last executing test programs: 17.313870167s ago: executing program 0 (id=535): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f0904"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000303ad270000000000000000050000064606b18de03cdd248fea8fe50e9fcbd6cc6e7491b17645b7d9c63e3d0f5d76028321cc9ce4192d8479b83b03ab91da0ee1aad1ebb19ab03c2b3566ecd1906557151a26e46ea643132ceac727f8"], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) r8 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 13.853436405s ago: executing program 0 (id=545): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f0904"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000303ad270000000000000000050000064606b18de03cdd248fea8fe50e9fcbd6cc6e7491b17645b7d9c63e3d0f5d76028321cc9ce4192d8479b83b03ab91da0ee1aad1ebb19ab03c2b3566ecd1906557151a26e46ea643132ceac727f8"], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) r8 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 12.193244358s ago: executing program 2 (id=549): mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x2208004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0xfffffe59) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x4044000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00e9ff00047c0000040042801400018006004600800a000008001c00", @ANYRES32=r3, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 11.951674432s ago: executing program 3 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cd", 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x40084) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff, 0x40c}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1, 0x10, &(0x7f0000001240)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="301000010000fb00b703000008487e7106000000000000168baae32a951b6be0a69be41053d986281346e5a8fa85a781f92bbf279a7afdb03b181a1664054e5babb32efbeb6af2f0e2f7c891fbd9d0692dd51a591b6feeda83f64272d23a61206ef7cd17fb139f53255a8928a5de9965c4ab1ac499fcfc0cac96e75cd310bde0e198766388458b542da8e1c96a4509083492b5e4fe62d948f2bb958ad09009e0d40000000000"], &(0x7f0000005d80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bind$netlink(r0, &(0x7f0000001040)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/timers\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) read$hiddev(r5, &(0x7f0000000000)=""/4118, 0x1016) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r6, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x61) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c09058006001f0009000000000000000000004cd05a90b061"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 11.133072169s ago: executing program 4 (id=553): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) 9.943061236s ago: executing program 2 (id=554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) 9.93350724s ago: executing program 4 (id=555): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f0904"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000303ad270000000000000000050000064606b18de03cdd248fea8fe50e9fcbd6cc6e7491b17645b7d9c63e3d0f5d76028321cc9ce4192d8479b83b03ab91da0ee1aad1ebb19ab03c2b3566ecd1906557151a26e46ea643132ceac727f8"], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) r8 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 8.860643465s ago: executing program 0 (id=557): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 8.841712927s ago: executing program 1 (id=558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80a82, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r5, 0x576f4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r8, 0x4b4a, &(0x7f0000000040)=""/96) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000003f40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="10007a800c010300c6000000000ab54b"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) 7.824840817s ago: executing program 3 (id=559): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000001440)={0x2020}, 0x2020) 7.634042062s ago: executing program 0 (id=560): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="14"], 0x2dc}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, 0x0, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r3 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) eventfd(0x401) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r3, 0x4, 0x6, 0xe, 0x14, 0x0, {0x1}}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 7.562195534s ago: executing program 3 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) 7.470315012s ago: executing program 3 (id=562): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async) r0 = socket(0x26, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) unshare(0x22020600) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$getflags(r3, 0x1) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x36e, 0xffffffff}, 0x0) (async) r4 = semget$private(0x0, 0x2, 0x0) semctl$GETPID(r4, 0x1, 0xb, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0x2, 0x3, 0x3c76, 0x4}, 0x20) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001002a000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000f20000000000a01040000000000000000070000000900010073797a310000000028000000000a030000000000000000000a00000008000240000000000900010073797a300000000014000000110001ffde000000000000000000000a328a44464dac54fa283aab1474ac1eec12bea3d7f2977a58244f7f7f767e3fca62d900c1112e1ecaab68700d5b99a4f1f721274febc9824afe9713c9948cc9440e5c89fb7e1ac0544b07990000000000"], 0x98}}, 0x0) (async) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) (async, rerun: 64) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000200)=0xe, 0x4) 6.031728146s ago: executing program 2 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) 5.269053715s ago: executing program 2 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000100000000003b05000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x2a, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="000000000000b703000000050000850000001b000000b70000000000000095", @ANYBLOB="58e7fca8a1bb7b465fd48388936675914c2f993474a58c0f180980f54d2d870ce3b376ebecbea5e9907951257d6dd73d8e66dd5d87ed86939b8f79165f5883e4b954f64ca6ab6df657d97fd67d7aea152baabaab5ba17fdc384770da230fae81c0af69cb63ba328102ab183e9ba8e7fa3a6d84d8c38a50145f2777894c9c9a66424e5326aad9cb2fce35a4d86d0183d47c02596c6690fd690a3f68e565", @ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYBLOB="63dbf0c1094334bb4353748ec5054d2c2195a424ab8f612d90dafdd9f0ad15543058945eff39e5f4acb67b34d693c24c50c72d1a4b1257941ab0180b23b8bb00ff23ae1ec6286834614d685e137595aea55eb711e6f9389d91273ed81200ff48b3e02d6195baec958b57a7b9ca3377dc27061cdf53641b4cfdb64a59433119176ec33b1744322174ea228a844a71c8153b6b7d02e78c0851945d97f0a68eb9c43384c544c925f4dfe88171f3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 5.202758931s ago: executing program 0 (id=565): mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x2208004, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0xfffffe59) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x4044000) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00e9ff00047c0000040042801400018006004600800a000008001c00", @ANYRES32=r3, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) fanotify_init(0x1a, 0x800) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.705011378s ago: executing program 4 (id=566): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x3}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYBLOB="f63745da86144d6d6af798ab61fedfdb81f91532fb66bfcad0e544f5149792cc30c891de3e14216d045a6369eebe1345bf11b5df91891ce21e4ccc6ed8906689bc10d2515ba8aec1217651e8e838e046dc4c55b9e170b3c0018ca76cd4b23fbc90e0c411a79efeeb6703a62efbe05f2bc19c7e08dcc0fb0a1c718c551991589e428ba0e9f3279e0efbdd7b2c9364c386533464678b72a209a8ad24dd1f5ac224a962d70adf158fdc3e0aa67136d5fbb12f555042ec82dfbb1171dfd6bda8157b6ddad46fbb91b5fcd73522c9be100c5f8755c03bb0e00414fc0ee7576dc7", @ANYBLOB="a7263c1f7894220db5809e5df008d36435328a2aa6bd98ee4f63c265ebabecd0adc7d21a93866c4d5c0356931ee11c099134ed6c37b5993fda708bc932e18ce00a29098b077e2a380c8d5e41912de8b88535a1829e02ed428d8beaa201465636fe3973a8f57305753a2b52d2"]) write$P9_RVERSION(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff"], 0x41) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = openat$sysfs(0xffffff9c, 0x0, 0x8840, 0x2) sendmsg$OSF_MSG_ADD(r3, 0x0, 0x40880) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97V\a\x00\x00\x00\x00\x00\x00N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xba$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x1000}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b", 0x2a, 0xebec93e830f96115}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004240), 0xa000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r7, 0x3b87, &(0x7f0000004280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) 4.309382002s ago: executing program 3 (id=569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80a82, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x10010, r3, 0x576f4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000080), &(0x7f00000001c0)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000040)=""/96) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 3.442777807s ago: executing program 1 (id=570): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x20, 0x2, @tid=r1}, &(0x7f0000bbdffc)) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000500)=0xd0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usbip_server_init(0x1) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) recvmsg$can_raw(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001940)=[{0x0}, {&(0x7f0000000340)=""/138, 0x8a}, {0x0}, {&(0x7f00000005c0)=""/67, 0x43}], 0x4}, 0x120) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket(0x1e, 0x4, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020101000909052406000105240080000d240f0100000000ff0f00000006241a0000000905810300020000040904010000020d00000904010102020d000009058202ff0300000009050302050000"], 0x0) (async) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000000)=0x2) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 3.378733898s ago: executing program 4 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000ff030000feffffff0100000040000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000400000007000000000004000000000000000000924986113805d89e6c1807302719cfc97b88a0197d1510638e131d2fe6379dda2548645fae8dae96dc9d23a048c5424fd26896addc4b5a9fdea240b2cd7d0c1546c81207a1ee70776884f0559ca3bbef251df9298a7898bc1f37a17d29cad06c62a30253505454672e501c0ce1b901cad9a47d4fe0d2505d87fa3af3bbe7646b6c6aee4f1542d52b65a116919f4799d3ce5ee235c28a32f6c1af5817f939ad4882000f03fd21029a79dc9992744744fc4fa9bb4c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001ff1100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x100}, @mss={0x2, 0x80000004}, @timestamp, @window={0x3, 0x0, 0x401}, @window={0x3, 0x1}], 0x2) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 3.12487949s ago: executing program 1 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) 2.375431386s ago: executing program 4 (id=573): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000440)='./cgroup\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x3}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYBLOB="f63745da86144d6d6af798ab61fedfdb81f91532fb66bfcad0e544f5149792cc30c891de3e14216d045a6369eebe1345bf11b5df91891ce21e4ccc6ed8906689bc10d2515ba8aec1217651e8e838e046dc4c55b9e170b3c0018ca76cd4b23fbc90e0c411a79efeeb6703a62efbe05f2bc19c7e08dcc0fb0a1c718c551991589e428ba0e9f3279e0efbdd7b2c9364c386533464678b72a209a8ad24dd1f5ac224a962d70adf158fdc3e0aa67136d5fbb12f555042ec82dfbb1171dfd6bda8157b6ddad46fbb91b5fcd73522c9be100c5f8755c03bb0e00414fc0ee7576dc7", @ANYBLOB="a7263c1f7894220db5809e5df008d36435328a2aa6bd98ee4f63c265ebabecd0adc7d21a93866c4d5c0356931ee11c099134ed6c37b5993fda708bc932e18ce00a29098b077e2a380c8d5e41912de8b88535a1829e02ed428d8beaa201465636fe3973a8f57305753a2b52d2"]) write$P9_RVERSION(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff"], 0x41) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = openat$sysfs(0xffffff9c, 0x0, 0x8840, 0x2) sendmsg$OSF_MSG_ADD(r3, 0x0, 0x40880) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97V\a\x00\x00\x00\x00\x00\x00N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xba$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000303ad270000000000000000050000064606b18de03cdd248fea8fe50e9fcbd6cc6e7491b17645b7d9c63e3d0f5d76028321cc9ce4192d8479b83b03ab91da0ee1aad1ebb19ab03c2b3566ecd1906557151a26e46ea643132ceac727f8"], 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) r8 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.128326677s ago: executing program 0 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) (async) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010000000004000000000000001000000000000000200000000000ff00"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x36) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, &(0x7f0000000380)) (async) getsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nicvf0\x00'}) (async) ioctl$sock_inet_SIOCGARP(r8, 0x8954, &(0x7f0000000300)={{0x2, 0x4e22, @rand_addr=0x64010102}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nicvf0\x00'}) getpeername(r5, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1edd, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000040000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b703000005000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1edd, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000040000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b703000005000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 45.100466ms ago: executing program 1 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000005) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=579): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x220401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_newaddrlabel={0xa8, 0x48, 0x800, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, r6, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IFAL_ADDRESS={0x14, 0x1, @private0}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x512, 0x7, 0x0, 0xfffffffffffffffd, 0xe00, 0x8000000000, 0x80, 0xffc99a3b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES8, @ANYRES16=r2, @ANYRES16=r7], 0x0) kernel console output (not intermixed with test programs): ed udl on minor 2 [ 140.502866][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 140.503440][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 140.532244][ T5887] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 140.543390][ T9] usb 4-1: USB disconnect, device number 15 [ 140.549574][ T5887] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 140.581525][ T30] audit: type=1400 audit(1765268052.752:417): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 140.754733][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 140.763829][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.775042][ T24] usb 3-1: config 0 descriptor?? [ 140.783193][ T24] pwc: Creative Labs Webcam Pro Ex detected. [ 140.877271][ T7601] netlink: 'syz.0.291': attribute type 4 has an invalid length. [ 141.360032][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 141.372090][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 141.383712][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 141.403570][ T7568] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 141.410173][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.423784][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 141.423859][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 141.448926][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 141.632440][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 141.640837][ T7610] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 141.647439][ T7610] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 141.653127][ T10] usb 2-1: USB disconnect, device number 9 [ 