audit(244.065:1018): avc: denied { ioctl } for pid=13915 comm="syz.5.3599" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 244.165749][ T971] usb 5-1: USB disconnect, device number 33 [ 244.172494][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3603'. [ 244.172519][T13924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3603'. [ 244.508836][ T5873] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 244.666104][ T5873] usb 6-1: device descriptor read/all, error -71 [ 245.223960][ T30] audit: type=1400 audit(245.205:1019): avc: denied { mount } for pid=13947 comm="syz.5.3613" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 245.299922][ T30] audit: type=1400 audit(245.275:1020): avc: denied { unmount } for pid=13947 comm="syz.5.3613" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 245.761398][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3623'. [ 245.848855][ T5870] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 245.977025][ T30] audit: type=1400 audit(245.955:1021): avc: denied { map } for pid=13983 comm="syz.0.3630" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.000426][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.011252][ T30] audit: type=1400 audit(245.955:1022): avc: denied { execute } for pid=13983 comm="syz.0.3630" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.034865][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.041441][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 246.053580][ T5870] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.084660][ T5870] usb 5-1: config 0 has no interface number 0 [ 246.097885][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.109388][ T5870] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.119506][ T5870] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 246.128531][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.138647][ T5870] usb 5-1: config 0 descriptor?? [ 246.187752][ T30] audit: type=1400 audit(246.165:1023): avc: denied { read } for pid=13997 comm="syz.5.3636" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 246.226631][ T30] audit: type=1400 audit(246.165:1024): avc: denied { open } for pid=13997 comm="syz.5.3636" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 246.249663][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.257787][ T30] audit: type=1400 audit(246.165:1025): avc: denied { ioctl } for pid=13997 comm="syz.5.3636" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 246.282301][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.529173][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 246.688007][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3648'. [ 246.697159][T14024] netlink: 'syz.3.3648': attribute type 21 has an invalid length. [ 246.708011][ T24] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 246.732345][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.748910][ T5870] uclogic 0003:28BD:0094.002C: pen parameters not found [ 246.754593][ T24] usb 6-1: config 0 descriptor?? [ 246.768926][ T5870] uclogic 0003:28BD:0094.002C: interface is invalid, ignoring [ 246.964815][ T5870] usb 5-1: USB disconnect, device number 34 [ 246.975078][ T24] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 246.987445][ T24] hackrf 6-1:0.0: Could not detect board [ 246.993371][ T24] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 247.003344][ T24] usb 6-1: USB disconnect, device number 25 [ 247.069240][ T5871] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 247.249959][ T5871] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.265449][ T5871] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.275939][ T5871] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.285620][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.295719][T14035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 247.306374][ T5871] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.601395][ T24] usb 4-1: USB disconnect, device number 38 [ 247.604897][ T30] audit: type=1400 audit(247.585:1026): avc: denied { read } for pid=14054 comm="syz.4.3662" laddr=fe80::12 lport=51912 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 247.655993][ T30] audit: type=1400 audit(247.635:1027): avc: denied { shutdown } for pid=14054 comm="syz.4.3662" laddr=fe80::12 lport=51912 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 248.018885][ T5871] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 248.195103][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 248.206870][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 248.220296][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 248.234409][ T5871] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 248.243933][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.252036][ T5871] usb 5-1: Product: syz [ 248.256280][ T5871] usb 5-1: Manufacturer: syz [ 248.261057][ T5871] usb 5-1: SerialNumber: syz [ 248.267785][ T5871] usb 5-1: config 0 descriptor?? [ 248.274545][T14069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.281803][T14069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.302618][ T5871] usb 5-1: ucan: probing device on interface #0 [ 248.327689][T14082] Bluetooth: MGMT ver 1.23 [ 248.937140][ T5871] ucan 5-1:0.0 can0: registered device [ 249.138686][ T5871] ucan 5-1:0.0 can0: firmware string: unknown [ 249.161541][ T5871] usb 5-1: USB disconnect, device number 35 [ 249.359861][T14135] IPVS: length: 139 != 8 [ 249.729982][ T5871] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 249.811568][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 249.903405][ T5871] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 249.929977][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.938004][ T5871] usb 4-1: Product: syz [ 249.947707][ T5871] usb 4-1: Manufacturer: syz [ 249.952487][ T5871] usb 4-1: SerialNumber: syz [ 249.960668][ T5871] usb 4-1: config 0 descriptor?? [ 249.972820][ T5871] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 039 [ 249.984435][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.994943][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.005403][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.005810][T14182] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 250.014626][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 250.014652][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 250.016141][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.080585][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.111104][ T24] usb 1-1: Product: syz [ 250.115379][ T24] usb 1-1: Manufacturer: syz [ 250.126094][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 250.133974][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 250.143363][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 250.150275][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 250.375176][ T5871] (null): failure reading functionality [ 250.403778][ T5871] i2c i2c-1: connected i2c-tiny-usb device [ 250.435885][ T5871] usb 1-1: USB disconnect, device number 37 [ 250.611622][ T24] usb 4-1: USB disconnect, device number 39 [ 250.729026][ T5870] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 250.880013][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 250.896697][ T5870] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 250.913999][ T5870] usb 6-1: config 179 has no interface number 0 [ 250.927392][ T5870] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 250.948565][ T5870] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 250.960201][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 250.960214][ T30] audit: type=1326 audit(250.925:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.2.3739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2296f8d169 code=0x0 [ 250.967684][ T5870] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.013685][ T5870] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 251.025533][ T5870] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 251.038885][ T5870] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 251.047958][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.059244][T14200] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 251.129853][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3741'. [ 251.213972][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3742'. [ 251.376482][ T30] audit: type=1400 audit(251.355:1030): avc: denied { write } for pid=14242 comm="syz.4.3747" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 251.522858][T14252] sctp: [Deprecated]: syz.0.3750 (pid 14252) Use of int in max_burst socket option deprecated. [ 251.522858][T14252] Use struct sctp_assoc_value instead [ 251.585881][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3752'. [ 251.624688][ T24] usb 6-1: USB disconnect, device number 26 [ 251.624784][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 251.639659][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 251.651742][T14256] netlink: 'syz.3.3752': attribute type 5 has an invalid length. [ 251.660729][T14256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3752'. [ 251.839024][ T24] kernel read not supported for file /dsp1 (pid: 24 comm: kworker/1:0) [ 251.922136][T14265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.169596][ T5870] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 252.353325][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 252.367099][ T5870] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.385757][ T5870] usb 4-1: config 0 has no interface number 0 [ 252.392588][ T5870] usb 4-1: config 0 interface 184 has no altsetting 0 [ 252.404492][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.414770][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.426439][ T5870] usb 4-1: Product: syz [ 252.433509][ T5870] usb 4-1: Manufacturer: syz [ 252.438240][ T5870] usb 4-1: SerialNumber: syz [ 252.447566][ T5870] usb 4-1: config 0 descriptor?? [ 252.456744][ T5870] smsc75xx v1.0.0 [ 252.519003][ T971] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 252.689352][ T971] usb 6-1: Using ep0 maxpacket: 32 [ 252.711331][ T971] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 252.726495][ T971] usb 6-1: config 0 has no interface number 0 [ 252.739346][ T971] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.764049][ T971] usb 6-1: config 0 interface 85 has no altsetting 0 [ 252.783400][ T971] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 252.801300][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.818953][ T971] usb 6-1: Product: syz [ 252.828809][ T971] usb 6-1: Manufacturer: syz [ 252.833557][ T971] usb 6-1: SerialNumber: syz [ 252.845509][ T971] usb 6-1: config 0 descriptor?? [ 252.875865][T14312] netlink: 'syz.0.3775': attribute type 1 has an invalid length. [ 252.895630][T14312] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3775'. [ 253.066729][ T971] appletouch 6-1:0.85: Failed to read mode from device. [ 253.079490][ T30] audit: type=1400 audit(253.055:1031): avc: denied { recv } for pid=5870 comm="kworker/0:4" saddr=10.128.0.169 src=30006 daddr=10.128.0.33 dest=59440 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 253.088914][ T971] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 253.158702][ T971] usb 6-1: USB disconnect, device number 27 [ 253.162307][ T30] audit: type=1400 audit(253.145:1032): avc: denied { setopt } for pid=14324 comm="syz.0.