last executing test programs: 20.240027408s ago: executing program 1 (id=594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0xf, 0x8, 0xce, 0x3ff}]}}}}}}}}, 0x0) 20.234781027s ago: executing program 1 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) socket$kcm(0x2, 0x2, 0x73) 20.19217978s ago: executing program 1 (id=596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000001400000060ec970012302c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xfdef) 19.954459725s ago: executing program 1 (id=600): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 14.7450428s ago: executing program 2 (id=621): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 12.705550895s ago: executing program 1 (id=600): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 11.681035919s ago: executing program 2 (id=632): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000001580)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c78, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280380da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000000)={{0x0, 0xea60}, 0x12, 0x5}, 0x18) 11.627291578s ago: executing program 2 (id=633): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) 11.582396435s ago: executing program 2 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x20}]}}}]}, 0x48}}, 0x0) 11.311078007s ago: executing program 2 (id=635): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0x1d, 0x3, "f5194a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000540)={0x0, 0x30, 0x8, "69ceb6cff49648a4"}, 0x0, 0x0}) 3.386770442s ago: executing program 0 (id=668): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.272724094s ago: executing program 1 (id=600): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.265808106s ago: executing program 0 (id=669): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff2, 0xa}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_RTT={0x8, 0x7, 0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0xf72e47e6778e75bb}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 3.020855694s ago: executing program 0 (id=670): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 3.017949544s ago: executing program 4 (id=671): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x7c, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffff7f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x15}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x20, 0x1, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}]}]}]}}]}, 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.902381733s ago: executing program 4 (id=672): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="c382537bb512", 'bridge_slave_0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000000)=0x2) 2.824962439s ago: executing program 4 (id=673): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.680573242s ago: executing program 4 (id=675): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0xc, r2, 0x4, r0}, 0x10) 2.376093532s ago: executing program 4 (id=676): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000200)={0x20, 0x9, 0x2, '\\/'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.358955689s ago: executing program 3 (id=677): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5a, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 1.936846277s ago: executing program 2 (id=635): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0x1d, 0x3, "f5194a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000540)={0x0, 0x30, 0x8, "69ceb6cff49648a4"}, 0x0, 0x0}) 1.7160699s ago: executing program 3 (id=678): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0x1}}}, 0x24}}, 0x4014) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.613550681s ago: executing program 3 (id=679): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="e4d561e9744108000000e9b4ec081c8eb4534bc5b9284f843e2bc71745", 0x1d}, {&(0x7f0000000300)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd7412060421997bb92", 0x90}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$sock(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000400)="dcc1cb3ea8aec09f43", 0x9}], 0x1}, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000180)=""/160, 0xa0}, {0x0}], 0x2}}], 0x1, 0x20, 0x0) 1.28950963s ago: executing program 3 (id=680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000003c0)="0f20e035200000000f22e0273ef30f019e0e0000000f3566b897008ee0f30fc772fd66baf80cb8e4f95289ef66bafc0cb804000000ef66baf80cb890bd8b8bef66bafc0cb808000000ef8fc818cf0a0dc4c3997c840800f0ffff00", 0x5b}], 0x1, 0x1b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="3666440f2000c4829d9c95000001000f20e035000200000f22e0c4a2a529808aa700000f08b9910a00000f32c422ed8c9a040000000f0966410f388031420f0012", 0x41}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 967.482012ms ago: executing program 3 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000890) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0x800, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0xe}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x40084) 533.007904ms ago: executing program 0 (id=682): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3332, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 336.096855ms ago: executing program 0 (id=683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 151.01162ms ago: executing program 3 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 143.783762ms ago: executing program 0 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002440)={@val={0x0, 0x86dd}, @val={0x2, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0xe, 0x6, "af8c49", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x4, 0x0, 0x8, 0x1, 0x0, 0x2, 0x66}, @dstopts={0x33, 0x1ea, '\x00', [@pad1, @ra={0x5, 0x2, 0x6a03}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0x3, [0xfffffffffffffff5, 0x8, 0x6]}}, @generic={0xc2, 0xf0e, "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"}, @pad1, @pad1]}, @routing={0x84}], @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x2, 0x2, 0x5, 0x0, 0x2, 0x3, 0x5, 0x2, 0x4, 0x1, 0x2, 0x4e24, 0x4e22}, 0x0, 0x1ff}, 0x0, 0x4}}}}}}}, 0xfce) 0s ago: executing program 4 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) shutdown(r1, 0x6) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="41000000010001", 0x7) kernel console output (not intermixed with test programs): ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.490817][ T29] audit: type=1400 audit(1732602163.443:262): avc: denied { ioctl } for pid=6334 comm="syz.4.162" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.554729][ T29] audit: type=1400 audit(1732602163.443:263): avc: denied { create } for pid=6333 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.962493][ T8] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 81.082734][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 81.292795][ T5887] usb 2-1: USB disconnect, device number 4 [ 81.304864][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 81.372414][ T5887] cp210x 2-1:0.0: device disconnected [ 81.942753][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.110558][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 82.121325][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.131594][ T8] usb 3-1: config 0 has no interfaces? [ 82.137076][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 82.167367][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.212557][ T8] usb 3-1: config 0 descriptor?? [ 82.340673][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.573827][ T5883] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 82.723916][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.865375][ T5883] usb 2-1: Product: syz [ 82.882713][ T5883] usb 2-1: Manufacturer: syz [ 82.894125][ T47] usb 3-1: USB disconnect, device number 3 [ 82.904911][ T5883] usb 2-1: SerialNumber: syz [ 82.917733][ T5883] usb 2-1: config 0 descriptor?? [ 83.820673][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 83.827133][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 83.841126][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.027404][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 84.036619][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.046762][ T8] usb 3-1: config 0 descriptor?? [ 84.131716][ T5883] usb 2-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 84.145649][ T5883] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 84.154215][ T5883] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 84.176750][ T5883] usb 2-1: USB disconnect, device number 5 [ 84.190359][ T5852] udevd[5852]: setting mode of /dev/bus/usb/002/005 to 020664 failed: No such file or directory [ 84.217091][ T5852] udevd[5852]: setting owner of /dev/bus/usb/002/005 to uid=0, gid=0 failed: No such file or directory [ 84.287083][ T6408] binder: 6407:6408 ioctl c00c620f 20000340 returned -22 [ 84.287102][ T29] audit: type=1400 audit(1732602167.343:264): avc: denied { ioctl } for pid=6407 comm="syz.0.190" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.388388][ T29] audit: type=1400 audit(1732602167.443:265): avc: denied { mount } for pid=6409 comm="syz.0.191" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.412701][ T29] audit: type=1400 audit(1732602167.443:266): avc: denied { read } for pid=6409 comm="syz.0.191" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.439195][ T29] audit: type=1400 audit(1732602167.443:267): avc: denied { open } for pid=6409 comm="syz.0.191" path="/40/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.497948][ T8] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 84.510607][ T29] audit: type=1400 audit(1732602167.473:268): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.569469][ T29] audit: type=1400 audit(1732602167.623:269): avc: denied { write } for pid=6413 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.682085][ T8] playstation 0003:054C:0DF2.0002: Invalid reportID received, expected 9 got 201 [ 84.697081][ T8] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 84.719884][ T8] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 84.729060][ T8] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 84.744084][ T8] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -22 [ 84.910565][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.930226][ T8] usb 3-1: USB disconnect, device number 4 [ 85.050555][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.082094][ T47] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 85.091089][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.101559][ T47] usb 1-1: config 0 has no interface number 0 [ 85.107689][ T47] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 85.117983][ T47] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.139451][ T47] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 85.152088][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.160192][ T47] usb 1-1: Product: syz [ 85.169306][ T47] usb 1-1: Manufacturer: syz [ 85.174272][ T47] usb 1-1: SerialNumber: syz [ 85.188506][ T47] usb 1-1: config 0 descriptor?? [ 85.222531][ T5883] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.233427][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.244333][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.255354][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.268444][ T5883] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 85.278888][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.290231][ T5883] usb 2-1: config 0 descriptor?? [ 85.411166][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.561861][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.583731][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.595267][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.620459][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.637434][ T8] usb 5-1: SerialNumber: syz [ 85.640489][ T47] usb 1-1: USB disconnect, device number 3 [ 85.702208][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.716053][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.749259][ T5883] nintendo 0003:057E:2009.0003: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 85.834291][ T5883] nintendo 0003:057E:2009.0003: Failed to get joycon info; ret=-38 [ 85.847286][ T5883] nintendo 0003:057E:2009.0003: Failed to retrieve controller info; ret=-38 [ 85.858642][ T8] usb 5-1: 0:2 : does not exist [ 85.859347][ T5883] nintendo 0003:057E:2009.0003: Failed to initialize controller; ret=-38 [ 85.885252][ T5883] nintendo 0003:057E:2009.0003: probe - fail = -38 [ 85.898061][ T5883] nintendo 0003:057E:2009.0003: probe with driver nintendo failed with error -38 [ 85.931686][ T8] usb 5-1: USB disconnect, device number 3 [ 85.947084][ T5883] usb 2-1: USB disconnect, device number 6 [ 86.172379][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.500907][ T29] audit: type=1400 audit(1732602169.553:270): avc: denied { mount } for pid=6455 comm="syz.0.213" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.605475][ T29] audit: type=1400 audit(1732602169.663:271): avc: denied { ioctl } for pid=6459 comm="syz.0.215" path="socket:[9978]" dev="sockfs" ino=9978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.636562][ T29] audit: type=1400 audit(1732602169.663:272): avc: denied { bind } for pid=6459 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 86.850949][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 87.013593][ T5887] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 87.032865][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.046468][ T5887] usb 2-1: Product: syz [ 87.051140][ T5887] usb 2-1: Manufacturer: syz [ 87.056924][ T5887] usb 2-1: SerialNumber: syz [ 87.079663][ T5887] usb 2-1: config 0 descriptor?? [ 87.271683][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.399273][ T6490] netlink: 'syz.2.229': attribute type 7 has an invalid length. [ 87.549530][ T5887] usb 2-1: Firmware: major: 121, minor: 0, hardware type: ATUSB (0) [ 87.644576][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 87.762135][ T5887] usb 2-1: failed to fetch extended address, random address set [ 87.873267][ T5887] usb 2-1: USB disconnect, device number 7 [ 88.059584][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 88.186900][ T6526] capability: warning: `syz.2.245' uses deprecated v2 capabilities in a way that may be insecure [ 88.240602][ T6524] netlink: 204 bytes leftover after parsing attributes in process `syz.4.244'. [ 88.317979][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.499416][ T6536] sp0: Synchronizing with TNC [ 88.526594][ T6536] sp0: Found TNC [ 88.550698][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.639678][ T6545] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 89.029491][ T6534] [U] è` [ 89.032735][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.108966][ T29] audit: type=1400 audit(1732602172.163:273): avc: denied { ioctl } for pid=6550 comm="syz.0.257" path="socket:[10647]" dev="sockfs" ino=10647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.123661][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 89.184489][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.210529][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.280880][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.288330][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.331405][ T29] audit: type=1400 audit(1732602172.383:274): avc: denied { read } for pid=6557 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.361729][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.458286][ T29] audit: type=1400 audit(1732602172.513:275): avc: denied { mount } for pid=6566 comm="syz.2.263" name="/" dev="hugetlbfs" ino=10682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 89.544168][ T29] audit: type=1400 audit(1732602172.603:276): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 89.727427][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.950776][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.070581][ T29] audit: type=1400 audit(1732602173.103:277): avc: denied { create } for pid=6571 comm="syz.2.265" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 90.120777][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 90.127420][ T5885] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.146224][ T5885] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.182731][ T5885] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 90.270750][ T6582] netlink: 'syz.0.267': attribute type 27 has an invalid length. [ 90.435303][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.535603][ T5885] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.543667][ T5885] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 90.554183][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.594652][ T5885] usb 5-1: config 0 descriptor?? [ 90.651299][ T29] audit: type=1400 audit(1732602173.703:278): avc: denied { ioctl } for pid=6580 comm="syz.2.268" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11412 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.764608][ T6582] bond0: (slave bond_slave_0): Releasing backup interface [ 90.825946][ T6589] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 90.947590][ T29] audit: type=1400 audit(1732602174.003:279): avc: denied { connect } for pid=6590 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.031514][ T5885] hid (null): invalid report_count 56567 [ 91.058146][ T5885] hid (null): unknown global tag 0xc [ 91.077980][ T5885] hid (null): unknown global tag 0xd [ 91.095178][ T5885] hid (null): bogus close delimiter [ 91.110483][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.136438][ T5885] hid (null): global environment stack overflow [ 91.177383][ T5885] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0004/input/input8 [ 91.192806][ T29] audit: type=1400 audit(1732602174.253:280): avc: denied { search } for pid=6597 comm="syz.0.274" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.248551][ T29] audit: type=1400 audit(1732602174.253:281): avc: denied { write } for pid=6597 comm="syz.0.274" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.270043][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.285422][ T6600] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 91.308908][ T5885] kye 0003:0458:5010.0004: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 91.367176][ T5885] usb 5-1: USB disconnect, device number 4 [ 91.503593][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.833827][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.980357][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 91.991634][ T29] audit: type=1400 audit(1732602175.043:282): avc: denied { listen } for pid=6625 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.050750][ T6627] 8021q: VLANs not supported on lo [ 92.069999][ T5920] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 92.086873][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.101029][ T29] audit: type=1400 audit(1732602175.083:283): avc: denied { getopt } for pid=6625 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.120739][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.150956][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.166477][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.196443][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.212350][ T6634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.233916][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.268039][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.296124][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.331012][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.366775][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.386177][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.426840][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.454309][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.469610][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.486518][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.490070][ T5851] Bluetooth: hci5: sending frame failed (-49) [ 92.505642][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 92.510444][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.542059][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.551823][ T47] net_ratelimit: 1 callbacks suppressed [ 92.551835][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.573425][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.631196][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.651175][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.664251][ T6651] sch_tbf: burst 720 is lower than device lo mtu (65550) ! [ 92.670446][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.697528][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.706042][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.738350][ T5920] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.756415][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.773113][ T5920] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 92.782809][ T5920] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 92.803946][ T5920] usb 1-1: Product: syz [ 92.808147][ T5920] usb 1-1: Manufacturer: syz [ 92.813276][ T5920] usb 1-1: SerialNumber: syz [ 92.853655][ T5920] usb 1-1: config 0 descriptor?? [ 92.867924][ T5920] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 92.968508][ T6663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.305'. [ 92.995793][ T6663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.305'. [ 93.267822][ T6675] netlink: 'syz.1.311': attribute type 12 has an invalid length. [ 93.277409][ T6675] netlink: 'syz.1.311': attribute type 3 has an invalid length. [ 93.285145][ T6675] netlink: 'syz.1.311': attribute type 40 has an invalid length. [ 93.330594][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 93.450566][ T967] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.467101][ T6682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.492439][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 93.502012][ T5885] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 93.510894][ T5885] usb 5-1: config 0 has no interface number 0 [ 93.518801][ T5885] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 93.528263][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.536900][ T5885] usb 5-1: Product: syz [ 93.542066][ T5885] usb 5-1: Manufacturer: syz [ 93.547599][ T5885] usb 5-1: SerialNumber: syz [ 93.555934][ T5885] usb 5-1: config 0 descriptor?? [ 93.555971][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'. [ 93.563554][ T5885] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 93.573505][ T6685] netem: invalid attributes len -13 [ 93.585301][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.597379][ T6685] netem: change failed [ 93.610480][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 93.621395][ T967] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 93.629510][ T967] usb 3-1: config 0 has no interface number 0 [ 93.639409][ T967] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 93.654649][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.662958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.680858][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.689757][ T967] usb 3-1: Product: syz [ 93.694244][ T967] usb 3-1: Manufacturer: syz [ 93.698855][ T967] usb 3-1: SerialNumber: syz [ 93.706088][ T967] usb 3-1: config 0 descriptor?? [ 93.715346][ T967] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 93.781385][ T5885] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 93.794836][ T5885] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 93.933698][ T967] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 93.946122][ T967] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 94.145549][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.167810][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.177048][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.253695][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.273993][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 94.275046][ T47] usb 5-1: USB disconnect, device number 5 [ 94.299016][ T47] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 94.313451][ T6697] bridge_slave_1 (unregistering): left allmulticast mode [ 94.322561][ T6697] bridge_slave_1 (unregistering): left promiscuous mode [ 94.329601][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.339978][ T47] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 94.351792][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 94.351806][ T29] audit: type=1400 audit(1732602177.403:293): avc: denied { create } for pid=5191 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.391210][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 94.392190][ T5920] usb 3-1: USB disconnect, device number 5 [ 94.405299][ T47] quatech2 5-1:0.51: device disconnected [ 94.419835][ T5920] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 94.452903][ T5920] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 94.467884][ T5920] quatech2 3-1:0.51: device disconnected [ 94.620753][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.647710][ T29] audit: type=1400 audit(1732602177.703:294): avc: denied { ioctl } for pid=6706 comm="syz.1.324" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x6401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.739450][ T967] usb 1-1: USB disconnect, device number 4 [ 94.770023][ T967] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 94.936539][ T29] audit: type=1400 audit(1732602177.993:295): avc: denied { read } for pid=6713 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.731332][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.870102][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 95.936788][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 95.945745][ T29] audit: type=1400 audit(1732602178.993:296): avc: denied { create } for pid=6733 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.180662][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.218770][ T6737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 96.230758][ T6737] netlink: 'syz.3.334': attribute type 2 has an invalid length. [ 96.352924][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 96.359370][ T47] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 96.368312][ T47] usb 1-1: config 0 has no interface number 0 [ 96.380753][ T47] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 96.423969][ T47] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 96.462474][ T47] usb 1-1: config 0 interface 126 has no altsetting 0 [ 96.463554][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.471421][ T47] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 96.493014][ T8] usb 3-1: config 0 has no interface number 0 [ 96.499124][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.503336][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.525472][ T47] usb 1-1: Product: syz [ 96.529722][ T47] usb 1-1: Manufacturer: syz [ 96.534511][ T47] usb 1-1: SerialNumber: syz [ 96.543596][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.556960][ T47] usb 1-1: config 0 descriptor?? [ 96.566695][ T6731] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.575389][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 96.576989][ T6731] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 96.608661][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.646929][ T8] usb 3-1: config 0 descriptor?? [ 96.782035][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.050090][ T47] ir_usb 1-1:0.126: IR Dongle converter detected [ 97.085244][ T8] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 97.326814][ T47] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 97.577406][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.586022][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.610508][ T8] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 97.617771][ T8] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 97.625106][ T8] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 97.632382][ T8] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 97.639612][ T8] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 97.647336][ T8] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 97.664400][ T8] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 97.754723][ T8] hid_prodikeys: hid-prodikeys: failed to find output report [ 97.754723][ T8] [ 97.816650][ T8] usb 3-1: USB disconnect, device number 6 [ 97.837311][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.864141][ T47] usb 1-1: USB disconnect, device number 5 [ 97.889469][ T47] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 97.911908][ T47] ir_usb 1-1:0.126: device disconnected [ 98.074800][ T29] audit: type=1400 audit(1732602181.133:297): avc: denied { bind } for pid=6768 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.182977][ T6775] netlink: 'syz.4.349': attribute type 12 has an invalid length. [ 98.190877][ T6775] netlink: 248 bytes leftover after parsing attributes in process `syz.4.349'. [ 98.246783][ T29] audit: type=1400 audit(1732602181.303:298): avc: denied { name_bind } for pid=6778 comm="syz.4.351" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 98.274442][ T29] audit: type=1400 audit(1732602181.303:299): avc: denied { node_bind } for pid=6778 comm="syz.4.351" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 98.348038][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'. [ 98.430203][ T29] audit: type=1400 audit(1732602181.483:300): avc: denied { create } for pid=6786 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.435177][ T6787] ax25_connect(): syz.4.355 uses autobind, please contact jreuter@yaina.de [ 98.473486][ T29] audit: type=1400 audit(1732602181.493:301): avc: denied { setopt } for pid=6786 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.497440][ T29] audit: type=1400 audit(1732602181.493:302): avc: denied { connect } for pid=6786 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.720997][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.790870][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.845696][ T6801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.854348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.871494][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.964344][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.990488][ T967] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.042179][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.150449][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 99.158726][ T967] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 99.172817][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.189094][ T967] usb 1-1: Product: syz [ 99.197710][ T967] usb 1-1: Manufacturer: syz [ 99.206995][ T967] usb 1-1: SerialNumber: syz [ 99.217827][ T967] usb 1-1: config 0 descriptor?? [ 99.235141][ T967] as10x_usb: device has been detected [ 99.246352][ T967] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 99.266360][ T967] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 99.295577][ T967] as10x_usb: error during firmware upload part1 [ 99.306132][ T967] Registered device Abilis Systems DVB-Titan [ 99.480692][ T5883] usb 1-1: USB disconnect, device number 6 [ 99.536694][ T5883] Unregistered device Abilis Systems DVB-Titan [ 99.537659][ T5883] as10x_usb: device has been disconnected [ 100.411080][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 100.418243][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.553195][ T6823] netlink: 204 bytes leftover after parsing attributes in process `syz.4.370'. [ 100.564873][ T6823] netlink: 204 bytes leftover after parsing attributes in process `syz.4.370'. [ 100.641277][ T5887] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.660666][ T967] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.810543][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 100.811172][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 100.823675][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.829238][ T967] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.841495][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.854784][ T967] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.40 [ 100.868673][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 100.868687][ T29] audit: type=1400 audit(1732602183.913:308): avc: denied { mount } for pid=6833 comm="syz.4.375" name="/" dev="ramfs" ino=11965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.878104][ T5887] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.00 [ 100.896848][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.897883][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.923388][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.924329][ T967] usb 3-1: Product: syz [ 100.932159][ T29] audit: type=1400 audit(1732602183.983:309): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.939692][ T967] usb 3-1: Manufacturer: syz [ 100.957264][ T5887] usb 1-1: config 0 descriptor?? [ 100.964790][ T967] usb 3-1: SerialNumber: syz [ 100.988674][ T967] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 101.508663][ T5887] apple 0003:05AC:0238.0006: unknown main item tag 0x0 [ 101.579766][ T5887] apple 0003:05AC:0238.0006: unknown global tag 0xe [ 101.644826][ T5887] apple 0003:05AC:0238.0006: item 0 0 1 14 parsing failed [ 101.673035][ T5887] apple 0003:05AC:0238.0006: parse failed [ 101.678833][ T5887] apple 0003:05AC:0238.0006: probe with driver apple failed with error -22 [ 101.842345][ T5887] usb 1-1: USB disconnect, device number 7 [ 101.850022][ T5883] usb 3-1: USB disconnect, device number 7 [ 101.976274][ T6852] input: syz0 as /devices/virtual/input/input9 [ 102.300260][ T29] audit: type=1400 audit(1732602185.353:310): avc: denied { mounton } for pid=6866 comm="syz.4.389" path="/88/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.676678][ T6881] ax25_connect(): syz.2.395 uses autobind, please contact jreuter@yaina.de [ 102.700893][ T5887] net_ratelimit: 16 callbacks suppressed [ 102.700909][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.731608][ T6883] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 102.740488][ T6883] netlink: 'syz.0.396': attribute type 2 has an invalid length. [ 102.794559][ T29] audit: type=1400 audit(1732602185.853:311): avc: denied { bind } for pid=6885 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.833504][ T29] audit: type=1400 audit(1732602185.873:312): avc: denied { mount } for pid=6884 comm="syz.4.397" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.904680][ T29] audit: type=1400 audit(1732602185.883:313): avc: denied { remount } for pid=6884 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.924270][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.989767][ T29] audit: type=1400 audit(1732602185.893:314): avc: denied { listen } for pid=6885 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.024789][ T6893] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 103.048665][ T6895] netlink: 212 bytes leftover after parsing attributes in process `syz.1.401'. [ 103.060200][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 103.071171][ T29] audit: type=1400 audit(1732602185.993:315): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.090964][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.106495][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.402'. [ 103.312481][ T6905] omfs: Invalid superblock (0) [ 103.760230][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.831066][ T5885] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.002098][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 104.174950][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.183431][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.305719][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 104.314260][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.538789][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.630761][ T29] audit: type=1400 audit(1732602187.673:316): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.652640][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 104.668358][ T5885] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.691884][ T5885] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.698537][ T5885] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 104.717271][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.732199][ T5885] usb 1-1: config 0 descriptor?? [ 104.781770][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.790830][ T29] audit: type=1400 audit(1732602187.843:317): avc: denied { connect } for pid=6948 comm="syz.2.424" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.889321][ T6952] @: renamed from vlan0 (while UP) [ 104.896824][ T6947] syz.4.423 (6947) used greatest stack depth: 19104 bytes left [ 105.173251][ T5885] hid (null): nested delimiters [ 105.196243][ T5885] cougar 0003:060B:500A.0007: unexpected long global item [ 105.206599][ T5885] cougar 0003:060B:500A.0007: parse failed [ 105.215498][ T5885] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 105.252167][ T5887] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.376906][ T5883] usb 1-1: USB disconnect, device number 8 [ 105.432417][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 105.440173][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.451450][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.463217][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.473574][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.484246][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.499164][ T5887] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 105.524802][ T5887] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 105.535124][ T5887] usb 5-1: Manufacturer: syz [ 105.547939][ T5887] usb 5-1: config 0 descriptor?? [ 105.598472][ T6970] tipc: Started in network mode [ 105.604024][ T6970] tipc: Node identity ac1414aa, cluster identity 4711 [ 105.613577][ T6970] tipc: Enabled bearer , priority 10 [ 105.622600][ T6970] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 105.821012][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.833989][ T5887] rc_core: IR keymap rc-hauppauge not found [ 105.843240][ T5887] Registered IR keymap rc-empty [ 105.848319][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 105.870551][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 105.892164][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 105.921415][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 105.964709][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 105.990594][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.023722][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 106.023737][ T29] audit: type=1400 audit(1732602189.083:320): avc: denied { set_context_mgr } for pid=6981 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 106.070548][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.111287][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.141338][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.168234][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.210959][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.306628][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.329603][ T6994] netlink: 'syz.2.443': attribute type 1 has an invalid length. [ 106.337566][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.360475][ T5887] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 106.382505][ T5887] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 106.401067][ T5887] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 106.441887][ T5887] usb 5-1: USB disconnect, device number 6 [ 106.448888][ T29] audit: type=1400 audit(1732602189.503:321): avc: denied { listen } for pid=6997 comm="syz.2.445" lport=34311 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.501432][ T29] audit: type=1400 audit(1732602189.563:322): avc: denied { accept } for pid=6997 comm="syz.2.445" lport=34311 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.523727][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.631144][ T5920] tipc: Node number set to 2886997162 [ 106.669994][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 106.781387][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.861247][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 106.867715][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.876449][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.939367][ T5883] IPVS: starting estimator thread 0... [ 106.950927][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 106.957139][ T7019] tipc: Started in network mode [ 106.969757][ T47] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 106.970068][ T7019] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.979179][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.979207][ T47] usb 1-1: Product: syz [ 106.979224][ T47] usb 1-1: Manufacturer: syz [ 106.979241][ T47] usb 1-1: SerialNumber: syz [ 106.981088][ T47] usb 1-1: config 0 descriptor?? [ 107.015860][ T47] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 107.024968][ T7019] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.038284][ T7019] tipc: Enabled bearer , priority 10 [ 107.060643][ T7020] IPVS: using max 29 ests per chain, 69600 per kthread [ 107.102333][ T967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.125310][ T7025] input: syz0 as /devices/virtual/input/input12 [ 107.160534][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.399321][ T7032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.421488][ T29] audit: type=1400 audit(1732602190.483:323): avc: denied { bind } for pid=7031 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.440690][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.459936][ T29] audit: type=1400 audit(1732602190.483:324): avc: denied { name_bind } for pid=7031 comm="syz.4.458" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 107.470538][ T967] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 107.494998][ T29] audit: type=1400 audit(1732602190.483:325): avc: denied { node_bind } for pid=7031 comm="syz.4.458" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 107.598961][ T7039] loop9: detected capacity change from 0 to 7 [ 107.611907][ T7039] Dev loop9: unable to read RDB block 7 [ 107.617645][ T7039] loop9: unable to read partition table [ 107.625835][ T7039] loop9: partition table beyond EOD, truncated [ 107.632072][ T7039] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 107.642696][ T967] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 107.660985][ T967] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 107.669098][ T967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 107.697175][ T967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 107.710049][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 107.720525][ C0] net_ratelimit: 4 callbacks suppressed [ 107.720543][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.734807][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.745181][ T967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 107.759321][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.810804][ T967] usb 3-1: string descriptor 0 read error: -22 [ 107.818348][ T967] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 107.860495][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.888600][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.901592][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.000580][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.026297][ T967] usb 3-1: config 0 descriptor?? [ 108.027345][ T29] audit: type=1400 audit(1732602191.083:326): avc: denied { search } for pid=5191 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.042278][ T967] hub 3-1:0.0: bad descriptor, ignoring hub [ 108.061113][ T7043] netlink: 