142.315321][ T30] audit: type=1400 audit(1765268053.992:418): avc: denied { append } for pid=7607 comm="syz.4.292" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.318852][ T5935] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 142.409461][ T7568] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 142.416085][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.453122][ T7621] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 142.459739][ T7621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.538383][ T7610] vhci_hcd vhci_hcd.0: Device attached [ 142.544509][ T7639] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.552955][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 142.600057][ T7641] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.609581][ T7621] vhci_hcd vhci_hcd.0: Device attached [ 142.649378][ T7568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.661686][ T30] audit: type=1400 audit(1765268054.842:419): avc: denied { connect } for pid=7640 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.667954][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.295'. [ 142.692400][ T7568] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(28) [ 142.699003][ T7568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 142.708198][ T30] audit: type=1400 audit(1765268054.842:420): avc: denied { name_connect } for pid=7640 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 142.753045][ T7568] vhci_hcd vhci_hcd.0: Device attached [ 142.768726][ T7616] vhci_hcd: connection closed [ 142.769020][ T4214] vhci_hcd vhci_hcd.2: stop threads [ 142.779025][ T7651] vhci_hcd: connection closed [ 142.779226][ T7623] vhci_hcd: connection closed [ 142.793388][ T7605] vhci_hcd: connection reset by peer [ 142.803748][ T7617] vhci_hcd: connection closed [ 142.803924][ T4214] vhci_hcd vhci_hcd.2: release socket [ 142.818756][ T4214] vhci_hcd vhci_hcd.2: disconnect device [ 142.824941][ T4214] vhci_hcd vhci_hcd.2: stop threads [ 142.830280][ T4214] vhci_hcd vhci_hcd.2: release socket [ 142.835998][ T4214] vhci_hcd vhci_hcd.2: disconnect device [ 142.864138][ T4214] vhci_hcd vhci_hcd.2: stop threads [ 142.869348][ T4214] vhci_hcd vhci_hcd.2: release socket [ 142.874960][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.889833][ T24] pwc: send_video_command error -71 [ 142.895494][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 142.903911][ T24] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 142.913404][ T30] audit: type=1400 audit(1765268054.842:421): avc: denied { name_connect } for pid=7640 comm="syz.4.295" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 142.921524][ T7646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.937243][ T24] usb 3-1: USB disconnect, device number 17 [ 142.950184][ T4214] vhci_hcd vhci_hcd.2: disconnect device [ 142.997786][ T30] audit: type=1400 audit(1765268054.842:422): avc: denied { shutdown } for pid=7640 comm="syz.4.295" lport=35565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.102699][ T4214] vhci_hcd vhci_hcd.2: stop threads [ 143.310164][ T4214] vhci_hcd vhci_hcd.2: release socket [ 143.387703][ T4214] vhci_hcd vhci_hcd.2: disconnect device [ 143.444275][ T4214] vhci_hcd vhci_hcd.2: stop threads [ 143.456410][ T30] audit: type=1400 audit(1765268054.942:423): avc: denied { execute } for pid=7566 comm="syz.2.289" path="/56/cpu.stat" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.479845][ T4214] vhci_hcd vhci_hcd.2: release socket [ 143.485464][ T4214] vhci_hcd vhci_hcd.2: disconnect device [ 143.522060][ T30] audit: type=1400 audit(1765268055.692:424): avc: denied { read write } for pid=7674 comm="syz.4.299" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.551607][ T30] audit: type=1400 audit(1765268055.692:425): avc: denied { open } for pid=7674 comm="syz.4.299" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.584677][ T5887] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 143.595597][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.609077][ T30] audit: type=1400 audit(1765268055.692:426): avc: denied { ioctl } for pid=7674 comm="syz.4.299" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 143.635049][ T5887] usb 1-1: config 0 descriptor?? [ 144.626207][ T30] audit: type=1400 audit(2000000000.620:427): avc: denied { ioctl } for pid=7690 comm="syz.1.302" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15265 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.985628][ T5887] usb 1-1: Cannot set autoneg [ 145.075337][ T7702] netlink: 'syz.4.304': attribute type 4 has an invalid length. [ 145.504452][ T5887] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 146.589466][ T24] usb 1-1: USB disconnect, device number 9 [ 147.784539][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 147.784555][ T30] audit: type=1400 audit(2000000003.780:431): avc: denied { bind } for pid=7740 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.843228][ T5935] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 147.861560][ T30] audit: type=1400 audit(2000000003.800:432): avc: denied { listen } for pid=7740 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.890587][ T30] audit: type=1400 audit(2000000003.840:433): avc: denied { write } for pid=7740 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.249162][ T30] audit: type=1400 audit(2000000003.840:434): avc: denied { accept } for pid=7740 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.400831][ T30] audit: type=1400 audit(2000000003.840:435): avc: denied { read } for pid=7740 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.455693][ T30] audit: type=1400 audit(2000000004.440:436): avc: denied { name_bind } for pid=7759 comm="syz.4.315" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 148.459778][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 148.513561][ T30] audit: type=1400 audit(2000000004.440:437): avc: denied { create } for pid=7759 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 148.613660][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.695208][ T30] audit: type=1400 audit(2000000004.450:438): avc: denied { create } for pid=7759 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.717480][ T30] audit: type=1400 audit(2000000004.450:439): avc: denied { append } for pid=7759 comm="syz.4.315" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.742393][ T30] audit: type=1400 audit(2000000004.450:440): avc: denied { connect } for pid=7759 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.849431][ T7774] netlink: 'syz.0.317': attribute type 4 has an invalid length. [ 149.327269][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 149.343556][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.384032][ T5887] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 149.403371][ T9] usb 2-1: config 0 descriptor?? [ 149.424854][ T9] pwc: Creative Labs Webcam Pro Ex detected. [ 149.557257][ T5887] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 149.566603][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.581374][ T5887] usb 4-1: config 0 descriptor?? [ 149.649386][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 149.680518][ T7795] openvswitch: netlink: Key type 70 is out of range max 32 [ 149.856261][ T5935] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 149.875641][ T7754] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 149.882247][ T7754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.898022][ T7754] vhci_hcd vhci_hcd.0: Device attached [ 149.906166][ T5887] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 149.912330][ T7754] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 149.920121][ T7754] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 149.928647][ T5887] [drm:udl_init] *ERROR* Selecting channel failed [ 149.930867][ T7754] vhci_hcd vhci_hcd.0: Device attached [ 149.959719][ T7754] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 149.966323][ T7754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.986619][ T5887] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 149.993396][ T5887] [drm] Initialized udl on minor 2 [ 150.004997][ T5887] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 150.022131][ T5887] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 150.023801][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 150.030713][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 150.037525][ T7754] vhci_hcd vhci_hcd.0: Device attached [ 150.045154][ T5887] usb 4-1: USB disconnect, device number 16 [ 150.054164][ T7810] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 150.060741][ T7810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.068869][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 150.088792][ T7810] vhci_hcd vhci_hcd.0: Device attached [ 150.091219][ T5935] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 150.118345][ T5935] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 150.149017][ T7821] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 150.153818][ T5935] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 150.177176][ T5860] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 150.181696][ T7754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 150.194661][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.204888][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.225299][ T7754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 150.234903][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.247721][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 150.262449][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 150.284766][ T5935] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 150.295496][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.316302][ T7754] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(28) [ 150.316863][ T5935] usb 3-1: config 0 descriptor?? [ 150.322908][ T7754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 150.355388][ T7754] vhci_hcd vhci_hcd.0: Device attached [ 150.381794][ T7822] vhci_hcd: connection closed [ 150.382091][ T6178] vhci_hcd vhci_hcd.1: stop threads [ 150.383192][ T7804] vhci_hcd: connection closed [ 150.387113][ T7811] vhci_hcd: connection closed [ 150.396230][ T7797] vhci_hcd: connection reset by peer [ 150.397091][ T7801] vhci_hcd: connection closed [ 150.413044][ T6178] vhci_hcd vhci_hcd.1: release socket [ 150.424036][ T9] pwc: send_video_command error -71 [ 150.431993][ T6178] vhci_hcd vhci_hcd.1: disconnect device [ 150.438451][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 150.446803][ T6178] vhci_hcd vhci_hcd.1: stop threads [ 150.452139][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 150.461456][ T6178] vhci_hcd vhci_hcd.1: release socket [ 150.467124][ T6178] vhci_hcd vhci_hcd.1: disconnect device [ 150.474857][ T9] usb 2-1: USB disconnect, device number 10 [ 150.481013][ T6178] vhci_hcd vhci_hcd.1: stop threads [ 150.490192][ T6178] vhci_hcd vhci_hcd.1: release socket [ 150.497045][ T6178] vhci_hcd vhci_hcd.1: disconnect device [ 150.502812][ T6178] vhci_hcd vhci_hcd.1: stop threads [ 150.508583][ T6178] vhci_hcd vhci_hcd.1: release socket [ 150.518300][ T6178] vhci_hcd vhci_hcd.1: disconnect device [ 150.524967][ T6178] vhci_hcd vhci_hcd.1: stop threads [ 150.530237][ T6178] vhci_hcd vhci_hcd.1: release socket [ 150.559081][ T6178] vhci_hcd vhci_hcd.1: disconnect device [ 150.591945][ T5935] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 150.865262][ T5935] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 151.920056][ T5935] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.051831][ T5935] usb 3-1: USB disconnect, device number 18 [ 152.112353][ T5935] usblp0: removed [ 152.189393][ T7854] fido_id[7854]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.908640][ T7886] netlink: 'syz.2.330': attribute type 4 has an invalid length. [ 153.640431][ T7894] FAULT_INJECTION: forcing a failure. [ 153.640431][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 153.653402][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.3.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.653431][ T7894] Tainted: [L]=SOFTLOCKUP [ 153.653437][ T7894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.653448][ T7894] Call Trace: [ 153.653454][ T7894] [ 153.653462][ T7894] dump_stack_lvl+0x16c/0x1f0 [ 153.653496][ T7894] should_fail_ex+0x512/0x640 [ 153.653515][ T7894] ? __kmalloc_cache_noprof+0x5f/0x800 [ 153.653546][ T7894] should_failslab+0xc2/0x120 [ 153.653570][ T7894] __kmalloc_cache_noprof+0x80/0x800 [ 153.653598][ T7894] ? find_held_lock+0x2b/0x80 [ 153.653625][ T7894] ? ppp_asynctty_open+0x9b/0x620 [ 153.653654][ T7894] ? tty_set_ldisc+0x2b8/0x780 [ 153.653679][ T7894] ? ppp_asynctty_open+0x9b/0x620 [ 153.653706][ T7894] ppp_asynctty_open+0x9b/0x620 [ 153.653731][ T7894] ? up_write+0x282/0x4e0 [ 153.653752][ T7894] ? __pfx_ppp_asynctty_open+0x10/0x10 [ 153.653779][ T7894] tty_ldisc_open+0x9f/0x120 [ 153.653802][ T7894] tty_set_ldisc+0x32b/0x780 [ 153.653828][ T7894] tty_ioctl+0xc2d/0x1650 [ 153.653853][ T7894] ? __pfx_tty_ioctl+0x10/0x10 [ 153.653878][ T7894] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 153.653917][ T7894] ? hook_file_ioctl_common+0x144/0x410 [ 153.653951][ T7894] ? selinux_file_ioctl+0x180/0x270 [ 153.653978][ T7894] ? selinux_file_ioctl+0xb4/0x270 [ 153.654007][ T7894] ? __pfx_tty_ioctl+0x10/0x10 [ 153.654032][ T7894] __x64_sys_ioctl+0x18e/0x210 [ 153.654055][ T7894] do_syscall_64+0xcd/0xf80 [ 153.654084][ T7894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.654102][ T7894] RIP: 0033:0x7f4e12f8f749 [ 153.654117][ T7894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.654135][ T7894] RSP: 002b:00007f4e13d5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.654152][ T7894] RAX: ffffffffffffffda RBX: 00007f4e131e6180 RCX: 00007f4e12f8f749 [ 153.654164][ T7894] RDX: 00002000000000c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 153.654174][ T7894] RBP: 00007f4e13d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 153.654185][ T7894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.654195][ T7894] R13: 00007f4e131e6218 R14: 00007f4e131e6180 R15: 00007ffc30279658 [ 153.654221][ T7894] [ 154.773567][ T5935] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.851688][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 154.851703][ T30] audit: type=1400 audit(2000000010.840:451): avc: denied { connect } for pid=7927 comm="syz.0.341" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.946272][ T5935] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 154.966831][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.996310][ T5935] usb 4-1: config 0 descriptor?? [ 155.025257][ T5935] pwc: Creative Labs Webcam Pro Ex detected. [ 155.336877][ T5860] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 155.693636][ T7914] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 155.700261][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.727565][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 155.739448][ T7962] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 155.746105][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 155.790324][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 155.798466][ T7914] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 155.805062][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.816159][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 155.836232][ T7914] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 155.842829][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.927798][ T7975] netlink: 'syz.2.345': attribute type 4 has an invalid length. [ 155.971014][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 156.061792][ T7977] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.083894][ T5920] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 156.091657][ T5817] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 156.145098][ T7962] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 