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 253.281538][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 253.298775][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 253.308262][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 253.338921][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 253.352817][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 253.372121][ T5870] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 253.384970][T14329] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.388926][ T5870] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 253.392545][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 253.416645][ T5870] usb 4-1: USB disconnect, device number 40 [ 253.561785][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 253.578592][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.595016][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.607319][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 253.626848][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.655289][ T24] usb 5-1: config 0 descriptor?? [ 254.042887][T14363] delete_channel: no stack [ 254.048131][ T30] audit: type=1400 audit(254.025:1033): avc: denied { setopt } for pid=14362 comm="syz.3.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 254.076825][ T24] apple 0003:05AC:029C.002D: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.4-1/input0 [ 254.147287][T14371] bond0: option resend_igmp: invalid value (7540) [ 254.154113][T14371] bond0: option resend_igmp: allowed values 0 - 255 [ 254.344710][ T24] usb 5-1: USB disconnect, device number 36 [ 254.424422][ T30] audit: type=1400 audit(254.405:1034): avc: denied { getopt } for pid=14384 comm="syz.3.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 254.548120][ T30] audit: type=1400 audit(254.525:1035): avc: denied { bind } for pid=14391 comm="syz.3.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 255.195277][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 255.228696][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.257937][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3828'. [ 255.294966][T14438] autofs4:pid:14438:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 255.318902][T14438] autofs4:pid:14438:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 255.550651][ T30] audit: type=1400 audit(255.535:1036): avc: denied { read } for pid=14445 comm="syz.4.3834" path="socket:[46584]" dev="sockfs" ino=46584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.732473][ T30] audit: type=1326 audit(255.705:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.5.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 255.816693][ T30] audit: type=1326 audit(255.705:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.5.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 255.859286][ T5835] Bluetooth: hci2: command 0x0405 tx timeout [ 255.909188][ T5871] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 256.070791][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 256.070805][ T30] audit: type=1400 audit(256.055:1050): avc: denied { mount } for pid=14467 comm="syz.4.3845" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 256.120901][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 256.160649][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 256.177005][ T5871] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 256.196690][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.212492][ T5871] usb 1-1: config 0 descriptor?? [ 256.236288][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 256.429955][ T30] audit: type=1400 audit(256.415:1051): avc: denied { read } for pid=14476 comm="syz.4.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 256.454247][ T5871] bcm5974 1-1:0.0: could not read from device [ 256.518078][ T5871] input: failed to attach handler mousedev to device input59, error: -5 [ 256.581816][ T5871] usb 1-1: USB disconnect, device number 38 [ 257.127191][T14512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.173267][T14514] netlink: 'syz.0.3865': attribute type 12 has an invalid length. [ 257.197437][T14514] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3865'. [ 257.365472][T14527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3871'. [ 257.518705][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3876'. [ 257.648390][ T30] audit: type=1400 audit(257.625:1052): avc: denied { watch watch_reads } for pid=14542 comm="syz.5.3879" path="/proc/1112" dev="proc" ino=47439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 257.689751][ T5870] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 257.861902][T14551] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.878593][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 257.885278][ T5870] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.889458][ T6443] Bluetooth: hci5: Frame reassembly failed (-84) [ 257.895306][ T5870] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 257.934835][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 257.941851][ T5870] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 257.963029][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.993198][ T5870] usb 1-1: config 0 descriptor?? [ 258.282346][ T30] audit: type=1400 audit(258.265:1053): avc: denied { write } for pid=14566 comm="syz.3.3889" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 258.345371][T14565] SELinux: ebitmap: truncated map [ 258.377803][ T30] audit: type=1400 audit(258.295:1054): avc: denied { open } for pid=14566 comm="syz.3.3889" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 258.414921][ T5870] corsair-cpro 0003:1B1C:0C10.002E: item fetching failed at offset 1/5 [ 258.424310][ T5870] corsair-cpro 0003:1B1C:0C10.002E: probe with driver corsair-cpro failed with error -22 [ 258.456414][T14565] SELinux: failed to load policy [ 258.652156][ T971] usb 1-1: USB disconnect, device number 39 [ 259.535295][T14619] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 259.779749][ T971] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 259.858846][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 259.858930][ T5908] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 259.888855][ T5870] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 259.942959][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 259.949701][ T971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 259.969188][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.983398][ T971] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.993371][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.001601][ T971] usb 5-1: Product: syz [ 260.008206][ T971] usb 5-1: Manufacturer: syz [ 260.015183][ T971] usb 5-1: SerialNumber: syz [ 260.016817][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3922'. [ 260.021953][ T971] usb 5-1: config 0 descriptor?? [ 260.037597][ T971] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 260.037752][ T5908] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 260.047088][ T971] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 260.062412][ T5908] usb 1-1: config 0 has no interface number 0 [ 260.062449][ T5908] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 260.062470][ T5908] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 260.064281][ T5908] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 260.090611][ T5870] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 260.108591][ T5870] usb 4-1: config 0 has no interface number 0 [ 260.119989][ T5870] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 260.129467][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.137507][ T5870] usb 4-1: Product: syz [ 260.141509][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.142523][ T5870] usb 4-1: Manufacturer: syz [ 260.157115][ T5870] usb 4-1: SerialNumber: syz [ 260.159414][ T5908] usb 1-1: Product: syz [ 260.166592][ T5870] usb 4-1: config 0 descriptor?? [ 260.168915][ T5908] usb 1-1: Manufacturer: syz [ 260.176268][ T5870] yurex 4-1:0.50: Could not find endpoints [ 260.188871][ T5908] usb 1-1: SerialNumber: syz [ 260.199422][ T5908] usb 1-1: config 0 descriptor?? [ 260.204932][T14627] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 260.215862][ T5908] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 260.242705][ T5908] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 260.454846][ T5870] usb 4-1: USB disconnect, device number 41 [ 260.651992][ T971] em28xx 5-1:0.0: chip ID is em28174 [ 260.718464][ T971] usb 1-1: USB disconnect, device number 40 [ 260.737179][ T971] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 260.749915][ T971] cyberjack 1-1:0.69: device disconnected [ 260.878425][ T5908] usb 5-1: USB disconnect, device number 37 [ 260.884967][ T5908] em28xx 5-1:0.0: Disconnecting em28xx [ 260.892492][ T5908] em28xx 5-1:0.0: Freeing device [ 260.982469][ T6463] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.034743][T14669] block nbd3: NBD_DISCONNECT [ 261.227978][T14678] nfs: Bad value for 'source' [ 261.535710][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3951'. [ 261.689519][ T5871] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 261.721811][ T30] audit: type=1400 audit(261.705:1055): avc: denied { create } for pid=14709 comm="syz.5.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 261.748801][ T30] audit: type=1400 audit(261.705:1056): avc: denied { getopt } for pid=14709 comm="syz.5.