198060 bytes leftover after parsing attributes in process `syz.1.462'. [ 108.070337][ T967] hub 3-1:0.0: probe with driver hub failed with error -5 [ 108.109693][ T967] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 108.141748][ T8] tipc: Node number set to 2886997162 [ 108.280445][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.357218][ T29] audit: type=1400 audit(1732602191.413:327): avc: denied { read append } for pid=7026 comm="syz.2.456" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.392158][ T8] usb 1-1: USB disconnect, device number 9 [ 108.419213][ T29] audit: type=1400 audit(1732602191.413:328): avc: denied { ioctl open } for pid=7026 comm="syz.2.456" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.442379][ T7048] syz.3.464 uses obsolete (PF_INET,SOCK_PACKET) [ 108.550454][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.567602][ T967] usb 3-1: USB disconnect, device number 8 [ 108.941985][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.015509][ T29] audit: type=1400 audit(1732602192.073:329): avc: denied { read write } for pid=7071 comm="syz.0.473" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.039348][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.080473][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 109.289687][ T7087] loop2: detected capacity change from 0 to 7 [ 109.316601][ T7087] Dev loop2: unable to read RDB block 7 [ 109.329113][ T7087] loop2: AHDI p1 p3 [ 109.335086][ T7087] loop2: partition table partially beyond EOD, truncated [ 109.351179][ T7087] loop2: p1 start 2048 is beyond EOD, truncated [ 109.363365][ T7089] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.753439][ T967] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.952533][ T7125] Bluetooth: MGMT ver 1.23 [ 109.959304][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.971177][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.992545][ T967] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 110.017613][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.073513][ T967] usb 3-1: config 0 descriptor?? [ 110.130971][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.290462][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 110.297534][ T8] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.313697][ T8] usb 5-1: config 0 has no interface number 0 [ 110.324290][ T8] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.338264][ T8] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 110.359482][ T8] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.376052][ T8] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.389963][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.399234][ T5934] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.411015][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.424552][ T8] usb 5-1: config 0 descriptor?? [ 110.436817][ T8] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 110.491637][ T967] hid (null): global environment stack underflow [ 110.501734][ T967] uclogic 0003:5543:0522.0008: global environment stack underflow [ 110.509885][ T967] uclogic 0003:5543:0522.0008: item 0 1 1 11 parsing failed [ 110.518079][ T967] uclogic 0003:5543:0522.0008: parse failed [ 110.524616][ T967] uclogic 0003:5543:0522.0008: probe with driver uclogic failed with error -22 [ 110.564509][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 110.585189][ T5934] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 110.595507][ T5934] usb 1-1: config 0 has no interface number 0 [ 110.606062][ T5934] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.617501][ T5934] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.631713][ T5934] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 110.657231][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.678033][ T5934] usb 1-1: config 0 descriptor?? [ 110.869447][ T967] usb 3-1: USB disconnect, device number 9 [ 110.914072][ T8] usb 5-1: USB disconnect, device number 7 [ 110.934466][ T8] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 111.480952][ T5934] usb 1-1: USB disconnect, device number 10 [ 111.535736][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 111.535753][ T29] audit: type=1400 audit(1732602194.583:343): avc: denied { bind } for pid=7135 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.740928][ T29] audit: type=1400 audit(1732602194.583:344): avc: denied { name_bind } for pid=7135 comm="syz.1.500" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 111.770292][ T29] audit: type=1400 audit(1732602194.583:345): avc: denied { node_bind } for pid=7135 comm="syz.1.500" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 111.790786][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.822170][ T29] audit: type=1400 audit(1732602194.593:346): avc: denied { connect } for pid=7135 comm="syz.1.500" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 111.900590][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.529370][ T29] audit: type=1400 audit(1732602195.583:347): avc: denied { unmount } for pid=7166 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.700866][ T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.751402][ T5920] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 112.809300][ T29] audit: type=1400 audit(1732602195.863:348): avc: denied { watch watch_reads } for pid=7176 comm="syz.1.518" path="pipe:[13937]" dev="pipefs" ino=13937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 112.872936][ T47] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 112.882393][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.897740][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.912554][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.923999][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.937499][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 112.946923][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.957301][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.967868][ T5920] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 112.976257][ T5920] usb 3-1: config 0 has no interface number 0 [ 112.983217][ T5920] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 112.994573][ T47] usb 5-1: config 0 descriptor?? [ 112.999732][ T5920] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.000155][ T7163] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.031703][ T5887] net_ratelimit: 7 callbacks suppressed [ 113.031717][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.081289][ T5920] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 113.090904][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.099155][ T5920] usb 3-1: Product: syz [ 113.104846][ T5920] usb 3-1: Manufacturer: syz [ 113.109495][ T5920] usb 3-1: SerialNumber: syz [ 113.118136][ T5920] usb 3-1: config 0 descriptor?? [ 113.123912][ T7165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.132021][ T7165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.260449][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 113.377624][ T7165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.385252][ T7165] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 113.443743][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.457723][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.476687][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.487915][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.519655][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.554430][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.576266][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.595271][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.603364][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.622754][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.630199][ T47] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 113.638718][ T47] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 113.653577][ T7204] syz_tun: entered promiscuous mode [ 113.665011][ T47] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 113.684255][ T47] usb 5-1: USB disconnect, device number 8 [ 113.691288][ T7204] syz_tun: left promiscuous mode [ 113.772110][ T29] audit: type=1400 audit(1732602196.823:349): avc: denied { read } for pid=7205 comm="syz.0.529" path="socket:[13996]" dev="sockfs" ino=13996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.097355][ T5920] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 114.108194][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.117447][ T5920] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 114.129245][ T5920] asix 3-1:0.251: probe with driver asix failed with error -71 [ 114.139163][ T5920] usb 3-1: USB disconnect, device number 10 [ 114.300436][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 114.708344][ T5934] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.870675][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 114.877151][ T5934] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.887384][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.898826][ T5934] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.911073][ T5934] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.928736][ T5934] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.938317][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.992846][ T29] audit: type=1400 audit(1732602198.053:350): avc: denied { create } for pid=7230 comm="syz.4.538" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.021097][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.040494][ T967] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 115.048087][ T29] audit: type=1400 audit(1732602198.093:351): avc: denied { mounton } for pid=7230 comm="syz.4.538" path="/122/file0" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.048526][ T7231] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 115.081836][ T7231] /dev/nbd4: Can't open blockdev [ 115.113589][ T29] audit: type=1400 audit(1732602198.173:352): avc: denied { unlink } for pid=5838 comm="syz-executor" name="file0" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.155412][ T5934] usb 2-1: GET_CAPABILITIES returned 0 [ 115.161569][ T5934] usbtmc 2-1:16.0: can't read capabilities [ 115.171017][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.191254][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.231855][ T967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.242294][ T967] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 115.256389][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 115.267626][ T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 115.277656][ T967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.293284][ T967] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 115.302543][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 115.311337][ T967] usb 3-1: Product: syz [ 115.315572][ T967] usb 3-1: Manufacturer: syz [ 115.320151][ T967] usb 3-1: SerialNumber: syz [ 115.326607][ T967] usb 3-1: config 0 descriptor?? [ 115.340465][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 115.342209][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 115.364254][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 115.376127][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.380493][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 115.402396][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.415994][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.418074][ T5934] usb 2-1: USB disconnect, device number 8 [ 115.433941][ T5920] usb 1-1: config 0 descriptor?? [ 115.444791][ T7227] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 115.535985][ T967] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 115.544093][ T967] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 115.570496][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 115.577378][ T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 115.587868][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.597701][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.607668][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.618477][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.631656][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.640806][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.740770][ T967] radio-si470x 3-1:0.0: software version 244, hardware version 88 [ 115.759614][ T967] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 115.862316][ T8] usb 5-1: usb_control_msg returned -32 [ 115.872835][ T8] usbtmc 5-1:16.0: can't read capabilities [ 115.873361][ T5920] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 115.907307][ T5920] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 115.938935][ T5920] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 115.940085][ T967] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 115.990491][ T967] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 116.006440][ T967] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 116.015851][ T967] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 116.029846][ T967] usb 3-1: USB disconnect, device number 11 [ 116.111873][ T8] usb 1-1: USB disconnect, device number 11 [ 116.226621][ T7249] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 116.235117][ T967] usb 5-1: USB disconnect, device number 9 [ 116.235516][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.380467][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 116.704594][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.218398][ T29] audit: type=1400 audit(1732602200.273:353): avc: denied { read append } for pid=7274 comm="syz.2.558" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.250892][ T7278] input: syz1 as /devices/virtual/input/input15 [ 117.258796][ T29] audit: type=1400 audit(1732602200.273:354): avc: denied { open } for pid=7274 comm="syz.2.558" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.284563][ T29] audit: type=1400 audit(1732602200.283:355): avc: denied { ioctl } for pid=7274 comm="syz.2.558" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 117.364324][ T29] audit: type=1400 audit(1732602200.423:356): avc: denied { write } for pid=7280 comm="syz.2.560" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 117.441115][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.521663][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 117.621338][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 117.628166][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.638548][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.649066][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 117.663753][ T5883] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.682688][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 117.693834][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.707093][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.717238][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.840556][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 117.849390][ T5883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.866464][ T5883] usb 5-1: config 0 has no interface number 0 [ 117.873947][ T5883] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.885435][ T5883] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.894726][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.905110][ T5883] usb 5-1: config 0 descriptor?? [ 117.917037][ T5883] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 117.943333][ T47] usb 2-1: GET_CAPABILITIES returned 0 [ 117.949489][ T47] usbtmc 2-1:16.0: can't read capabilities [ 118.061068][ T5885] net_ratelimit: 372 callbacks suppressed [ 118.061080][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.301624][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.309766][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.320010][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.330159][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.340219][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.350396][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.359760][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.368551][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.378685][ T7305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.928487][ T7310] netlink: 'syz.2.570': attribute type 27 has an invalid length. [ 119.165539][ T7310] bond0: (slave bond_slave_0): Releasing backup interface [ 119.228898][ T47] usb 2-1: USB disconnect, device number 9 [ 119.263186][ T5883] usb 5-1: USB disconnect, device number 10 [ 119.400191][ T5883] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 119.710822][ T5836] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 119.800978][ T5920] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.867572][ T5836] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.881972][ T5836] usb 1-1: config 0 has no interface number 0 [ 119.888098][ T5836] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 119.900118][ T5836] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 119.913463][ T5836] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.925004][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.934707][ T5836] usb 1-1: config 0 descriptor?? [ 119.941830][ T7319] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.951896][ T5836] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 119.980921][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 119.988159][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 120.002237][ T5920] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 120.011705][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.019678][ T5920] usb 3-1: Product: syz [ 120.024452][ T5920] usb 3-1: Manufacturer: syz [ 120.029047][ T5920] usb 3-1: SerialNumber: syz [ 120.035093][ T5920] usb 3-1: config 0 descriptor?? [ 120.044037][ T5920] hub 3-1:0.0: bad descriptor, ignoring hub [ 120.049944][ T5920] hub 3-1:0.0: probe with driver hub failed with error -5 [ 120.061139][ T5920] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 120.079897][ T5920] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 120.096219][ T5920] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 120.158051][ T7330] mkiss: ax0: crc mode is auto. [ 120.197094][ T5920] usb 1-1: USB disconnect, device number 12 [ 120.207340][ T5920] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 120.218520][ T7330] mkiss: ax0: crc mode is auto. [ 120.361244][ T5836] usb 3-1: USB disconnect, device number 12 [ 120.381235][ T29] audit: type=1400 audit(1732602203.443:357): avc: denied { read write } for pid=7335 comm="syz.1.581" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.409307][ T29] audit: type=1400 audit(1732602203.443:358): avc: denied { open } for pid=7335 comm="syz.1.581" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.710668][ T5836] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.872276][ T5836] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 120.883480][ T29] audit: type=1400 audit(1732602203.933:359): avc: denied { read } for pid=7348 comm="syz.4.587" name="usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.914994][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.940532][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.950299][ T5836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 120.963870][ T29] audit: type=1400 audit(1732602203.933:360): avc: denied { open } for pid=7348 comm="syz.4.587" path="/dev/usbmon7" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.010333][ T29] audit: type=1400 audit(1732602203.943:361): avc: denied { append } for pid=7348 comm="syz.4.587" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.037229][ T5836] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 121.046381][ T5836] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 121.054764][ T5836] usb 2-1: Manufacturer: syz [ 121.061489][ T5836] usb 2-1: config 0 descriptor?? [ 121.130617][ T5920] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 121.185351][ T29] audit: type=1400 audit(1732602204.243:362): avc: denied { read } for pid=7352 comm="syz.4.589" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.202004][ T7347] mmap: syz.2.585 (7347) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.317129][ T5920] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 121.328246][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.349633][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.363233][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 121.380890][ T5920] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 121.390170][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.408557][ T5920] usb 1-1: config 0 descriptor?? [ 121.473583][ T5836] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 121.484338][ T5836] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 121.494823][ T5836] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 121.641682][ T5885] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 121.754370][ T5836] usb 2-1: USB disconnect, device number 10 [ 121.790542][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 121.797011][ T5885] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.805728][ T5885] usb 3-1: config 0 has no interface number 0 [ 121.812348][ T5885] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.825090][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.835948][ T5885] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.845259][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.853106][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.866962][ T5920] usbhid 1-1:0.0: can't add hid device: -71 [ 121.873698][ T5920] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 121.876883][ T5885] usb 3-1: config 0 descriptor?? [ 121.893427][ T5885] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 121.893834][ T5920] usb 1-1: USB disconnect, device number 13 [ 122.727852][ T7382] netlink: 'syz.3.599': attribute type 27 has an invalid length. [ 123.083791][ T7382] bond0: (slave bond_slave_0): Releasing backup interface [ 123.208608][ T5920] usb 3-1: USB disconnect, device number 13 [ 123.210076][ T6844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.222135][ T5920] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 123.392345][ T6844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.449707][ T7389] syzkaller1: entered promiscuous mode [ 123.458643][ T7389] syzkaller1: entered allmulticast mode [ 123.485757][ T29] audit: type=1400 audit(1732602206.543:363): avc: denied { read } for pid=7392 comm="syz.0.604" path="socket:[14303]" dev="sockfs" ino=14303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.519771][ T5920] net_ratelimit: 456 callbacks suppressed [ 123.519785][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.609134][ T6844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.649283][ T29] audit: type=1400 audit(1732602206.713:364): avc: denied { setopt } for pid=7396 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.668516][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.668652][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 123.687730][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.701110][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.712650][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.720484][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.743062][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.751881][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.752012][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 123.791993][ T6844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.817874][ T29] audit: type=1400 audit(1732602206.863:365): avc: denied { mounton } for pid=7398 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 124.090508][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 124.162886][ T7413] netlink: 'syz.3.611': attribute type 27 has an invalid length. [ 124.221639][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.278276][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 124.401189][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 124.470103][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.480872][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.502357][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.531932][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.572456][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.601161][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.650668][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.679351][ T6844] bridge_slave_0: left allmulticast mode [ 124.687732][ T6844] bridge_slave_0: left promiscuous mode [ 124.698752][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.707237][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 124.872654][ T8] usb 3-1: usb_control_msg returned -32 [ 124.878272][ T8] usbtmc 3-1:16.0: can't read capabilities [ 124.891023][ T5933] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.910505][ T967] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 125.020915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.050825][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 125.060906][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 125.077005][ T5933] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 125.081697][ T7418] Bluetooth: MGMT ver 1.23 [ 125.087733][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.112480][ T967] usb 1-1: unable to get BOS descriptor or descriptor too short [ 125.121412][ T5933] usb 5-1: config 0 descriptor?? [ 125.129278][ T967] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 125.137081][ T967] usb 1-1: can't read configurations, error -71 [ 125.147662][ T5933] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 125.155107][ T5933] pwc: Warning: more than 1 configuration available. [ 125.177444][ T6844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.189191][ T6844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.200819][ T6844] bond0 (unregistering): Released all slaves [ 125.280164][ T7398] chnl_net:caif_netlink_parms(): no params data found [ 125.445106][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.452359][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.459597][ T7398] bridge_slave_0: entered allmulticast mode [ 125.467927][ T7398] bridge_slave_0: entered promiscuous mode [ 125.482535][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.489684][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.497760][ T7398] bridge_slave_1: entered allmulticast mode [ 125.504996][ T7398] bridge_slave_1: entered promiscuous mode [ 125.529718][ T6844] hsr_slave_0: left promiscuous mode [ 125.535951][ T6844] hsr_slave_1: left promiscuous mode [ 125.545538][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.553305][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.564260][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.572238][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.591674][ T6844] veth1_macvtap: left promiscuous mode [ 125.598520][ T6844] veth0_macvtap: left promiscuous mode [ 125.606442][ T6844] veth1_vlan: left promiscuous mode [ 125.612055][ T6844] veth0_vlan: left promiscuous mode [ 125.661608][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.669751][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.740474][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 125.775720][ T5933] pwc: recv_control_msg error -32 req 02 val 2b00 [ 125.805356][ T5933] pwc: recv_control_msg error -32 req 02 val 2700 [ 125.821603][ T54] Bluetooth: hci0: command tx timeout [ 125.828045][ T29] audit: type=1400 audit(1732602208.863:366): avc: denied { sys_module } for pid=7427 comm="syz.0.615" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.014746][ T5933] pwc: recv_control_msg error -71 req 02 val 2c00 [ 126.021788][ T5933] pwc: recv_control_msg error -71 req 04 val 1000 [ 126.028684][ T5933] pwc: recv_control_msg error -71 req 04 val 1300 [ 126.037115][ T5933] pwc: recv_control_msg error -71 req 04 val 1400 [ 126.044223][ T5933] pwc: recv_control_msg error -71 req 02 val 2000 [ 126.053948][ T5933] pwc: recv_control_msg error -71 req 02 val 2100 [ 126.061077][ T5933] pwc: recv_control_msg error -71 req 06 val 0600 [ 126.067995][ T5933] pwc: recv_control_msg error -71 req 04 val 1500 [ 126.079688][ T5933] pwc: recv_control_msg error -71 req 02 val 2500 [ 126.088643][ T5933] pwc: recv_control_msg error -71 req 02 val 2400 [ 126.098104][ T5933] pwc: recv_control_msg error -71 req 02 val 2600 [ 126.105025][ T5933] pwc: recv_control_msg error -71 req 02 val 2900 [ 126.113298][ T6844] team0 (unregistering): Port device team_slave_1 removed [ 126.117203][ T5933] pwc: recv_control_msg error -71 req 02 val 2800 [ 126.127765][ T5933] pwc: recv_control_msg error -71 req 04 val 1100 [ 126.137282][ T5933] pwc: recv_control_msg error -71 req 04 val 1200 [ 126.156104][ T5933] pwc: Registered as video103. [ 126.162044][ T5933] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 126.172322][ T6844] team0 (unregistering): Port device team_slave_0 removed [ 126.182528][ T5933] usb 5-1: USB disconnect, device number 11 [ 126.463081][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.478789][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.525565][ T7398] team0: Port device team_slave_0 added [ 126.549102][ T7398] team0: Port device team_slave_1 added [ 126.579325][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.586364][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.617377][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.632708][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.639763][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.668783][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.705356][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.754892][ T7398] hsr_slave_0: entered promiscuous mode [ 126.775769][ T7398] hsr_slave_1: entered promiscuous mode [ 126.848423][ T47] usb 3-1: USB disconnect, device number 14 [ 126.900945][ T5920] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 126.931350][ T7445] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.948654][ T29] audit: type=1326 audit(1732602210.003:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7444 comm="syz.2.