156.151713][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 156.311612][ T5920] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 156.333758][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 156.337894][ T7914] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.347462][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.362131][ T7914] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(28) [ 156.368726][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.378911][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 156.384553][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 156.589207][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.684451][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.707884][ T7982] vhci_hcd: connection closed [ 156.709207][ T6178] vhci_hcd vhci_hcd.3: stop threads [ 156.733822][ T7956] vhci_hcd: connection reset by peer [ 156.744900][ T7963] vhci_hcd: connection closed [ 156.749261][ T7978] vhci_hcd: connection closed [ 156.797902][ T7972] vhci_hcd: connection closed [ 156.809436][ T7970] vhci_hcd: connection closed [ 156.817571][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.852674][ T6178] vhci_hcd vhci_hcd.3: release socket [ 156.889153][ T5935] pwc: send_video_command error -71 [ 156.889402][ T6178] vhci_hcd vhci_hcd.3: disconnect device [ 156.896637][ T5920] usb 2-1: config 0 descriptor?? [ 156.905043][ T5935] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 156.912559][ T5935] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 156.922494][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 156.926875][ T5935] usb 4-1: USB disconnect, device number 17 [ 156.945326][ T6178] vhci_hcd vhci_hcd.3: stop threads [ 156.958644][ T6178] vhci_hcd vhci_hcd.3: release socket [ 156.972370][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 156.986677][ T6178] vhci_hcd vhci_hcd.3: disconnect device [ 156.996841][ T6178] vhci_hcd vhci_hcd.3: stop threads [ 157.002044][ T6178] vhci_hcd vhci_hcd.3: release socket [ 157.044207][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.053244][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.056121][ T6178] vhci_hcd vhci_hcd.3: disconnect device [ 157.082275][ T6178] vhci_hcd vhci_hcd.3: stop threads [ 157.116590][ T9] usb 5-1: Product: syz [ 157.120769][ T9] usb 5-1: Manufacturer: syz [ 157.123716][ T6178] vhci_hcd vhci_hcd.3: release socket [ 157.133159][ T5920] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 157.146298][ T6178] vhci_hcd vhci_hcd.3: disconnect device [ 157.152571][ T5920] [drm:udl_init] *ERROR* Selecting channel failed [ 157.162551][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 157.172437][ T6178] vhci_hcd vhci_hcd.3: stop threads [ 157.191699][ T6178] vhci_hcd vhci_hcd.3: release socket [ 157.191804][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 157.200414][ T5920] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 157.210290][ T6178] vhci_hcd vhci_hcd.3: disconnect device [ 157.223616][ T6178] vhci_hcd vhci_hcd.3: stop threads [ 157.230090][ T5920] [drm] Initialized udl on minor 2 [ 157.239169][ T6178] vhci_hcd vhci_hcd.3: release socket [ 157.246487][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 157.252390][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 157.255491][ T5920] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 157.271957][ T6178] vhci_hcd vhci_hcd.3: disconnect device [ 157.290803][ T5920] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 157.311527][ T5935] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 157.329124][ T5935] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 157.336194][ T5920] usb 2-1: USB disconnect, device number 11 [ 157.384598][ T30] audit: type=1400 audit(2000000013.380:452): avc: denied { read write } for pid=7954 comm="syz.4.347" name="cdc-wdm0" dev="devtmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 157.410571][ T30] audit: type=1400 audit(2000000013.400:453): avc: denied { open } for pid=7954 comm="syz.4.347" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 157.848330][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 158.089511][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.140577][ T8043] openvswitch: netlink: Key type 70 is out of range max 32 [ 158.583549][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 158.590436][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 158.603294][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.620543][ T8040] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 158.650560][ T10] usb 5-1: USB disconnect, device number 18 [ 158.696908][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 158.734057][ T9] pvrusb2: ********** [ 158.738221][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 158.751649][ T9] pvrusb2: Important functionality might not be entirely working. [ 158.759980][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 158.771801][ T9] pvrusb2: ********** [ 159.017493][ T2336] pvrusb2: Invalid write control endpoint [ 159.130047][ T9] usb 1-1: USB disconnect, device number 10 [ 159.358272][ T2336] pvrusb2: Invalid write control endpoint [ 159.373957][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 159.401394][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 159.421600][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 159.441806][ T2336] pvrusb2: Device being rendered inoperable [ 159.462015][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 159.479808][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 159.500915][ T2336] pvrusb2: Attached sub-driver cx25840 [ 159.560554][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 159.572666][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 159.593130][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 159.740594][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.824118][ T8108] netlink: 'syz.4.359': attribute type 4 has an invalid length. [ 160.322597][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 160.338519][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.347728][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 160.358861][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 160.385657][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.421780][ T8113] fuse: Bad value for 'fd' [ 160.470229][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.478306][ T10] usb 3-1: Product: syz [ 160.482466][ T10] usb 3-1: Manufacturer: syz [ 160.494011][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 160.499223][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 160.509615][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 160.516222][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 160.563365][ T30] audit: type=1400 audit(2000000016.550:454): avc: denied { ioctl } for pid=8124 comm="syz.4.366" path="socket:[16965]" dev="sockfs" ino=16965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.591557][ T30] audit: type=1400 audit(2000000016.560:455): avc: denied { bind } for pid=8124 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.618887][ T30] audit: type=1400 audit(2000000016.610:456): avc: denied { write } for pid=8124 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.674308][ T5920] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 160.722242][ T8126] bond0: entered allmulticast mode [ 160.857254][ T5939] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.904031][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.939473][ T5920] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.967159][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.004784][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.007827][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.050757][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.083326][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.089931][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.096251][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.098172][ T8114] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 161.102852][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.116683][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.123270][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.129501][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.136091][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.142354][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.148947][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.155167][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.161759][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.168039][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.174618][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.180902][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.187482][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.193799][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.200384][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.206623][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 161.213192][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 161.220172][ T10] usb 3-1: USB disconnect, device number 19 [ 161.226094][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 161.236764][ T30] audit: type=1400 audit(2000000017.070:457): avc: denied { write } for pid=8082 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.260959][ T5939] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.276675][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.313631][ T5939] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.338104][ T5939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.353804][ T5817] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 161.374703][ T5939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.410288][ T5939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.440687][ T5939] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.470800][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.493344][ T5939] usb 1-1: Product: syz [ 161.500352][ T5939] usb 1-1: Manufacturer: syz [ 161.542283][ T5939] cdc_wdm 1-1:1.0: skipping garbage [ 161.558652][ T5939] cdc_wdm 1-1:1.0: skipping garbage [ 161.574156][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.613982][ T10] usb 4-1: USB disconnect, device number 18 [ 161.724407][ T5939] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 161.730893][ T5939] cdc_wdm 1-1:1.0: Unknown control protocol [ 161.750537][ T5867] usb 1-1: USB disconnect, device number 11 [ 161.813803][ T5860] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 161.821436][ T9] usb 5-1: device descriptor read/64, error -71 [ 161.999293][ T5860] usb 2-1: config 27 has an invalid descriptor of length 212, skipping remainder of the config [ 162.026438][ T5860] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 162.038167][ T5860] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 162.048489][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.093638][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.287413][ T9] usb 5-1: device descriptor read/64, error -71 [ 162.413875][ T9] usb usb5-port1: attempt power cycle [ 162.486154][ T8251] fuse: Bad value for 'fd' [ 162.543361][ T30] audit: type=1400 audit(2000000018.530:458): avc: denied { read write } for pid=8242 comm="syz.3.372" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.628199][ T30] audit: type=1400 audit(2000000018.560:459): avc: denied { open } for pid=8242 comm="syz.3.372" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.694067][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.703924][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.853954][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 163.427684][ T9] usb 5-1: device descriptor read/8, error -71 [ 163.554519][ T8265] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 163.561039][ T8265] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.571357][ T8265] vhci_hcd vhci_hcd.0: Device attached [ 163.611743][ T8267] vhci_hcd: connection closed [ 163.615045][ T6240] vhci_hcd vhci_hcd.0: stop threads [ 163.629803][ T30] audit: type=1400 audit(2000000018.570:460): avc: denied { read } for pid=8242 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.666812][ T974] usb usb40-port1: attempt power cycle [ 163.669082][ T6240] vhci_hcd vhci_hcd.0: release socket [ 163.710981][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 163.728597][ T6240] vhci_hcd vhci_hcd.0: disconnect device [ 163.742102][ T30] audit: type=1400 audit(2000000018.650:461): avc: denied { write } for pid=8242 comm="syz.3.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.762002][ T9] usb 5-1: device descriptor read/8, error -71 [ 163.793569][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 163.826561][ T30] audit: type=1400 audit(2000000018.730:462): avc: denied { create } for pid=8254 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 163.885427][ T9] usb usb5-port1: unable to enumerate USB device [ 163.973815][ T5816] Bluetooth: hci4: command 0x0419 tx timeout [ 164.224959][ T974] usb usb40-port1: unable to enumerate USB device [ 164.570786][ T5817] usb 2-1: USB disconnect, device number 12 [ 164.703573][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.855206][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.864655][ T5867] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.885076][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.906998][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.929632][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 164.962696][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.976846][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.992048][ T5867] usb 1-1: Product: syz [ 164.999389][ T5867] usb 1-1: Manufacturer: syz [ 165.013623][ T5817] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 165.024632][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 165.041492][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 165.058203][ T5867] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 165.071282][ T5867] cdc_wdm 1-1:1.0: Unknown control protocol [ 165.341807][ T8281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.357685][ T8281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.372609][ T30] audit: type=1400 audit(2000000021.360:463): avc: denied { mounton } for pid=8312 comm="syz.3.386" path="/65/file0" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.375527][ T5867] usb 1-1: USB disconnect, device number 12 [ 165.396037][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 165.561418][ T8329] fuse: Bad value for 'fd' [ 165.607047][ T5817] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.628095][ T5817] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 165.859691][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.949129][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 166.021040][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.085384][ T5817] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.125013][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.166239][ T5817] usb 2-1: Product: syz [ 166.177297][ T5817] usb 2-1: Manufacturer: syz [ 166.285690][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 166.323572][ T30] audit: type=1400 audit(2000000022.250:464): avc: denied { create } for pid=8337 comm="syz.2.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.351675][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 166.441443][ T5817] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 166.494656][ T5817] cdc_wdm 2-1:1.0: Unknown control protocol [ 166.623762][ T5817] usb 2-1: USB disconnect, device number 13 [ 167.322863][ T30] audit: type=1400 audit(2000000023.310:465): avc: denied { create } for pid=8362 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.382079][ T30] audit: type=1400 audit(2000000023.340:466): avc: denied { write } for pid=8362 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.427072][ T30] audit: type=1400 audit(2000000023.370:467): avc: denied { read } for pid=8362 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.454131][ T30] audit: type=1400 audit(2000000023.420:468): avc: denied { setopt } for pid=8362 comm="syz.1.