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 261.844910][ T5871] usb 5-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.855213][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 261.863473][ T5871] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.871090][ T5871] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 261.880167][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.895138][ T5871] usb 5-1: config 0 descriptor?? [ 261.999081][ T5908] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 262.018929][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 262.026166][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.039430][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.049240][ T24] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 262.062778][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.075900][ T24] usb 1-1: config 0 descriptor?? [ 262.159158][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 262.166460][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.176680][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.188304][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.198160][ T5908] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.207832][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.221836][ T5908] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.231476][ T5908] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.239493][ T5908] usb 4-1: Manufacturer: syz [ 262.245463][ T5908] usb 4-1: config 0 descriptor?? [ 262.308595][ T5871] holtek_mouse 0003:04D9:A072.002F: unknown main item tag 0x4 [ 262.320773][ T5871] holtek_mouse 0003:04D9:A072.002F: unknown main item tag 0x3 [ 262.333169][ T5871] holtek_mouse 0003:04D9:A072.002F: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.4-1/input0 [ 262.348897][ T5137] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.491009][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x0 [ 262.502844][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x6 [ 262.514929][ T5871] usb 5-1: USB disconnect, device number 38 [ 262.528806][ T5908] rc_core: IR keymap rc-hauppauge not found [ 262.534887][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x5 [ 262.550051][ T5908] Registered IR keymap rc-empty [ 262.556759][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.565425][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x4 [ 262.571299][ T30] audit: type=1400 audit(262.545:1057): avc: denied { listen } for pid=14751 comm="syz.2.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 262.573308][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x0 [ 262.602868][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.611233][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x0 [ 262.618289][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x0 [ 262.625642][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x0 [ 262.627349][ T30] audit: type=1400 audit(262.585:1058): avc: denied { read } for pid=14751 comm="syz.2.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 262.633292][ T5908] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 262.668883][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x0 [ 262.675971][ T24] cherry 0003:046A:0027.0030: unknown main item tag 0x0 [ 262.683676][ T24] cherry 0003:046A:0027.0030: unknown global tag 0xd [ 262.693367][ T5908] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input60 [ 262.704223][ T30] audit: type=1400 audit(262.675:1059): avc: denied { shutdown } for pid=14755 comm="syz.2.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.705946][ T24] cherry 0003:046A:0027.0030: item 0 4 1 13 parsing failed [ 262.734962][ T24] cherry 0003:046A:0027.0030: probe with driver cherry failed with error -22 [ 262.746072][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.760082][ T24] usb 1-1: USB disconnect, device number 41 [ 262.768980][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.775325][ T30] audit: type=1326 audit(262.755:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14758 comm="syz.2.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2296f8d169 code=0x7ffc0000 [ 262.788924][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.798912][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.844233][ T30] audit: type=1326 audit(262.785:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14758 comm="syz.2.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2296f8d169 code=0x7ffc0000 [ 262.867083][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.867461][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.878860][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.900961][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.915547][ T30] audit: type=1326 audit(262.785:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14758 comm="syz.2.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2296f8d169 code=0x7ffc0000 [ 262.918912][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 262.939047][ T30] audit: type=1326 audit(262.785:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14758 comm="syz.2.3978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2296f8d169 code=0x7ffc0000 [ 262.969261][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.989092][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.008875][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.029176][ T5908] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.051817][ T5908] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 263.069166][ T5908] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 263.091030][ T5908] usb 4-1: USB disconnect, device number 42 [ 263.156869][T14767] netlink: 'syz.4.3982': attribute type 11 has an invalid length. [ 263.165106][T14767] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3982'. [ 263.234245][T14770] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3983'. [ 263.473387][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'. [ 263.696628][ T30] audit: type=1400 audit(263.675:1064): avc: denied { name_bind } for pid=14798 comm="syz.2.3996" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 264.118814][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 264.171110][T14838] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 264.287949][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.310796][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.325604][ T24] usb 1-1: Product: syz [ 264.338851][ T24] usb 1-1: Manufacturer: syz [ 264.343546][ T24] usb 1-1: SerialNumber: syz [ 264.356840][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 264.379004][ T6464] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.383757][ T5908] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.835011][ T5871] usb 1-1: USB disconnect, device number 42 [ 265.084697][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 265.157619][T14874] trusted_key: encrypted_key: keyword 'up>J0n' not recognized [ 265.434281][T14893] input: syz0 as /devices/virtual/input/input61 [ 265.456627][T14895] QAT: Device 7 not found [ 265.461481][ T5908] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 265.461628][ T5908] ath9k_htc: Failed to initialize the device [ 265.462698][ T5871] usb 1-1: ath9k_htc: USB layer deinitialized [ 265.736522][T14910] block device autoloading is deprecated and will be removed. [ 265.935947][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4052'. [ 265.946053][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4052'. [ 266.027097][T14931] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 266.039723][T14928] IPVS: stopping backup sync thread 14931 ... [ 266.203653][T14937] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 266.282686][T14937] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 266.671650][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4072'. [ 266.704294][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4072'. [ 266.955572][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 266.955587][ T30] audit: type=1400 audit(266.935:1074): avc: denied { create } for pid=14990 comm="syz.0.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 266.982210][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.012761][ T30] audit: type=1400 audit(266.985:1075): avc: denied { write } for pid=14990 comm="syz.0.4083" path="socket:[48761]" dev="sockfs" ino=48761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 267.036394][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.169679][T15004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.350929][ T30] audit: type=1400 audit(267.335:1076): avc: denied { execute } for pid=15016 comm="syz.3.4094" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=48792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 267.968608][T15042] netlink: 356 bytes leftover after parsing attributes in process `syz.2.4104'. [ 268.408948][ T5908] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 268.427283][ T30] audit: type=1400 audit(268.405:1077): avc: denied { watch } for pid=15066 comm="syz.4.4115" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 268.450000][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.458443][ T30] audit: type=1400 audit(268.435:1078): avc: denied { watch_sb } for pid=15066 comm="syz.4.4115" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 268.481754][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.566349][ T5908] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 268.572420][T15074] syz.4.4121 (15074) used greatest stack depth: 20536 bytes left [ 268.586769][ T5908] usb 6-1: config 0 has no interface number 0 [ 268.596443][ T5908] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 268.637541][ T5908] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.666576][ T5908] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 268.681164][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.693330][ T5908] usb 6-1: Product: syz [ 268.705790][ T5908] usb 6-1: Manufacturer: syz [ 268.720391][ T5908] usb 6-1: SerialNumber: syz [ 268.727131][ T5908] usb 6-1: config 0 descriptor?? [ 268.752431][T15051] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 268.763075][ T5908] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 268.788666][ T5908] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 268.950364][ T5137] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 268.992717][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 269.086876][T15100] netlink: 87 bytes leftover after parsing attributes in process `syz.3.4131'. [ 269.130238][ T5908] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 269.209522][ T5871] usb 6-1: USB disconnect, device number 28 [ 269.219895][ T5871] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 269.232779][ T5871] cyberjack 6-1:0.69: device disconnected [ 269.288917][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 269.296411][ T5908] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 269.317037][ T5908] usb 5-1: config 0 has no interface number 0 [ 269.335406][ T5908] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 269.360531][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.375126][ T5908] usb 5-1: Product: syz [ 269.384132][ T5908] usb 5-1: Manufacturer: syz [ 269.406169][ T5908] usb 5-1: SerialNumber: syz [ 269.427023][ T5908] usb 5-1: config 0 descriptor?? [ 