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990417e819 code=0x0 [ 126.971351][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.073281][ T5920] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 127.082063][ T5920] usb 1-1: config 179 has no interface number 0 [ 127.088360][ T5920] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 127.100058][ T5920] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 127.112535][ T5920] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 127.123984][ T5920] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 127.135754][ T5920] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.149406][ T5920] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.158540][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.169283][ T7434] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.177391][ T7434] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 127.232851][ T7398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.241050][ T5887] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.255093][ T7398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.265644][ T7398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.276803][ T7398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.341669][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.364073][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.381414][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.388536][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.401025][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 127.416190][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.421152][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.423363][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.436269][ T5887] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.455964][ T5920] usb 1-1: USB disconnect, device number 16 [ 127.455995][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 127.456018][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 127.490290][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.505196][ T5887] usb 5-1: config 0 descriptor?? [ 127.608913][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.642133][ T7398] veth0_vlan: entered promiscuous mode [ 127.655731][ T7398] veth1_vlan: entered promiscuous mode [ 127.678712][ T7398] veth0_macvtap: entered promiscuous mode [ 127.688123][ T7398] veth1_macvtap: entered promiscuous mode [ 127.701749][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.712365][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.722734][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.733557][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.744091][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.745471][ T5887] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.755713][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.778104][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.788539][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.803616][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.814949][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.827314][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.837363][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.855283][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.867018][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.882992][ T7398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.891913][ T7398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.901667][ T54] Bluetooth: hci0: command tx timeout [ 127.902458][ T7398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.917097][ T7398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.072973][ T5933] usb 5-1: USB disconnect, device number 12 [ 128.082287][ T5933] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 128.095142][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.110425][ T5836] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 128.125928][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.149668][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.163599][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.179482][ T29] audit: type=1400 audit(1732602211.233:368): avc: denied { mounton } for pid=7398 comm="syz-executor" path="/root/syzkaller.1fIhKN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 128.280531][ T47] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 128.302127][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 128.308392][ T5836] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 128.316868][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.327705][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.338061][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.348229][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.363388][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.372773][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.443208][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.454392][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.465428][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.478740][ T47] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.487846][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.497392][ T47] usb 1-1: config 0 descriptor?? [ 128.589626][ T5836] usb 3-1: usb_control_msg returned -32 [ 128.595304][ T5836] usbtmc 3-1:16.0: can't read capabilities [ 128.791099][ T5887] net_ratelimit: 4 callbacks suppressed [ 128.791117][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.861037][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 128.900984][ T5836] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.915375][ T47] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 128.925839][ T47] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 129.060892][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 129.068874][ T5836] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.080101][ T5836] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.086832][ T5836] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 129.096125][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.108337][ T5836] usb 5-1: config 0 descriptor?? [ 129.133006][ T8] usb 1-1: USB disconnect, device number 17 [ 129.522066][ T5836] hid (null): global environment stack underflow [ 129.528440][ T5836] hid (null): unknown global tag 0x84 [ 129.535350][ T5836] hid (null): report_id 0 is invalid [ 129.540843][ T5836] hid (null): unknown global tag 0xc [ 129.546191][ T5836] hid (null): unknown global tag 0xd [ 129.552372][ T5836] hid (null): report_id 2863014418 is invalid [ 129.558495][ T5836] hid (null): report_id 2384115945 is invalid [ 129.566176][ T5836] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 129.573425][ T5836] cougar 0003:060B:500A.000E: unknown main item tag 0x0 [ 129.580414][ T5836] cougar 0003:060B:500A.000E: unexpected long global item [ 129.587779][ T5836] cougar 0003:060B:500A.000E: parse failed [ 129.595635][ T5836] cougar 0003:060B:500A.000E: probe with driver cougar failed with error -22 [ 129.762556][ T8] usb 5-1: USB disconnect, device number 13 [ 129.832175][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.879613][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.900874][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 130.103496][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.116559][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.124942][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.136555][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.146960][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.157365][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.262820][ T7475] chnl_net:caif_netlink_parms(): no params data found [ 130.300943][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.342257][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.349399][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.357018][ T7475] bridge_slave_0: entered allmulticast mode [ 130.364219][ T7475] bridge_slave_0: entered promiscuous mode [ 130.372285][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.379345][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.386849][ T7475] bridge_slave_1: entered allmulticast mode [ 130.393683][ T7475] bridge_slave_1: entered promiscuous mode [ 130.415853][ T7475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.427033][ T7475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.458497][ T7475] team0: Port device team_slave_0 added [ 130.466396][ T7475] team0: Port device team_slave_1 added [ 130.482896][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.489857][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.516431][ T7475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.528991][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.536129][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.563375][ T7475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.597132][ T7475] hsr_slave_0: entered promiscuous mode [ 130.603456][ T7475] hsr_slave_1: entered promiscuous mode [ 130.609347][ T7475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.617491][ T7475] Cannot create hsr debugfs directory [ 130.861064][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.862737][ T5933] usb 3-1: USB disconnect, device number 15 [ 130.901837][ T7492] input: syz1 as /devices/virtual/input/input18 [ 130.941865][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.257413][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.339610][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.431962][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.487573][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.501000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.654313][ T11] bridge_slave_1: left allmulticast mode [ 131.660194][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.668787][ T11] bridge_slave_1: left promiscuous mode [ 131.671044][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.678214][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.691279][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.706505][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.712260][ T11] bridge_slave_0: left allmulticast mode [ 131.715150][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.719058][ T11] bridge_slave_0: left promiscuous mode [ 131.727172][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.737166][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.741118][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.857484][ T5920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 131.862186][ T967] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 131.867188][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.896145][ T5920] usb 5-1: config 0 descriptor?? [ 131.901603][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.032097][ T967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 132.046950][ T967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 132.059120][ T967] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 132.069250][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.077589][ T967] usb 1-1: Product: syz [ 132.082032][ T967] usb 1-1: Manufacturer: syz [ 132.086662][ T967] usb 1-1: SerialNumber: syz [ 132.087139][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.093504][ T967] usb 1-1: config 0 descriptor?? [ 132.106140][ T7505] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.114056][ T7505] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.126903][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.149131][ T11] bond0 (unregistering): Released all slaves [ 132.220602][ T5851] Bluetooth: hci0: command tx timeout [ 132.326091][ T5920] ath6kl: Failed to submit usb control message: -71 [ 132.342250][ T7505] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.349559][ T7505] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.358289][ T5920] ath6kl: unable to send the bmi data to the device: -71 [ 132.371285][ T5920] ath6kl: Unable to send get target info: -71 [ 132.389000][ T5920] ath6kl: Failed to init ath6kl core: -71 [ 132.416298][ T5920] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 132.465390][ T5920] usb 5-1: USB disconnect, device number 14 [ 132.483085][ T7506] chnl_net:caif_netlink_parms(): no params data found [ 132.615152][ T11] hsr_slave_0: left promiscuous mode [ 132.621483][ T11] hsr_slave_1: left promiscuous mode [ 132.627330][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.634911][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.648413][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.656129][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.674034][ T11] veth1_macvtap: left promiscuous mode [ 132.680717][ T11] veth0_macvtap: left promiscuous mode [ 132.689756][ T11] veth1_vlan: left promiscuous mode [ 132.695107][ T11] veth0_vlan: left promiscuous mode [ 132.703393][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709672][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807696][ T967] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 133.150252][ T11] team0 (unregistering): Port device team_slave_1 removed [ 133.195333][ T11] team0 (unregistering): Port device team_slave_0 removed [ 133.542673][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.549838][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.560010][ T7506] bridge_slave_0: entered allmulticast mode [ 133.572365][ T7506] bridge_slave_0: entered promiscuous mode [ 133.581046][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.588798][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.596278][ T7506] bridge_slave_1: entered allmulticast mode [ 133.603000][ T7506] bridge_slave_1: entered promiscuous mode [ 133.645495][ T967] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 133.655153][ T7475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.677880][ T967] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, e6:c8:e8:65:1c:3f [ 133.693435][ T967] usb 1-1: USB disconnect, device number 18 [ 133.698732][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.700265][ T967] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 133.723450][ T7475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.759843][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.769655][ T7475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.787324][ T7475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.820496][ T54] Bluetooth: hci4: command tx timeout [ 133.821896][ T7506] team0: Port device team_slave_0 added [ 133.847785][ T7506] team0: Port device team_slave_1 added [ 133.874919][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.883513][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.910835][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.924201][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.931671][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.957707][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.991380][ T5920] net_ratelimit: 5 callbacks suppressed [ 133.991396][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.019920][ T7506] hsr_slave_0: entered promiscuous mode [ 134.026348][ T7506] hsr_slave_1: entered promiscuous mode [ 134.060649][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 134.125098][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.164799][ T7475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.213478][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.238135][ T7475] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.249858][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.256990][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.273164][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.280318][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.301348][ T54] Bluetooth: hci0: command tx timeout [ 134.323808][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.414133][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.475667][ T29] audit: type=1400 audit(1732602217.523:369): avc: denied { mounton } for pid=7522 comm="syz.0.643" path="/proc/318/task" dev="proc" ino=16066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 134.621074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.687535][ T11] bridge_slave_1: left promiscuous mode [ 134.703634][ T29] audit: type=1400 audit(1732602217.763:370): avc: denied { write } for pid=7530 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 134.706093][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.763358][ T11] bridge_slave_0: left allmulticast mode [ 134.769041][ T11] bridge_slave_0: left promiscuous mode [ 134.780594][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.100579][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 135.103569][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 135.114320][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.291267][ T29] audit: type=1400 audit(1732602218.353:371): avc: denied { write } for pid=7536 comm="syz.3.647" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.458900][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.475869][ T11] bond0 (unregistering): Released all slaves [ 135.562531][ T7475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.619175][ T11] tipc: Disabling bearer [ 135.630254][ T11] tipc: Left network mode [ 135.815537][ T29] audit: type=1400 audit(1732602218.873:372): avc: denied { unmount } for pid=5838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 135.912158][ T5851] Bluetooth: hci4: command tx timeout [ 135.915384][ T7475] veth0_vlan: entered promiscuous mode [ 136.028196][ T7475] veth1_vlan: entered promiscuous mode [ 136.109938][ T11] hsr_slave_0: left promiscuous mode [ 136.129948][ T11] hsr_slave_1: left promiscuous mode [ 136.136009][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.143526][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 136.162423][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.178682][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.186664][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.211967][ T11] veth1_macvtap: left promiscuous mode [ 136.217566][ T11] veth0_macvtap: left promiscuous mode [ 136.231083][ T5887] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 136.250637][ T11] veth1_vlan: left promiscuous mode [ 136.255975][ T11] veth0_vlan: left promiscuous mode [ 136.391970][ T5851] Bluetooth: hci0: command tx timeout [ 136.406196][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 136.412953][ T5887] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 136.430839][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.446264][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.458010][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.470915][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.478933][ T5887] usb 1-1: Product: syz [ 136.500947][ T5887] usb 1-1: Manufacturer: syz [ 136.505573][ T5887] usb 1-1: SerialNumber: syz [ 136.944397][ T5887] usb 1-1: 0:2 : does not exist [ 136.995045][ T11] team0 (unregistering): Port device team_slave_1 removed [ 137.035166][ T11] team0 (unregistering): Port device team_slave_0 removed [ 137.180531][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 137.438841][ T7475] veth0_macvtap: entered promiscuous mode [ 137.476836][ T7475] veth1_macvtap: entered promiscuous mode [ 137.512744][ T7506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.530999][ T7506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.549749][ T7506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.567389][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.589422][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.610228][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.612208][ T5887] usb 1-1: USB disconnect, device number 19 [ 137.635130][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.655980][ T7475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.666452][ T7506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.732473][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.750579][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.770403][ T7475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.786734][ T7475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.803952][ T7475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.813802][ T7475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.823217][ T7475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.832162][ T7475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.841063][ T7475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.965517][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.981109][ T5851] Bluetooth: hci4: command tx timeout [ 137.986956][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.055643][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.076537][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.123983][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.177164][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.220488][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.233468][ T7506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.244078][ T7506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.273065][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.280198][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.317412][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.324564][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.467015][ T5851] Bluetooth: hci0: command tx timeout [ 138.535329][ T7580] syzkaller0: entered promiscuous mode [ 138.541754][ T7580] syzkaller0: entered allmulticast mode [ 138.553324][ T7580] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 16735 [ 138.648510][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.692761][ T7506] veth0_vlan: entered promiscuous mode [ 138.704727][ T7506] veth1_vlan: entered promiscuous mode [ 138.722734][ T7506] veth0_macvtap: entered promiscuous mode [ 138.731450][ T7506] veth1_macvtap: entered promiscuous mode [ 138.764555][ T29] audit: type=1400 audit(1732602221.823:373): avc: denied { append } for pid=7589 comm="syz.4.664" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 138.802422][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.817057][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.817455][ T7594] random: crng reseeded on system resumption [ 138.827828][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.851862][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.862584][ T29] audit: type=1400 audit(1732602221.923:374): avc: denied { bind } for pid=7595 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.881616][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.881636][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.882722][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.924499][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.951725][ T29] audit: type=1400 audit(1732602221.963:375): avc: denied { write } for pid=7595 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.964854][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.004613][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.028280][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.038706][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.054253][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.068938][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.086823][ T7506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.123630][ T7506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.140714][ T7506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.162809][ T7506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.172633][ T29] audit: type=1400 audit(1732602222.223:376): avc: denied { create } for pid=7601 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.202230][ T29] audit: type=1400 audit(1732602222.223:377): avc: denied { write } for pid=7601 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.224281][ T29] audit: type=1400 audit(1732602222.223:378): avc: denied { nlmsg_write } for pid=7601 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.260734][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 139.378608][ T1070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.411948][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.419791][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.439239][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.448421][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.633355][ T1070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.755157][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.769543][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.779203][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.784691][ T1070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.787096][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.819642][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.827617][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.835968][ T5883] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 139.948225][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 139.948240][ T29] audit: type=1400 audit(1732602223.003:381): avc: denied { create } for pid=7620 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.949680][ T1070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.989986][ T29] audit: type=1400 audit(1732602223.043:382): avc: denied { setopt } for pid=7620 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.011320][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 140.017926][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.023866][ T29] audit: type=1400 audit(1732602223.083:383): avc: denied { bind } for pid=7620 comm="syz.4.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.043605][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.061874][ T5883] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.070966][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.093878][ T5883] usb 1-1: config 0 descriptor?? [ 140.157982][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 140.177029][ T1070] bridge_slave_1: left allmulticast mode [ 140.184409][ T1070] bridge_slave_1: left promiscuous mode [ 140.190135][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.201085][ T1070] bridge_slave_0: left allmulticast mode [ 140.206785][ T1070] bridge_slave_0: left promiscuous mode [ 140.213980][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.300451][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 140.400588][ T5932] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 140.514991][ T1070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.527001][ T5883] HID 045e:07da: Invalid code 65791 type 1 [ 140.536871][ T5883] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input19 [ 140.553677][ T1070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.555723][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 140.567744][ T5883] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 140.577658][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.591351][ T1070] bond0 (unregistering): Released all slaves [ 140.598009][ T5932] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.618499][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.628040][ T5932] usb 5-1: Product: syz [ 140.637765][ T5932] usb 5-1: Manufacturer: syz [ 140.651134][ T5932] usb 5-1: SerialNumber: syz [ 140.698416][ T5932] usb 5-1: config 0 descriptor?? [ 140.709585][ T5932] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.725917][ T5932] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 140.917007][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.936849][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.970603][ T7612] bridge_slave_0: entered allmulticast mode [ 140.990964][ T7612] bridge_slave_0: entered promiscuous mode [ 141.002663][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.009724][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.040573][ T7612] bridge_slave_1: entered allmulticast mode [ 141.047306][ T7612] bridge_slave_1: entered promiscuous mode [ 141.090539][ T1070] hsr_slave_0: left promiscuous mode [ 141.099404][ T1070] hsr_slave_1: left