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.674065][ T5867] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 167.803557][ T5867] usb 5-1: device descriptor read/64, error -71 [ 167.963570][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.023564][ T5817] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 168.063622][ T5867] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 168.125107][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 168.131986][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.142436][ T10] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 168.151903][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.168698][ T10] usb 3-1: config 0 descriptor?? [ 168.178721][ T10] dvb-usb: found a 'TeVii S662' in warm state. [ 168.183540][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 168.186608][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 168.202234][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 168.208071][ T5867] usb 5-1: device descriptor read/64, error -71 [ 168.217149][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 168.226119][ T5817] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 168.230052][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.249576][ T10] dvbdev: DVB: registering new adapter (TeVii S662) [ 168.260489][ T10] usb 3-1: media controller created [ 168.263996][ T5817] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 168.265834][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 168.274906][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.280733][ T10] dw2102: i2c transfer failed. [ 168.280759][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 168.280773][ T10] dw2102: i2c transfer failed. [ 168.280796][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 168.289183][ T5817] usb 1-1: Product: syz [ 168.294389][ T10] dw2102: i2c transfer failed. [ 168.299987][ T5817] usb 1-1: Manufacturer: syz [ 168.304513][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 168.310298][ T5817] usb 1-1: SerialNumber: syz [ 168.314822][ T10] dw2102: i2c transfer failed. [ 168.339067][ T5867] usb usb5-port1: attempt power cycle [ 168.345956][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 168.350916][ T5817] usb 1-1: config 0 descriptor?? [ 168.358810][ T10] dw2102: i2c transfer failed. [ 168.365947][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 168.372158][ T10] dw2102: i2c transfer failed. [ 168.372607][ T5817] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 168.377083][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 168.395486][ T8376] dvb-usb: bulk message failed: -22 (4/0) [ 168.401197][ T8376] dw2102: i2c transfer failed. [ 168.407850][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.408218][ T5817] usb 1-1: Detected FT232R [ 168.418347][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.439604][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.448045][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.459419][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.477644][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 168.491505][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 168.497469][ T10] dw2102: command 0x0e transfer failed. [ 168.507412][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 168.513322][ T10] dw2102: command 0x0e transfer failed. [ 168.520471][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.529695][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.538217][ T9] usb 2-1: Product: syz [ 168.542407][ T9] usb 2-1: Manufacturer: syz [ 168.553026][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 168.558803][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 168.565721][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 168.572607][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 168.572957][ T5817] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 168.693948][ T5867] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 168.714032][ T5867] usb 5-1: device descriptor read/8, error -71 [ 168.759138][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.770176][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.780400][ C0] wdm_int_callback: 10 callbacks suppressed [ 168.780418][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.792835][ C0] wdm_int_callback: 10 callbacks suppressed [ 168.792845][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.804997][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.811578][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.817861][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.824449][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.830653][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.837216][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.843426][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.849998][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.856208][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.862789][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.869192][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.875788][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.882002][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.888567][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.894757][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.901323][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.907507][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 168.914067][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 168.923012][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 168.928789][ T10] dw2102: command 0x0e transfer failed. [ 168.934508][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 168.940275][ T10] dw2102: command 0x0e transfer failed. [ 168.946677][ T5920] usb 2-1: USB disconnect, device number 14 [ 168.946796][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 168.963954][ T5817] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.966532][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 168.983576][ T10] dw2102: command 0x51 transfer failed. [ 168.989338][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 169.040294][ T30] audit: type=1400 audit(2000000025.030:469): avc: denied { read append } for pid=8445 comm="syz.3.401" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.064393][ T30] audit: type=1400 audit(2000000025.030:470): avc: denied { open } for pid=8445 comm="syz.3.401" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.074258][ T10] dw2102: i2c probe for address 0x68 failed. [ 169.094454][ T5867] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 169.106998][ T5817] usb 1-1: USB disconnect, device number 13 [ 169.124083][ T5867] usb 5-1: device descriptor read/8, error -71 [ 169.136460][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 169.142184][ T10] dw2102: i2c probe for address 0x69 failed. [ 169.148738][ T30] audit: type=1400 audit(2000000025.030:471): avc: denied { ioctl } for pid=8445 comm="syz.3.401" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.176055][ T5817] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.177567][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 169.200690][ T5817] ftdi_sio 1-1:0.0: device disconnected [ 169.203514][ T10] dw2102: i2c probe for address 0x6a failed. [ 169.222594][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 169.235177][ T5867] usb usb5-port1: unable to enumerate USB device [ 169.246912][ T10] dvb-usb: no frontend was attached by 'TeVii S662' [ 169.443618][ T10] rc_core: IR keymap rc-tt-1500 not found [ 169.962066][ T30] audit: type=1400 audit(2000000025.500:472): avc: denied { read } for pid=8456 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.016288][ T10] Registered IR keymap rc-empty [ 170.028592][ T30] audit: type=1400 audit(2000000025.500:473): avc: denied { read } for pid=8456 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.038309][ T10] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 170.092915][ T10] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 170.393308][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 170.455291][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 170.471206][ T10] dvb-usb: TeVii S662 successfully initialized and connected. [ 170.490244][ T10] usb 3-1: USB disconnect, device number 20 [ 170.564410][ T8488] 9p: Bad value for 'wfdno' [ 170.623065][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 170.635311][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 170.743566][ T8488] ceph: No mds server is up or the cluster is laggy [ 170.766584][ T10] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 171.453634][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 171.716435][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.953674][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.974513][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 171.983360][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.998572][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.013851][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.014194][ T8521] openvswitch: netlink: Key type 70 is out of range max 32 [ 172.026724][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.066095][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.087040][ T10] usb 3-1: Product: syz [ 172.091207][ T10] usb 3-1: Manufacturer: syz [ 172.125071][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 172.143700][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 172.157761][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 172.173706][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 172.196893][ T5920] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 172.391062][ T5935] usb 3-1: USB disconnect, device number 21 [ 172.403586][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 172.433711][ T5920] usb 1-1: device descriptor read/64, error -71 [ 172.645778][ T5817] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.655964][ T5817] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.667000][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.676094][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.687048][ T5817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.713687][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 172.883672][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 172.896059][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.907085][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 172.916277][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.959364][ T9] usb 5-1: config 0 descriptor?? [ 173.102603][ T9] dvb-usb: found a 'TeVii S662' in warm state. [ 173.153021][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 173.195770][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 173.223776][ T5920] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 173.234255][ T5817] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.243286][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.247179][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.252430][ T5817] usb 2-1: Product: syz [ 173.265570][ T5817] usb 2-1: Manufacturer: syz [ 173.282674][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 173.292976][ T9] dvbdev: DVB: registering new adapter (TeVii S662) [ 173.297295][ T5817] cdc_wdm 2-1:1.0: skipping garbage [ 173.308064][ T9] usb 5-1: media controller created [ 173.319022][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 173.324953][ T5817] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 173.326790][ T9] dw2102: i2c transfer failed. [ 173.331006][ T5817] cdc_wdm 2-1:1.0: Unknown control protocol [ 173.337989][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 173.347883][ T9] dw2102: i2c transfer failed. [ 173.352803][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 173.359016][ T9] dw2102: i2c transfer failed. [ 173.363984][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 173.371377][ T9] dw2102: i2c transfer failed. [ 173.485210][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 173.487615][ T5920] usb 1-1: device descriptor read/64, error -71 [ 173.494655][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.513986][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.538072][ T9] dw2102: i2c transfer failed. [ 173.544688][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 173.550414][ T9] dw2102: i2c transfer failed. [ 173.555215][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 173.561395][ T5817] usb 2-1: USB disconnect, device number 15 [ 173.570781][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.747928][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 173.754137][ T9] dw2102: command 0x0e transfer failed. [ 173.760383][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 173.768708][ T9] dw2102: command 0x0e transfer failed. [ 173.804424][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 173.983627][ T10] usb 4-1: device descriptor read/64, error -71 [ 174.109609][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 174.138831][ T5920] usb usb1-port1: attempt power cycle [ 174.194092][ T9] dw2102: command 0x0e transfer failed. [ 174.199708][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 174.205490][ T9] dw2102: command 0x0e transfer failed. [ 174.211066][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 174.217704][ T9] dw2102: command 0x51 transfer failed. [ 174.223287][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 174.229051][ T9] dw2102: i2c probe for address 0x68 failed. [ 174.243542][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 174.249407][ T9] dw2102: i2c probe for address 0x69 failed. [ 174.269623][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 174.290762][ T9] dw2102: i2c probe for address 0x6a failed. [ 174.310040][ T9] dw2102: probing for demodulator failed. Is the external power switched on? [ 174.318981][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 174.334571][ T9] dvb-usb: no frontend was attached by 'TeVii S662' [ 174.463474][ T9] rc_core: IR keymap rc-tt-1500 not found [ 174.472079][ T9] Registered IR keymap rc-empty [ 174.481877][ T9] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 174.491783][ T10] usb 4-1: device descriptor read/64, error -71 [ 174.690038][ T9] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 174.721812][ T10] usb usb4-port1: attempt power cycle [ 174.913133][ T9] dvb-usb: schedule remote query interval to 250 msecs. [ 175.077574][ T5920] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 175.103801][ T5920] usb 1-1: device descriptor read/8, error -71 [ 175.177865][ T5874] kernel read not supported for file /sysvipc/msg (pid: 5874 comm: kworker/0:6) [ 175.190158][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 175.242356][ T9] dvb-usb: TeVii S662 successfully initialized and connected. [ 175.253851][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.279344][ T9] usb 5-1: USB disconnect, device number 27 [ 175.304025][ T10] usb 4-1: device descriptor read/8, error -71 [ 175.365501][ T9] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 175.688786][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 175.724684][ T10] usb 4-1: device descriptor read/8, error -71 [ 175.776237][ T5817] kernel read not supported for file /sysvipc/msg (pid: 5817 comm: kworker/1:3) [ 175.845949][ T10] usb usb4-port1: unable to enumerate USB device [ 176.523562][ T5920] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 176.564279][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 176.578240][ T5920] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.592968][ T5920] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.614355][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.633650][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.660181][ T5920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.680977][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.793549][ T5920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.803273][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.833664][ T5920] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.845207][ T30] audit: type=1400 audit(2000000032.740:474): avc: denied { shutdown } for pid=8670 comm="syz.3.431" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.890582][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.947490][ T5920] usb 1-1: config 0 descriptor?? [ 176.975641][ T30] audit: type=1400 audit(2000000032.910:475): avc: denied { mount } for pid=8670 comm="syz.3.431" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 177.165177][ T5920] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.234330][ T30] audit: type=1400 audit(2000000033.230:476): avc: denied { write } for pid=8670 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.234858][ T8679] netlink: 72 bytes leftover after parsing attributes in process `syz.3.431'. [ 177.293636][ T5817] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 177.333925][ T30] audit: type=1400 audit(2000000033.230:477): avc: denied { nlmsg_write } for pid=8670 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.369666][ T5874] usb 1-1: USB disconnect, device number 17 [ 177.395619][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 177.407994][ T5874] usblp0: removed [ 177.495489][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 177.614918][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.623950][ T5817] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 177.635668][ T5920] usb 2-1: config 27 has an invalid descriptor of length 212, skipping remainder of the config [ 177.653519][ T5920] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 177.686149][ T5920] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 177.705538][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.705765][ T5817] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 177.757454][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.773857][ T5817] usb 5-1: Product: syz [ 177.787965][ T5817] usb 5-1: Manufacturer: syz [ 177.802702][ T5817] usb 5-1: SerialNumber: syz [ 178.022311][ T5817] usb 5-1: Cannot retrieve CPort count: -32 [ 178.123723][ T5817] usb 5-1: Cannot retrieve CPort count: -32 [ 178.129958][ T5817] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -32 [ 178.141162][ T5817] usb 5-1: USB disconnect, device number 28 [ 178.764466][ T8728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.802049][ T8728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.873340][ T8726] xt_limit: Overflow, try lower: 167772/2147483648 [ 179.293556][ T5817] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 179.670331][ T30] audit: type=1400 audit(2000000035.660:478): avc: denied { write } for pid=8749 comm="syz.4.438" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 179.670633][ T8750] random: crng reseeded on system resumption [ 179.704892][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 179.730804][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.754365][ T30] audit: type=1400 audit(2000000035.660:479): avc: denied { open } for pid=8749 comm="syz.4.438" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 179.789192][ T5817] usb 4-1: config 0 has no interfaces? [ 179.801984][ T5817] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 179.811198][ T5920] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 179.832116][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.848196][ T30] audit: type=1400 audit(2000000035.740:480): avc: denied { watch } for pid=8749 comm="syz.4.438" path="/93/file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 179.851185][ T5817] usb 4-1: config 0 descriptor?? [ 179.891627][ T30] audit: type=1400 audit(2000000035.740:481): avc: denied { watch_sb watch_reads } for pid=8749 comm="syz.4.438" path="/93/file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.917574][ T30] audit: type=1400 audit(2000000035.870:482): avc: denied { ioctl } for pid=8749 comm="syz.4.438" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.115223][ T5817] usb 4-1: USB disconnect, device number 23 [ 180.122539][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.140401][ T5920] usb 1-1: config 0 has no interfaces? [ 180.146377][ T5920] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.158871][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.188026][ T5920] usb 1-1: config 0 descriptor?? [ 180.511321][ T9] usb 2-1: USB disconnect, device number 16 [ 181.156513][ T8788] netlink: 'syz.2.441': attribute type 4 has an invalid length. [ 181.474238][ T8797] 9p: Bad value for 'rfdno' [ 181.498497][ T30] audit: type=1326 audit(2000000037.480:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.3.444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e12f8f749 code=0x0 [ 182.144256][ T5867] usb 1-1: USB disconnect, device number 18 [ 182.553585][ T5920] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 182.723540][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 182.732540][ T5920] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 182.742780][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.778380][ T5920] usb 2-1: config 0 descriptor?? [ 182.988628][ T30] audit: type=1400 audit(2000000038.970:484): avc: denied { create } for pid=8824 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.032612][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 183.056710][ T30] audit: type=1400 audit(2000000038.980:485): avc: denied { ioctl } for pid=8824 comm="syz.0.449" path="socket:[17677]" dev="sockfs" ino=17677 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.091890][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.166612][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 183.196440][ T5920] usb 2-1: media controller created [ 183.203567][ T30] audit: type=1400 audit(2000000038.980:486): avc: denied { write } for pid=8824 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.245095][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.282072][ T30] audit: type=1400 audit(2000000039.220:487): avc: denied { append } for pid=8799 comm="syz.1.445" name="i2c-1" dev="devtmpfs" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.203468][ T30] audit: type=1400 audit(2000000041.190:488): avc: denied { read } for pid=5476 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 185.238606][ T5920] az6027: usb out operation failed. (-71) [ 185.249981][ T5920] az6027: usb out operation failed. (-71) [ 185.259925][ T5920] stb0899_attach: Driver disabled by Kconfig [ 185.267725][ T5920] az6027: no front-end attached [ 185.267725][ T5920] [ 185.297830][ T5920] az6027: usb out operation failed. (-71) [ 185.329320][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 185.376968][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 185.413946][ T8866] netlink: 'syz.4.454': attribute type 3 has an invalid length. [ 185.459574][ T8866] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 185.478091][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 185.495350][ T8866] netlink: 224 bytes leftover after parsing attributes in process `syz.4.454'. [ 185.495423][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 185.566816][ T5920] usb 2-1: USB disconnect, device number 17 [ 185.715377][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 185.799650][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 185.823612][ T5935] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 185.928327][ T8886] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 185.987314][ T5935] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.997845][ T5935] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 186.008316][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 186.017609][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 186.029191][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 186.043994][ T5935] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 186.062393][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 186.072857][ T5935] usb 4-1: Product: syz [ 186.077073][ T5935] usb 4-1: Manufacturer: syz [ 186.096255][ T5935] cdc_wdm 4-1:1.0: skipping garbage [ 186.105682][ T5935] cdc_wdm 4-1:1.0: skipping garbage [ 186.113861][ T5935] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 186.120187][ T5935] cdc_wdm 4-1:1.0: Unknown control protocol [ 186.143696][ T5920] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 186.298860][ T5920] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 186.963539][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.975974][ T5920] usb 1-1: config 0 descriptor?? [ 187.006757][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.060458][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.099544][ C1] wdm_int_callback: 29 callbacks suppressed [ 187.099564][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 187.099826][ T5867] usb 4-1: USB disconnect, device number 24 [ 187.105473][ C1] wdm_int_callback: 29 callbacks suppressed [ 187.105490][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 187.105508][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 187.168677][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 187.188564][ T5920] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 187.204430][ T5920] [drm:udl_init] *ERROR* Selecting channel failed [ 187.260962][ T5920] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 187.291017][ T5920] [drm] Initialized udl on minor 2 [ 187.319086][ T5920] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.330052][ T5920] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 187.340802][ T5935] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 187.362007][ T5817] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.372247][ T5920] usb 1-1: USB disconnect, device number 19 [ 187.382123][ T5817] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 187.506565][ T5935] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 187.515991][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.530644][ T5935] usb 2-1: config 0 descriptor?? [ 187.709149][ T30] audit: type=1400 audit(2000000043.700:489): avc: denied { write } for pid=8989 comm="syz.4.468" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 187.903565][ T5867] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 187.917767][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 187.995426][ T30] audit: type=1400 audit(2000000043.980:490): avc: denied { bind } for pid=8989 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.257104][ T30] audit: type=1400 audit(2000000043.980:491): avc: denied { node_bind } for pid=8989 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 188.474061][ T30] audit: type=1400 audit(2000000043.980:492): avc: denied { getopt } for pid=8989 comm="syz.4.468" laddr=fe80::10 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.543552][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 188.557861][ T5867] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 188.567985][ T5935] usb 2-1: Cannot set autoneg [ 188.579884][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.621745][ T5867] usb 3-1: config 0 descriptor?? [ 188.655391][ T5935] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 188.671419][ T5935] usb 2-1: USB disconnect, device number 18 [ 188.843196][ T5867] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 188.894006][ T5867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.908478][ T5867] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 188.918485][ T5867] usb 3-1: media controller created [ 188.993856][ T5874] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 189.557447][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.649470][ T5874] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 189.708958][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.730374][ T5874] usb 5-1: config 0 descriptor?? [ 189.947810][ T5874] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 190.666603][ T5874] [drm:udl_init] *ERROR* Selecting channel failed [ 190.693663][ T5874] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 190.703554][ T5874] [drm] Initialized udl on minor 2 [ 190.710131][ T5874] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.756346][ T5874] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.764703][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 190.782817][ T5867] az6027: usb out operation failed. (-71) [ 190.795453][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 190.804431][ T5874] usb 5-1: USB disconnect, device number 29 [ 190.815788][ T5867] az6027: usb out operation failed. (-71) [ 190.823629][ T5867] stb0899_attach: Driver disabled by Kconfig [ 190.829621][ T5867] az6027: no front-end attached [ 190.829621][ T5867] [ 190.841036][ T5867] az6027: usb out operation failed. (-71) [ 190.848348][ T5867] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 190.867892][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 191.011698][ T9072] netlink: 3 bytes leftover after parsing attributes in process `syz.0.472'. [ 191.089773][ T5867] dvb-usb: schedule remote query interval to 400 msecs. [ 191.114514][ T5867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 191.233544][ T5920] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 191.236308][ T5867] usb 3-1: USB disconnect, device number 22 [ 191.368748][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 191.442134][ T5920] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.453284][ T5920] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.457552][ T5867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 191.511634][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.593563][ T5874] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 191.618747][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 191.629811][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 191.643310][ T9102] netlink: 'syz.2.482': attribute type 4 has an invalid length. [ 191.692765][ T5920] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.705200][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.713197][ T5920] usb 2-1: Product: syz [ 191.717819][ T5920] usb 2-1: Manufacturer: syz [ 191.730052][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 191.746589][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.746828][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 191.774266][ T5920] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 191.782163][ T5920] cdc_wdm 2-1:1.0: Unknown control protocol [ 191.792653][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.817553][ T5874] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 191.838369][ T30] audit: type=1400 audit(2000000047.830:493): avc: denied { connect } for pid=9113 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 191.857838][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.882643][ T5874] usb 5-1: config 0 descriptor?? [ 191.950772][ T9060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.959872][ T9060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.969563][ T5920] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 192.158738][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 192.158991][ T5867] usb 2-1: USB disconnect, device number 19 [ 192.165355][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 192.165375][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 192.717530][ T30] audit: type=1400 audit(2000000048.290:494): avc: denied { read } for pid=9113 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.755573][ T5874] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 192.805378][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 192.828656][ T5874] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 192.838963][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.861150][ T5920] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 192.868336][ T5874] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 192.870914][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.902595][ T5920] usb 4-1: config 0 descriptor?? [ 192.918812][ T5920] dvb-usb: found a 'TeVii S662' in warm state. [ 192.926396][ T5920] dw2102: su3000_power_ctrl: 1, initialized 0 [ 192.935691][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 192.946091][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.956080][ T5920] dvbdev: DVB: registering new adapter (TeVii S662) [ 192.962678][ T5920] usb 4-1: media controller created [ 192.968014][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 192.975307][ T5920] dw2102: i2c transfer failed. [ 192.980077][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 192.987216][ T5920] dw2102: i2c transfer failed. [ 192.992539][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 193.001488][ T5920] dw2102: i2c transfer failed. [ 193.006784][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 193.012562][ T5920] dw2102: i2c transfer failed. [ 193.017693][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 193.023679][ T5920] dw2102: i2c transfer failed. [ 193.028502][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 193.037473][ T5920] dw2102: i2c transfer failed. [ 193.042300][ T5920] dvb-usb: MAC address: 02:02:02:02:02:02 [ 193.059851][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.089452][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 193.095610][ T5920] dw2102: command 0x0e transfer failed. [ 193.101191][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 193.108012][ T5920] dw2102: command 0x0e transfer failed. [ 193.372798][ T30] audit: type=1400 audit(2000000049.360:495): avc: denied { ioctl } for pid=9075 comm="syz.4.480" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 193.383560][ T5874] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 193.407696][ T5817] usb 5-1: USB disconnect, device number 30 [ 193.445332][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 193.451068][ T5920] dw2102: command 0x0e transfer failed. [ 193.459755][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 193.465861][ T5920] dw2102: command 0x0e transfer failed. [ 193.471460][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 193.483016][ T5920] dw2102: command 0x51 transfer failed. [ 193.489324][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 193.495997][ T5920] dw2102: i2c probe for address 0x68 failed. [ 193.502040][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 193.508331][ T5920] dw2102: i2c probe for address 0x69 failed. [ 193.515791][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 193.522231][ T5920] dw2102: i2c probe for address 0x6a failed. [ 193.530355][ T30] audit: type=1400 audit(2000000049.520:496): avc: denied { write } for pid=9169 comm="syz.1.487" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.530784][ T5920] dw2102: probing for demodulator failed. Is the external power switched on? [ 193.553380][ T9065] dvb-usb: bulk message failed: -22 (4/0) [ 193.553410][ T9065] dw2102: i2c transfer failed. [ 193.578509][ T5874] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 193.579121][ T5920] dvb-usb: no frontend was attached by 'TeVii S662' [ 193.594608][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.604534][ T9170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=9170 comm=syz.1.487 [ 193.617415][ T30] audit: type=1400 audit(2000000049.520:497): avc: denied { open } for pid=9169 comm="syz.1.487" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.642926][ T5874] usb 3-1: config 0 descriptor?? [ 193.649108][ T30] audit: type=1400 audit(2000000049.640:498): avc: denied { ioctl } for pid=9169 comm="syz.1.487" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.655693][ T5920] rc_core: IR keymap rc-tt-1500 not found [ 193.700201][ T5920] Registered IR keymap rc-empty [ 193.709626][ T5920] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 193.737854][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.744640][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.744877][ T5920] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18 [ 193.793823][ T5920] dvb-usb: schedule remote query interval to 250 msecs. [ 193.818868][ T5920] dw2102: su3000_power_ctrl: 0, initialized 1 [ 193.828760][ T5920] dvb-usb: TeVii S662 successfully initialized and connected. [ 193.846778][ T5920] usb 4-1: USB disconnect, device number 25 [ 193.933330][ T5920] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 194.213687][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 194.243564][ T5817] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 194.343540][ T5920] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 194.363535][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 194.369903][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 194.381576][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.390642][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.398758][ T10] usb 2-1: Product: syz [ 194.402924][ T10] usb 2-1: Manufacturer: syz [ 194.407634][ T10] usb 2-1: SerialNumber: syz [ 194.414326][ T10] usb 2-1: config 0 descriptor?? [ 194.415376][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.426571][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 194.434186][ T5817] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.440259][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 194.448648][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.463929][ T5887] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 194.472832][ T5817] usb 1-1: config 0 descriptor?? [ 194.503894][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 194.510338][ T5920] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 194.519969][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.530117][ T5920] usb 5-1: config 0 descriptor?? [ 194.623560][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 194.630827][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.641264][ T5887] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 194.651527][ T5887] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 194.660645][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.672047][ T5887] usb 4-1: config 0 descriptor?? [ 194.682766][ T5817] usbhid 1-1:0.0: can't add hid device: -71 [ 194.689728][ T5817] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.702295][ T5817] usb 1-1: USB disconnect, device number 20 [ 194.709075][ T5874] usb 3-1: Cannot set autoneg [ 194.722543][ T5874] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 194.738043][ T5874] usb 3-1: USB disconnect, device number 23 [ 194.739475][ T5920] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 194.760494][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.774321][ T5920] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 194.781508][ T5920] usb 5-1: media controller created [ 194.794514][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.881753][ T5887] usb 4-1: USB disconnect, device number 26 [ 195.043252][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 195.095959][ T30] audit: type=1400 audit(2000000051.090:499): avc: denied { mount } for pid=9190 comm="syz.0.489" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 195.469132][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.480184][ T10] em28xx 2-1:0.0: board has no eeprom [ 195.648381][ T9261] netlink: 'syz.2.493': attribute type 4 has an invalid length. [ 195.919988][ T9264] netlink: 72 bytes leftover after parsing attributes in process `syz.3.494'. [ 196.516622][ T5874] IPVS: starting estimator thread 0... [ 196.539815][ T9200] em28xx 2-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 196.603584][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 197.182661][ T5920] az6027: usb out operation failed. (-110) [ 197.189666][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 197.208279][ T5867] em28xx 2-1:0.0: Binding DVB extension [ 197.220279][ T5920] az6027: usb out operation failed. (-32) [ 197.267492][ T5920] stb0899_attach: Driver disabled by Kconfig [ 197.283609][ T9279] IPVS: using max 44 ests per chain, 105600 per kthread [ 197.317195][ T5920] az6027: no front-end attached [ 197.317195][ T5920] [ 197.323519][ T10] usb 2-1: USB disconnect, device number 20 [ 197.353651][ T5920] az6027: usb out operation failed. (-71) [ 197.367569][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 197.375982][ T5920] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 197.409225][ T5867] em28xx 2-1:0.0: Registering input extension [ 197.412026][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 197.452270][ T5920] dvb-usb: schedule remote query interval to 400 msecs. [ 197.462537][ T5920] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 197.462697][ T10] em28xx 2-1:0.0: Closing input extension [ 197.526677][ T5920] usb 5-1: USB disconnect, device number 31 [ 197.539244][ T9307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=9307 comm=syz.0.498 [ 197.591421][ T10] em28xx 2-1:0.0: Freeing device [ 197.613681][ T5867] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 197.679257][ T5920] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 197.799276][ T5867] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.809476][ T5867] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 197.819891][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.829581][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 197.865686][ T5867] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.635343][ T5867] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.644502][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.652754][ T5867] usb 3-1: Product: syz [ 198.657008][ T5867] usb 3-1: Manufacturer: syz [ 198.676254][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 198.692309][ T5867] cdc_wdm 3-1:1.0: skipping garbage [ 198.714436][ T5867] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 198.723035][ T5867] cdc_wdm 3-1:1.0: Unknown control protocol [ 199.187233][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.214602][ T30] audit: type=1400 audit(2000000055.190:500): avc: denied { unlink } for pid=9347 comm="syz.1.505" name="#3" dev="tmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 199.222120][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.274009][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.280625][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.288956][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.295551][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.301961][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.308547][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.314774][ T30] audit: type=1400 audit(2000000055.230:501): avc: denied { mount } for pid=9347 comm="syz.1.505" name="/" dev="overlay" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 199.315074][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.343134][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.349915][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.356508][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.364961][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.371557][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.378070][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.384656][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.392608][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.399201][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.406552][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.413142][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.419605][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 199.426192][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 199.435684][ T30] audit: type=1400 audit(2000000055.340:502): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 199.436136][ T5920] usb 3-1: USB disconnect, device number 24 [ 199.455273][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 199.487308][ T48] kernel read not supported for file /sysvipc/msg (pid: 48 comm: kworker/1:1) [ 200.054018][ T48] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.173733][ T5844] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 200.213577][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 200.224816][ T48] usb 2-1: config 0 has an invalid interface number: 193 but max is 1 [ 200.236580][ T48] usb 2-1: config 0 has an invalid interface number: 4 but max is 1 [ 200.245334][ T48] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.255501][ T48] usb 2-1: config 0 has no interface number 0 [ 200.261572][ T48] usb 2-1: config 0 has no interface number 1 [ 200.268685][ T48] usb 2-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.282377][ T48] usb 2-1: config 0 interface 4 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 200.305807][ T48] usb 2-1: config 0 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 200.318806][ T48] usb 2-1: config 0 interface 193 has no altsetting 0 [ 200.325624][ T48] usb 2-1: config 0 interface 4 has no altsetting 0 [ 200.333757][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 200.334108][ T48] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 200.348177][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.353603][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.356754][ T48] usb 2-1: Product: syz [ 200.367326][ T5844] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 200.380234][ T48] usb 2-1: Manufacturer: syz [ 200.384885][ T48] usb 2-1: SerialNumber: syz [ 200.391582][ T48] usb 2-1: config 0 descriptor?? [ 200.402603][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.430156][ T5844] usb 5-1: config 0 descriptor?? [ 200.452050][ T5844] dvb-usb: found a 'TeVii S662' in warm state. [ 200.459084][ T5844] dw2102: su3000_power_ctrl: 1, initialized 0 [ 200.465407][ T5844] dvb-usb: bulk message failed: -22 (2/0) [ 200.476237][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.496048][ T5844] dvbdev: DVB: registering new adapter (TeVii S662) [ 200.513156][ T5844] usb 5-1: media controller created [ 200.519553][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 200.533712][ T5844] dw2102: i2c transfer failed. [ 200.538535][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 200.545328][ T5844] dw2102: i2c transfer failed. [ 200.550101][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 200.555961][ T5844] dw2102: i2c transfer failed. [ 200.560731][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 200.566549][ T5844] dw2102: i2c transfer failed. [ 200.571328][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 200.577321][ T5844] dw2102: i2c transfer failed. [ 200.582156][ T5844] dvb-usb: bulk message failed: -22 (6/0) [ 200.660457][ T9362] tipc: Failed to obtain node identity [ 200.666237][ T9362] tipc: Enabling of bearer rejected, failed to enable media [ 200.674989][ T5844] dw2102: i2c transfer failed. [ 200.699107][ T9346] dvb-usb: bulk message failed: -22 (4/0) [ 200.704990][ T5844] dvb-usb: MAC address: 02:02:02:02:02:02 [ 200.715186][ T9346] dw2102: i2c transfer failed. [ 200.728002][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.043582][ T5867] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 201.487407][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 201.510892][ T5844] dw2102: command 0x0e transfer failed. [ 201.524146][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 201.535660][ T5844] dw2102: command 0x0e transfer failed. [ 201.535749][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.516'. [ 201.635784][ T5867] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 201.658045][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.689242][ T5867] usb 1-1: config 0 descriptor?? [ 201.708396][ T5867] pwc: Creative Labs Webcam Pro Ex detected. [ 201.853667][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 201.862325][ T5844] dw2102: command 0x0e transfer failed. [ 201.877623][ T5844] dvb-usb: bulk message failed: -22 (3/0) [ 201.887205][ T5844] dw2102: command 0x0e transfer failed. [ 201.903947][ T5844] dvb-usb: bulk message failed: -22 (1/0) [ 201.915975][ T5844] dw2102: command 0x51 transfer failed. [ 201.923621][ T5844] dvb-usb: bulk message failed: -22 (5/0) [ 201.938652][ T5844] dw2102: i2c probe for address 0x68 failed. [ 201.956641][ T5844] dvb-usb: bulk message failed: -22 (5/0) [ 201.971932][ T5844] dw2102: i2c probe for address 0x69 failed. [ 201.984473][ T5844] dvb-usb: bulk message failed: -22 (5/0) [ 202.000392][ T5844] dw2102: i2c probe for address 0x6a failed. [ 202.016685][ T5844] dw2102: probing for demodulator failed. Is the external power switched on? [ 202.035775][ T5844] dvb-usb: no frontend was attached by 'TeVii S662' [ 202.143579][ T5844] rc_core: IR keymap rc-tt-1500 not found [ 202.151104][ T5844] Registered IR keymap rc-empty [ 202.164364][ T5844] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 202.204945][ T5844] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input21 [ 202.246173][ T9451] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 202.252788][ T9451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.268049][ T5844] dvb-usb: schedule remote query interval to 250 msecs. [ 202.294861][ T30] audit: type=1400 audit(2000000058.280:503): avc: denied { connect } for pid=9449 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.318651][ T5844] dw2102: su3000_power_ctrl: 0, initialized 1 [ 202.323579][ T5920] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 202.339768][ T9451] vhci_hcd vhci_hcd.0: Device attached [ 202.352821][ T5844] dvb-usb: TeVii S662 successfully initialized and connected. [ 202.378015][ T9404] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 202.384609][ T9404] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.414203][ T9404] vhci_hcd vhci_hcd.0: Device attached [ 202.423065][ T5844] usb 5-1: USB disconnect, device number 32 [ 202.463805][ T9447] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 202.470416][ T9447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.523592][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 202.597894][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.633637][ T9456] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 202.640258][ T9456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.685570][ T5920] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 202.738375][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.782645][ T9447] vhci_hcd vhci_hcd.0: Device attached [ 202.793557][ T5874] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 202.799642][ T9456] vhci_hcd vhci_hcd.0: Device attached [ 203.279982][ T9447] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.306107][ T9404] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.358820][ T5844] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 203.368491][ T9451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.381405][ T5920] usb 4-1: config 0 descriptor?? [ 203.426536][ T5920] dvb-usb: found a 'TeVii S662' in warm state. [ 203.432728][ T5920] dw2102: su3000_power_ctrl: 1, initialized 0 [ 203.447844][ T9456] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(31) [ 203.454450][ T9456] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 203.479186][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 203.489425][ T9456] vhci_hcd vhci_hcd.0: Device attached [ 203.509891][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.527523][ T5920] dvbdev: DVB: registering new adapter (TeVii S662) [ 203.534267][ T5920] usb 4-1: media controller created [ 203.539638][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 203.555618][ T5920] dw2102: i2c transfer failed. [ 203.556234][ T9459] vhci_hcd: connection closed [ 203.560413][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 203.560904][ T9458] vhci_hcd: connection closed [ 203.565341][ T1159] vhci_hcd vhci_hcd.0: stop threads [ 203.581497][ T9452] vhci_hcd: connection closed [ 203.581800][ T9445] vhci_hcd: connection reset by peer [ 203.593691][ T5920] dw2102: i2c transfer failed. [ 203.594750][ T5867] pwc: send_video_command error -71 [ 203.598474][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 203.605365][ T5867] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 203.609820][ T5920] dw2102: i2c transfer failed. [ 203.638666][ T1159] vhci_hcd vhci_hcd.0: release socket [ 203.644355][ T5867] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 203.657164][ T1159] vhci_hcd vhci_hcd.0: disconnect device [ 203.663050][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 203.671811][ T5867] usb 1-1: USB disconnect, device number 21 [ 203.675509][ T1159] vhci_hcd vhci_hcd.0: stop threads [ 203.692090][ T5920] dw2102: i2c transfer failed. [ 203.696038][ T1159] vhci_hcd vhci_hcd.0: release socket [ 203.696945][ T974] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 203.702619][ T1159] vhci_hcd vhci_hcd.0: disconnect device [ 203.712290][ T9419] dvb-usb: bulk message failed: -22 (4/0) [ 203.719689][ T1159] vhci_hcd vhci_hcd.0: stop threads [ 203.722359][ T9419] dw2102: i2c transfer failed. [ 203.729177][ T1159] vhci_hcd vhci_hcd.0: release socket [ 203.733227][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 203.740630][ T1159] vhci_hcd vhci_hcd.0: disconnect device [ 203.757635][ T1159] vhci_hcd vhci_hcd.0: stop threads [ 203.763628][ T5920] dw2102: i2c transfer failed. [ 203.768427][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 203.776769][ T1159] vhci_hcd vhci_hcd.0: release socket [ 203.779436][ T5920] dw2102: i2c transfer failed. [ 203.791364][ T5920] dvb-usb: MAC address: 02:02:02:02:02:02 [ 203.804204][ T1159] vhci_hcd vhci_hcd.0: disconnect device [ 203.818196][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.847472][ T48] usb 2-1: unknown interface protocol 0x4f, assuming v1 [ 203.855204][ T48] usb 2-1: 193:2 : does not exist [ 203.866594][ T48] usb 2-1: unknown interface protocol 0x5, assuming v1 [ 203.873453][ T48] usb 2-1: 4:2 : does not exist [ 203.896691][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 203.904872][ T5920] dw2102: command 0x0e transfer failed. [ 203.914582][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.931834][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 203.950702][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.966121][ T5920] dw2102: command 0x0e transfer failed. [ 203.978268][ T48] usb 2-1: USB disconnect, device number 21 [ 203.996546][ T974] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 204.006563][ T9531] FAULT_INJECTION: forcing a failure. [ 204.006563][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.013123][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.027363][ T9531] CPU: 0 UID: 0 PID: 9531 Comm: syz.1.526 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.027387][ T9531] Tainted: [L]=SOFTLOCKUP [ 204.027393][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.027403][ T9531] Call Trace: [ 204.027408][ T9531] [ 204.027414][ T9531] dump_stack_lvl+0x16c/0x1f0 [ 204.027442][ T9531] should_fail_ex+0x512/0x640 [ 204.027463][ T9531] _copy_to_user+0x32/0xd0 [ 204.027482][ T9531] simple_read_from_buffer+0xcb/0x170 [ 204.027505][ T9531] proc_fail_nth_read+0x197/0x240 [ 204.027523][ T9531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.027541][ T9531] ? rw_verify_area+0xcf/0x6c0 [ 204.027558][ T9531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.027574][ T9531] vfs_read+0x1e4/0xcf0 [ 204.027593][ T9531] ? __pfx___mutex_lock+0x10/0x10 [ 204.027622][ T9531] ? __pfx_vfs_read+0x10/0x10 [ 204.027650][ T9531] ? __fget_files+0x20e/0x3c0 [ 204.027681][ T9531] ksys_read+0x12a/0x250 [ 204.027700][ T9531] ? __pfx_ksys_read+0x10/0x10 [ 204.027719][ T9531] ? fput+0x70/0xf0 [ 204.027751][ T9531] do_syscall_64+0xcd/0xf80 [ 204.027776][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.027792][ T9531] RIP: 0033:0x7f79ae58e15c [ 204.027805][ T9531] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.027821][ T9531] RSP: 002b:00007f79af4c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.027836][ T9531] RAX: ffffffffffffffda RBX: 00007f79ae7e5fa0 RCX: 00007f79ae58e15c [ 204.027846][ T9531] RDX: 000000000000000f RSI: 00007f79af4c50a0 RDI: 0000000000000007 [ 204.027856][ T9531] RBP: 00007f79af4c5090 R08: 0000000000000000 R09: 0000000000000000 [ 204.027865][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.027875][ T9531] R13: 00007f79ae7e6038 R14: 00007f79ae7e5fa0 R15: 00007ffc7dffb388 [ 204.027897][ T9531] [ 204.056233][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.254194][ T9492] vhci_hcd: connection closed [ 204.255584][ T13] vhci_hcd vhci_hcd.0: stop threads [ 204.266531][ T974] usb 3-1: config 0 descriptor?? [ 204.272853][ T13] vhci_hcd vhci_hcd.0: release socket [ 204.275304][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 204.299897][ T5920] dw2102: command 0x0e transfer failed. [ 204.305558][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 204.323778][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 204.330665][ T5920] dw2102: command 0x0e transfer failed. [ 204.419879][ T9550] FAULT_INJECTION: forcing a failure. [ 204.419879][ T9550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.466754][ T9550] CPU: 0 UID: 0 PID: 9550 Comm: syz.1.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.466785][ T9550] Tainted: [L]=SOFTLOCKUP [ 204.466791][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.466801][ T9550] Call Trace: [ 204.466807][ T9550] [ 204.466814][ T9550] dump_stack_lvl+0x16c/0x1f0 [ 204.466846][ T9550] should_fail_ex+0x512/0x640 [ 204.466870][ T9550] _copy_to_user+0x32/0xd0 [ 204.466892][ T9550] simple_read_from_buffer+0xcb/0x170 [ 204.466918][ T9550] proc_fail_nth_read+0x197/0x240 [ 204.466939][ T9550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.466958][ T9550] ? rw_verify_area+0xcf/0x6c0 [ 204.466978][ T9550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.466996][ T9550] vfs_read+0x1e4/0xcf0 [ 204.467020][ T9550] ? __pfx___mutex_lock+0x10/0x10 [ 204.467051][ T9550] ? __pfx_vfs_read+0x10/0x10 [ 204.467080][ T9550] ? __fget_files+0x20e/0x3c0 [ 204.467113][ T9550] ksys_read+0x12a/0x250 [ 204.467134][ T9550] ? __pfx_ksys_read+0x10/0x10 [ 204.467164][ T9550] do_syscall_64+0xcd/0xf80 [ 204.467193][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.467211][ T9550] RIP: 0033:0x7f79ae58e15c [ 204.467226][ T9550] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.467244][ T9550] RSP: 002b:00007f79af4c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.467262][ T9550] RAX: ffffffffffffffda RBX: 00007f79ae7e5fa0 RCX: 00007f79ae58e15c [ 204.467274][ T9550] RDX: 000000000000000f RSI: 00007f79af4c50a0 RDI: 0000000000000005 [ 204.467285][ T9550] RBP: 00007f79af4c5090 R08: 0000000000000000 R09: 0000000000000000 [ 204.467295][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.467306][ T9550] R13: 00007f79ae7e6038 R14: 00007f79ae7e5fa0 R15: 00007ffc7dffb388 [ 204.467332][ T9550] [ 204.507236][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 204.676764][ T5920] dw2102: command 0x51 transfer failed. [ 204.682340][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 204.688096][ T5920] dw2102: i2c probe for address 0x68 failed. [ 204.697671][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 204.707065][ T5920] dw2102: i2c probe for address 0x69 failed. [ 204.713061][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 204.760651][ T974] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 204.777669][ T974] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 204.955603][ T974] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 204.962701][ T5920] dw2102: i2c probe for address 0x6a failed. [ 204.968930][ T5920] dw2102: probing for demodulator failed. Is the external power switched on? [ 204.978311][ T5920] dvb-usb: no frontend was attached by 'TeVii S662' [ 206.185906][ T5920] rc_core: IR keymap rc-tt-1500 not found [ 206.199937][ T5920] Registered IR keymap rc-empty [ 206.229083][ T5920] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 206.267714][ T5920] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input22 [ 206.346670][ T5920] dvb-usb: schedule remote query interval to 250 msecs. [ 206.380457][ T5920] dw2102: su3000_power_ctrl: 0, initialized 1 [ 206.394521][ T5920] dvb-usb: TeVii S662 successfully initialized and connected. [ 206.408684][ T974] usb 3-1: USB disconnect, device number 25 [ 206.463560][ T5867] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 206.496785][ T5920] usb 4-1: USB disconnect, device number 27 [ 206.832108][ T5920] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 206.895175][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.913554][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 206.927262][ T5867] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 206.939273][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.963628][ T974] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 206.965796][ T5867] usb 2-1: config 0 descriptor?? [ 206.992943][ T9560] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.003617][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 207.144965][ T974] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 207.153322][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.169478][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.185534][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.201619][ T974] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 207.213518][ T974] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 207.216808][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.221499][ T974] usb 1-1: Manufacturer: syz [ 207.251812][ T974] usb 1-1: config 0 descriptor?? [ 207.273103][ T974] igorplugusb 1-1:0.0: incorrect number of endpoints [ 207.281542][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.312368][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.323215][ T30] audit: type=1400 audit(2000000063.310:504): avc: denied { create } for pid=9554 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.343655][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.353189][ T30] audit: type=1400 audit(2000000063.340:505): avc: denied { write } for pid=9554 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 207.353452][ T9558] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.374305][ T9] usb 5-1: config 0 descriptor?? [ 207.425916][ T9642] netlink: 'syz.2.539': attribute type 25 has an invalid length. [ 207.835242][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.901243][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.011537][ T5867] elan 0003:04F3:0755.0005: unknown main item tag 0x2 [ 208.787559][ T5867] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 208.823853][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 208.842097][ T9] usb 5-1: USB disconnect, device number 33 [ 208.851587][ T5874] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 208.976989][ T9667] fido_id[9667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 209.160100][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 209.304005][ T9] usb 2-1: reset full-speed USB device number 22 using dummy_hcd [ 209.398226][ T30] audit: type=1400 audit(2000000065.390:506): avc: denied { read write } for pid=9689 comm="syz.4.542" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 209.425201][ T30] audit: type=1400 audit(2000000065.390:507): avc: denied { open } for pid=9689 comm="syz.4.542" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 210.043886][ T974] usb 1-1: USB disconnect, device number 22 [ 210.797899][ T5939] usb usb34-port1: attempt power cycle [ 210.897165][ T30] audit: type=1400 audit(2000000066.870:508): avc: denied { mount } for pid=9689 comm="syz.4.542" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 211.042908][ T30] audit: type=1400 audit(2000000066.870:509): avc: denied { ioctl } for pid=9689 comm="syz.4.542" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 211.053595][ T5844] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 211.070425][ T30] audit: type=1400 audit(2000000066.880:510): avc: denied { append } for pid=9689 comm="syz.4.542" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 211.508262][ T5939] usb usb34-port1: unable to enumerate USB device [ 211.657630][ T30] audit: type=1400 audit(2000000067.080:511): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 211.719484][ T9721] vlan2: entered promiscuous mode [ 211.732137][ T9721] bond0: entered promiscuous mode [ 211.742082][ T9721] bond_slave_0: entered promiscuous mode [ 211.773611][ T9721] bond_slave_1: entered promiscuous mode [ 211.950431][ T9721] bridge0: port 3(gretap0) entered blocking state [ 211.957422][ T9721] bridge0: port 3(gretap0) entered disabled state [ 211.967812][ T9721] gretap0: entered allmulticast mode [ 211.974304][ T5844] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 212.048028][ T9721] gretap0: entered promiscuous mode [ 212.064624][ T9721] bridge0: port 3(gretap0) entered blocking state [ 212.071566][ T9721] bridge0: port 3(gretap0) entered forwarding state [ 212.169203][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.188670][ T5844] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 212.200935][ T5844] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 212.209217][ T5844] usb 1-1: Manufacturer: syz [ 212.229477][ T5844] usb 1-1: config 0 descriptor?? [ 212.282960][ T9748] netlink: 20 bytes leftover after parsing attributes in process `syz.3.550'. [ 212.292709][ T5844] igorplugusb 1-1:0.0: incorrect number of endpoints [ 212.608861][ T5867] usb 2-1: USB disconnect, device number 22 [ 212.616953][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 212.770329][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.812733][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.844601][ T9767] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 213.989310][ T30] audit: type=1400 audit(2000000069.980:512): avc: denied { ioctl } for pid=9765 comm="syz.1.552" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 214.071812][ T30] audit: type=1400 audit(2000000069.980:513): avc: denied { set_context_mgr } for pid=9765 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 214.292476][ T30] audit: type=1400 audit(2000000070.280:514): avc: denied { connect } for pid=9780 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.345180][ T5844] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 215.002355][ T5939] usb 1-1: USB disconnect, device number 23 [ 215.232108][ T30] audit: type=1400 audit(2000000071.220:515): avc: denied { map } for pid=9802 comm="syz.1.558" path="socket:[20711]" dev="sockfs" ino=20711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 215.499257][ T5844] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 215.695455][ T5844] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.819433][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.887172][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 216.032035][ T5844] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 216.154046][ T5844] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 216.317459][ T5844] usb 5-1: Manufacturer: syz [ 216.347626][ T5844] usb 5-1: config 0 descriptor?? [ 216.361158][ T5844] igorplugusb 5-1:0.0: incorrect number of endpoints [ 216.858409][ T9783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.733714][ T9783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.725402][ T30] audit: type=1400 audit(2000000074.720:516): avc: denied { create } for pid=9836 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 218.813383][ T9837] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 218.930213][ T9837] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 218.936279][ T30] audit: type=1400 audit(2000000074.920:517): avc: denied { write } for pid=9836 comm="syz.2.564" path="socket:[19884]" dev="sockfs" ino=19884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.987652][ T9845] Bluetooth: MGMT ver 1.23 [ 219.206763][ T5939] usb 5-1: USB disconnect, device number 34 [ 219.358471][ T30] audit: type=1400 audit(2000000075.350:518): avc: denied { search } for pid=9847 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.429947][ T30] audit: type=1400 audit(2000000075.420:519): avc: denied { search } for pid=9847 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.497685][ T30] audit: type=1400 audit(2000000075.420:520): avc: denied { search } for pid=9847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.527648][ T9861] 9p: Bad value for 'wfdno' [ 219.567388][ T10] libceph: connect (1)[c::]:6789 error -101 [ 219.573461][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 219.611748][ T30] audit: type=1400 audit(2000000075.420:521): avc: denied { search } for pid=9847 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.635613][ T30] audit: type=1400 audit(2000000075.460:522): avc: denied { read open } for pid=9860 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.661996][ T30] audit: type=1400 audit(2000000075.460:523): avc: denied { getattr } for pid=9860 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.698110][ T9861] ceph: No mds server is up or the cluster is laggy [ 219.800220][ T9841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.824687][ T9841] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 220.486478][ T9841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 220.492377][ T9841] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 220.527679][ T9841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 220.568658][ T9841] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 220.588331][ T30] audit: type=1400 audit(2000000075.460:524): avc: denied { getattr } for pid=9860 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.295826][ T30] audit: type=1400 audit(2000000076.570:525): avc: denied { read } for pid=9875 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.317977][ T30] audit: type=1400 audit(2000000076.570:526): avc: denied { open } for pid=9875 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1874 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.691684][ T9923] 9p: Bad value for 'wfdno' [ 221.750107][ T5939] libceph: connect (1)[c::]:6789 error -101 [ 221.779870][ T5939] libceph: mon0 (1)[c::]:6789 connect error [ 221.781875][ T30] audit: type=1400 audit(2000000077.770:527): avc: denied { add_name } for pid=9847 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.887291][ T7984] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 221.909370][ T9923] ceph: No mds server is up or the cluster is laggy [ 222.086982][ T7984] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 222.102347][ T7984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.136338][ T7984] usb 2-1: config 0 descriptor?? [ 222.266117][ T974] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 222.303932][ T5939] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 222.636027][ T974] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 222.645168][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.654004][ T5939] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 222.672912][ T974] usb 3-1: config 0 descriptor?? [ 222.690631][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.731855][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.772616][ T5939] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 222.791989][ T5939] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 222.800391][ T5939] usb 5-1: Manufacturer: syz [ 222.820891][ T5939] usb 5-1: config 0 descriptor?? [ 222.826603][ T7984] usb 2-1: Cannot set MAC address [ 222.840447][ T5939] igorplugusb 5-1:0.0: incorrect number of endpoints [ 222.852872][ T7984] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 222.894723][ T7984] usb 2-1: USB disconnect, device number 23 [ 222.908000][ T974] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 222.924354][ T974] [drm:udl_init] *ERROR* Selecting channel failed [ 222.953687][ T974] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 223.056007][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.056424][ T974] [drm] Initialized udl on minor 2 [ 223.066144][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.194710][ T974] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 223.819048][ T974] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 223.850805][ T7984] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 223.877028][ T974] usb 3-1: USB disconnect, device number 26 [ 223.893897][ T7984] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 329.041459][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 329.048427][ C1] rcu: (detected by 1, t=10506 jiffies, g=22857, q=287 ncpus=2) [ 329.056130][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10506 (4294970080-4294959574), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 329.069489][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g22857 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 329.080666][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 329.090618][ C1] rcu: RCU grace-period kthread stack dump: [ 329.096486][ C1] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 329.109973][ C1] Call Trace: [ 329.113241][ C1] [ 329.116162][ C1] ? __schedule+0x10b9/0x6150 [ 329.120837][ C1] __schedule+0x1139/0x6150 [ 329.125353][ C1] ? __pfx___schedule+0x10/0x10 [ 329.130198][ C1] ? find_held_lock+0x2b/0x80 [ 329.134874][ C1] ? schedule+0x2d7/0x3a0 [ 329.139201][ C1] schedule+0xe7/0x3a0 [ 329.143264][ C1] schedule_timeout+0x123/0x290 [ 329.148108][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 329.153477][ C1] ? __pfx_process_timeout+0x10/0x10 [ 329.158756][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 329.164561][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 329.170014][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 329.174776][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 329.180054][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.185250][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 329.190179][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 329.195031][ C1] rcu_gp_kthread+0x26d/0x380 [ 329.199702][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 329.204890][ C1] ? rcu_is_watching+0x12/0xc0 [ 329.209643][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 329.214841][ C1] ? __kthread_parkme+0x19e/0x250 [ 329.219856][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 329.225049][ C1] kthread+0x3c5/0x780 [ 329.229112][ C1] ? __pfx_kthread+0x10/0x10 [ 329.233694][ C1] ? rcu_is_watching+0x12/0xc0 [ 329.238447][ C1] ? __pfx_kthread+0x10/0x10 [ 329.243032][ C1] ret_from_fork+0x983/0xb10 [ 329.247614][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 329.252720][ C1] ? __switch_to+0x7af/0x10d0 [ 329.257388][ C1] ? __pfx_kthread+0x10/0x10 [ 329.261970][ C1] ret_from_fork_asm+0x1a/0x30 [ 329.266744][ C1] [ 329.269752][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 329.276057][ C1] Sending NMI from CPU 1 to CPUs 0: [ 329.281250][ C0] NMI backtrace for cpu 0 [ 329.281264][ C0] CPU: 0 UID: 0 PID: 10013 Comm: syz.2.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.281284][ C0] Tainted: [L]=SOFTLOCKUP [ 329.281289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 329.281297][ C0] RIP: 0010:__lock_acquire+0xbf0/0x2890 [ 329.281319][ C0] Code: 0f 83 56 08 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 4a b8 95 48 83 78 40 00 0f 85 af fa ff ff 90 0f 0b 90 e9 a6 fa ff ff <31> d2 4c 89 f6 4c 89 e7 4c 89 5c 24 10 4c 89 4c 24 08 e8 a9 e7 ff [ 329.281333][ C0] RSP: 0018:ffffc90000007ce8 EFLAGS: 00000002 [ 329.281345][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000040 [ 329.281353][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff8880b8428458 [ 329.281362][ C0] RBP: 0000000000000000 R08: 0000000000080000 R09: 000000000000006f [ 329.281371][ C0] R10: 0000000000000001 R11: ffff88803445aff0 R12: ffff88803445a4c0 [ 329.281380][ C0] R13: 0000000000000002 R14: ffff88803445aff0 R15: 0000000000000001 [ 329.281389][ C0] FS: 0000555569792500(0000) GS:ffff888124909000(0000) knlGS:0000000000000000 [ 329.281405][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.281414][ C0] CR2: 000000110c39b2f4 CR3: 0000000076579000 CR4: 00000000003526f0 [ 329.281423][ C0] Call Trace: [ 329.281428][ C0] [ 329.281435][ C0] ? find_held_lock+0x2b/0x80 [ 329.281455][ C0] ? advance_sched+0x6ec/0xc80 [ 329.281470][ C0] lock_acquire+0x179/0x330 [ 329.281486][ C0] ? __hrtimer_run_queues+0x2bc/0xc40 [ 329.281509][ C0] _raw_spin_lock_irq+0x36/0x50 [ 329.281526][ C0] ? __hrtimer_run_queues+0x2bc/0xc40 [ 329.281545][ C0] __hrtimer_run_queues+0x2bc/0xc40 [ 329.281567][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 329.281587][ C0] ? read_tsc+0x9/0x20 [ 329.281609][ C0] hrtimer_interrupt+0x397/0x8e0 [ 329.281625][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 329.281643][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 329.281662][ C0] [ 329.281666][ C0] [ 329.281671][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.281685][ C0] RIP: 0010:finish_task_switch.isra.0+0x210/0xbd0 [ 329.281707][ C0] Code: ac 08 00 00 44 8b 05 b3 0c fd 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 ae f6 ff ff e8 39 eb 3b 00 fb 65 48 8b 1d 38 54 26 12 <48> 8d bb 48 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 329.281719][ C0] RSP: 0018:ffffc9000425f958 EFLAGS: 00000206 [ 329.281729][ C0] RAX: 000000000000067b RBX: ffff88803445a4c0 RCX: ffffffff81c7061f [ 329.281738][ C0] RDX: 0000000000000000 RSI: ffffffff8dac204b RDI: ffffffff8bf24280 [ 329.281746][ C0] RBP: ffffc9000425f9a0 R08: 0000000000000001 R09: 0000000000000001 [ 329.281755][ C0] R10: ffffffff9087f7d7 R11: ffff88803445aff0 R12: ffff8880b843ac80 [ 329.281763][ C0] R13: ffff8880356ac980 R14: ffff8880356ac980 R15: ffff8880b843bab0 [ 329.281775][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 329.281794][ C0] ? finish_task_switch.isra.0+0x207/0xbd0 [ 329.281814][ C0] ? __switch_to+0x7af/0x10d0 [ 329.281830][ C0] ? __schedule+0x10b9/0x6150 [ 329.281848][ C0] __schedule+0x1141/0x6150 [ 329.281864][ C0] ? css_rstat_updated+0x1c2/0x510 [ 329.281886][ C0] ? __pfx___schedule+0x10/0x10 [ 329.281903][ C0] ? __resched_curr+0x316/0x3b0 [ 329.281922][ C0] ? __pfx___resched_curr+0x10/0x10 [ 329.281940][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 329.281953][ C0] preempt_schedule_common+0x44/0xc0 [ 329.281972][ C0] preempt_schedule_thunk+0x16/0x30 [ 329.281986][ C0] try_to_wake_up+0xa67/0x1860 [ 329.282007][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 329.282026][ C0] ? find_held_lock+0x2b/0x80 [ 329.282046][ C0] wake_up_q+0xa1/0x130 [ 329.282065][ C0] futex_wake+0x460/0x530 [ 329.282078][ C0] ? __pfx_futex_wake+0x10/0x10 [ 329.282091][ C0] ? css_rstat_updated+0x1c2/0x510 [ 329.282108][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 329.282126][ C0] do_futex+0x1e3/0x350 [ 329.282145][ C0] ? __pfx_do_futex+0x10/0x10 [ 329.282162][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 329.282179][ C0] ? count_memcg_events+0x122/0x290 [ 329.282197][ C0] __x64_sys_futex+0x1e0/0x4c0 [ 329.282215][ C0] ? exc_page_fault+0x64/0xc0 [ 329.282233][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 329.282255][ C0] do_syscall_64+0xcd/0xf80 [ 329.282274][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.282287][ C0] RIP: 0033:0x7ff99338f749 [ 329.282299][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.282316][ C0] RSP: 002b:00007fff061d7cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 329.282329][ C0] RAX: ffffffffffffffda RBX: 00007ff9935e5fa8 RCX: 00007ff99338f749 [ 329.282338][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff9935e5fa8 [ 329.282346][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 00000015061d7faf [ 329.282355][ C0] R10: 00007ff9935e5fa0 R11: 0000000000000246 R12: 00007ff9935e5fac [ 329.282363][ C0] R13: 00007ff9935e5fa0 R14: 00000000000000e8 R15: 0000000000000002 [ 329.282377][ C0]