269.443540][ T5908] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 269.609272][T15120] netlink: 'syz.0.4141': attribute type 3 has an invalid length. [ 269.659632][ T5908] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 269.708874][ T5908] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 269.928779][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 48 [ 270.140277][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 270.146110][ T5870] usb 5-1: USB disconnect, device number 39 [ 270.159487][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 270.219294][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 270.236892][ T5870] quatech2 5-1:0.51: device disconnected [ 270.315459][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4155'. [ 270.337613][T15151] nbd: illegal input index -488837 [ 270.445522][T15154] tipc: Started in network mode [ 270.471545][T15154] tipc: Node identity 080211000001, cluster identity 4711 [ 270.513550][T15154] tipc: Enabled bearer , priority 10 [ 270.639308][T15166] netlink: 'syz.3.4162': attribute type 4 has an invalid length. [ 270.662358][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4162'. [ 270.745916][T15172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4165'. [ 270.872494][T15180] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 271.043475][T15191] bridge_slave_0: left allmulticast mode [ 271.054613][T15191] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.070412][T15191] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 271.267514][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4179'. [ 271.276503][ T971] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 271.459434][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 271.469655][ T971] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.488078][ T971] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 271.508872][ T971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.515516][ T971] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 271.528763][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.549449][ T971] usb 5-1: config 0 descriptor?? [ 271.628856][ T5908] tipc: Node number set to 134418688 [ 271.973238][ T971] corsair 0003:1B1C:1B3E.0031: report_id 3291754556 is invalid [ 271.993246][ T971] corsair 0003:1B1C:1B3E.0031: item 0 4 1 8 parsing failed [ 272.009583][ T971] corsair 0003:1B1C:1B3E.0031: parse failed [ 272.018928][ T971] corsair 0003:1B1C:1B3E.0031: probe with driver corsair failed with error -22 [ 272.037134][ T30] audit: type=1400 audit(272.015:1079): avc: denied { mount } for pid=15225 comm="syz.5.4191" name="/" dev="ocfs2_dlmfs" ino=49901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.041939][T15226] o2cb: This node has not been configured. [ 272.073779][T15226] o2cb: Cluster check failed. Fix errors before retrying. [ 272.099164][ T30] audit: type=1400 audit(272.025:1080): avc: denied { write } for pid=15225 comm="syz.5.4191" name="/" dev="ocfs2_dlmfs" ino=49901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.121308][T15226] (syz.5.4191,15226,0):user_dlm_register:674 ERROR: status = -22 [ 272.129446][T15226] (syz.5.4191,15226,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 272.149306][ T30] audit: type=1400 audit(272.025:1081): avc: denied { add_name } for pid=15225 comm="syz.5.4191" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.194854][ T30] audit: type=1400 audit(272.025:1082): avc: denied { create } for pid=15225 comm="syz.5.4191" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 272.207563][T15230] @: renamed from vlan0 (while UP) [ 272.214487][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.232583][ T5908] usb 5-1: USB disconnect, device number 40 [ 272.238640][ T30] audit: type=1400 audit(272.025:1083): avc: denied { associate } for pid=15225 comm="syz.5.4191" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.312096][ T30] audit: type=1400 audit(272.215:1084): avc: denied { unmount } for pid=9080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.331744][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.355037][T15236] vlan0: entered allmulticast mode [ 272.362824][T15236] batadv0: entered allmulticast mode [ 272.722437][T15253] sp0: Synchronizing with TNC [ 273.730643][ T5871] kernel read not supported for file /vcs (pid: 5871 comm: kworker/1:3) [ 274.079087][ T5908] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 274.178532][ T1203] kernel write not supported for file bpf-map (pid: 1203 comm: kworker/1:2) [ 274.191100][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4245'. [ 274.238930][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 274.252506][ T5908] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 274.275373][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.309641][ T5908] usb 6-1: Product: syz [ 274.321677][ T5908] usb 6-1: Manufacturer: syz [ 274.326289][ T5908] usb 6-1: SerialNumber: syz [ 274.351908][ T5908] usb 6-1: config 0 descriptor?? [ 274.363040][ T5908] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 274.379093][ T5908] usb 6-1: setting power ON [ 274.383981][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 274.396335][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.452739][ T5908] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 274.473027][ T5908] usb 6-1: media controller created [ 274.488419][ T30] audit: type=1400 audit(530.466:1085): avc: denied { bind } for pid=15358 comm="syz.3.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 274.523734][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.564825][T15329] dvb-usb: bulk message failed: -22 (3/0) [ 274.582259][T15329] usb 6-1: gpio_write failed. [ 274.587270][T15329] dvb-usb: bulk message failed: -22 (6/0) [ 274.597514][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4253'. [ 274.627353][ T5908] usb 6-1: selecting invalid altsetting 6 [ 274.646801][ T5908] usb 6-1: digital interface selection failed (-22) [ 274.660991][ T5908] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 274.669513][T15329] dvb-usb: bulk message failed: -22 (4/0) [ 274.675236][T15329] cxusb: i2c read failed [ 274.686388][ T5908] usb 6-1: setting power OFF [ 274.711357][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 274.718407][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 274.728435][ T5908] (NULL device *): no alternate interface [ 274.780242][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 274.799455][T15376] mkiss: ax0: crc mode is auto. [ 274.834356][ T5908] usb 6-1: USB disconnect, device number 29 [ 275.073872][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4266'. [ 275.541326][ T30] audit: type=1400 audit(531.526:1086): avc: denied { append } for pid=15417 comm="syz.5.4278" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 275.563878][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.771724][T15436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4286'. [ 275.841873][T15442] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 276.168884][ T5908] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 276.264519][T15461] netlink: 'syz.3.4298': attribute type 10 has an invalid length. [ 276.280195][T15461] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4298'. [ 276.339845][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 276.347012][ T5908] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 276.356245][ T5908] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.375440][ T5908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.385090][ T5908] usb 6-1: config 1 has no interface number 0 [ 276.398869][ T5908] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.419096][ T5908] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 276.432074][ T5908] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 276.443604][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.462933][ T5908] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 276.674194][ T5908] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 276.705600][ T30] audit: type=1326 audit(532.686:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 276.748803][ T30] audit: type=1326 audit(532.716:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.4.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ba238d169 code=0x7ffc0000 [ 277.137519][ T1203] usb 6-1: USB disconnect, device number 30 [ 277.145166][ T1203] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 277.327936][T15502] batadv_slave_1: entered promiscuous mode [ 277.371247][T15502] batadv_slave_1: left promiscuous mode [ 277.738831][ T5870] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 277.901440][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 277.910220][ T5870] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 277.923753][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.940633][ T5870] usb 1-1: Product: syz [ 277.950370][ T5870] usb 1-1: Manufacturer: syz [ 277.957284][ T5870] usb 1-1: SerialNumber: syz [ 277.967230][ T5870] usb 1-1: config 0 descriptor?? [ 277.975943][ T5870] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 278.510002][T15555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4341'. [ 278.670838][ T1203] kernel write not supported for file /snd/seq (pid: 1203 comm: kworker/1:2) [ 278.779457][ T5870] gspca_sonixj: reg_r err -71 [ 278.785188][ T5870] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 278.803631][ T5870] usb 1-1: USB disconnect, device number 43 [ 279.167843][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 279.167856][ T30] audit: type=1326 audit(535.146:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15595 comm="syz.3.4358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f491838d169 code=0x0 [ 279.196372][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.719248][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 279.758822][ T5908] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 279.890711][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 279.904127][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 279.916518][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 279.929300][ T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 279.931094][ T5908] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 279.938446][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.948660][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.966950][ T5908] usb 6-1: config 0 descriptor?? [ 279.969395][ T9] usb 5-1: config 0 descriptor?? [ 279.974407][ T5908] cp210x 6-1:0.0: cp210x converter detected [ 279.979159][T15615] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 279.996512][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 280.039212][ T30] audit: type=1326 