promiscuous mode [ 141.112857][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.121199][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.129017][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.137033][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.158792][ T1070] veth1_macvtap: left promiscuous mode [ 141.169018][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.173873][ T1070] veth0_macvtap: left promiscuous mode [ 141.177932][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.189522][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.198114][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.205830][ T1070] veth1_vlan: left promiscuous mode [ 141.211575][ T1070] veth0_vlan: left promiscuous mode [ 141.227552][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.236383][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.324098][ T5932] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 141.340460][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 141.465128][ T5883] usb 1-1: USB disconnect, device number 20 [ 141.613351][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.681'. [ 141.744642][ T1070] team0 (unregistering): Port device team_slave_1 removed [ 141.785248][ T1070] team0 (unregistering): Port device team_slave_0 removed [ 141.901302][ T54] Bluetooth: hci0: command tx timeout [ 141.951194][ T5932] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 141.962353][ T5932] em28xx 5-1:0.0: board has no eeprom [ 142.030600][ T5932] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 142.039541][ T5932] em28xx 5-1:0.0: dvb set to bulk mode. [ 142.053740][ T5933] em28xx 5-1:0.0: Binding DVB extension [ 142.079219][ T5932] usb 5-1: USB disconnect, device number 15 [ 142.090127][ T5932] em28xx 5-1:0.0: Disconnecting em28xx [ 142.102803][ T7652] vivid-001: disconnect [ 142.117196][ T7651] vivid-001: reconnect [ 142.134840][ T5933] em28xx 5-1:0.0: Registering input extension [ 142.148778][ T5932] em28xx 5-1:0.0: Closing input extension [ 142.227294][ T5932] em28xx 5-1:0.0: Freeing device [ 142.344236][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.377697][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.380441][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 142.499509][ T7612] team0: Port device team_slave_0 added [ 142.533360][ T7612] team0: Port device team_slave_1 added [ 247.650341][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 247.657333][ C1] rcu: 0-...!: (1 GPs behind) idle=95d4/1/0x4000000000000000 softirq=22269/22270 fqs=0 [ 247.668053][ C1] rcu: (detected by 1, t=10506 jiffies, g=19481, q=214 ncpus=2) [ 247.675787][ C1] Sending NMI from CPU 1 to CPUs 0: [ 247.675819][ C0] NMI backtrace for cpu 0 [ 247.675846][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 247.675868][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.675888][ C0] Workqueue: events_unbound flush_to_ldisc [ 247.675929][ C0] RIP: 0010:__lock_acquire+0x3c3/0x3c40 [ 247.675954][ C0] Code: c1 e2 12 81 e2 00 00 04 00 09 c8 c1 e3 13 09 d0 8b 94 24 48 01 00 00 09 d8 c1 e2 14 09 d0 8b 94 24 38 01 00 00 c1 e2 15 09 d0 <41> 8b 57 20 81 e2 ff 1f 00 00 09 d0 48 89 fa 41 89 47 20 48 c1 ea [ 247.675972][ C0] RSP: 0018:ffffc90000007b38 EFLAGS: 00000006 [ 247.675986][ C0] RAX: 00000000000c4000 RBX: 0000000000080000 RCX: 0000000000000000 [ 247.675999][ C0] RDX: 0000000000000000 RSI: ffff88801c6b5344 RDI: ffff88801c6b5474 [ 247.676011][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 247.676023][ C0] R10: 000000000000001e R11: 0000000000000007 R12: 0000000000000002 [ 247.676034][ C0] R13: ffff88801c6b4880 R14: 0000000000000b23 R15: ffff88801c6b5450 [ 247.676048][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 247.676066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.676080][ C0] CR2: 0000001b30418ff8 CR3: 0000000035260000 CR4: 00000000003526f0 [ 247.676092][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.676104][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.676116][ C0] Call Trace: [ 247.676122][ C0] [ 247.676130][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 247.676166][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 247.676184][ C0] ? nmi_handle+0x1a7/0x5c0 [ 247.676206][ C0] ? __lock_acquire+0x3c3/0x3c40 [ 247.676226][ C0] ? default_do_nmi+0x6a/0x160 [ 247.676255][ C0] ? exc_nmi+0x170/0x1e0 [ 247.676288][ C0] ? end_repeat_nmi+0xf/0x53 [ 247.676317][ C0] ? __lock_acquire+0x3c3/0x3c40 [ 247.676337][ C0] ? __lock_acquire+0x3c3/0x3c40 [ 247.676358][ C0] ? __lock_acquire+0x3c3/0x3c40 [ 247.676379][ C0] [ 247.676385][ C0] [ 247.676393][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 247.676415][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 247.676436][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 247.676459][ C0] lock_acquire.part.0+0x11b/0x380 [ 247.676480][ C0] ? advance_sched+0xd8/0xc60 [ 247.676500][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 247.676522][ C0] ? rcu_is_watching+0x12/0xc0 [ 247.676548][ C0] ? trace_lock_acquire+0x146/0x1e0 [ 247.676576][ C0] ? advance_sched+0xd8/0xc60 [ 247.676593][ C0] ? lock_acquire+0x2f/0xb0 [ 247.676613][ C0] ? advance_sched+0xd8/0xc60 [ 247.676631][ C0] ? __pfx_advance_sched+0x10/0x10 [ 247.676649][ C0] _raw_spin_lock+0x2e/0x40 [ 247.676668][ C0] ? advance_sched+0xd8/0xc60 [ 247.676685][ C0] advance_sched+0xd8/0xc60 [ 247.676705][ C0] ? timerqueue_del+0x83/0x150 [ 247.676732][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 247.676758][ C0] ? __pfx_advance_sched+0x10/0x10 [ 247.676775][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 247.676805][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 247.676830][ C0] ? read_tsc+0x9/0x20 [ 247.676859][ C0] hrtimer_interrupt+0x392/0x8e0 [ 247.676889][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 247.676915][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 247.676937][ C0] [ 247.676942][ C0] [ 247.676949][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.676974][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 247.676997][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 66 1b 3a f6 48 89 df e8 ce 9a 3a f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 90 2b f6 65 8b 05 86 8b d2 74 85 c0 74 16 5b [ 247.677014][ C0] RSP: 0018:ffffc90000117770 EFLAGS: 00000246 [ 247.677028][ C0] RAX: 0000000000000002 RBX: ffff888024efb940 RCX: 1ffffffff2dd9427 [ 247.677041][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cdee0 RDI: ffffffff8bd1d600 [ 247.677054][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2dd01af [ 247.677066][ C0] R10: ffffffff96e80d7f R11: 0000000000000006 R12: 1ffff92000022ef2 [ 247.677079][ C0] R13: 0000000000000293 R14: ffff888024efb940 R15: ffff88807f52a000 [ 247.677098][ C0] tty_insert_flip_string_and_push_buffer+0x143/0x1f0 [ 247.677129][ C0] ? __pfx_tty_insert_flip_string_and_push_buffer+0x10/0x10 [ 247.677160][ C0] ? rcu_is_watching+0x12/0xc0 [ 247.677185][ C0] ? trace_contention_end+0xea/0x140 [ 247.677209][ C0] pty_write+0xd2/0x100 [ 247.677230][ C0] tty_put_char+0x12f/0x160 [ 247.677254][ C0] ? __pfx_tty_put_char+0x10/0x10 [ 247.677281][ C0] ? tty_buffer_space_avail+0x50/0xb0 [ 247.677307][ C0] ? pty_write_room+0xb4/0xe0 [ 247.677330][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.677356][ C0] __process_echoes+0x80a/0xb40 [ 247.677378][ C0] commit_echoes+0x147/0x210 [ 247.677397][ C0] n_tty_receive_char+0x3d8/0x600 [ 247.677420][ C0] n_tty_receive_buf_standard+0x6aa/0x3180 [ 247.677445][ C0] ? down_read+0xc9/0x330 [ 247.677471][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 247.677494][ C0] n_tty_receive_buf_common+0x8ed/0x1980 [ 247.677517][ C0] ? lock_acquire+0x2f/0xb0 [ 247.677542][ C0] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 247.677564][ C0] tty_ldisc_receive_buf+0xa2/0x190 [ 247.677591][ C0] tty_port_default_receive_buf+0x70/0xb0 [ 247.677621][ C0] flush_to_ldisc+0x264/0x780 [ 247.677649][ C0] ? lock_acquire+0x2f/0xb0 [ 247.677668][ C0] ? process_one_work+0x921/0x1ba0 [ 247.677691][ C0] process_one_work+0x9c5/0x1ba0 [ 247.677716][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 247.677738][ C0] ? __pfx_process_one_work+0x10/0x10 [ 247.677758][ C0] ? rcu_is_watching+0x12/0xc0 [ 247.677787][ C0] ? assign_work+0x1a0/0x250 [ 247.677807][ C0] worker_thread+0x6c8/0xf00 [ 247.677832][ C0] ? __pfx_worker_thread+0x10/0x10 [ 247.677852][ C0] kthread+0x2c1/0x3a0 [ 247.677877][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.677896][ C0] ? __pfx_kthread+0x10/0x10 [ 247.677921][ C0] ret_from_fork+0x45/0x80 [ 247.677939][ C0] ? __pfx_kthread+0x10/0x10 [ 247.677964][ C0] ret_from_fork_asm+0x1a/0x30 [ 247.677996][ C0] [ 247.678813][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g19481 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 248.288862][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 248.298833][ C1] rcu: RCU grace-period kthread stack dump: [ 248.304718][ C1] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 248.316509][ C1] Call Trace: [ 248.319786][ C1] [ 248.322722][ C1] __schedule+0xe58/0x5ad0 [ 248.327149][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 248.332367][ C1] ? __pfx___schedule+0x10/0x10 [ 248.337231][ C1] ? schedule+0x298/0x350 [ 248.341563][ C1] ? __pfx_lock_release+0x10/0x10 [ 248.346600][ C1] ? lock_acquire+0x2f/0xb0 [ 248.351106][ C1] ? schedule+0x1fd/0x350 [ 248.355464][ C1] schedule+0xe7/0x350 [ 248.359548][ C1] schedule_timeout+0x124/0x280 [ 248.364419][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 248.369813][ C1] ? __pfx_process_timeout+0x10/0x10 [ 248.375122][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 248.380941][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 248.386416][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 248.391189][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 248.396488][ C1] ? rcu_gp_init+0xc82/0x1630 [ 248.401176][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 248.406390][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 248.412210][ C1] rcu_gp_kthread+0x271/0x380 [ 248.416897][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 248.422120][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.427325][ C1] ? __kthread_parkme+0x148/0x220 [ 248.432363][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 248.437568][ C1] kthread+0x2c1/0x3a0 [ 248.441645][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.446846][ C1] ? __pfx_kthread+0x10/0x10 [ 248.451446][ C1] ret_from_fork+0x45/0x80 [ 248.455867][ C1] ? __pfx_kthread+0x10/0x10 [ 248.460466][ C1] ret_from_fork_asm+0x1a/0x30 [ 248.465256][ C1] [ 248.468280][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 248.474601][ C1] CPU: 1 UID: 0 PID: 7665 Comm: syz.4.686 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 248.484840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.494893][ C1] RIP: 0010:write_comp_data+0x8b/0x90 [ 248.500277][ C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 248.519890][ C1] RSP: 0018:ffffc9000449fc10 EFLAGS: 00000297 [ 248.525960][ C1] RAX: 0000000000000002 RBX: ffff8880b86469c0 RCX: ffffffff8182b59c [ 248.533931][ C1] RDX: ffff888027428000 RSI: 0000000000000000 RDI: 0000000000000005 [ 248.541901][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 248.549873][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffffed10170c8d39 [ 248.557842][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 248.565812][ C1] FS: 00007f8112f016c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 248.574745][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.581329][ C1] CR2: 000000110c3106e3 CR3: 000000001ce90000 CR4: 00000000003526f0 [ 248.589304][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 248.597274][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 248.605245][ C1] Call Trace: [ 248.608523][ C1] [ 248.611365][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 248.617708][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 248.622920][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 248.628399][ C1] ? timekeeping_advance+0x70a/0xa60 [ 248.633686][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 248.639334][ C1] ? __asan_memcpy+0x3c/0x60 [ 248.643929][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 248.649236][ C1] ? rcu_is_watching+0x12/0xc0 [ 248.654013][ C1] ? update_process_times+0x178/0x2d0 [ 248.659393][ C1] ? __pfx_update_process_times+0x10/0x10 [ 248.665122][ C1] ? update_wall_time+0x1c/0x40 [ 248.669979][ C1] ? tick_nohz_handler+0x376/0x530 [ 248.675106][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 248.680580][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 248.685970][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 248.691699][ C1] ? read_tsc+0x9/0x20 [ 248.695786][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 248.700921][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 248.707083][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 248.712894][ C1] [ 248.715823][ C1] [ 248.718752][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.724923][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 248.731007][ C1] ? write_comp_data+0x8b/0x90 [ 248.735777][ C1] smp_call_function_many_cond+0x47c/0x1300 [ 248.741686][ C1] ? __pfx_retrigger_next_event+0x10/0x10 [ 248.747421][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 248.753235][ C1] clock_was_set+0x646/0x850 [ 248.757844][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 248.762970][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 248.768785][ C1] do_settimeofday64+0x305/0x4c0 [ 248.773730][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 248.779194][ C1] ? bpf_lsm_capable+0x9/0x10 [ 248.783872][ C1] ? snd_pcm_plugin_build_rate+0x6ae/0x760 [ 248.789701][ C1] ? capable+0xd4/0x110 [ 248.793867][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 248.799158][ C1] __x64_sys_clock_settime+0x1bf/0x2a0 [ 248.804632][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 248.810631][ C1] do_syscall_64+0xcd/0x250 [ 248.815147][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.821054][ C1] RIP: 0033:0x7f811217e819 [ 248.825479][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.845090][ C1] RSP: 002b:00007f8112f01038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 248.853509][ C1] RAX: ffffffffffffffda RBX: 00007f8112335fa0 RCX: 00007f811217e819 [ 248.861480][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 248.869457][ C1] RBP: 00007f81121f175e R08: 0000000000000000 R09: 0000000000000000 [ 248.877447][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.885423][ C1] R13: 0000000000000000 R14: 00007f8112335fa0 R15: 00007ffc8f83f0c8 [ 248.893411][ C1]