audit(536.016:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15638 comm="syz.0.4379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3c238d169 code=0x0 [ 280.203776][ T9] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 280.212583][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.219788][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 280.243505][ T9] usb 5-1: USB disconnect, device number 41 [ 280.383697][ T5908] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 280.394069][ T5908] usb 6-1: cp210x converter now attached to ttyUSB0 [ 280.589313][ T5873] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 280.619145][ T5908] usb 6-1: USB disconnect, device number 31 [ 280.627036][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 280.636649][ T5908] cp210x 6-1:0.0: device disconnected [ 280.735784][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4384'. [ 280.761648][ T5873] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.781069][ T5873] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.796175][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.803990][ T5873] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 280.816482][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.842987][ T5873] usb 4-1: config 0 descriptor?? [ 281.117315][T15675] vxcan1: entered allmulticast mode [ 281.133489][T15675] vxcan1: left allmulticast mode [ 281.155954][T15677] delete_channel: no stack [ 281.261835][ T5873] saitek 0003:06A3:0621.0032: unknown main item tag 0x3 [ 281.281830][ T5873] saitek 0003:06A3:0621.0032: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 281.421529][ T30] audit: type=1400 audit(537.406:1094): avc: denied { attach_queue } for pid=15694 comm="syz.4.4404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 281.474377][ T1203] usb 4-1: USB disconnect, device number 43 [ 281.814952][ T30] audit: type=1326 audit(537.796:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.0.4416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c238d169 code=0x0 [ 281.884596][T15728] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4417'. [ 281.894382][T15728] netem: unknown loss type 13 [ 281.899651][T15728] netem: change failed [ 283.098713][T15770] netlink: 'syz.3.4436': attribute type 4 has an invalid length. [ 283.411660][T15787] can0: slcan on ttyS3. [ 283.450206][T15787] can0 (unregistered): slcan off ttyS3. [ 283.599155][T15799] hub 6-0:1.0: USB hub found [ 283.604373][T15799] hub 6-0:1.0: 1 port detected [ 283.782611][ T5137] Bluetooth: hci4: adv larger than maximum supported [ 283.782634][ T5137] Bluetooth: hci4: Malformed LE Event: 0x0d [ 283.818158][T15816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.349192][ T5908] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 284.414395][T15839] lo speed is unknown, defaulting to 1000 [ 284.422839][T15839] lo speed is unknown, defaulting to 1000 [ 284.437455][T15839] lo speed is unknown, defaulting to 1000 [ 284.465974][T15839] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 284.500597][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.518831][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 284.543988][T15839] lo speed is unknown, defaulting to 1000 [ 284.548845][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 284.572626][T15839] lo speed is unknown, defaulting to 1000 [ 284.582657][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 284.591049][T15839] lo speed is unknown, defaulting to 1000 [ 284.608835][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.610850][T15839] lo speed is unknown, defaulting to 1000 [ 284.642690][ T5908] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 284.652331][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.655852][T15839] lo speed is unknown, defaulting to 1000 [ 284.671088][ T5908] usb 6-1: Product: syz [ 284.675268][ T5908] usb 6-1: Manufacturer: syz [ 284.699298][ T5908] usb 6-1: SerialNumber: syz [ 284.701451][T15839] lo speed is unknown, defaulting to 1000 [ 284.716387][ T5908] usb 6-1: config 0 descriptor?? [ 284.726563][ T5908] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input64 [ 285.003806][ T5908] usb 6-1: USB disconnect, device number 32 [ 285.218974][ T5873] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 285.282116][T15875] netlink: 'syz.3.4484': attribute type 10 has an invalid length. [ 285.389947][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 285.401143][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.423236][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.443540][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.463051][ T5873] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.474512][ T30] audit: type=1326 audit(541.456:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.474665][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.497375][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.503585][ T30] audit: type=1326 audit(541.456:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.542349][ T5873] usb 1-1: config 0 descriptor?? [ 285.558148][ T30] audit: type=1326 audit(541.496:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.603116][ T30] audit: type=1326 audit(541.496:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.649201][ T30] audit: type=1326 audit(541.496:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.689242][ T30] audit: type=1326 audit(541.526:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.695347][T15893] lo speed is unknown, defaulting to 1000 [ 285.729844][ T30] audit: type=1326 audit(541.526:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.776508][ T30] audit: type=1326 audit(541.526:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.799993][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.835350][ T30] audit: type=1326 audit(541.536:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.878587][ T30] audit: type=1326 audit(541.536:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15886 comm="syz.3.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491838d169 code=0x7ffc0000 [ 285.931371][ T1203] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 285.976078][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 285.999914][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.015638][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.027472][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.039703][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.046976][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.059417][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.078886][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.086170][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.090136][ T1203] usb 6-1: Using ep0 maxpacket: 16 [ 286.104212][ T5873] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 286.111717][ T1203] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 286.111737][ T1203] usb 6-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config [ 286.111754][ T1203] usb 6-1: config 0 has no interface number 0 [ 286.116380][ T1203] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 286.128302][ T5873] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0033/input/input65 [ 286.137398][ T1203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.167080][ T1203] usb 6-1: Product: syz [ 286.171580][ T1203] usb 6-1: Manufacturer: syz [ 286.177305][ T1203] usb 6-1: SerialNumber: syz [ 286.188364][ T1203] usb 6-1: config 0 descriptor?? [ 286.265675][ T5873] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 286.292591][ T5873] usb 1-1: USB disconnect, device number 44 [ 286.437921][ T971] usb 6-1: USB disconnect, device number 33 [ 287.379072][ T1203] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 287.539014][ T1203] usb 1-1: Using ep0 maxpacket: 32 [ 287.545757][ T1203] usb 1-1: config 8 has an invalid interface number: 119 but max is 1 [ 287.568845][ T1203] usb 1-1: config 8 has an invalid interface number: 184 but max is 1 [ 287.577044][ T1203] usb 1-1: config 8 has no interface number 0 [ 287.589117][ T1203] usb 1-1: config 8 has no interface number 1 [ 287.595346][ T1203] usb 1-1: config 8 interface 119 has no altsetting 0 [ 287.611319][ T1203] usb 1-1: config 8 interface 184 has no altsetting 0 [ 287.627881][ T1203] usb 1-1: New USB device found, idVendor=0f88, idProduct=042e, bcdDevice= 1.00 [ 287.644220][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.652681][ T1203] usb 1-1: Product: syz [ 287.657066][ T1203] usb 1-1: Manufacturer: syz [ 287.661876][ T1203] usb 1-1: SerialNumber: syz [ 287.763697][T15976] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4528'. [ 287.778845][ T5137] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.779009][ T5835] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 287.810570][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4528'. [ 287.892945][ T1203] usb-storage 1-1:8.119: USB Mass Storage device detected [ 287.906388][ T1203] usb-storage 1-1:8.119: Quirks match for vid 0f88 pid 042e: 10 [ 287.981752][ T1203] usb-storage 1-1:8.184: USB Mass Storage device detected [ 288.004678][ T1203] usb-storage 1-1:8.184: Quirks match for vid 0f88 pid 042e: 10 [ 288.084045][ T1203] usb 1-1: USB disconnect, device number 45 [ 288.941714][T16055] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 288.948249][T16055] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 288.983056][T16055] vhci_hcd vhci_hcd.0: Device attached [ 289.007060][T16057] vhci_hcd: connection closed [ 289.007330][ T6421] vhci_hcd: stop threads [ 289.022795][ T6421] vhci_hcd: release socket [ 289.049337][ T6421] vhci_hcd: disconnect device [ 289.059567][ T2980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.339270][T16066] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 289.346793][T16066] syzkaller0: owner set to 0 [ 289.703873][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.728204][T16080] netlink: 'syz.3.4573': attribute type 2 has an invalid length. [ 289.779523][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.972097][T16098] lo speed is unknown, defaulting to 1000 [ 290.078864][ T1203] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 290.088277][T16105] macsec3: entered promiscuous mode [ 290.240624][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 290.262196][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.282249][ T1203] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 290.301983][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.321683][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 290.322239][ T1203] usb 5-1: config 0 descriptor?? [ 290.511637][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.530527][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.560137][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.581165][ T9] usb 1-1: config 0 descriptor?? [ 290.594619][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 290.741902][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.760259][ T1203] hid-thrustmaster 0003:044F:B65D.0034: unknown main item tag 0x0 [ 290.780586][ T1203] hid-thrustmaster 0003:044F:B65D.0034: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 290.806763][ T1203] hid-thrustmaster 0003:044F:B65D.0034: Wrong number of endpoints? [ 290.976320][ C1] hid-thrustmaster 0003:044F:B65D.0034: Unknown packet type 0x0, unable to proceed further with wheel init [ 290.997528][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 291.178088][ T5873] usb 5-1: USB disconnect, device number 42 [ 291.216524][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 291.228329][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 291.248461][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 291.267019][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 291.284625][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 291.296328][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 291.307531][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 291.320399][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 291.327691][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 291.335211][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 291.344784][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 291.351817][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 291.371139][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.385406][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.405566][ T9] pwc: Registered as video103. [ 291.418102][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input66 [ 291.435772][ T9] usb 1-1: USB disconnect, device number 46 [ 291.783190][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.079931][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4608'. [ 292.099145][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.205004][T16165] delete_channel: no stack [ 292.522400][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 292.522416][ T30] audit: type=1400 audit(548.496:1135): avc: denied { create } for pid=16177 comm="syz.2.4617" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 292.702760][T16190] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 292.709532][T16190] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 292.721628][ T30] audit: type=1400 audit(548.706:1136): avc: denied { read } for pid=16185 comm="syz.2.4620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.821662][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.837483][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.971907][T16201] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[16201] [ 292.984516][ T6427] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 293.025182][T16205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4629'. [ 293.048094][T16205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4629'. [ 293.057806][T16205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4629'. [ 293.186276][T16215] misc userio: Begin command sent, but we're already running [ 293.653700][ T30] audit: type=1400 audit(549.636:1137): avc: denied { nlmsg_write } for pid=16241 comm="syz.0.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 293.879191][ T5873] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 294.055818][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.086319][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.100960][ T5873] usb 4-1: config 1 has no interface number 0 [ 294.112574][T16274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.119562][ T5873] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.139149][ T5873] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 294.161616][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.171212][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.188803][ T5873] usb 4-1: Product: syz [ 294.198767][ T5873] usb 4-1: Manufacturer: syz [ 294.205983][ T5873] usb 4-1: SerialNumber: syz [ 294.243999][T16281] xt_hashlimit: size too large, truncated to 1048576 [ 294.265693][ T2980] net_ratelimit: 2 callbacks suppressed [ 294.265707][ T2980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.469259][ T5870] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 294.552772][ T30] audit: type=1400 audit(550.536:1138): avc: denied { read } for pid=16288 comm="syz.0.4668" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 294.577485][ T30] audit: type=1400 audit(550.536:1139): avc: denied { open } for pid=16288 comm="syz.0.4668" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 294.600497][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.652607][ T5870] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 294.670499][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.693951][ T5870] usb 6-1: config 0 descriptor?? [ 294.706070][ T5870] cp210x 6-1:0.0: cp210x converter detected [ 294.806305][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4674'. [ 294.815333][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4674'. [ 294.903837][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.243013][ T5873] cdc_ncm 4-1:1.1: bind() failure [ 295.260986][ T5873] usb 4-1: USB disconnect, device number 44 [ 295.310059][ T2980] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.331532][ T5870] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 295.341575][ T5870] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 295.360216][ T5870] usb 6-1: cp210x converter now attached to ttyUSB0 [ 295.376860][ T5870] usb 6-1: USB disconnect, device number 34 [ 295.397290][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.419986][ T5870] cp210x 6-1:0.0: device disconnected [ 295.584494][ T30] audit: type=1400 audit(551.566:1140): avc: denied { watch_mount } for pid=16340 comm="syz.2.4691" path="/proc/1872" dev="proc" ino=55075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 295.752102][ T5873] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 295.915946][ T5873] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 295.936321][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.949223][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.959116][ T5873] usb 1-1: Product: syz [ 295.963356][ T5873] usb 1-1: Manufacturer: syz [ 295.967954][ T5873] usb 1-1: SerialNumber: syz [ 295.977932][ T5873] usb 1-1: config 0 descriptor?? [ 296.000429][ T5873] ch341 1-1:0.0: ch341-uart converter detected [ 296.019227][ T30] audit: type=1400 audit(551.996:1141): avc: denied { ioctl } for pid=16363 comm="syz.5.4702" path="socket:[55118]" dev="sockfs" ino=55118 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 296.098911][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 296.107564][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 296.109621][T16366] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4703'. [ 296.176822][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4705'. [ 296.679099][ T1203] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 296.829002][ T1203] usb 5-1: Using ep0 maxpacket: 8 [ 296.840661][ T1203] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 296.860278][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.877092][ T1203] usb 5-1: config 0 descriptor?? [ 296.979303][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.013793][ T5873] usb 1-1: failed to send control message: -71 [ 297.027002][ T5873] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 297.047439][ T5873] usb 1-1: USB disconnect, device number 47 [ 297.054640][ T5873] ch341 1-1:0.0: device disconnected [ 297.305284][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.487560][T16431] syzkaller1: entered promiscuous mode [ 297.493250][T16431] syzkaller1: entered allmulticast mode [ 297.924750][ T1203] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 297.935290][ T1203] asix 5-1:0.0: probe with driver asix failed with error -71 [ 297.945641][ T1203] usb 5-1: USB disconnect, device number 43 [ 297.979140][ T30] audit: type=1400 audit(553.956:1142): avc: denied { write } for pid=16435 comm="syz.2.4734" name="ns" dev="proc" ino=55237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 298.004037][ T30] audit: type=1400 audit(553.966:1143): avc: denied { add_name } for pid=16435 comm="syz.2.4734" name="time" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 298.024620][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.039268][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.047516][ T30] audit: type=1400 audit(553.966:1144): avc: denied { create } for pid=16435 comm="syz.2.4734" name="time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 298.071780][ T30] audit: type=1400 audit(553.966:1145): avc: denied { associate } for pid=16435 comm="syz.2.4734" name="time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 298.127433][T16440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.459302][ T5870] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 298.611615][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.634875][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.659594][ T5870] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice=1d.5e [ 298.672526][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.683606][ T5870] usb 4-1: config 0 descriptor?? [ 298.782316][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4749'. [ 298.949358][T16478] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 298.962411][T16477] IPVS: stopping master sync thread 16478 ... [ 299.064952][ T30] audit: type=1400 audit(555.046:1146): avc: denied { getopt } for pid=16483 comm="syz.0.4756" lport=56614 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 299.108228][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.117002][ T5870] magicmouse 0003:05AC:0265.0035: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 299.160528][ T5870] magicmouse 0003:05AC:0265.0035: magicmouse input not registered [ 299.174618][ T5870] magicmouse 0003:05AC:0265.0035: probe with driver magicmouse failed with error -12 [ 299.223999][T16492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.329978][ T5870] usb 4-1: USB disconnect, device number 45 [ 299.382678][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.390829][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.404396][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4762'. [ 299.417968][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.960996][ T5870] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 299.970745][T16531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.020294][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.067172][ T30] audit: type=1400 audit(556.046:1147): avc: denied { read } for pid=16538 comm="syz.3.4780" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 300.091633][ T30] audit: type=1400 audit(556.046:1148): avc: denied { open } for pid=16538 comm="syz.3.4780" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 300.115762][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.149130][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 300.155608][ T5870] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 300.164127][ T5870] usb 6-1: config 0 has no interface number 0 [ 300.170455][ T5870] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.183700][ T5870] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 300.195715][ T5870] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 300.197798][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.268673][ T5870] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 300.295825][ T5870] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.330087][ T5870] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 300.339692][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.347704][ T5870] usb 6-1: Product: syz [ 300.362351][ T5870] usb 6-1: Manufacturer: syz [ 300.366986][ T5870] usb 6-1: SerialNumber: syz [ 300.394880][ T5870] usb 6-1: config 0 descriptor?? [ 300.618203][ T5870] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 300.671385][ T971] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 300.692512][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4795'. [ 300.750677][T16573] bond0: (slave bond_slave_0): Releasing backup interface [ 300.833145][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 300.848608][ T971] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 300.867486][ T971] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.902409][ T971] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.914648][ T5870] usb 6-1: USB disconnect, device number 35 [ 300.934681][ T971] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.948598][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.965294][ T971] usb 4-1: Product: syz [ 300.969897][ T971] usb 4-1: Manufacturer: syz [ 300.977787][ T971] usb 4-1: SerialNumber: syz [ 301.058656][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4799'. [ 301.080634][ T30] audit: type=1400 audit(557.066:1149): avc: denied { connect } for pid=16588 comm="syz.4.4800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 301.220015][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.338426][ T30] audit: type=1400 audit(557.316:1150): avc: denied { setopt } for pid=16601 comm="syz.0.4808" lport=52481 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 301.361491][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.378950][ T30] audit: type=1400 audit(557.316:1151): avc: denied { connect } for pid=16601 comm="syz.0.4808" lport=52481 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 301.404542][ T971] usb 4-1: 0:2 : does not exist [ 301.663998][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4814'. [ 301.689256][ T5870] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 301.848961][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 301.865021][ T5870] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 301.878911][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.887517][ T5870] usb 5-1: Product: syz [ 301.892262][ T5870] usb 5-1: Manufacturer: syz [ 301.896914][ T5870] usb 5-1: SerialNumber: syz [ 301.904514][ T5870] usb 5-1: config 0 descriptor?? [ 301.912548][ T5870] gspca_main: sq930x-2.14.0 probing 2770:930c [ 302.046958][ T971] usb 4-1: USB disconnect, device number 46 [ 302.260518][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.419951][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.649105][ T5908] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 302.820036][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 302.831485][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.845393][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.855676][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.864814][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.876314][ T5908] usb 1-1: config 0 descriptor?? [ 302.884584][ T5908] hub 1-1:0.0: USB hub found [ 302.958876][ T5870] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 302.968903][ T5870] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 302.994529][ T5870] usb 5-1: USB disconnect, device number 44 [ 303.092489][ T5908] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 303.219494][ T2980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.518621][ T5908] hid-generic 0003:046D:C31C.0036: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 303.572276][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 303.572290][ T30] audit: type=1400 audit(559.556:1157): avc: denied { setopt } for pid=16681 comm="syz.4.4843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 303.748567][ T30] audit: type=1326 audit(559.726:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 303.788847][ T30] audit: type=1326 audit(559.726:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 303.812588][ T30] audit: type=1326 audit(559.736:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 303.835873][ T30] audit: type=1326 audit(559.736:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 303.866707][ T30] audit: type=1326 audit(559.736:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 303.891946][ T5908] usb 1-1: USB disconnect, device number 48 [ 303.973629][ T30] audit: type=1326 audit(559.956:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 304.012464][ T30] audit: type=1326 audit(559.986:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 304.136053][ T30] audit: type=1326 audit(560.116:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 304.178003][ T30] audit: type=1326 audit(560.116:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d958d169 code=0x7ffc0000 [ 304.204558][ T2980] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.215400][ T2980] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.259937][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.343836][ T2980] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.367529][ T2980] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.414354][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4853'. [ 304.500860][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.501467][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4855'. [ 304.539126][T16702] netlink: 'syz.0.4855': attribute type 7 has an invalid length. [ 304.542164][ T2980] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.547292][T16702] netlink: 'syz.0.4855': attribute type 8 has an invalid length. [ 304.573283][ T2980] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.614432][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4855'. [ 304.700027][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.702328][ T2980] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.708641][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.726590][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.735450][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.743604][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.758586][ T2980] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.829543][T16710] lo speed is unknown, defaulting to 1000 [ 304.938789][ T2980] bridge_slave_1: left allmulticast mode [ 304.944800][ T2980] bridge_slave_1: left promiscuous mode [ 304.952081][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.964438][ T2980] bridge_slave_0: left allmulticast mode [ 304.970410][ T2980] bridge_slave_0: left promiscuous mode [ 304.976171][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.029019][ T5871] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 305.142711][ T6427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.165363][ T2980] dvmrp1 (unregistering): left allmulticast mode [ 305.180221][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.192747][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.207008][ T5871] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 305.231988][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.245013][ T5871] usb 4-1: config 0 descriptor?? [ 305.311777][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.401066][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.413650][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.427451][ T2980] bond0 (unregistering): Released all slaves [ 305.443487][ T2980] bond1 (unregistering): Released all slaves [ 305.467519][T16725] batadv_slave_0: left promiscuous mode [ 305.616132][T16710] chnl_net:caif_netlink_parms(): no params data found [ 305.669799][ T5871] samsung 0003:0419:0600.0037: unknown main item tag 0x0 [ 305.677260][ T5871] samsung 0003:0419:0600.0037: unknown main item tag 0x0 [ 305.690341][ T5871] samsung 0003:0419:0600.0037: item fetching failed at offset 2/5 [ 305.698640][ T5871] samsung 0003:0419:0600.0037: parse failed [ 305.706371][ T5871] samsung 0003:0419:0600.0037: probe with driver samsung failed with error -22 [ 305.884055][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.893384][T16743] sock: sock_set_timeout: `syz.2.4870' (pid 16743) tries to set negative timeout [ 305.902912][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.910178][T16710] bridge_slave_0: entered allmulticast mode [ 305.917423][T16710] bridge_slave_0: entered promiscuous mode [ 305.925682][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.927393][ T9] usb 4-1: USB disconnect, device number 47 [ 305.933076][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.948915][T16710] bridge_slave_1: entered allmulticast mode [ 305.960799][T16710] bridge_slave_1: entered promiscuous mode [ 306.070773][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.095115][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.179073][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.186531][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.229029][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.236458][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.250476][ T2980] [ 306.252809][ T2980] ====================================================== [ 306.259806][ T2980] WARNING: possible circular locking dependency detected [ 306.266803][ T2980] 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 Not tainted [ 306.273882][ T2980] ------------------------------------------------------ [ 306.280871][ T2980] kworker/u8:7/2980 is trying to acquire lock: [ 306.286995][ T2980] ffff88814478a768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x2bd/0x10f0 [ 306.297584][ T2980] [ 306.297584][ T2980] but task is already holding lock: [ 306.304919][ T2980] ffff888065936d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 306.316566][ T2980] [ 306.316566][ T2980] which lock already depends on the new lock. [ 306.316566][ T2980] [ 306.326940][ T2980] [ 306.326940][ T2980] the existing dependency chain (in reverse order) is: [ 306.335925][ T2980] [ 306.335925][ T2980] -> #3 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 306.344329][ T2980] __mutex_lock+0x199/0xb90 [ 306.349337][ T2980] xsk_bind+0x37c/0x15d0 [ 306.354077][ T2980] __sys_bind+0x211/0x260 [ 306.358905][ T2980] __x64_sys_bind+0x72/0xb0 [ 306.363910][ T2980] do_syscall_64+0xcd/0x260 [ 306.368917][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.375306][ T2980] [ 306.375306][ T2980] -> #2 (&xs->mutex){+.+.}-{4:4}: [ 306.382486][ T2980] __mutex_lock+0x199/0xb90 [ 306.387488][ T2980] xsk_diag_dump+0x61d/0x1660 [ 306.392680][ T2980] netlink_dump+0x53b/0xd00 [ 306.397696][ T2980] __netlink_dump_start+0x6d6/0x990 [ 306.403398][ T2980] xsk_diag_handler_dump+0x1aa/0x240 [ 306.409183][ T2980] sock_diag_rcv_msg+0x437/0x790 [ 306.414619][ T2980] netlink_rcv_skb+0x16a/0x440 [ 306.419882][ T2980] netlink_unicast+0x53a/0x7f0 [ 306.425145][ T2980] netlink_sendmsg+0x8d1/0xdd0 [ 306.430408][ T2980] sock_write_iter+0x4fc/0x5b0 [ 306.435670][ T2980] do_iter_readv_writev+0x654/0x950 [ 306.441371][ T2980] vfs_writev+0x353/0xdc0 [ 306.446204][ T2980] do_writev+0x295/0x330 [ 306.450945][ T2980] do_syscall_64+0xcd/0x260 [ 306.455948][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.462346][ T2980] [ 306.462346][ T2980] -> #1 (&net->xdp.lock){+.+.}-{4:4}: [ 306.469885][ T2980] __mutex_lock+0x199/0xb90 [ 306.474893][ T2980] xsk_notifier+0xa4/0x280 [ 306.479808][ T2980] notifier_call_chain+0xb9/0x410 [ 306.485333][ T2980] call_netdevice_notifiers_info+0xbe/0x140 [ 306.491728][ T2980] unregister_netdevice_many_notify+0xe84/0x25a0 [ 306.498559][ T2980] unregister_netdevice_queue+0x305/0x3f0 [ 306.504780][ T2980] _cfg80211_unregister_wdev+0x64b/0x830 [ 306.510908][ T2980] ieee80211_if_remove+0x250/0x400 [ 306.516519][ T2980] ieee80211_del_iface+0x16/0x20 [ 306.521954][ T2980] cfg80211_remove_virtual_intf+0xda/0x2a0 [ 306.528262][ T2980] cfg80211_destroy_ifaces+0x132/0x210 [ 306.534219][ T2980] cfg80211_destroy_iface_wk+0x1e/0x30 [ 306.540175][ T2980] process_one_work+0x9cc/0x1b70 [ 306.545611][ T2980] worker_thread+0x6c8/0xf10 [ 306.550699][ T2980] kthread+0x3c2/0x780 [ 306.555264][ T2980] ret_from_fork+0x45/0x80 [ 306.560178][ T2980] ret_from_fork_asm+0x1a/0x30 [ 306.565446][ T2980] [ 306.565446][ T2980] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 306.573165][ T2980] __lock_acquire+0x1173/0x1ba0 [ 306.578512][ T2980] lock_acquire+0x179/0x350 [ 306.583508][ T2980] __mutex_lock+0x199/0xb90 [ 306.588514][ T2980] cfg80211_netdev_notifier_call+0x2bd/0x10f0 [ 306.595077][ T2980] notifier_call_chain+0xb9/0x410 [ 306.600604][ T2980] call_netdevice_notifiers_info+0xbe/0x140 [ 306.606998][ T2980] __dev_close_many+0xff/0x770 [ 306.612266][ T2980] dev_close_many+0x233/0x630 [ 306.617446][ T2980] unregister_netdevice_many_notify+0x384/0x25a0 [ 306.624274][ T2980] default_device_exit_batch+0x853/0xaf0 [ 306.630408][ T2980] ops_exit_list+0x128/0x180 [ 306.635493][ T2980] cleanup_net+0x5c1/0xb30 [ 306.640410][ T2980] process_one_work+0x9cc/0x1b70 [ 306.645846][ T2980] worker_thread+0x6c8/0xf10 [ 306.650948][ T2980] kthread+0x3c2/0x780 [ 306.655581][ T2980] ret_from_fork+0x45/0x80 [ 306.660505][ T2980] ret_from_fork_asm+0x1a/0x30 [ 306.665791][ T2980] [ 306.665791][ T2980] other info that might help us debug this: [ 306.665791][ T2980] [ 306.675994][ T2980] Chain exists of: [ 306.675994][ T2980] &rdev->wiphy.mtx --> &xs->mutex --> &dev_instance_lock_key#3 [ 306.675994][ T2980] [ 306.689442][ T2980] Possible unsafe locking scenario: [ 306.689442][ T2980] [ 306.696864][ T2980] CPU0 CPU1 [ 306.702203][ T2980] ---- ---- [ 306.707540][ T2980] lock(&dev_instance_lock_key#3); [ 306.712720][ T2980] lock(&xs->mutex); [ 306.719197][ T2980] lock(&dev_instance_lock_key#3); [ 306.726895][ T2980] lock(&rdev->wiphy.mtx); [ 306.731373][ T2980] [ 306.731373][ T2980] *** DEADLOCK *** [ 306.731373][ T2980] [ 306.739492][ T2980] 5 locks held by kworker/u8:7/2980: [ 306.744748][ T2980] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 306.755075][ T2980] #1: ffffc9000bb4fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 306.764965][ T2980] #2: ffffffff90115f10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 306.774251][ T2980] #3: ffffffff9012bda8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 306.784246][ T2980] #4: ffff888065936d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x14a1/0x25a0 [ 306.796322][ T2980] [ 306.796322][ T2980] stack backtrace: [ 306.802185][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: kworker/u8:7 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 306.802202][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.802211][ T2980] Workqueue: netns cleanup_net [ 306.802229][ T2980] Call Trace: [ 306.802233][ T2980] [ 306.802239][ T2980] dump_stack_lvl+0x116/0x1f0 [ 306.802256][ T2980] print_circular_bug+0x275/0x350 [ 306.802275][ T2980] check_noncircular+0x14c/0x170 [ 306.802292][ T2980] ? find_held_lock+0x2b/0x80 [ 306.802309][ T2980] __lock_acquire+0x1173/0x1ba0 [ 306.802322][ T2980] lock_acquire+0x179/0x350 [ 306.802333][ T2980] ? cfg80211_netdev_notifier_call+0x2bd/0x10f0 [ 306.802348][ T2980] ? __pfx___might_resched+0x10/0x10 [ 306.802366][ T2980] __mutex_lock+0x199/0xb90 [ 306.802386][ T2980] ? cfg80211_netdev_notifier_call+0x2bd/0x10f0 [ 306.802399][ T2980] ? cfg80211_netdev_notifier_call+0x2bd/0x10f0 [ 306.802413][ T2980] ? __pfx___mutex_lock+0x10/0x10 [ 306.802428][ T2980] ? number+0x9aa/0xc70 [ 306.802443][ T2980] ? cfg80211_netdev_notifier_call+0x2bd/0x10f0 [ 306.802455][ T2980] cfg80211_netdev_notifier_call+0x2bd/0x10f0 [ 306.802469][ T2980] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 306.802484][ T2980] ? __lock_acquire+0xaa4/0x1ba0 [ 306.802495][ T2980] ? __lock_acquire+0xaa4/0x1ba0 [ 306.802508][ T2980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.802522][ T2980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.802535][ T2980] ? inetdev_event+0x180/0x18a0 [ 306.802550][ T2980] ? igmp_netdev_event+0x7b/0x8c0 [ 306.802564][ T2980] ? __pfx_igmp_netdev_event+0x10/0x10 [ 306.802577][ T2980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.802588][ T2980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.802599][ T2980] ? ipmr_device_event+0x1bc/0x230 [ 306.802614][ T2980] notifier_call_chain+0xb9/0x410 [ 306.802632][ T2980] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 306.802646][ T2980] call_netdevice_notifiers_info+0xbe/0x140 [ 306.802665][ T2980] __dev_close_many+0xff/0x770 [ 306.802682][ T2980] ? __pfx___dev_close_many+0x10/0x10 [ 306.802699][ T2980] ? unregister_netdevice_many_notify+0x14a1/0x25a0 [ 306.802717][ T2980] dev_close_many+0x233/0x630 [ 306.802734][ T2980] ? __pfx_dev_close_many+0x10/0x10 [ 306.802754][ T2980] unregister_netdevice_many_notify+0x384/0x25a0 [ 306.802771][ T2980] ? lockdep_hardirqs_on+0x7c/0x110 [ 306.802786][ T2980] ? batadv_tt_local_event+0x455/0x7f0 [ 306.802798][ T2980] ? __local_bh_enable_ip+0xa4/0x120 [ 306.802814][ T2980] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 306.802832][ T2980] ? unregister_netdevice_queue+0x22e/0x3f0 [ 306.802848][ T2980] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 306.802864][ T2980] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 306.802883][ T2980] default_device_exit_batch+0x853/0xaf0 [ 306.802901][ T2980] ? __pfx_default_device_exit_batch+0x10/0x10 [ 306.802917][ T2980] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 306.802930][ T2980] ? __pfx___might_resched+0x10/0x10 [ 306.802946][ T2980] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 306.802962][ T2980] ? __pfx_default_device_exit_batch+0x10/0x10 [ 306.802979][ T2980] ops_exit_list+0x128/0x180 [ 306.802993][ T2980] cleanup_net+0x5c1/0xb30 [ 306.803009][ T2980] ? __pfx_cleanup_net+0x10/0x10 [ 306.803026][ T2980] ? rcu_is_watching+0x12/0xc0 [ 306.803041][ T2980] process_one_work+0x9cc/0x1b70 [ 306.803057][ T2980] ? __pfx_process_one_work+0x10/0x10 [ 306.803072][ T2980] ? assign_work+0x1a0/0x250 [ 306.803085][ T2980] worker_thread+0x6c8/0xf10 [ 306.803101][ T2980] ? __pfx_worker_thread+0x10/0x10 [ 306.803114][ T2980] kthread+0x3c2/0x780 [ 306.803125][ T2980] ? __pfx_kthread+0x10/0x10 [ 306.803135][ T2980] ? __pfx_kthread+0x10/0x10 [ 306.803146][ T2980] ? __pfx_kthread+0x10/0x10 [ 306.803157][ T2980] ? __pfx_kthread+0x10/0x10 [ 306.803168][ T2980] ? rcu_is_watching+0x12/0xc0 [ 306.803181][ T2980] ? __pfx_kthread+0x10/0x10 [ 306.803193][ T2980] ret_from_fork+0x45/0x80 [ 306.803205][ T2980] ? __pfx_kthread+0x10/0x10 [ 306.803217][ T2980] ret_from_fork_asm+0x1a/0x30 [ 306.803238][ T2980] [ 307.190202][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.200498][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.208148][ T5827] Bluetooth: hci4: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.355072][ T2980] dummy0: left promiscuous mode [ 307.360040][ T2980] veth1_macvtap: left promiscuous mode [ 307.365554][ T2980] veth0_macvtap: left promiscuous mode [ 307.373846][ T2980] veth1_vlan: left promiscuous mode [ 307.379152][ T2980] veth0_vlan: left promiscuous mode [ 307.459116][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (52) [ 307.784399][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 307.817698][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 307.984896][ T5870] lo speed is unknown, defaulting to 1000 [ 307.990911][ T5870] infiniband syz2: ib_query_port failed (-19) [ 308.181029][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.260580][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.269088][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.299262][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.619077][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.179142][ T6463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.342444][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.379335][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.420802][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.229799][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.298945][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.338936][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.378894][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.389416][ T6434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.397517][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog