last executing test programs: 4m32.234361758s ago: executing program 1 (id=3563): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000180)="6aeb2e944fed358609596fe6d41d658a1a7e8c3950679fbcdf0a593c620964e0a2e9a2d8a8627fb6e0bbb009cf7de8a46475cca883b195d48dc7d395ec22cc844aa193b7d8d965eff8143d8282eaab0766b0cd2cfcf070fd5307f4827e1545c58d4d56191dc2838ba927d3d5f77c819e4f8118b367adb5cb75019b09d01ddf6bdce73a854ccd3f1411bd8669824de026c24933ed2eb46283c24c1f088f1b4106e0e78bfd14b14bcf36918c70f21da2871f3d86ab7a", 0xb5, 0xd}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a000100"], 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x20044804) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x1) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r3, 0x2000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x168) socket$kcm(0x2b, 0x5, 0x0) 4m31.714746611s ago: executing program 2 (id=3566): r0 = io_uring_setup(0x136a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) pread64(r1, &(0x7f00000000c0)=""/145, 0x91, 0x151) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000000000f195", @ANYRES32=r1, @ANYRES32=r2, @ANYRES8=r0, @ANYBLOB="bad492cd15f9cb63fe9d797511c26e56d92d961c21a57ea63e140b5ab3bbb71e52940d1485c81c5704dcb5c38ad87117201942474137d6ad1c58b28d81dfb4d96dcfa8e8ce9d47a710d8369b5e5e02bb4d001dd45a2886223ced39f054b77cb18b6662b59fae64ba503a12b9343b374fa8066477cf9763554c6ae004e77adef60c7115b959e070f5a54099c43cb468cefda28b5871515588dbc8eed8e95cb693665022b5aff6904e88457045d10b805647d6464a0deed1239001856010e314466f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x15) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) msgget$private(0x0, 0x470) socket$kcm(0x29, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 4m30.198032089s ago: executing program 3 (id=3572): r0 = io_uring_setup(0x136a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f00000000c0)=""/145, 0x91, 0x151) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000000000f195", @ANYRES32=r1, @ANYRES32, @ANYRES8=r0, @ANYBLOB="bad492cd15f9cb63fe9d797511c26e56d92d961c21a57ea63e140b5ab3bbb71e52940d1485c81c5704dcb5c38ad87117201942474137d6ad1c58b28d81dfb4d96dcfa8e8ce9d47a710d8369b5e5e02bb4d001dd45a2886223ced39f054b77cb18b6662b59fae64ba503a12b9343b374fa8066477cf9763554c6ae004e77adef60c7115b959e070f5a54099c43cb468cefda28b5871515588dbc8eed8e95cb693665022b5aff6904e88457045d10b805647d6464a0deed1239001856010e314466f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x15) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) msgget$private(0x0, 0x470) socket$kcm(0x29, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 4m29.826530327s ago: executing program 0 (id=3573): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) r4 = syz_clone3(&(0x7f00000002c0)={0x1000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1ff, 0x40, 0x284c, 0xffffffffffffffc0, 0x4, r4}) process_vm_writev(r5, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/16, 0x10}, {&(0x7f0000001940)=""/23, 0x17}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/33, 0x21}, {&(0x7f0000001b40)=""/174, 0xae}], 0x6, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 4m29.78067689s ago: executing program 2 (id=3575): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0x0, 0x1}, {0x0, 0xff}, 0xfd}], 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 4m29.288924964s ago: executing program 2 (id=3576): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x40, 0x9, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4, 0xe22, 0x3, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "7332e94143f7f31441bdcd491414ae38d7cd90b3d173b19dcef4263363fc4aa146b6580bd8"}}}}}}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x41b) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0xc0a85320, &(0x7f0000000900)={{0x80}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0xb1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0xfb, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf8, 0x7, 0x40}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xd, 0x4b, 0x46, 0x10, 0x1}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x867}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000640)={0x14, &(0x7f00000003c0)={0x20, 0xc, 0x43, {0x43, 0x6, "57e7b06bd5a63c216304870b81b9c5425142024ae00caa53952fcfbf725dfcf1a7d985b4c5fb6d550d1ed124ffaabd045297ab3c6b80cc3f1b5cdfd206e76e74bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "0c08800769a1d3f1a84899320056919ee1a47e6ab9fc3b4baf57b485d6458045a7c5505789806f8d74e54a4c9f0b3b585f6cff0e1774670f342c189968747e96aaaa6b5bab900824d0802bce5f"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x40, 0x3, 0xa2, "66dee27b82355074793527741253af8d1d734cd503010cea8524f9c2f18bc22e6bb628824bc51f113c57cc98858751dfb66ae2ee5d3af4275d1a5a46f3976ccb4d65e5b9c1b607810780699633809e81e29dfc81be13f191e92eb564880e9fd303e41889b541412ea40e7d20d5cb2dd4839041a285a2bfa5301db7afc8eaacba2d391b5cccd605806f9fbcc9130a3c2a1329726226a02bec15fc59d80a3cacdcc3af"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x0, 0x53, {0x51, "a611aa53e632f7073adda0377c7c44bbb8b86c08dae0287e72e38d4d4cadbfcc2d1584f2979f8ef1902dd141985ee9c59cdb5c330e7da7929153952370b55a3fd64a501caeee07ffc635f29ab2407c012d"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x38}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x3}}) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 4m28.831945862s ago: executing program 0 (id=3578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r3, 0x0}]) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x12, @mcast2}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000300)) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="85b632a7a37adee4b14e931c21865b46fc33702952b3a91def2830fb4418a85d76fb3fe6f0007ceac5bd0a83993330ac561b10420eb1951d52e7ce8d56336ed5afeb953043a82a5cb775c66e966d1523acc45a", 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="02c5be3c8c3036", 0x7}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="c0b414f94d0d0a1d840c9a8c", 0xc}], 0x1}}], 0x4, 0x400c404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000008510000003000000180000000008000000000000000000019500000000000000180100002020782500000000002020207b1af80700000000bfa100000000000007010000f8ffffffb7660900c1dda0e9d368e47e99e943c059969f8683b57eec14ed3940fa5f1fa372126d8fecae0afdffffffeffe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8905, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000680)={0x10000, 0x4, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xb, r3}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000140)={0x101, {"10cdf201eea7908b3405672f10b9d780", "8daad6281d09e29ad7960523c6bc6f2a", "ea199d60f1233323ff4257f5e9c57ea6"}, 0x2, 0x5}) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc0000000206010100000000000000000100001f14000300686173683a69702c706f72742c6970006400078008000b40000000ff08000640000035bb1800018014000240ff0200000000000000000000000000010800124000000000080012ae1d37e4b8d98bae400000000308001709000000091800018014000240fe8000000000000000000000000000aa080012400000e200e79f0300686173683a6e6574000000000500040003000000050005000a0000001000030068617368"], 0xbc}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) landlock_restrict_self(r7, 0xe) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01cb0f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x63}], 0x1, 0x14, 0x0, 0x0) 4m28.830469507s ago: executing program 3 (id=3579): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000192c0)="d99b13b3d8e7617e481ddba0fe91a59755756362e64a8478c0317a693966715101372f7558465299b3e9b1323b00d7a69419c7390b19603b74ece86e48065cc9946724cb4807a89d9a406a6d1de6be8824bb3070ab5f25b53d2bafbfc82186111c033d317322ce647e22fca3022fd4c39e9915d4cd104d39e4e8a7572462346de862f6ecaa951cc819391ce1cdd56d8cefc5977cbe9a7ea03d9daa5a95000393bddcfaa85a4d7a4d6a959ca0a39197d36783c0657e89282f802024e43fd755892b74cb7baad53f14b145d0044ddee07fbec8ddcddbe83aa907", 0xd9) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={r5, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000019180)={r5, 0x74, &(0x7f00000191c0)=[@in6={0xa, 0x4e21, 0xda, @mcast2, 0x400}, @in6={0xa, 0x4e23, 0x1, @loopback, 0x8}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0xd, @remote, 0x9}, @in={0x2, 0x4e20, @private=0xa010101}]}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r6, 0x0, 0x0, &(0x7f0000000000), 0x4) 4m28.070828792s ago: executing program 1 (id=3580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x26, 0x1, @tid=r4}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000080)={{r8, r9+10000000}, {r6, r7+60000000}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) r10 = gettid() tkill(r10, 0x16) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000500)={0xb, {{0x2, 0x4e23, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f000001e800)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4b}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 4m28.027783501s ago: executing program 0 (id=3581): openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x20010, r0, 0xec776000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xffffff7e, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) dup2(r2, r3) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101001, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4m27.886353056s ago: executing program 3 (id=3582): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x480101, 0x52) sendmsg$sock(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="7de84525c77880f69d97d212b9c9b02ceafaea3e5f5126a422336d773bf3d930d4d01b29f2f7a847c6e8ec52", 0x2c}], 0x1}, 0x4000000) r4 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}}, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000035f40)={0xa000006, 0x0, 0x0, 0x83, 0x3fc}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getchain={0x74, 0x66, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0x7}, {0xf, 0x10}, {0x3}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x200200}, {0x8, 0xb, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 4m26.692609707s ago: executing program 4 (id=3585): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x2, {0x0, 0x0, 0x1}, {0x0, 0xff}, 0xfd}], 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4000000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x1d, 0x5, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c0000002fbd7000000000000300060033000000020010000000000000000000000000000200010000000000000005fc010000e0030005000000000002000000ac1414aa000000000000000002000800080000003400000000"], 0x60}, 0x1, 0x7}, 0x0) 4m26.672556248s ago: executing program 1 (id=3586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) 4m26.467726104s ago: executing program 3 (id=3587): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0xb4b, @dev={0xfe, 0x80, '\x00', 0x16}, 0xad2f}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000b40)="79c8d2638dd1e65bafd97e2b95f16dc1ac562f3fef170d90d25b757ea3428ba9fabaaa0d03757cd8e2915635dd83259c5b4da6f5d739300ed97bea948accb0ebcc91feea4a7812d002f82988f44c23d422c83b0041d85acd2b92c0eb43f3717caf37119f3d28a4d24aa427e6345f947b2a8ea1a8894d8427ed3cc07c46ac67e5ca2d3406e40333bf0222a44f4a90a68348323b0a18a65f8e552235e601f1248c37b4d40af4c73cd04296c192de4945ac89a491f512ad510b2de6d142b06c44373e31e3a73c4e4fd700de060b89f179f40d4badeac070ca4789b3bcb7b7ad80a758f3436e8ac8ffbfdb93818e73aed20ccf94ea690e81", &(0x7f00000014c0)=@udp6, 0x2}, 0x20) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000001020500000000f0ff0000000a0000003c0001802c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001"], 0x50}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) fanotify_init(0x4c299c9a5c176ac3, 0x2) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000f40)=ANY=[@ANYBLOB="401d02"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000000000e01000000020000000000000000000003000000000300000004000000070000000000005f305f00f1712f3d1a416bdba436a8182c88b614ce12420b6c77a3a1761d41d1e970f176d7459fb595c134da64bcc196a3ee6b4efdfca990c52c8ba94c16b04fea7971c72ce2307e4d6789c785847a98cb5ddda7e30289cd83840247c9a54a4263"], &(0x7f0000000480)=""/29, 0x47, 0x1d, 0x0, 0x5}, 0x28) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000700)="a6", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r11, 0xffffffffffffffff, 0xee01) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, 0x0) sendmmsg(r10, &(0x7f0000002940)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x9, 0xff, 0x8, 0x7, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000400)="fc9f76c5b7b5e850f8f19a98dfec7e66db8b947e32243d03a6b2033eb456796e8070fed2b9e828a59a88a9b56c33ecdbe755f4c06232436a99806c8458d20ac4e114c24c2906b79ad63ba89447eb525d557242a7fc5fa10b6837d2796ffabe1032afe215b55d8e7d6599575becd2b50ec2fb84616577a9c09fb84897a24a0b15ca77c04453cbb6d2cb3338b0206be4182f74bef2c359bd61783745f10902c7416b0af23c27e2d18aa4af51bdd941ac6cd231914aa225673cbdfe", 0xba}, {&(0x7f00000005c0)="8e57da922d551bb2f44eebe83d0d44462ffcda8ff70cb53f0ddf07c38b79b018e13ad09cd939f2c5e68c2c95a5d8baf20085634e712ec88402fc1b33bfce1443f7149889d45529318390cf306de5817ed5d6be31c2e943ae038629ba14d9c0ee610cc42081b53cbcfc978ff544f3ac518208838b35de6b057672d75e09cf2f3cb2fbc422fb8a06ce42271d4fa2536462d432b8e7b219474be7890475f10a9c7c98ba3bbbe93ff15cb5d5e5a0acc836114a01f3bebc1e5051e9911b82db4de5dbd0", 0xc1}, {&(0x7f00000006c0)="146502568d74acb0161d14d5d2caea31ffb659a4380f8fc880fe45e16b7ad10bfb2f81f9b538afd9b4bcc0d52fef0b215e97a452da878348b4f333e65247ec7b0590930d85aa6e4284c3958418af942a2b0749a9180bc47ccc508bc84d7312f8d77beb3ac495767febce3bcbf79a90c1abf60016d98a4dc080e08078f13d09aa74f8f01cb935fef5d794abde9c8b08ec3a1f08019071f41d8ad1d471aa81d0bad038affb63ebd722acae719fdbdf72a0ac15346fe03a9b36a74832", 0xbb}, {&(0x7f0000000880)="7704fc4ddd3dbe5f9b7df99278e5a8e5e8a009517fc731756b87e823c0e8bba63d7dc9c7dc9374ee419f4c2db331c4830d98115b8298581476f108e49baf8144bf03f16b006607462099e874a540c8a3d3937e0fc664bc041d6d4fcf65ab778315f547c92d1ae98bda459a4b327d928ce6b5242aa440ec79916d3a2df405c739f1d363c9a2968e016955d359a385a42c8999e7d8c2245828d0d57f42c208e52bbca0c2955c04163990890cf23d5c6a60251ac42a4cc207fcc20f4471ce5b2796160b99dbd78724219564ab5eed5ee5676919a04d0f37988c89001062563935771d364155d1fd507c59312acf18046e8411c7c78678bcda6aaf639b", 0xfb}], 0x4}}, {{&(0x7f0000000a00)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a80)="5a4c0dd570f9416fbcf63382025701a6d86c6aa195bf79d8ff670c75df1a9ea855780d1c143d89a48e4e4e177e2fe809bbe4b5351eb804cff4e15c7077d8dea5296818b0573b8dc6cf1d84de098cd953c0c1b3313add306bc70f8f1415a3ed01cc5036c7ca38cd48cff416875915d2193e35713f3e06baf7adf1b31b8b28aa8445a2b83573a329e89efeea2f4f9805d8e6f293", 0x93}, {&(0x7f0000002c00)="d05dbc561c3a9514a501108751d4a9d73b6c204a462302fab6d577cc0446fe4a33b874a33d2db10fa76a4a57de4540a5d2e26eaa335b95e206cf0dc4a6e66ee9caa1493d8bffe90915f82682b5976577807de842b3c03c5251ea9a31d728beed6a6d2742d9b5b4a549ce50218fda2c6fefb4bee123e08c1538cf6beff7ec72fb022da9dbfe3513734b1e30aa41dc4b178f33a9371608d9caf2c15503eaacf7f4af2950a483bdf8b9cb1eb0041716dc192f08cc42bf9a2ed7735c9ebbe1fd593d232ecf209d4c0f7ff7603ce3819cece01aad34", 0xd3}, {&(0x7f0000000c40)="8903e48d4df903678c4e45665a2b76aedf6e8cc32222d120c082c6bee919f21922d2", 0x22}, {&(0x7f0000000c80)="b948f9fd1776bd66adc54eeb54b67228b5583e8f18e9c6a48583362321efeb9c5bb9cf6635bef0904bee860f7b8c2310a4c0090e373b061b3e45d4bbb279fd3da4fa64ea6c2f6cca476d58b4bdb3dc4e5087afcc99a66a63de9a8f1523999e0519bf1201c59d9b42138f75c738", 0x6d}, {&(0x7f0000000d00)="0c00325054037606021961d9d63bad79af0eedc093d809550bf05a79189e39e0cd453122e919386effacfc868f", 0x2d}, {&(0x7f0000000d40)="c2454ad02857fb2fafd3e2447a555cb3c93d86a370fb02ef7f9eb906890c2d123f49fde763183b90149ed4086bcea8ac9151f79aace02403a29fa31025d0cda785165b65b91a154105ca3d27ab3a055a1618a415f2d4b4a843f5dec87847a8d858efd9c552bba045896af2017772ac85699f348bdd46daeb8bcedbc4a87634dc", 0x80}, {&(0x7f0000000e40)="1bec8a6276f9ff95059b88f400fe9727bdcb4e119aaef0ec25332e148734dc882af110973ddca4344302d4da2dbdec6cb9ec9b21fa5e71a0b40dd8d6bda098034cf9c856bb2338b613ef2e557a0e83d12deb9962512b49de9530e8013def070d0d543e437938663bafa9e6284bbfef350909ce1efd5fe0b842655d162e8d83c3dc58b9ad6678379b4dd225e45ab579d473366db840c157229cbe9e6fb53e3aafd24d9ad7b95c55b2b628a5b8ed2ba2a581d68618", 0xb4}], 0x7, &(0x7f0000000f80)=[{0x88, 0x29, 0x3, "7ed06211272cbf4f2720f7336c639ce745b63c5093a68105e026549ea72dc208d40f460dfca11e30ee3c6135b88b28b75f19eb7dea7e7f29ffbcdfbbc2ff418f20e11a43f15b37fc8537804ec257ee41108914b99e3a8d0dbf1098ed5a6691242a24b8253a945d2187672cdc2e68179a56"}, {0x100, 0x114, 0xfffffffd, "66323655681fbe46e06c77553c54cda25643959201ff2c23108645b4072d8eb07d4f4132f9d6204239b5143a8b09ec1c6d220aaf12fdb4c1ad3405c2bfdf7b5e8938ddb00917daab73a3f38ce0ccd43a2c5183fa458c944a48f8a4cacb57dfc4c5224f80fc52347a2e704d90461a7b6ad492265e8c56db7e1bb7552ae187246262c5aba607fedf27b91e609c37ba3cb7b71d38d081de904e734fe19328642f881c351369db1cab28a2c7fb9f15ed4c2964a284f711311551b5a81e75036dc4f310906af605ddd2d4da8b2a1964a1bb1d4525186e5a402dd0dd4861e5fb28fad51f184b195abb943633c6c28f74"}, {0xc0, 0x6, 0x4, "ff4c04b4a67f8b3e3f76daa97a9370f76aa2fe454159b7eea777c8a93055fe255aced56c75ec641198f167dd4482ee246051250d7a908f5780c1158d1dd72d19231613e3d127f7c2d9b88f1c6821b3b1c29984f1a65bc32c7526dff400e9c02acad9c81e010fb1fac0d48ea2ae442322c533493694d2d9643302089b87e63801dd6157bc0d7f7b248539f38f853e449841db31e5e3aea4647c1b102b23dda24cb24c9e7816150b2d7325705dfa27"}, {0x48, 0x0, 0x4, "7c22f3ef6fbf8dd3d3cd5ab52641ba6f23af7ca46fe08ed45bfb59200665daf343c3cb0b9afa68ef790099db523a5bd42780e10d5d2497"}, {0xe8, 0x84, 0x40000, "bb9c3c125de275b69e997dcc2eb4635f47013fb869ca5baeb4e8c5dafbcb78da05b0fe6609b9ba6ab7c4945ce32c8684516cff828b07683a135ff4ae4695e1bd6c86e8d8afe35b553998d3649d1f7cd4f755cfa9bc07220b6d04085328f47816b092a75d355c20a7060b37501d5b56dd5450036921a4ae7046324b79fe3ec1608ae283443a955d077a3a93759247166b9891a743a2a283f3054575e1f4a5c22903eeb5f8c0353bb84dbf55402a58e2ea465ac4a86aa286bbefc24891add178ac9dfc9f7174ecc1f30802431aeafb41bd2543b5d6"}, {0xa0, 0x119, 0x10009, "893c56086f721299d98fa8976135120c76128c45b9b18e3bb4e60411583276a63ad8e3d7164bfc3cd4c96b58d3f10b9e18ff1f3ec0096f138b0854419c41312228525891a9ae6fa82d828f73eff35f6c33f74ad517d464f9e83a950cf641de55805a70844b9ce6c3fd704725b73eba1bc56e562d6b3479050a54859c880b1dabba146e2f792350781a750f03"}], 0x418}}, {{&(0x7f00000013c0)=@x25, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)="66875068ef9e29cea9f9aaf56583278873423a0addaa1ae96757afc6a981220c7e257faadce0a0053bf85a24c2d1695aff276a7765425e36455c1a745efde722f83432a6f3065866349250b5e68bdc4710784b1e39ea37fca2b4d833b604d3e71678004fde", 0x65}], 0x1, &(0x7f0000001580)=ANY=[@ANYRESHEX=r8], 0x13b0}}], 0x3, 0x0) write$FUSE_INIT(r10, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x14000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r12, 0x0, 0x0, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @cb_func, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x0, 0x0, 0xfffffffe}]}, 0x0, 0x7, 0xf1, &(0x7f0000000200)=""/241, 0x40f00, 0x8, '\x00', r7, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x9, &(0x7f0000000580)=[r12, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x4, 0x5, 0x4}, {0x3, 0x3, 0x6, 0x5}, {0x1, 0x3, 0x0, 0x1d}, {0x2, 0x4, 0x5, 0x8}, {0x1, 0x2, 0x6, 0x6}, {0x3, 0x4, 0x10, 0xe}, {0x5, 0x3, 0x5, 0x4}, {0x2, 0x3, 0x3, 0x6}, {0x0, 0x3, 0x8, 0x4}], 0x10, 0xf28}, 0x94) 4m26.375852943s ago: executing program 4 (id=3588): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) r4 = syz_clone3(&(0x7f00000002c0)={0x1000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1ff, 0x40, 0x284c, 0xffffffffffffffc0, 0x4, r4}) process_vm_writev(r5, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/16, 0x10}, {&(0x7f0000001940)=""/23, 0x17}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/33, 0x21}, {&(0x7f0000001b40)=""/174, 0xae}], 0x6, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 4m26.369124534s ago: executing program 1 (id=3589): r0 = io_uring_setup(0x136a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f00000000c0)=""/145, 0x91, 0x151) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000000000f195", @ANYRES32=r1, @ANYRES32, @ANYRES8=r0, @ANYBLOB="bad492cd15f9cb63fe9d797511c26e56d92d961c21a57ea63e140b5ab3bbb71e52940d1485c81c5704dcb5c38ad87117201942474137d6ad1c58b28d81dfb4d96dcfa8e8ce9d47a710d8369b5e5e02bb4d001dd45a2886223ced39f054b77cb18b6662b59fae64ba503a12b9343b374fa8066477cf9763554c6ae004e77adef60c7115b959e070f5a54099c43cb468cefda28b5871515588dbc8eed8e95cb693665022b5aff6904e88457045d10b805647d6464a0deed1239001856010e314466f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x15) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) msgget$private(0x0, 0x470) socket$kcm(0x29, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 4m25.858016626s ago: executing program 4 (id=3590): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x1) copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0xfffffffffffffffd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) rt_sigsuspend(&(0x7f0000000180)={[0x7]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a1", 0x10}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x8084) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4000000000005, 0x8, 0x0) 4m25.718134503s ago: executing program 1 (id=3591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r3, 0x0}]) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x12, @mcast2}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000300)) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="85b632a7a37adee4b14e931c21865b46fc33702952b3a91def2830fb4418a85d76fb3fe6f0007ceac5bd0a83993330ac561b10420eb1951d52e7ce8d56336ed5afeb953043a82a5cb775c66e966d1523acc45a", 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="02c5be3c8c3036", 0x7}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="c0b414f94d0d0a1d840c9a8c", 0xc}], 0x1}}], 0x4, 0x400c404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000008510000003000000180000000008000000000000000000019500000000000000180100002020782500000000002020207b1af80700000000bfa100000000000007010000f8ffffffb7660900c1dda0e9d368e47e99e943c059969f8683b57eec14ed3940fa5f1fa372126d8fecae0afdffffffeffe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8905, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000680)={0x10000, 0x4, 0xb000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0xb, r3}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000140)={0x101, {"10cdf201eea7908b3405672f10b9d780", "8daad6281d09e29ad7960523c6bc6f2a", "ea199d60f1233323ff4257f5e9c57ea6"}, 0x2, 0x5}) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc0000000206010100000000000000000100001f14000300686173683a69702c706f72742c6970006400078008000b40000000ff08000640000035bb1800018014000240ff0200000000000000000000000000010800124000000000080012ae1d37e4b8d98bae400000000308001709000000091800018014000240fe8000000000000000000000000000aa080012400000e200e79f0300686173683a6e6574000000000500040003000000050005000a0000001000030068617368"], 0xbc}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) landlock_restrict_self(r7, 0xe) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b8000001000f01cb0f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x63}], 0x1, 0x14, 0x0, 0x0) 4m25.671832918s ago: executing program 2 (id=3592): socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, 'team0\x00'}}, 0x1e) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r4, 0x7aa, &(0x7f0000000080)={{@hyper, 0x2}, 0x100, 0x4}) 4m25.268820687s ago: executing program 1 (id=3593): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) syz_clone3(&(0x7f00000002c0)={0x1000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) process_vm_writev(0x0, &(0x7f0000001880)=[{&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/21, 0x15}, {&(0x7f0000001540)=""/72, 0x48}, {&(0x7f00000015c0)=""/198, 0xc6}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/220, 0xdc}], 0x7, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/16, 0x10}, {&(0x7f0000001940)=""/23, 0x17}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/33, 0x21}, {&(0x7f0000001b40)=""/174, 0xae}], 0x6, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 4m24.788257969s ago: executing program 4 (id=3594): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x480101, 0x52) sendmsg$sock(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="7de84525c77880f69d97d212b9c9b02ceafaea3e5f5126a422336d773bf3d930d4d01b29f2f7a847c6e8ec52", 0x2c}], 0x1}, 0x4000000) r4 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newchain={0x24, 0x64, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x3, 0xc}, {0xffe0, 0xe}}}, 0x24}}, 0x26000841) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}}, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000035f40)={0xa000006, 0x0, 0x0, 0x83, 0x3fc}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getchain={0x74, 0x66, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0x7}, {0xf, 0x10}, {0x3}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x200200}, {0x8, 0xb, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 4m24.785704803s ago: executing program 0 (id=3595): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x480101, 0x52) sendmsg$sock(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="7de84525c77880f69d97d212b9c9b02ceafaea3e5f5126a422336d773bf3d930d4d01b29f2f7a847c6e8ec52", 0x2c}], 0x1}, 0x4000000) r4 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}}, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000035f40)={0xa000006, 0x0, 0x0, 0x83, 0x3fc}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getchain={0x74, 0x66, 0x2, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0x7}, {0xf, 0x10}, {0x3}}, [{0x8, 0xb, 0xa}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x200200}, {0x8, 0xb, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 4m22.709726864s ago: executing program 3 (id=3596): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0xfffffffd, 0x1000, 0xfffffffd, 0x7ff, 0xf84, 0x3}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000340)=0x1, 0x4) syz_pidfd_open(r4, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000000300)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f00000000c0)) socket(0x10, 0x3, 0x0) 4m22.198572487s ago: executing program 2 (id=3597): syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x20000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) eventfd2(0x0, 0x80001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3e, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xe8}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[]) sendmmsg$unix(r0, &(0x7f000000a440)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40001}}], 0x1, 0x40048c0) r4 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r5 = dup(r4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r8, &(0x7f00000193c0)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000019580)={0x10000, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000019540)={@cgroup=r7, r7, 0x8, 0x202c, 0x0, @void, @void, @value=r9}, 0x20) 4m22.097750845s ago: executing program 4 (id=3598): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'macvlan1\x00', 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYBLOB="00080d0080ac9143920522b860"], 0x15) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x4, &(0x7f0000000340)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r6, 0xfff}, 0x8) syz_open_dev$video4linux(&(0x7f0000000040), 0x1000, 0x88480) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x171f}, 0x8) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000e, 0x11, r7, 0x180000000) 4m22.01810987s ago: executing program 0 (id=3599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) 4m21.688902639s ago: executing program 0 (id=3600): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x8, 0x400000) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4m21.524275261s ago: executing program 4 (id=3601): r0 = io_uring_setup(0x136a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f00000000c0)=""/145, 0x91, 0x151) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000000000f195", @ANYRES32=r1, @ANYRES32, @ANYRES8=r0, @ANYBLOB="bad492cd15f9cb63fe9d797511c26e56d92d961c21a57ea63e140b5ab3bbb71e52940d1485c81c5704dcb5c38ad87117201942474137d6ad1c58b28d81dfb4d96dcfa8e8ce9d47a710d8369b5e5e02bb4d001dd45a2886223ced39f054b77cb18b6662b59fae64ba503a12b9343b374fa8066477cf9763554c6ae004e77adef60c7115b959e070f5a54099c43cb468cefda28b5871515588dbc8eed8e95cb693665022b5aff6904e88457045d10b805647d6464a0deed1239001856010e314466f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x15) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) msgget$private(0x0, 0x470) socket$kcm(0x29, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 4m21.100662084s ago: executing program 3 (id=3602): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x40, 0x9, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4, 0xe22, 0x3, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "7332e94143f7f31441bdcd491414ae38d7cd90b3d173b19dcef4263363fc4aa146b6580bd8"}}}}}}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x41b) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0xc0a85320, &(0x7f0000000900)={{0x80}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0xb1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0xfb, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf8, 0x7, 0x40}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xd, 0x4b, 0x46, 0x10, 0x1}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x867}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000640)={0x14, &(0x7f00000003c0)={0x20, 0xc, 0x43, {0x43, 0x6, "57e7b06bd5a63c216304870b81b9c5425142024ae00caa53952fcfbf725dfcf1a7d985b4c5fb6d550d1ed124ffaabd045297ab3c6b80cc3f1b5cdfd206e76e74bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "0c08800769a1d3f1a84899320056919ee1a47e6ab9fc3b4baf57b485d6458045a7c5505789806f8d74e54a4c9f0b3b585f6cff0e1774670f342c189968747e96aaaa6b5bab900824d0802bce5f"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x40, 0x3, 0xa2, "66dee27b82355074793527741253af8d1d734cd503010cea8524f9c2f18bc22e6bb628824bc51f113c57cc98858751dfb66ae2ee5d3af4275d1a5a46f3976ccb4d65e5b9c1b607810780699633809e81e29dfc81be13f191e92eb564880e9fd303e41889b541412ea40e7d20d5cb2dd4839041a285a2bfa5301db7afc8eaacba2d391b5cccd605806f9fbcc9130a3c2a1329726226a02bec15fc59d80a3cacdcc3af"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x0, 0x53, {0x51, "a611aa53e632f7073adda0377c7c44bbb8b86c08dae0287e72e38d4d4cadbfcc2d1584f2979f8ef1902dd141985ee9c59cdb5c330e7da7929153952370b55a3fd64a501caeee07ffc635f29ab2407c012d"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x38}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x3}}) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 3m54.44623455s ago: executing program 32 (id=3593): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) syz_clone3(&(0x7f00000002c0)={0x1000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) process_vm_writev(0x0, &(0x7f0000001880)=[{&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/21, 0x15}, {&(0x7f0000001540)=""/72, 0x48}, {&(0x7f00000015c0)=""/198, 0xc6}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/220, 0xdc}], 0x7, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/16, 0x10}, {&(0x7f0000001940)=""/23, 0x17}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000001b00)=""/33, 0x21}, {&(0x7f0000001b40)=""/174, 0xae}], 0x6, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 2m48.716075804s ago: executing program 2 (id=3604): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x40, 0x9, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4, 0xe22, 0x3, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "7332e94143f7f31441bdcd491414ae38d7cd90b3d173b19dcef4263363fc4aa146b6580bd8"}}}}}}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000540)=0x401) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x41b) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0xc0a85320, &(0x7f0000000900)={{0x80}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0xb1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0xfb, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf8, 0x7, 0x40}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xd, 0x4b, 0x46, 0x10, 0x1}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x867}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000640)={0x14, &(0x7f00000003c0)={0x20, 0xc, 0x43, {0x43, 0x6, "57e7b06bd5a63c216304870b81b9c5425142024ae00caa53952fcfbf725dfcf1a7d985b4c5fb6d550d1ed124ffaabd045297ab3c6b80cc3f1b5cdfd206e76e74bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "0c08800769a1d3f1a84899320056919ee1a47e6ab9fc3b4baf57b485d6458045a7c5505789806f8d74e54a4c9f0b3b585f6cff0e1774670f342c189968747e96aaaa6b5bab900824d0802bce5f"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x40, 0x3, 0xa2, "66dee27b82355074793527741253af8d1d734cd503010cea8524f9c2f18bc22e6bb628824bc51f113c57cc98858751dfb66ae2ee5d3af4275d1a5a46f3976ccb4d65e5b9c1b607810780699633809e81e29dfc81be13f191e92eb564880e9fd303e41889b541412ea40e7d20d5cb2dd4839041a285a2bfa5301db7afc8eaacba2d391b5cccd605806f9fbcc9130a3c2a1329726226a02bec15fc59d80a3cacdcc3af"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x0, 0x53, {0x51, "a611aa53e632f7073adda0377c7c44bbb8b86c08dae0287e72e38d4d4cadbfcc2d1584f2979f8ef1902dd141985ee9c59cdb5c330e7da7929153952370b55a3fd64a501caeee07ffc635f29ab2407c012d"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x38}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x3}}) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 2m33.905101553s ago: executing program 33 (id=3600): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x8, 0x400000) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0x4}}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1m39.588929285s ago: executing program 34 (id=3602): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000580)={0x40, 0x9, 0x1, '\b'}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4, 0xe22, 0x3, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}, "7332e94143f7f31441bdcd491414ae38d7cd90b3d173b19dcef4263363fc4aa146b6580bd8"}}}}}}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d01090050001180490067004df4fc8de71626db37a39716bc6a1d9cbb21e0a06208c366fbcb7bdf381a45efcace9782aab31f4423aa8b1fa6f26bc762d6030000004ff3c640b8656c018bebe844d61d0b0000004d0012"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x41b) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0xc0a85320, &(0x7f0000000900)={{0x80}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0xb1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0xfb, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf8, 0x7, 0x40}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0xd, 0x4b, 0x46, 0x10, 0x1}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x867}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000640)={0x14, &(0x7f00000003c0)={0x20, 0xc, 0x43, {0x43, 0x6, "57e7b06bd5a63c216304870b81b9c5425142024ae00caa53952fcfbf725dfcf1a7d985b4c5fb6d550d1ed124ffaabd045297ab3c6b80cc3f1b5cdfd206e76e74bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "0c08800769a1d3f1a84899320056919ee1a47e6ab9fc3b4baf57b485d6458045a7c5505789806f8d74e54a4c9f0b3b585f6cff0e1774670f342c189968747e96aaaa6b5bab900824d0802bce5f"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x40, 0x3, 0xa2, "66dee27b82355074793527741253af8d1d734cd503010cea8524f9c2f18bc22e6bb628824bc51f113c57cc98858751dfb66ae2ee5d3af4275d1a5a46f3976ccb4d65e5b9c1b607810780699633809e81e29dfc81be13f191e92eb564880e9fd303e41889b541412ea40e7d20d5cb2dd4839041a285a2bfa5301db7afc8eaacba2d391b5cccd605806f9fbcc9130a3c2a1329726226a02bec15fc59d80a3cacdcc3af"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x0, 0x53, {0x51, "a611aa53e632f7073adda0377c7c44bbb8b86c08dae0287e72e38d4d4cadbfcc2d1584f2979f8ef1902dd141985ee9c59cdb5c330e7da7929153952370b55a3fd64a501caeee07ffc635f29ab2407c012d"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x38}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x3}}) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 0s ago: executing program 35 (id=3601): r0 = io_uring_setup(0x136a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f00000000c0)=""/145, 0x91, 0x151) r2 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000000000f195", @ANYRES32=r1, @ANYRES32, @ANYRES8=r0, @ANYBLOB="bad492cd15f9cb63fe9d797511c26e56d92d961c21a57ea63e140b5ab3bbb71e52940d1485c81c5704dcb5c38ad87117201942474137d6ad1c58b28d81dfb4d96dcfa8e8ce9d47a710d8369b5e5e02bb4d001dd45a2886223ced39f054b77cb18b6662b59fae64ba503a12b9343b374fa8066477cf9763554c6ae004e77adef60c7115b959e070f5a54099c43cb468cefda28b5871515588dbc8eed8e95cb693665022b5aff6904e88457045d10b805647d6464a0deed1239001856010e314466f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) open(0x0, 0x345142, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x15) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) msgget$private(0x0, 0x470) socket$kcm(0x29, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ing 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1007.884929][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.897941][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1007.907246][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.992905][T19906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.001634][T19906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.141208][ T5724] usb 3-1: USB disconnect, device number 35 [ 1008.155191][ T9] usb 1-1: usb_control_msg returned -32 [ 1008.178009][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1008.472203][T19958] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3037'. [ 1008.514357][T19959] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 1008.518514][T18308] Bluetooth: hci1: command 0x0406 tx timeout [ 1008.529144][ T5724] usb 1-1: USB disconnect, device number 48 [ 1008.678411][T18308] Bluetooth: hci3: command 0x0406 tx timeout [ 1008.678432][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1008.918601][T18308] Bluetooth: hci4: command 0x0406 tx timeout [ 1008.956310][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 1008.956327][ T30] audit: type=1400 audit(1781543700.280:889): avc: denied { execute } for pid=19966 comm="syz.2.3039" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1009.046995][ T30] audit: type=1400 audit(1781543700.370:890): avc: denied { read append } for pid=19968 comm="syz.1.3040" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1009.054844][T19969] syzkaller0: entered promiscuous mode [ 1009.071897][ T30] audit: type=1400 audit(1781543700.370:891): avc: denied { open } for pid=19968 comm="syz.1.3040" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1009.184867][T19969] syzkaller0: entered allmulticast mode [ 1009.189167][T19972] 0: reclassify loop, rule prio 0, protocol 800 [ 1009.481032][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 1010.032142][T19986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1010.053082][T19986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1010.067110][T19986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1010.083307][T19986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1010.485388][ T5729] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1010.828551][ T5729] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1010.885677][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.940232][ T5729] usb 4-1: Product: syz [ 1010.959154][ T5729] usb 4-1: Manufacturer: syz [ 1010.976251][ T5729] usb 4-1: SerialNumber: syz [ 1011.027861][ T5729] usb 4-1: config 0 descriptor?? [ 1011.102399][ T5729] ch341 4-1:0.0: ch341-uart converter detected [ 1011.158030][T20017] xt_addrtype: ipv6 does not support BROADCAST matching [ 1011.190902][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 1011.199861][T20017] openvswitch: netlink: Message has 8 unknown bytes. [ 1011.718165][T18308] Bluetooth: hci1: command 0x0406 tx timeout [ 1011.945610][ T5729] usb 4-1: failed to send control message: -71 [ 1011.977873][ T5729] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1012.010266][ T5729] usb 4-1: USB disconnect, device number 42 [ 1012.044456][ T5729] ch341 4-1:0.0: device disconnected [ 1012.107064][T20027] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3055'. [ 1012.120129][T18308] Bluetooth: hci4: command 0x0406 tx timeout [ 1012.126144][T18308] Bluetooth: hci3: command 0x0406 tx timeout [ 1012.129629][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1012.933360][T20057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20057 comm=syz.4.3063 [ 1012.966934][ T30] audit: type=1400 audit(1781543704.290:892): avc: denied { append } for pid=20056 comm="syz.4.3063" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1013.045312][ T30] audit: type=1400 audit(1781543704.330:893): avc: denied { ioctl } for pid=20056 comm="syz.4.3063" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1013.392575][ T30] audit: type=1326 audit(1781543704.720:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.3.3070" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7ffc0000 [ 1013.428627][ T5724] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1013.447657][ T30] audit: type=1326 audit(1781543704.720:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.3.3070" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7ffc0000 [ 1013.479980][ T5729] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1013.492628][T20080] netlink: 'syz.2.3071': attribute type 1 has an invalid length. [ 1013.509379][ T30] audit: type=1326 audit(1781543704.720:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.3.3070" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7ffc0000 [ 1013.566637][ T30] audit: type=1326 audit(1781543704.720:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.3.3070" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f239099ce59 code=0x7ffc0000 [ 1013.585811][T20080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1013.619622][ T30] audit: type=1326 audit(1781543704.720:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.3.3070" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7ffc0000 [ 1013.638225][ T5724] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1013.678626][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.679253][ T5729] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1013.707384][ T5724] usb 1-1: config 0 descriptor?? [ 1013.712487][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.713693][ T5729] usb 2-1: config 0 descriptor?? [ 1013.729118][ T5724] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1013.835698][ T5729] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1014.275305][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3074'. [ 1014.828128][ T5622] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1014.876935][ T5724] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1014.883222][T16304] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1014.888748][T20103] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3077'. [ 1014.999413][ T5622] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1015.013905][ T5622] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1015.028200][ T5622] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1015.029427][T16304] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1015.049204][ T5729] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1015.061653][T16304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.072314][ T5622] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1015.073009][T16304] usb 4-1: config 0 descriptor?? [ 1015.096088][ T5622] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1015.106530][ T5622] usb 3-1: Manufacturer: syz [ 1015.111337][ T5622] usb 3-1: SerialNumber: syz [ 1015.116049][T16304] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1015.127153][T20099] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1015.492504][ T5724] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 1015.514351][ T5724] usb 1-1: USB disconnect, device number 49 [ 1015.586598][ T5729] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 1015.607217][ T5729] usb 2-1: USB disconnect, device number 41 [ 1015.791198][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1015.791216][ T30] audit: type=1400 audit(1781543707.120:940): avc: denied { bind } for pid=20113 comm="syz.4.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1016.181362][T16304] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1017.065434][T16304] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 1017.075565][T16304] usb 4-1: USB disconnect, device number 43 [ 1017.199725][T20134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3082'. [ 1017.321365][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3081'. [ 1017.389546][ T30] audit: type=1400 audit(1781543708.710:941): avc: denied { write } for pid=20116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.511581][ T5622] yealink 3-1:36.0: invalid payload size 1024, expected 16 [ 1017.536495][ T5622] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input12 [ 1017.543329][T20145] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3083'. [ 1017.568513][ T30] audit: type=1400 audit(1781543708.890:942): avc: denied { write } for pid=20143 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1017.608872][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.615855][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.622831][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.629777][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.636703][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.643637][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.650647][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.657580][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.664505][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.671256][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.677177][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.684107][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.690883][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.696864][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.704119][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.710881][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.716835][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.723962][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.730715][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.736591][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.743506][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.750262][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.756124][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.763454][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.770217][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.776126][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.783053][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.789805][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.795690][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.802812][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.809586][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.815492][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.825647][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.832415][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.838874][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.847290][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.854064][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.859945][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.866838][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.873584][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.879792][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.886692][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.893438][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.902206][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.909105][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.915846][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.921697][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.928594][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.935334][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.941190][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.948091][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.954837][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.960882][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.967791][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.974553][ C0] yealink 3-1:36.0: unexpected response 0 [ 1017.980550][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1017.987592][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1017.994334][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.000178][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.007073][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.013812][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.019652][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.026542][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.033280][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.039117][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.046005][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.052778][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.058643][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.065553][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.072318][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.078196][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.085136][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.091907][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.092245][ T30] audit: type=1400 audit(1781543709.410:943): avc: denied { write } for pid=20148 comm="syz.3.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1018.097783][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.124306][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.131058][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.137068][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.144001][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.150765][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.156705][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.163621][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.170367][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.176226][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.183121][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.189858][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.195720][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.202608][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.209348][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.215190][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.222076][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.228818][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.234701][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.241636][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.248414][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.254624][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.261541][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.268284][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.274141][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.281178][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.287918][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.293769][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.300711][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.307487][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.313400][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.320423][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.327200][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.333121][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.340070][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.346840][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.352766][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.359737][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.366510][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.372903][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.381360][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.388126][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.394038][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.400945][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.407847][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.414777][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.421703][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.428450][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.434315][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.441206][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.447947][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.453796][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.460704][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.467461][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.473331][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.481746][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.488534][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.494526][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.501843][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.508592][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.514534][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.521487][ C0] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 1018.528266][ C0] yealink 3-1:36.0: unexpected response 0 [ 1018.534080][ T5622] usb 3-1: USB disconnect, device number 36 [ 1018.539995][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 1018.540009][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 1019.624564][ T30] audit: type=1400 audit(1781543710.950:944): avc: denied { write } for pid=20150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.664418][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3088'. [ 1019.717527][ T30] audit: type=1400 audit(1781543710.980:945): avc: denied { mount } for pid=20180 comm="syz.0.3089" name="/" dev="pstore" ino=4011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1019.840282][ T30] audit: type=1400 audit(1781543711.100:946): avc: denied { write } for pid=20184 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.066664][T20194] netlink: 'syz.1.3092': attribute type 10 has an invalid length. [ 1020.074570][T20194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3092'. [ 1020.313833][T20194] team0: Port device geneve1 added [ 1020.715649][ T30] audit: type=1400 audit(1781543712.040:947): avc: denied { write } for pid=20193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.109651][ T5708] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1021.204870][ T30] audit: type=1400 audit(1781543712.530:948): avc: denied { write } for pid=20231 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.271334][ T5708] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1021.288456][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.313174][ T5708] usb 4-1: Product: syz [ 1021.319033][ T5708] usb 4-1: Manufacturer: syz [ 1021.330323][ T5708] usb 4-1: SerialNumber: syz [ 1021.350834][ T5708] usb 4-1: config 0 descriptor?? [ 1021.365375][ T5708] ch341 4-1:0.0: ch341-uart converter detected [ 1021.551975][T20229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1021.572122][T20229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1021.587750][T20229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1021.605478][T20229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1021.768083][ T5708] usb 4-1: failed to send control message: -71 [ 1021.782186][ T5708] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1021.814940][ T5708] usb 4-1: USB disconnect, device number 44 [ 1021.818574][ T30] audit: type=1400 audit(1781543713.140:949): avc: denied { write } for pid=20234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.836902][ T5708] ch341 4-1:0.0: device disconnected [ 1021.860033][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1021.981691][ T30] audit: type=1400 audit(1781543713.310:950): avc: denied { write } for pid=20256 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.058111][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1022.074260][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.098010][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.136243][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 1022.158119][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.170813][ T9] usb 1-1: Product: syz [ 1022.178547][ T9] usb 1-1: Manufacturer: syz [ 1022.191922][ T9] usb 1-1: SerialNumber: syz [ 1022.357823][ T30] audit: type=1400 audit(1781543713.680:951): avc: denied { write } for pid=20259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.422414][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1022.451908][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1022.517366][T20279] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1022.523824][T20279] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1022.560618][ T30] audit: type=1400 audit(1781543713.880:952): avc: denied { write } for pid=20276 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.592272][T20230] netlink: 'syz.0.3100': attribute type 13 has an invalid length. [ 1022.648170][T20230] netlink: 'syz.0.3100': attribute type 14 has an invalid length. [ 1022.766231][T20254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1022.772244][T20254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1022.778225][T20254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1022.784177][T20254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1022.851519][ T30] audit: type=1400 audit(1781543714.140:953): avc: denied { setattr } for pid=20282 comm="syz.3.3107" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1023.828100][ T30] audit: type=1400 audit(1781543715.140:954): avc: denied { write } for pid=20291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.893868][ T30] audit: type=1400 audit(1781543715.200:955): avc: denied { write } for pid=20304 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.939534][ T5351] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1024.007575][ T9] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1024.038286][T18368] Bluetooth: hci1: command 0x0406 tx timeout [ 1024.055437][ T9] usb 1-1: unit 0 not found! [ 1024.085707][ T9] usb 1-1: USB disconnect, device number 50 [ 1024.109066][T16829] udevd[16829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1024.131146][ T5351] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1024.141153][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.189012][ T5351] usb 3-1: Product: syz [ 1024.243686][ T5351] usb 3-1: Manufacturer: syz [ 1024.257693][ T5351] usb 3-1: SerialNumber: syz [ 1024.274459][ T5351] usb 3-1: config 0 descriptor?? [ 1024.378592][ T5351] ch341 3-1:0.0: ch341-uart converter detected [ 1024.839367][T18308] Bluetooth: hci4: command 0x0406 tx timeout [ 1024.845432][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1024.845457][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 1024.875972][ T5351] usb 3-1: failed to send control message: -71 [ 1024.891644][ T5351] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1024.914969][ T5351] usb 3-1: USB disconnect, device number 37 [ 1024.922265][ T5351] ch341 3-1:0.0: device disconnected [ 1025.028341][ T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1025.188435][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1025.215949][ T9] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 1025.353595][ T9] usb 2-1: config 0 has no interface number 0 [ 1025.395716][ T9] usb 2-1: config 0 interface 101 altsetting 251 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1025.472117][ T9] usb 2-1: config 0 interface 101 altsetting 251 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1025.492405][ T9] usb 2-1: config 0 interface 101 altsetting 251 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1025.501962][T20345] netlink: 'syz.0.3121': attribute type 4 has an invalid length. [ 1025.549041][ T9] usb 2-1: config 0 interface 101 has no altsetting 0 [ 1025.557542][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=6812, bcdDevice=de.52 [ 1025.570449][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.579610][ T9] usb 2-1: Product: syz [ 1025.584349][ T9] usb 2-1: Manufacturer: syz [ 1025.592087][T20345] xt_hashlimit: size too large, truncated to 1048576 [ 1025.597529][ T9] usb 2-1: SerialNumber: syz [ 1025.610842][ T9] usb 2-1: config 0 descriptor?? [ 1025.956000][T20342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1025.967640][ T9] sierra 2-1:0.101: Sierra USB modem converter detected [ 1025.976268][ T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 1025.978268][T20342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1025.990183][ T9] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 1026.006600][ T9] usb 2-1: USB disconnect, device number 42 [ 1026.026012][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1026.034773][T20342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1026.041309][ T9] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1026.065412][T20342] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1026.087679][ T9] sierra 2-1:0.101: device disconnected [ 1026.348219][ T5708] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1026.512689][ T5708] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1026.532219][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.553477][ T5708] usb 3-1: config 0 descriptor?? [ 1026.565640][ T5708] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1027.653475][T20394] overlayfs: failed to resolve './file0': -2 [ 1027.950747][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1027.974587][ T30] audit: type=1326 audit(1781543719.060:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.4.3131" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb5979ce59 code=0x0 [ 1028.002734][ T5708] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1028.038114][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1028.038990][T18308] Bluetooth: hci2: command 0x0406 tx timeout [ 1028.094072][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1028.118506][T18308] Bluetooth: hci4: command 0x0406 tx timeout [ 1028.320951][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1028.335127][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.464732][ T9] usb 1-1: Product: syz [ 1028.485836][ T9] usb 1-1: Manufacturer: syz [ 1028.493979][ T9] usb 1-1: SerialNumber: syz [ 1028.508719][ T9] usb 1-1: config 0 descriptor?? [ 1028.538335][ T9] ch341 1-1:0.0: ch341-uart converter detected [ 1028.557359][ T5708] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1028.576756][ T5708] usb 3-1: USB disconnect, device number 38 [ 1028.703004][ T5351] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1028.810581][ T30] audit: type=1400 audit(1781543720.140:957): avc: denied { open } for pid=20413 comm="syz.3.3138" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1028.870833][ T5351] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1028.880204][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.888248][ T5351] usb 5-1: Product: syz [ 1028.902399][ T5351] usb 5-1: Manufacturer: syz [ 1028.910216][ T5351] usb 5-1: SerialNumber: syz [ 1028.921174][ T5351] usb 5-1: config 0 descriptor?? [ 1028.927650][ T5351] ch341 5-1:0.0: ch341-uart converter detected [ 1028.942516][ T9] usb 1-1: failed to send control message: -71 [ 1028.953256][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1028.966876][ T9] usb 1-1: USB disconnect, device number 51 [ 1028.981290][ T9] ch341 1-1:0.0: device disconnected [ 1029.344670][ T5351] usb 5-1: failed to send control message: -71 [ 1029.351567][ T5351] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 1029.364992][ T5351] usb 5-1: USB disconnect, device number 40 [ 1029.372741][ T5351] ch341 5-1:0.0: device disconnected [ 1029.487643][T20439] netlink: 'syz.3.3145': attribute type 12 has an invalid length. [ 1029.495569][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 1029.526061][T20439] netlink: 'syz.3.3145': attribute type 12 has an invalid length. [ 1029.533963][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 1030.335663][ T7358] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.345643][ T7358] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.378367][ T7358] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.559329][ T7358] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.605773][T20430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1030.621156][T20430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1030.715494][T20430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1030.727959][T20446] comedi: No check for data length of config insn id 6 is implemented [ 1030.736326][T20430] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1030.750623][T20446] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1030.761769][T20446] comedi: Assuming n=33386 is correct [ 1031.238176][T18308] Bluetooth: hci1: command 0x0406 tx timeout [ 1031.327015][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 1031.346045][T20446] kAFS: unable to lookup cell 'ÿ' [ 1031.497894][T20460] netlink: 'syz.3.3147': attribute type 10 has an invalid length. [ 1031.536220][T20460] bond0: (slave netdevsim1): Releasing backup interface [ 1031.570307][T20460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.578168][ T5622] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1031.607702][T20460] team0: Port device netdevsim1 added [ 1031.738194][ T5622] usb 5-1: Using ep0 maxpacket: 8 [ 1031.748170][ T5622] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1031.760942][ T5622] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1031.774759][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 48, changing to 9 [ 1031.786022][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8240, setting to 1024 [ 1031.799384][ T5622] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1031.849363][ T5622] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1031.869750][T20467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3154'. [ 1031.880158][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1031.892405][ T5622] usb 5-1: Product: syz [ 1031.902518][ T5622] usb 5-1: Manufacturer: syz [ 1031.914987][ T5622] usb 5-1: SerialNumber: syz [ 1031.933432][ T5622] usb 5-1: config 0 descriptor?? [ 1031.992504][ T30] audit: type=1400 audit(1781543723.320:958): avc: denied { append } for pid=20472 comm="syz.0.3157" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1032.027596][T20473] loop5: detected capacity change from 0 to 7 [ 1032.059774][T20473] Dev loop5: unable to read RDB block 7 [ 1032.080844][T20473] loop5: AHDI p1 [ 1032.087448][T20473] loop5: partition table partially beyond EOD, truncated [ 1032.155227][ T5622] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1032.219522][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1032.227128][ T5622] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1032.356382][ T5622] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1032.377288][ T5622] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1032.391244][ T5622] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1032.411619][ T5622] usb 5-1: USB disconnect, device number 41 [ 1032.429407][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1032.446620][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.464814][ T9] usb 4-1: Product: syz [ 1032.473104][ T9] usb 4-1: Manufacturer: syz [ 1032.477753][ T9] usb 4-1: SerialNumber: syz [ 1032.485073][ T9] usb 4-1: config 0 descriptor?? [ 1032.494596][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 1032.565568][ T30] audit: type=1400 audit(1781543723.890:959): avc: denied { audit_write } for pid=20483 comm="syz.2.3159" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1032.678585][T18308] Bluetooth: hci2: command 0x0406 tx timeout [ 1032.680542][T20488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.758280][T18308] Bluetooth: hci4: command 0x0406 tx timeout [ 1032.758332][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1032.902779][ T9] usb 4-1: failed to send control message: -71 [ 1032.915356][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1032.929051][ T9] usb 4-1: USB disconnect, device number 45 [ 1032.935934][ T9] ch341 4-1:0.0: device disconnected [ 1033.045840][ T30] audit: type=1400 audit(1781543724.370:960): avc: denied { setopt } for pid=20497 comm="syz.0.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1033.070100][T20498] kvm: kvm [20497]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000066) = 0x402ff [ 1033.268160][ T5622] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1033.328156][ T5351] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1033.420560][ T5622] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1033.443070][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.473450][ T5622] usb 5-1: config 0 descriptor?? [ 1033.486887][ T5622] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1033.493704][ T5351] usb 1-1: Using ep0 maxpacket: 8 [ 1033.514030][ T5351] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1033.534320][ T5351] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1033.563078][ T5351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 48, changing to 9 [ 1033.585361][ T5351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8240, setting to 1024 [ 1033.611707][ T5351] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1033.644736][ T5351] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1033.653984][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1033.669516][ T5351] usb 1-1: Product: syz [ 1033.678095][ T5351] usb 1-1: Manufacturer: syz [ 1033.688092][ T5351] usb 1-1: SerialNumber: syz [ 1033.697127][ T5351] usb 1-1: config 0 descriptor?? [ 1033.913271][ T5351] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1033.932181][ T5351] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1034.122486][ T5351] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1034.158730][ T5351] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1034.179896][ T5351] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1034.214065][ T5351] usb 1-1: USB disconnect, device number 52 [ 1034.372027][T20524] tipc: Failed to remove unknown binding: 66,1,1/0:2172712880/2172712882 [ 1034.493259][ T5622] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1034.655724][T20539] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1034.670143][ T30] audit: type=1400 audit(1781543726.000:961): avc: denied { connect } for pid=20538 comm="syz.3.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1034.693559][ T30] audit: type=1400 audit(1781543726.000:962): avc: denied { write } for pid=20538 comm="syz.3.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1034.713322][ T5724] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1034.881993][ T5724] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1034.898104][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.911647][ T5724] usb 3-1: config 0 descriptor?? [ 1034.924854][ T5724] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1035.351455][T20545] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1035.359766][T20545] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1035.368928][T20545] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1035.375031][T20545] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1035.397724][ T5622] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 1035.415911][ T5622] usb 5-1: USB disconnect, device number 42 [ 1036.008404][ T5708] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1036.034736][ T5724] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1036.081008][T20569] netlink: 'syz.4.3186': attribute type 18 has an invalid length. [ 1036.091658][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 1036.104374][ T7358] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.104408][T20569] netlink: 'syz.4.3186': attribute type 18 has an invalid length. [ 1036.113476][ T7358] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.120996][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 1036.130106][ T7358] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.148324][ T5708] usb 4-1: device descriptor read/64, error -71 [ 1036.148644][ T7358] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.231280][T20572] tipc: Failed to remove unknown binding: 66,1,1/0:548983320/548983322 [ 1036.398160][ T5708] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1036.445436][ T5724] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1036.467810][ T5724] usb 3-1: USB disconnect, device number 39 [ 1036.548130][ T5708] usb 4-1: device descriptor read/64, error -71 [ 1036.678200][T15401] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1036.684164][ T5708] usb usb4-port1: attempt power cycle [ 1036.748891][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'. [ 1036.813667][T20590] atomic_op ffff8880371aa198 conn xmit_atomic 0000000000000000 [ 1036.838148][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.858115][T15401] usb 5-1: Using ep0 maxpacket: 8 [ 1036.874984][T15401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1036.886286][T15401] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1036.899190][T15401] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1036.908366][T15401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.945194][T15401] usb 5-1: config 0 descriptor?? [ 1037.028145][ T5708] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 1037.069588][ T5708] usb 4-1: device descriptor read/8, error -71 [ 1037.358576][ T5708] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 1037.398372][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1037.404535][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1037.410715][T18308] Bluetooth: hci2: command 0x0406 tx timeout [ 1037.460254][ T5708] usb 4-1: device descriptor read/8, error -71 [ 1038.025321][ T5708] usb usb4-port1: unable to enumerate USB device [ 1038.373137][T20599] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1038.379679][T20599] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1038.387525][T20599] vhci_hcd vhci_hcd.0: Device attached [ 1038.397096][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.436771][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.472722][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.507046][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.541905][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.581584][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.631914][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.643627][T20580] openvswitch: netlink: Flow actions attr not present in new flow. [ 1038.669549][ T5351] usb 38-1: SetAddress Request (2) to port 0 [ 1038.721484][T15401] sunplus 0003:04FC:05D8.0006: unknown main item tag 0x0 [ 1038.742530][ T5351] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1038.942546][T15401] sunplus 0003:04FC:05D8.0006: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.4-1/input0 [ 1038.978109][T20599] netdevsim netdevsim2 ªªªªª»: renamed from netdevsim0 (while UP) [ 1039.224358][ T30] audit: type=1400 audit(1781543730.380:963): avc: denied { connect } for pid=20597 comm="syz.2.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.509503][T20600] vhci_hcd: connection reset by peer [ 1039.677299][ T3284] vhci_hcd vhci_hcd.2: stop threads [ 1039.883739][ T3284] vhci_hcd vhci_hcd.2: release socket [ 1039.889257][ T3284] vhci_hcd vhci_hcd.2: disconnect device [ 1039.988198][T15401] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1040.011478][ T29] usb 5-1: USB disconnect, device number 43 [ 1040.047507][ T30] audit: type=1400 audit(1781543731.370:964): avc: denied { create } for pid=20612 comm="syz.4.3198" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1040.048981][T20613] Invalid source name [ 1040.073979][T20613] UBIFS error (pid: 20613): cannot open "./file0", error -22 [ 1040.074531][ T30] audit: type=1400 audit(1781543731.370:965): avc: denied { mounton } for pid=20612 comm="syz.4.3198" path="/650/file0" dev="tmpfs" ino=3741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1040.168537][T15401] usb 2-1: device descriptor read/64, error -71 [ 1040.385355][T20627] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1040.408258][T15401] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1040.554846][T20617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1040.562881][T20617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1040.571118][T20617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1040.577947][T20617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1040.578185][T15401] usb 2-1: device descriptor read/64, error -71 [ 1040.911424][T15401] usb usb2-port1: attempt power cycle [ 1041.250048][T20646] fuse: Bad value for 'fd' [ 1041.437545][T15401] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1041.445707][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1041.468808][T20636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1041.480428][T15401] usb 2-1: device descriptor read/8, error -71 [ 1041.489498][T20636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1041.508200][T20636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1041.514266][T20636] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1041.719784][T15401] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1041.808862][T15401] usb 2-1: device descriptor read/8, error -71 [ 1041.921363][T20666] netlink: 'syz.4.3211': attribute type 10 has an invalid length. [ 1041.929303][T20666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3211'. [ 1041.958457][T20666] team0: Port device geneve1 added [ 1042.154309][T15401] usb usb2-port1: unable to enumerate USB device [ 1042.276438][T20670] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1042.896777][T20678] netlink: 2120 bytes leftover after parsing attributes in process `syz.0.3213'. [ 1042.998234][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1043.341314][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 1043.347356][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 1043.371968][T20662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.402699][T20686] ceph: No mds server is up or the cluster is laggy [ 1043.572448][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1043.578653][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1043.578663][T18308] Bluetooth: hci2: command 0x0406 tx timeout [ 1043.670794][ T30] audit: type=1400 audit(1781543734.990:966): avc: denied { bind } for pid=20696 comm="syz.2.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1043.878326][ T5351] usb 38-1: device descriptor read/8, error -110 [ 1043.952947][ T5708] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1044.138195][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 1044.158017][ T5708] usb 3-1: config 1 has an invalid interface descriptor of length 2, skipping [ 1044.227127][ T5708] usb 3-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 1044.268711][ T5351] usb usb38-port1: attempt power cycle [ 1044.325859][ T5708] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1044.427772][ T5708] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1044.501026][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.558289][ T5708] usb 3-1: Product: syz [ 1044.562499][ T5708] usb 3-1: Manufacturer: syz [ 1044.568634][ T5708] usb 3-1: SerialNumber: syz [ 1044.611293][T20706] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3225'. [ 1044.648160][ T5622] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1044.862044][ T5622] usb 2-1: Using ep0 maxpacket: 8 [ 1044.928544][ T5622] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1044.931330][T20697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.017279][T20714] fuse: Invalid rootmode [ 1045.020937][T20697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.023225][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1045.086927][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 48, changing to 9 [ 1045.164098][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8240, setting to 1024 [ 1045.168914][ T5351] usb usb38-port1: unable to enumerate USB device [ 1045.194652][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1045.233177][ T5708] usb 3-1: USB disconnect, device number 40 [ 1045.312760][T15401] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1045.335524][T20720] fuse: Unknown parameter 'user00000000000000000000' [ 1045.474540][ T5622] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1045.488530][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1045.496608][ T5622] usb 2-1: Product: syz [ 1045.502483][ T5622] usb 2-1: Manufacturer: syz [ 1045.507305][ T5622] usb 2-1: SerialNumber: syz [ 1045.520334][ T5622] usb 2-1: config 0 descriptor?? [ 1045.804053][ T5622] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1045.815508][ T5622] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1045.837688][T15401] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1045.857795][T15401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.872557][T15401] usb 1-1: Product: syz [ 1045.881281][T15401] usb 1-1: Manufacturer: syz [ 1045.889455][T15401] usb 1-1: SerialNumber: syz [ 1045.895800][T15401] usb 1-1: config 0 descriptor?? [ 1045.902465][T15401] ch341 1-1:0.0: ch341-uart converter detected [ 1046.003408][ T5622] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1046.014927][ T5622] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1046.041121][ T5622] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1046.059121][ T5622] usb 2-1: USB disconnect, device number 47 [ 1046.095169][T20724] tipc: Failed to remove unknown binding: 66,1,1/0:3417221777/3417221779 [ 1046.128347][ T5351] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1046.313843][T15401] usb 1-1: failed to send control message: -71 [ 1046.320898][T15401] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1046.331585][T15401] usb 1-1: USB disconnect, device number 53 [ 1046.338386][T15401] ch341 1-1:0.0: device disconnected [ 1046.373980][ T5351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1046.391708][ T5351] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7 [ 1046.461286][ T5351] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 1046.507137][ T30] audit: type=1326 audit(1781543737.750:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20728 comm="syz.4.3232" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb5979ce59 code=0x0 [ 1046.628739][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.657250][ T5351] usb 4-1: Product: syz [ 1046.667300][ T5351] usb 4-1: Manufacturer: syz [ 1046.682203][ T5351] usb 4-1: SerialNumber: syz [ 1047.022611][T20739] atomic_op ffff88802d097198 conn xmit_atomic 0000000000000000 [ 1047.129106][ T5351] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1047.136972][ T5351] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1048.301885][ T5351] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1048.363991][T20763] capability: warning: `syz.0.3239' uses deprecated v2 capabilities in a way that may be insecure [ 1048.383232][ T5351] usb 4-1: USB disconnect, device number 50 [ 1048.431698][T16829] udevd[16829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.485424][T20761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1048.656150][T20770] fuse: Bad value for 'fd' [ 1049.008676][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1049.018334][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.368709][ T5351] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 1049.491935][ T9] IPVS: starting estimator thread 0... [ 1049.506971][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'. [ 1049.520979][T20785] tipc: Failed to remove unknown binding: 66,1,1/0:1732661090/1732661092 [ 1049.553095][ T5351] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.588386][T20793] IPVS: using max 56 ests per chain, 134400 per kthread [ 1049.590485][ T5351] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1049.649488][ T5351] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1049.673841][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3252'. [ 1049.682964][ T5351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.692638][ T5351] usb 1-1: config 0 descriptor?? [ 1049.913342][ T5351] usb 1-1: string descriptor 0 read error: -71 [ 1049.942208][ T5351] usb 1-1: USB disconnect, device number 54 [ 1051.130246][T20814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1051.152766][T20814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1051.228978][T20814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1051.281681][T20814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1052.139965][T20822] tipc: Failed to remove unknown binding: 66,1,1/0:1444857683/1444857685 [ 1052.340143][T20833] tipc: Failed to remove unknown binding: 66,1,1/0:3875514863/3875514865 [ 1052.439911][ T5622] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1052.616481][ T5622] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1052.625822][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.673172][ T5622] usb 1-1: Product: syz [ 1052.680685][ T5622] usb 1-1: Manufacturer: syz [ 1052.685371][ T5622] usb 1-1: SerialNumber: syz [ 1052.700325][ T5622] usb 1-1: config 0 descriptor?? [ 1052.712220][ T5622] ch341 1-1:0.0: ch341-uart converter detected [ 1052.758122][T18368] Bluetooth: hci1: command 0x0406 tx timeout [ 1053.329003][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1053.335129][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1053.341350][T18368] Bluetooth: hci4: command 0x0406 tx timeout [ 1053.613957][T20865] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1053.629213][ T5622] usb 1-1: failed to send control message: -71 [ 1053.660210][ T5622] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1053.676289][T20865] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1053.700805][ T5622] usb 1-1: USB disconnect, device number 55 [ 1053.728851][ T5622] ch341 1-1:0.0: device disconnected [ 1053.736941][T20865] overlayfs: missing 'lowerdir' [ 1054.331774][T20889] FAULT_INJECTION: forcing a failure. [ 1054.331774][T20889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.345190][T20889] CPU: 0 UID: 0 PID: 20889 Comm: syz.3.3274 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.345227][T20889] Tainted: [L]=SOFTLOCKUP [ 1054.345235][T20889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.345249][T20889] Call Trace: [ 1054.345256][T20889] [ 1054.345264][T20889] dump_stack_lvl+0x100/0x190 [ 1054.345294][T20889] should_fail_ex.cold+0x5/0xa [ 1054.345322][T20889] _copy_from_user+0x2e/0xd0 [ 1054.345346][T20889] copy_msghdr_from_user+0x9f/0x4f0 [ 1054.345380][T20889] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1054.345412][T20889] ? __pfx_kstrtouint+0x10/0x10 [ 1054.345445][T20889] ___sys_sendmsg+0x106/0x1e0 [ 1054.345477][T20889] ? __pfx____sys_sendmsg+0x10/0x10 [ 1054.345514][T20889] ? rcu_is_watching+0x12/0xc0 [ 1054.345550][T20889] __sys_sendmsg+0x170/0x220 [ 1054.345575][T20889] ? __pfx___sys_sendmsg+0x10/0x10 [ 1054.345606][T20889] ? rcu_is_watching+0x12/0xc0 [ 1054.345631][T20889] do_syscall_64+0x115/0x870 [ 1054.345659][T20889] ? clear_bhb_loop+0x40/0x90 [ 1054.345682][T20889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.345703][T20889] RIP: 0033:0x7f239099ce59 [ 1054.345720][T20889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.345741][T20889] RSP: 002b:00007f23917f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.345763][T20889] RAX: ffffffffffffffda RBX: 00007f2390c15fa0 RCX: 00007f239099ce59 [ 1054.345779][T20889] RDX: 00000000000008c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1054.345793][T20889] RBP: 00007f23917f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.345807][T20889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.345821][T20889] R13: 00007f2390c16038 R14: 00007f2390c15fa0 R15: 00007fff7be34ec8 [ 1054.345844][T20889] [ 1054.708271][ T5351] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1054.887495][ T5351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1054.900742][T20895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1054.907249][T20895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1054.914509][T20895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1054.921332][T20895] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1054.927395][ T5351] usb 5-1: config 1 has no interface number 0 [ 1055.028807][ T5351] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.097849][ T5351] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1055.142492][ T5351] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1055.164849][ T5351] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1055.186467][ T5351] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1055.196912][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.212988][ T5351] usb 5-1: Product: syz [ 1055.250306][ T5351] usb 5-1: Manufacturer: syz [ 1055.255656][ T5351] usb 5-1: SerialNumber: syz [ 1055.835870][ T30] audit: type=1400 audit(1781543747.160:968): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1056.058553][T20921] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1056.064952][T20921] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1056.071540][T20921] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1056.078605][T20921] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1056.235053][T20934] kAFS: unable to lookup cell 'ÿ' [ 1056.758192][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1056.919497][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1056.937984][ T5351] cdc_ncm 5-1:1.1: bind() failure [ 1056.951341][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.952753][ T5351] usb 5-1: USB disconnect, device number 44 [ 1056.986178][ T9] usb 3-1: config 0 descriptor?? [ 1057.002919][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1057.450098][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'. [ 1057.461141][T20950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20950 comm=syz.3.3291 [ 1057.493731][T20948] openvswitch: netlink: Message has 8 unknown bytes. [ 1057.544540][T20945] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1057.551157][T20945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1057.558668][T20945] vhci_hcd vhci_hcd.0: Device attached [ 1057.798338][ T5351] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1057.805958][T18368] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.836559][T20960] netlink: 'syz.4.3292': attribute type 10 has an invalid length. [ 1057.844536][T20960] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3292'. [ 1058.118472][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1058.124505][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1058.188139][ T29] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1058.237195][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1058.331786][ T9] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1058.398131][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 1058.411048][ T29] usb 1-1: config index 0 descriptor too short (expected 53553, got 120) [ 1058.429505][ T29] usb 1-1: config 200 has too many interfaces: 110, using maximum allowed: 32 [ 1058.439601][ T29] usb 1-1: config 200 has an invalid descriptor of length 139, skipping remainder of the config [ 1058.463079][ T29] usb 1-1: config 200 has 0 interfaces, different from the descriptor's value: 110 [ 1058.531214][ T30] audit: type=1326 audit(1781543749.840:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.3.3293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7fc00000 [ 1058.559540][ T29] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1058.589810][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.612524][ T29] usb 1-1: Product: syz [ 1058.622055][ T29] usb 1-1: Manufacturer: syz [ 1058.632897][ T29] usb 1-1: SerialNumber: syz [ 1058.643542][ T30] audit: type=1326 audit(1781543749.840:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.3.3293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7fc00000 [ 1058.903972][ T30] audit: type=1326 audit(1781543749.840:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.3.3293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7fc00000 [ 1058.932241][T20952] usbip_core: unknown command [ 1058.963861][ T29] usb 1-1: USB disconnect, device number 56 [ 1059.190592][ T30] audit: type=1326 audit(1781543749.840:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.3.3293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7fc00000 [ 1059.340393][T20952] vhci_hcd: unknown pdu 0 [ 1059.365052][T20952] usbip_core: unknown command [ 1059.376627][ T9] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1059.416086][ T3299] vhci_hcd vhci_hcd.0: stop threads [ 1059.435388][ T3299] vhci_hcd vhci_hcd.0: release socket [ 1059.454201][ T30] audit: type=1326 audit(1781543749.840:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20956 comm="syz.3.3293" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239099ce59 code=0x7fc00000 [ 1059.498131][ T3299] vhci_hcd vhci_hcd.0: disconnect device [ 1059.648521][ T9] usb 3-1: USB disconnect, device number 41 [ 1059.697975][ T30] audit: type=1400 audit(1781543751.020:974): avc: denied { read } for pid=20973 comm="syz.1.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1059.749181][ T30] audit: type=1400 audit(1781543751.050:975): avc: denied { write } for pid=20973 comm="syz.1.3296" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1059.828793][T20976] syzkaller0: entered promiscuous mode [ 1059.839724][ T30] audit: type=1400 audit(1781543751.050:976): avc: denied { ioctl } for pid=20973 comm="syz.1.3296" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x6f47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1059.877699][T20976] syzkaller0: entered allmulticast mode [ 1059.979343][T20976] tipc: Started in network mode [ 1060.015087][T20976] tipc: Node identity 1afcb71e0d81, cluster identity 4711 [ 1060.026295][T20986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1060.027429][ T30] audit: type=1400 audit(1781543751.340:977): avc: denied { watch watch_reads } for pid=20985 comm="syz.2.3301" path="/650" dev="tmpfs" ino=3696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1060.036451][T20976] tipc: Enabled bearer , priority 0 [ 1060.066201][T20986] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3301'. [ 1060.704613][T20975] tipc: Resetting bearer [ 1060.713783][T20975] tipc: Disabling bearer [ 1061.451906][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1061.451924][ T30] audit: type=1400 audit(1781543752.780:979): avc: denied { write } for pid=21003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.602484][ T30] audit: type=1400 audit(1781543752.930:980): avc: denied { write } for pid=21023 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.699654][T21011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1061.709868][T21011] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1061.716283][T21011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1061.723506][T21011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1062.028627][ T30] audit: type=1400 audit(1781543753.350:981): avc: denied { getopt } for pid=20982 comm="syz.4.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1062.068147][ T30] audit: type=1400 audit(1781543753.360:982): avc: denied { bind } for pid=20982 comm="syz.4.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1062.095254][T21040] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3312'. [ 1062.129542][ T30] audit: type=1400 audit(1781543753.360:983): avc: denied { name_bind } for pid=20982 comm="syz.4.3300" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1062.182687][ T30] audit: type=1400 audit(1781543753.360:984): avc: denied { node_bind } for pid=20982 comm="syz.4.3300" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1062.265905][ T30] audit: type=1400 audit(1781543753.380:985): avc: denied { connect } for pid=20982 comm="syz.4.3300" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1063.013811][T21043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1063.021765][T21043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1063.030032][T21043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1063.098784][T21043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1063.228436][ T5351] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1063.382649][ T30] audit: type=1400 audit(1781543754.710:986): avc: denied { write } for pid=21044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.542574][T21086] kvm: kvm [21085]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000066) = 0x402ff [ 1063.566302][ T30] audit: type=1400 audit(1781543754.890:987): avc: denied { write } for pid=21084 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1063.599366][T21086] ip6erspan0: entered promiscuous mode [ 1063.748527][ T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1063.878233][ T5622] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1063.888146][ T9] usb 5-1: device descriptor read/64, error -71 [ 1064.038147][ T5622] usb 3-1: Using ep0 maxpacket: 8 [ 1064.047593][ T5622] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1064.079659][ T5622] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1064.104390][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 48, changing to 9 [ 1064.125428][T21096] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3321'. [ 1064.136985][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8240, setting to 1024 [ 1064.148228][ T9] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1064.168338][ T5622] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1064.203120][ T5622] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1064.214798][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1064.233986][ T5622] usb 3-1: Product: syz [ 1064.265214][ T5622] usb 3-1: Manufacturer: syz [ 1064.289881][ T9] usb 5-1: device descriptor read/64, error -71 [ 1064.492031][ T5622] usb 3-1: SerialNumber: syz [ 1064.502581][ T5622] usb 3-1: config 0 descriptor?? [ 1064.598437][ T9] usb usb5-port1: attempt power cycle [ 1064.732710][ T5622] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1064.739998][ T5622] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1064.814458][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 1064.852831][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 1064.918677][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1064.938212][ T9] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1064.949260][ T5622] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1064.978137][ T5622] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1064.987365][ T9] usb 5-1: device descriptor read/8, error -71 [ 1064.995083][ T5622] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1065.015458][ T5622] usb 3-1: USB disconnect, device number 42 [ 1065.078296][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1065.078305][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1065.158138][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1065.228114][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1065.249797][ T9] usb 5-1: device descriptor read/8, error -71 [ 1065.375616][T21101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1065.382428][T21101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1065.389850][T21101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1065.397010][T21101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.428523][ T9] usb usb5-port1: unable to enumerate USB device [ 1065.978138][ T9] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1066.052768][ T30] audit: type=1400 audit(1781543757.380:988): avc: denied { open } for pid=21118 comm="syz.1.3327" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1066.185656][T21119] tmpfs: Bad value for 'mpol' [ 1067.102434][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1067.118733][ T9] usb 4-1: config 0 has no interface number 0 [ 1067.128307][ T9] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1067.147288][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1067.168461][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1067.191161][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1067.253007][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1067.262257][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1067.270611][ T5622] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1067.282456][ T9] usb 4-1: Product: syz [ 1067.287083][ T9] usb 4-1: SerialNumber: syz [ 1067.558334][T18308] Bluetooth: hci4: command 0x0406 tx timeout [ 1067.564503][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1067.570819][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 1067.634633][ T9] usb 4-1: config 0 descriptor?? [ 1067.657505][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1067.658197][ T29] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1067.673658][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input15 [ 1067.698439][ T5622] usb 2-1: Using ep0 maxpacket: 8 [ 1067.705477][ T5622] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1067.724180][ T5622] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.743984][ T5622] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1067.769709][ T5622] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1067.783498][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.799153][ T5622] usb 2-1: Product: syz [ 1067.808126][ T5622] usb 2-1: Manufacturer: syz [ 1067.816433][ T5622] usb 2-1: SerialNumber: syz [ 1067.822734][ T29] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1067.837024][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.851325][ T29] usb 5-1: Product: syz [ 1067.856254][ T29] usb 5-1: Manufacturer: syz [ 1067.868282][ T29] usb 5-1: SerialNumber: syz [ 1067.878386][ T29] usb 5-1: config 0 descriptor?? [ 1067.889245][ T29] ch341 5-1:0.0: ch341-uart converter detected [ 1068.122578][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 1068.131532][T21106] openvswitch: netlink: Message has 8 unknown bytes. [ 1068.142524][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.149699][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.157169][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.164618][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.171825][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.179170][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.186362][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.194238][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.201537][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.208898][ T9] usb 4-1: USB disconnect, device number 51 [ 1068.214925][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1068.214953][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1068.260091][ T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1068.311061][ T29] usb 5-1: failed to send control message: -71 [ 1068.344256][ T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1068.393138][ T29] usb 5-1: USB disconnect, device number 49 [ 1068.422679][ T29] ch341 5-1:0.0: device disconnected [ 1068.632272][ T5622] usb 2-1: 0:1 : does not exist [ 1068.741777][ T5622] usb 2-1: 0:2 : does not exist [ 1069.369323][ T5622] usb 2-1: USB disconnect, device number 48 [ 1069.584174][T21160] tipc: Enabling of bearer rejected, failed to enable media [ 1069.662821][T21147] udevd[21147]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.690221][ T9] kernel read not supported for file /video9 (pid: 9 comm: kworker/0:0) [ 1069.944420][T21158] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1069.963729][T21158] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1069.987594][T21158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1070.038521][T21158] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1070.308208][ T5622] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1071.751838][ T5622] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1071.869449][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.951477][ T5622] usb 2-1: config 0 descriptor?? [ 1071.963510][ T5622] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1072.038199][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1072.040509][T21198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1072.044293][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.118314][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1072.214795][T21185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1072.223407][T21185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1072.232385][T21185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1072.241336][T21185] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1072.363648][T21198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1072.385891][ T5708] kernel read not supported for file /video9 (pid: 5708 comm: kworker/0:3) [ 1072.644423][T21204] syzkaller0: entered promiscuous mode [ 1072.658836][T21204] syzkaller0: entered allmulticast mode [ 1072.685984][T21204] tipc: Enabled bearer , priority 0 [ 1072.707672][T21203] tipc: Resetting bearer [ 1072.791045][T21203] tipc: Disabling bearer [ 1073.067974][ T29] kernel read not supported for file /video9 (pid: 29 comm: kworker/1:1) [ 1073.236692][ T5622] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1073.398300][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1074.183389][ T5622] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 1074.200693][ T5622] usb 2-1: USB disconnect, device number 49 [ 1074.278238][T18308] Bluetooth: hci2: command 0x0406 tx timeout [ 1074.284504][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1074.292012][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1074.754739][ T9] kernel read not supported for file /video9 (pid: 9 comm: kworker/0:0) [ 1074.793276][ T5351] kernel read not supported for file /video9 (pid: 5351 comm: kworker/1:3) [ 1075.429282][T21253] netlink: 'syz.0.3356': attribute type 10 has an invalid length. [ 1075.437155][T21253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3356'. [ 1075.720635][T21253] team0: Port device geneve1 added [ 1075.738204][ T30] audit: type=1400 audit(1781543767.050:989): avc: denied { write } for pid=21230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.765992][T21256] trusted_key: encrypted_key: insufficient parameters specified [ 1075.833001][ T30] audit: type=1400 audit(1781543767.160:990): avc: denied { write } for pid=21223 comm="syz.2.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1075.883987][ T5351] kernel read not supported for file /video9 (pid: 5351 comm: kworker/1:3) [ 1076.184354][ T30] audit: type=1400 audit(1781543767.240:991): avc: denied { write } for pid=21260 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.354130][T21252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1076.373847][T21252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1076.411251][T21270] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 1076.426228][T21252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1076.461700][T21252] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1077.017953][T21276] 9p: Bad value for 'wfdno' [ 1077.528322][ T29] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1077.798154][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1077.823738][ T29] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1077.836177][ T30] audit: type=1400 audit(1781543769.160:992): avc: denied { kexec_image_load } for pid=21299 comm="syz.2.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1077.869581][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.897590][ T29] usb 5-1: Product: syz [ 1077.917895][ T29] usb 5-1: Manufacturer: syz [ 1077.920765][ T30] audit: type=1400 audit(1781543769.190:993): avc: denied { write } for pid=21271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.985846][ T29] usb 5-1: SerialNumber: syz [ 1078.016764][ T29] usb 5-1: config 0 descriptor?? [ 1078.037096][ T29] ch341 5-1:0.0: ch341-uart converter detected [ 1078.094507][ T30] audit: type=1400 audit(1781543769.420:994): avc: denied { write } for pid=21305 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.275617][T21304] netlink: 'syz.2.3365': attribute type 6 has an invalid length. [ 1078.448170][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1078.454238][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 1078.493371][ T29] usb 5-1: failed to send control message: -71 [ 1078.510005][ T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1078.528112][T18368] Bluetooth: hci4: command 0x0406 tx timeout [ 1078.536275][ T29] usb 5-1: USB disconnect, device number 50 [ 1078.553071][ T29] ch341 5-1:0.0: device disconnected [ 1079.187335][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 1079.260433][ T29] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1079.671035][ T29] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1079.683935][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.692416][ T5351] kernel read not supported for file /video9 (pid: 5351 comm: kworker/1:3) [ 1079.709465][ T29] usb 1-1: Product: syz [ 1079.716765][ T29] usb 1-1: Manufacturer: syz [ 1080.089912][ T29] usb 1-1: SerialNumber: syz [ 1080.105285][ T29] usb 1-1: config 0 descriptor?? [ 1080.117024][T21339] FAULT_INJECTION: forcing a failure. [ 1080.117024][T21339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.133024][ T29] ch341 1-1:0.0: ch341-uart converter detected [ 1080.171740][T21339] CPU: 1 UID: 0 PID: 21339 Comm: syz.1.3374 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.171764][T21339] Tainted: [L]=SOFTLOCKUP [ 1080.171769][T21339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1080.171776][T21339] Call Trace: [ 1080.171780][T21339] [ 1080.171785][T21339] dump_stack_lvl+0x100/0x190 [ 1080.171802][T21339] should_fail_ex.cold+0x5/0xa [ 1080.171818][T21339] _copy_from_user+0x2e/0xd0 [ 1080.171831][T21339] __sys_bpf+0x243/0x4b90 [ 1080.171848][T21339] ? __pfx___sys_bpf+0x10/0x10 [ 1080.171862][T21339] ? __schedule+0x126e/0x6730 [ 1080.171877][T21339] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1080.171892][T21339] ? rcu_is_watching+0x12/0xc0 [ 1080.171908][T21339] ? lock_release+0x24d/0x310 [ 1080.171919][T21339] ? __pfx___schedule+0x10/0x10 [ 1080.171940][T21339] __x64_sys_bpf+0x7b/0xc0 [ 1080.171956][T21339] do_syscall_64+0x115/0x870 [ 1080.171976][T21339] ? clear_bhb_loop+0x40/0x90 [ 1080.171989][T21339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.172001][T21339] RIP: 0033:0x7f9a7f59ce59 [ 1080.172011][T21339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.172023][T21339] RSP: 002b:00007f9a80494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1080.172035][T21339] RAX: ffffffffffffffda RBX: 00007f9a7f815fa0 RCX: 00007f9a7f59ce59 [ 1080.172043][T21339] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000009 [ 1080.172051][T21339] RBP: 00007f9a80494090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.172063][T21339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.172070][T21339] R13: 00007f9a7f816038 R14: 00007f9a7f815fa0 R15: 00007ffc6cbfb598 [ 1080.172082][T21339] [ 1080.176193][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1080.562173][ T29] usb 1-1: failed to send control message: -71 [ 1080.573008][ T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1080.603099][ T29] usb 1-1: USB disconnect, device number 57 [ 1080.619860][ T29] ch341 1-1:0.0: device disconnected [ 1080.630396][T21345] netlink: 'syz.2.3378': attribute type 1 has an invalid length. [ 1080.649001][T21345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.685387][ T30] audit: type=1400 audit(1781543772.010:995): avc: denied { read } for pid=21344 comm="syz.2.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1080.707438][T21343] ref_ctr increment failed for inode: 0xf7a offset: 0x7 ref_ctr_offset: 0x80002 of mm: 0xffff888039f3b300 [ 1080.828196][ T5708] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1080.949482][T21357] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1080.979483][ T5708] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1080.998159][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.998200][ T5351] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1081.041187][ T5708] usb 2-1: config 0 descriptor?? [ 1081.061578][ T5708] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1081.179540][ T5351] usb 5-1: Using ep0 maxpacket: 32 [ 1081.202075][ T5351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.215585][ T5351] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1081.238138][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.251165][ T5351] usb 5-1: Product: syz [ 1081.258464][ T5351] usb 5-1: Manufacturer: syz [ 1081.268172][ T5351] usb 5-1: SerialNumber: syz [ 1081.279858][ T5351] usb 5-1: config 0 descriptor?? [ 1081.294991][ T5351] cdc_ether 5-1:0.0: Descriptor too short [ 1081.301535][ T5351] usb 5-1: unsupported MDLM descriptors [ 1081.418192][ T5622] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1081.565589][T21343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.647470][T21343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.681385][T15401] usb 5-1: USB disconnect, device number 51 [ 1081.695050][ T5622] usb 1-1: Using ep0 maxpacket: 8 [ 1081.703354][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1081.730271][ T5622] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1081.744085][T21372] tipc: Failed to remove unknown binding: 66,1,1/0:3628198884/3628198886 [ 1081.744758][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.763201][ T5622] usb 1-1: config 0 descriptor?? [ 1082.043941][ T5622] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1082.127395][ T5708] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1082.326190][ T30] audit: type=1400 audit(1781543773.650:996): avc: denied { mounton } for pid=21378 comm="syz.2.3387" path="/676/file0" dev="tmpfs" ino=3837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1082.843721][T21387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.883809][T21387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.989160][ T5708] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 1083.026528][ T5708] usb 2-1: USB disconnect, device number 50 [ 1083.055946][ T30] audit: type=1400 audit(1781543774.300:997): avc: denied { execute } for pid=21361 comm="syz.0.3383" path="/648/file1" dev="tmpfs" ino=3643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1083.124384][T21387] gtp0: entered allmulticast mode [ 1083.164717][T21387] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1083.164717][ T30] audit: type=1400 audit(1781543774.490:998): avc: denied { mounton } for pid=21361 comm="syz.0.3383" path="/syzcgroup/unified/syz0" dev="pstore" ino=4011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 1083.234215][T21387] VFS: Can't find a romfs filesystem on dev nullb0. [ 1083.234215][T21387] [ 1083.265076][T21387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.277608][T21387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.296386][ T5708] usb 1-1: USB disconnect, device number 58 [ 1084.478746][T21416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3400'. [ 1084.566871][ T30] audit: type=1400 audit(1781543775.890:999): avc: denied { accept } for pid=21418 comm="syz.0.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1084.609099][T21419] netlink: 'syz.2.3396': attribute type 10 has an invalid length. [ 1084.616964][T21419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1085.911428][T21429] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1087.143859][T21448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1087.154082][T21448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1087.160332][T21448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1087.168138][T21448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1088.663584][ T5708] kernel read not supported for file /video9 (pid: 5708 comm: kworker/0:3) [ 1088.858427][T21468] syzkaller0: entered promiscuous mode [ 1088.885150][T21468] syzkaller0: entered allmulticast mode [ 1088.912925][T21471] syzkaller0: entered promiscuous mode [ 1088.919902][T21471] syzkaller0: entered allmulticast mode [ 1089.100708][T21486] 9p: Bad value for 'wfdno' [ 1089.118467][ T5351] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1089.239895][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1089.239905][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1089.239928][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1089.329522][T21494] Invalid source name [ 1089.347096][T21481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1089.355736][T18368] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 1089.362647][ T5351] usb 5-1: Using ep0 maxpacket: 32 [ 1089.367817][T21481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1089.375087][ T5351] usb 5-1: config 9 has an invalid interface number: 147 but max is 0 [ 1089.383565][ T5351] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.393786][T21481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1089.400513][ T5351] usb 5-1: config 9 has no interface number 0 [ 1089.406626][ T5351] usb 5-1: config 9 interface 147 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.418124][ T5351] usb 5-1: config 9 interface 147 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1089.432541][ T5351] usb 5-1: config 9 interface 147 has no altsetting 0 [ 1089.440962][ T5351] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=ed.3b [ 1089.450160][ T5351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.450319][T21481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1089.464190][ T5351] usb 5-1: Product: syz [ 1089.469586][ T5351] usb 5-1: Manufacturer: syz [ 1089.474375][ T5351] usb 5-1: SerialNumber: syz [ 1089.495212][T21501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1089.504194][T21501] netlink: 'syz.0.3421': attribute type 30 has an invalid length. [ 1089.565910][ T7358] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.586700][ T7358] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.607757][ T7358] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.626620][ T7358] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.834215][T21479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.848487][T21479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.873329][T21508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.971818][T21509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'. [ 1089.980791][T21509] openvswitch: netlink: Message has 8 unknown bytes. [ 1090.055935][ T5351] ushc 5-1:9.147: probe with driver ushc failed with error -71 [ 1090.117108][ T5351] usb 5-1: USB disconnect, device number 52 [ 1090.214185][T21527] syzkaller0: entered promiscuous mode [ 1090.227466][T21527] syzkaller0: entered allmulticast mode [ 1090.297497][ T30] audit: type=1400 audit(1781543781.620:1000): avc: denied { append } for pid=21519 comm="syz.2.3427" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1090.414869][T21530] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1090.451774][T21530] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1090.466787][T21534] atomic_op ffff8880779b7998 conn xmit_atomic 0000000000000000 [ 1090.867516][ T5351] kernel read not supported for file /video9 (pid: 5351 comm: kworker/1:3) [ 1090.998242][T18368] Bluetooth: hci1: command 0x0406 tx timeout [ 1091.132453][T21545] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 1091.140384][T21545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3432'. [ 1091.370241][T21556] atomic_op ffff88803661e998 conn xmit_atomic 0000000000000000 [ 1091.390386][ T30] audit: type=1326 audit(1781543782.720:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.498231][T18308] Bluetooth: hci2: command 0x0406 tx timeout [ 1091.504573][T18308] Bluetooth: hci4: command 0x0406 tx timeout [ 1091.512082][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1091.533972][ T30] audit: type=1326 audit(1781543782.750:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.561967][ T30] audit: type=1326 audit(1781543782.750:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.590082][ T30] audit: type=1326 audit(1781543782.750:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.617130][ T30] audit: type=1326 audit(1781543782.750:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.644074][ T30] audit: type=1326 audit(1781543782.760:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.670760][ T30] audit: type=1326 audit(1781543782.760:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.697492][ T30] audit: type=1326 audit(1781543782.760:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.724241][ T30] audit: type=1326 audit(1781543782.760:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21554 comm="syz.1.3437" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9a7f59ce59 code=0x7ffc0000 [ 1091.751230][ T5708] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1091.778311][ T5351] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1091.908154][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 1091.914518][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.925741][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.935537][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1091.948391][ T5708] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1091.956925][ T5351] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1091.957810][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.976141][ T5708] usb 4-1: config 0 descriptor?? [ 1092.014365][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.024734][ T5351] usb 3-1: config 0 descriptor?? [ 1092.036844][ T5351] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1092.184281][T21568] syzkaller0: entered promiscuous mode [ 1092.189950][T21568] syzkaller0: entered allmulticast mode [ 1092.472309][ T5708] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1092.610749][ T5708] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1092.719004][ T5708] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1092.875800][ T5708] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1093.013837][ T5708] shield 0003:0955:7214.0007: unknown main item tag 0x0 [ 1093.344700][ T5708] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 1093.391091][ T5708] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 1093.404047][ T5708] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1093.558285][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1093.705263][T11611] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1093.717446][ T5622] usb 4-1: USB disconnect, device number 52 [ 1093.741430][T11611] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1093.767926][ T5351] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1093.895869][T11611] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1093.897145][T21596] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3448'. [ 1094.019464][T21596] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1094.042780][T11611] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1094.087225][ T5724] kernel read not supported for file /video9 (pid: 5724 comm: kworker/0:5) [ 1094.171870][T21603] tun0: tun_chr_ioctl cmd 1074025675 [ 1094.177317][T21603] tun0: persist enabled [ 1094.182431][T21603] tun0: tun_chr_ioctl cmd 1074025675 [ 1094.187896][T21603] tun0: persist disabled [ 1094.200915][T21603] xt_hashlimit: size too large, truncated to 1048576 [ 1094.211756][ T5351] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1094.227680][ T5351] usb 3-1: USB disconnect, device number 43 [ 1094.318982][T11611] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1094.500813][T11611] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1094.510045][T11611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.518318][T11611] usb 1-1: Product: syz [ 1094.522477][T11611] usb 1-1: Manufacturer: syz [ 1094.527039][T11611] usb 1-1: SerialNumber: syz [ 1094.533318][T11611] usb 1-1: config 0 descriptor?? [ 1094.540516][T11611] ch341 1-1:0.0: ch341-uart converter detected [ 1095.552900][T21617] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1095.567671][T11611] usb 1-1: failed to send control message: -71 [ 1095.589305][T11611] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1095.601005][T21617] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1095.611154][T21617] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1095.624463][T11611] usb 1-1: USB disconnect, device number 59 [ 1095.633442][T21617] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1095.640303][T11611] ch341 1-1:0.0: device disconnected [ 1095.949922][T11611] kernel read not supported for file /video9 (pid: 11611 comm: kworker/0:4) [ 1096.021207][T21650] tipc: Started in network mode [ 1096.026138][T21650] tipc: Node identity 5e0f00c0ac35, cluster identity 4711 [ 1096.037464][T21650] tipc: Enabled bearer , priority 0 [ 1096.055782][T21649] tipc: Disabling bearer [ 1096.184427][T21658] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3466'. [ 1096.195811][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1096.195827][ T30] audit: type=1400 audit(1781543787.530:1024): avc: denied { mount } for pid=21654 comm="syz.2.3466" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1096.239599][T15401] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1096.282525][ T30] audit: type=1400 audit(1781543787.530:1025): avc: denied { search } for pid=21654 comm="syz.2.3466" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1096.318393][ T30] audit: type=1400 audit(1781543787.530:1026): avc: denied { search } for pid=21654 comm="syz.2.3466" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1096.352348][ T30] audit: type=1400 audit(1781543787.530:1027): avc: denied { write search } for pid=21654 comm="syz.2.3466" name="/" dev="configfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1096.429698][T15401] usb 5-1: Using ep0 maxpacket: 8 [ 1096.438204][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1096.439192][T15401] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1096.464471][T15401] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1096.492898][T15401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 48, changing to 9 [ 1096.512181][T15401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8240, setting to 1024 [ 1096.542460][T15401] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1096.560885][T15401] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1096.571274][T15401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1096.579406][T15401] usb 5-1: Product: syz [ 1096.586585][T15401] usb 5-1: Manufacturer: syz [ 1096.594573][T15401] usb 5-1: SerialNumber: syz [ 1096.621247][T15401] usb 5-1: config 0 descriptor?? [ 1096.915836][T15401] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1096.929970][T15401] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1097.209630][T15401] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1097.227623][T15401] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 1097.237623][T15401] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1097.247139][ T5622] kernel read not supported for file /video9 (pid: 5622 comm: kworker/0:2) [ 1097.255854][T15401] usb 5-1: USB disconnect, device number 53 [ 1097.638532][T18308] Bluetooth: hci2: command 0x0406 tx timeout [ 1097.644624][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 1097.664017][T21700] tipc: Enabled bearer , priority 0 [ 1097.672636][T21699] tipc: Disabling bearer [ 1097.718100][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1098.423605][T21697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3477'. [ 1098.438240][ T30] audit: type=1400 audit(1781543789.750:1028): avc: denied { bind } for pid=21695 comm="syz.2.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1098.498462][T21714] [U]  [ 1098.550893][ T30] audit: type=1400 audit(1781543789.750:1029): avc: denied { setopt } for pid=21695 comm="syz.2.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1098.582483][T21721] xt_nat: multiple ranges no longer supported [ 1098.788782][ T29] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1098.864813][T21721] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1098.960071][T21730] atomic_op ffff888078ae6998 conn xmit_atomic 0000000000000000 [ 1098.980178][ T29] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1099.042121][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.125811][ T29] usb 1-1: Product: syz [ 1099.154472][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.161611][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.188963][ T5351] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1099.200304][ T29] usb 1-1: Manufacturer: syz [ 1099.211847][ T29] usb 1-1: SerialNumber: syz [ 1099.238878][ T29] usb 1-1: config 0 descriptor?? [ 1099.256081][ T29] ch341 1-1:0.0: ch341-uart converter detected [ 1099.368382][ T5351] usb 5-1: Using ep0 maxpacket: 32 [ 1099.377253][ T5351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1099.390020][ T5351] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1099.409293][ T5351] usb 5-1: can't read configurations, error -61 [ 1099.591520][ T5351] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1099.655835][T11611] kernel read not supported for file /video9 (pid: 11611 comm: kworker/0:4) [ 1099.788652][ T5351] usb 5-1: Using ep0 maxpacket: 32 [ 1099.820237][ T5351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1099.835787][ T29] usb 1-1: failed to send control message: -71 [ 1099.848250][ T29] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1099.857841][ T5351] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1099.874346][ T5351] usb 5-1: can't read configurations, error -61 [ 1099.880852][ T29] usb 1-1: USB disconnect, device number 60 [ 1099.889552][ T5351] usb usb5-port1: attempt power cycle [ 1099.895668][ T29] ch341 1-1:0.0: device disconnected [ 1100.238286][ T5351] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1100.279107][ T5351] usb 5-1: Using ep0 maxpacket: 32 [ 1100.289682][ T5351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1100.305722][ T5351] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1100.323531][ T5351] usb 5-1: can't read configurations, error -61 [ 1100.388836][ T5622] IPVS: starting estimator thread 0... [ 1100.458133][ T5351] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1100.478117][T21748] IPVS: using max 51 ests per chain, 122400 per kthread [ 1100.508656][ T5351] usb 5-1: Using ep0 maxpacket: 32 [ 1100.522389][ T5351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1100.540309][ T5351] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1100.555626][T21754] 9pnet_fd: Insufficient options for proto=fd [ 1100.556725][ T5351] usb 5-1: can't read configurations, error -61 [ 1100.580038][ T5351] usb usb5-port1: unable to enumerate USB device [ 1101.216415][T21770] Invalid source name [ 1101.225129][ T49] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1101.232168][ T5351] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1101.390859][ T5351] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1101.407588][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.416053][ T5351] usb 2-1: Product: syz [ 1101.421272][ T5351] usb 2-1: Manufacturer: syz [ 1101.425896][ T5351] usb 2-1: SerialNumber: syz [ 1101.431996][ T5351] usb 2-1: config 0 descriptor?? [ 1101.441660][ T5351] ch341 2-1:0.0: ch341-uart converter detected [ 1102.531369][ T5351] usb 2-1: failed to send control message: -71 [ 1102.581389][ T5351] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1103.225146][T21776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1103.228022][ T5351] usb 2-1: USB disconnect, device number 51 [ 1103.239974][T21776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1103.240665][ T5351] ch341 2-1:0.0: device disconnected [ 1103.289395][T21796] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3505'. [ 1103.318414][T21776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1103.352142][T21776] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1103.559375][T18308] Bluetooth: hci1: command 0x0406 tx timeout [ 1104.282135][T21808] Invalid source name [ 1104.305595][T18308] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 1104.406052][T21814] Invalid source name [ 1104.446863][T18308] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1104.534815][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 1105.288403][T21825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1105.295949][T21825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1105.303012][T21825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1105.309736][T21825] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1106.083786][ T30] audit: type=1400 audit(1781543797.280:1030): avc: denied { create } for pid=21837 comm="syz.0.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1106.106966][ T30] audit: type=1400 audit(1781543797.290:1031): avc: denied { connect } for pid=21837 comm="syz.0.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1106.311192][ T30] audit: type=1400 audit(1781543797.640:1032): avc: denied { ioctl } for pid=21851 comm="syz.3.3520" path="socket:[57004]" dev="sockfs" ino=57004 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1106.313843][T21854] Invalid source name [ 1106.348636][ T49] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 1106.918110][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 1107.492919][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1107.498994][T18308] Bluetooth: hci3: command 0x0406 tx timeout [ 1107.891110][ T5622] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1108.059369][ T5622] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1108.277033][T21878] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1108.285928][T21878] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1108.391342][ T30] audit: type=1326 audit(1781543799.690:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21872 comm="syz.3.3528" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f239099ce59 code=0x0 [ 1108.419563][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.770914][T21875] vivid-006: kernel_thread() failed [ 1108.805490][ T5622] usb 3-1: config 0 descriptor?? [ 1108.830919][ T5622] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1110.057028][ T5622] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1110.157968][T21902] Invalid source name [ 1110.468585][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.963734][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1111.222223][ T5622] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1111.250994][ T5622] usb 3-1: USB disconnect, device number 44 [ 1112.339226][T21929] atomic_op ffff88803930f198 conn xmit_atomic 0000000000000000 [ 1113.542468][T21939] pim6reg: entered allmulticast mode [ 1113.561045][ T30] audit: type=1400 audit(1781543804.880:1034): avc: denied { ioctl } for pid=21948 comm="syz.0.3544" path="socket:[57738]" dev="sockfs" ino=57738 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1113.596645][T21939] pim6reg: left allmulticast mode [ 1113.658410][ T5351] libceph: connect (1)[c::]:6789 error -101 [ 1113.706357][ T5351] libceph: mon0 (1)[c::]:6789 connect error [ 1113.735903][T21954] Invalid source name [ 1113.971822][ T5351] libceph: connect (1)[c::]:6789 error -101 [ 1113.984323][T21959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1113.992227][T21959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1113.993413][ T5351] libceph: mon0 (1)[c::]:6789 connect error [ 1114.006359][T21959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1114.019078][T21959] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1114.167030][T21947] ceph: No mds server is up or the cluster is laggy [ 1114.318326][T15401] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1114.415208][ T5351] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1114.705705][T15401] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1114.717975][T15401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.732826][ T5351] usb 4-1: Using ep0 maxpacket: 16 [ 1114.739740][T15401] usb 5-1: Product: syz [ 1114.747855][ T5351] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.763245][T15401] usb 5-1: Manufacturer: syz [ 1114.769095][ T5351] usb 4-1: config 0 has no interfaces? [ 1114.774948][T15401] usb 5-1: SerialNumber: syz [ 1114.784360][ T5351] usb 4-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=e8.32 [ 1114.794809][ T5351] usb 4-1: New USB device strings: Mfr=218, Product=177, SerialNumber=95 [ 1114.805224][ T5351] usb 4-1: Product: syz [ 1114.812731][ T5351] usb 4-1: Manufacturer: syz [ 1114.818126][ T5351] usb 4-1: SerialNumber: syz [ 1114.839197][T15401] usb 5-1: config 0 descriptor?? [ 1114.847183][ T5351] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 1114.897402][T15401] ch341 5-1:0.0: ch341-uart converter detected [ 1115.255634][ T5708] apple-mfi-fastcharge 4-1: USB disconnect, device number 53 [ 1115.421696][T15401] usb 5-1: failed to send control message: -71 [ 1115.430229][T15401] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1115.443233][T15401] usb 5-1: USB disconnect, device number 58 [ 1115.449969][T15401] ch341 5-1:0.0: device disconnected [ 1116.405920][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1116.406601][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 1116.412007][T18368] Bluetooth: hci2: command 0x0406 tx timeout [ 1116.424676][T18308] Bluetooth: hci1: command 0x0406 tx timeout [ 1116.430769][ T30] audit: type=1400 audit(1781543806.970:1035): avc: denied { create } for pid=21987 comm="syz.2.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1116.914035][ T30] audit: type=1400 audit(1781543807.000:1036): avc: denied { setopt } for pid=21987 comm="syz.2.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1117.174369][T22007] Invalid source name [ 1117.182871][T21997] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 1117.675894][T22002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1117.683449][T22002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1117.690420][T22002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1117.702541][T22002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1117.960799][ T5622] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1118.155071][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1118.170743][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1118.389852][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1118.416284][ T5622] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1118.433716][ T5622] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1118.449732][ T5622] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1118.463345][T22031] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1118.475791][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1118.487181][ T30] audit: type=1400 audit(1781543809.810:1037): avc: denied { watch } for pid=22026 comm="syz.1.3563" path="/692/file1" dev="tmpfs" ino=3897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1118.509965][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1118.522922][ T5622] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1118.540907][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1118.549187][ T5622] usb 1-1: Product: syz [ 1118.553405][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1118.562747][ T5622] usb 1-1: Manufacturer: syz [ 1118.567452][ T5622] usb 1-1: SerialNumber: syz [ 1118.941675][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1118.957084][ T5622] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1118.976782][ T5622] usb 1-1: USB disconnect, device number 61 [ 1119.258187][T21997] Bluetooth: hci1: command 0x0406 tx timeout [ 1119.311064][ T5622] usblp0: removed [ 1119.374380][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1119.393892][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1119.406092][T22027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1119.610296][T22050] netlink: 'syz.4.3569': attribute type 10 has an invalid length. [ 1119.718162][T21997] Bluetooth: hci3: command 0x0406 tx timeout [ 1119.718225][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 1119.730411][T21997] Bluetooth: hci2: command 0x0406 tx timeout [ 1121.188210][ T5708] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1121.359813][ T5708] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1121.372435][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.383683][ T5708] usb 3-1: config 0 descriptor?? [ 1121.391465][ T5708] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1122.330359][ T30] audit: type=1400 audit(1781543813.660:1038): avc: denied { write } for pid=22096 comm="syz.4.3583" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1123.373956][ T30] audit: type=1400 audit(1781543814.410:1039): avc: denied { map } for pid=22090 comm="syz.0.3581" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1123.445387][ T5708] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1123.658155][ T5351] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1123.880683][ T5351] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1123.895470][T22123] __nla_validate_parse: 2 callbacks suppressed [ 1123.895541][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1123.900419][ T5351] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1123.928756][ T5708] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 1123.939006][ T5351] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1123.949910][ T5351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.971961][ T5351] usb 1-1: Product: syz [ 1123.972638][ T5708] usb 3-1: USB disconnect, device number 45 [ 1123.982161][ T5351] usb 1-1: Manufacturer: syz [ 1123.992455][ T5351] usb 1-1: SerialNumber: syz [ 1124.010389][ T5351] usb 1-1: config 0 descriptor?? [ 1124.022162][ T5351] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1124.038127][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1124.223078][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1124.241007][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.259260][ T9] usb 4-1: Product: syz [ 1124.268362][ T9] usb 4-1: Manufacturer: syz [ 1124.279529][ T9] usb 4-1: SerialNumber: syz [ 1124.300028][ T9] usb 4-1: config 0 descriptor?? [ 1124.318603][ T9] ch341 4-1:0.0: ch341-uart converter detected [ 1124.402395][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 1124.735694][ T5351] gspca_sunplus: reg_r err -71 [ 1124.747346][ T5351] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1124.839980][ T5351] usb 1-1: USB disconnect, device number 62 [ 1125.288165][ T9] usb 4-1: failed to send control message: -71 [ 1125.294437][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1125.306150][ T9] usb 4-1: USB disconnect, device number 54 [ 1125.319495][ T9] ch341 4-1:0.0: device disconnected [ 1127.977362][ T30] audit: type=1400 audit(1781543819.300:1040): avc: denied { create } for pid=22162 comm="syz.3.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1128.377574][ T30] audit: type=1400 audit(1781543819.700:1041): avc: denied { ioctl } for pid=22162 comm="syz.3.3596" path="socket:[58183]" dev="sockfs" ino=58183 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1128.547570][T22174] netlink: 'syz.4.3598': attribute type 10 has an invalid length. [ 1128.555451][T22174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 1139.166686][ C1] sched: DL replenish lagged too much [ 1174.928096][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1175.185084][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.569017][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.580425][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.700424][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.726225][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.552543][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.574503][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1395.964886][T18156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.698356][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.709324][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.350800][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.362173][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1521.961992][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 1522.068146][ T31] Tainted: G L syzkaller #0 [ 1522.154072][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1522.268518][ T31] task:kworker/0:0 state:D stack:22112 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1522.407609][ T31] Workqueue: events switchdev_deferred_process_work [ 1522.758904][ T31] Call Trace: [ 1522.794971][ T31] [ 1522.880438][ T31] __schedule+0x125c/0x6730 [ 1522.927024][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1523.009281][ T31] ? __pfx___schedule+0x10/0x10 [ 1523.053210][ T31] ? rcu_is_watching+0x12/0xc0 [ 1523.103070][ T31] ? schedule+0x2bf/0x390 [ 1523.120285][ T31] ? lock_release+0x24d/0x310 [ 1523.173553][ T31] schedule+0xdd/0x390 [ 1523.212622][ T31] schedule_preempt_disabled+0x13/0x30 [ 1523.279506][ T31] __mutex_lock+0xccc/0x1bd0 [ 1523.320026][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1523.368150][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 1523.436472][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1523.501330][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 1523.534258][ T31] ? rcu_is_watching+0x12/0xc0 [ 1523.543142][ T31] ? lock_acquire+0x301/0x370 [ 1523.638503][ T31] ? rcu_is_watching+0x12/0xc0 [ 1523.755711][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1523.799186][ T31] ? rtnl_lock+0x9/0x20 [ 1523.823326][ T31] switchdev_deferred_process_work+0xe/0x20 [ 1523.883612][ T31] process_one_work+0xa23/0x1940 [ 1523.956621][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1524.049621][ T31] ? __pfx_switchdev_deferred_process_work+0x10/0x10 [ 1524.074202][ T31] worker_thread+0x5ef/0xe50 [ 1524.117328][ T31] ? kthread+0x13a/0x450 [ 1524.510896][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1524.525458][ T31] kthread+0x370/0x450 [ 1524.542851][ T31] ? __pfx_kthread+0x10/0x10 [ 1524.589868][ T31] ret_from_fork+0x72b/0xd50 [ 1524.621236][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1524.677851][ T31] ? __switch_to+0x800/0x10f0 [ 1524.748820][ T31] ? __pfx_kthread+0x10/0x10 [ 1524.799873][ T31] ret_from_fork_asm+0x1a/0x30 [ 1524.854694][ T31] [ 1524.908345][ T31] INFO: lockdep is turned off. [ 1524.956892][ T31] NMI backtrace for cpu 0 [ 1524.956923][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1524.956952][ T31] Tainted: [L]=SOFTLOCKUP [ 1524.956960][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1524.956974][ T31] Call Trace: [ 1524.956980][ T31] [ 1524.956988][ T31] dump_stack_lvl+0x100/0x190 [ 1524.957014][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1524.957037][ T31] ? __rcu_read_unlock+0x26a/0x5e0 [ 1524.957058][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1524.957082][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1524.957109][ T31] sys_info+0x141/0x190 [ 1524.957130][ T31] watchdog+0xcb1/0x1030 [ 1524.957162][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1524.957185][ T31] ? __pfx_watchdog+0x10/0x10 [ 1524.957215][ T31] ? __kthread_parkme+0x18c/0x230 [ 1524.957239][ T31] ? kthread+0x13a/0x450 [ 1524.957263][ T31] ? __pfx_watchdog+0x10/0x10 [ 1524.957291][ T31] kthread+0x370/0x450 [ 1524.957315][ T31] ? __pfx_kthread+0x10/0x10 [ 1524.957342][ T31] ret_from_fork+0x72b/0xd50 [ 1524.957364][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1524.957387][ T31] ? __switch_to+0x800/0x10f0 [ 1524.957416][ T31] ? __pfx_kthread+0x10/0x10 [ 1524.957441][ T31] ret_from_fork_asm+0x1a/0x30 [ 1524.957474][ T31] [ 1524.957482][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1525.146733][ C1] NMI backtrace for cpu 1 [ 1525.146752][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1525.146780][ C1] Tainted: [L]=SOFTLOCKUP [ 1525.146787][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1525.146801][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1525.146835][ C1] Code: f6 92 02 e9 43 47 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 06 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1525.146855][ C1] RSP: 0000:ffffc90000197e00 EFLAGS: 00000246 [ 1525.146871][ C1] RAX: 000000000a4b4a2c RBX: ffff88801e2b2540 RCX: ffffffff8b8992b5 [ 1525.146885][ C1] RDX: 0000000000000001 RSI: ffffffff8c1c7f80 RDI: ffffffff81de5e27 [ 1525.146899][ C1] RBP: ffffed1003c564a8 R08: 0000000000000000 R09: ffffed10170a678d [ 1525.146912][ C1] R10: ffff8880b8533c6b R11: ffffffff81d534bc R12: 0000000000000000 [ 1525.146925][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1525.146939][ C1] FS: 0000000000000000(0000) GS:ffff88812447d000(0000) knlGS:0000000000000000 [ 1525.146957][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1525.146971][ C1] CR2: 00005597976184b0 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1525.146984][ C1] Call Trace: [ 1525.146991][ C1] [ 1525.146997][ C1] default_idle+0x9/0x10 [ 1525.147016][ C1] default_idle_call+0x6c/0xb0 [ 1525.147035][ C1] do_idle+0x3a7/0x5b0 [ 1525.147058][ C1] ? __pfx_do_idle+0x10/0x10 [ 1525.147080][ C1] ? finish_task_switch.isra.0+0x14c/0x1010 [ 1525.147106][ C1] cpu_startup_entry+0x4f/0x60 [ 1525.147129][ C1] start_secondary+0x21d/0x2d0 [ 1525.147149][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1525.147172][ C1] common_startup_64+0x13e/0x158 [ 1525.147204][ C1] [ 1526.003524][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1526.010418][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1526.021091][ T31] Tainted: [L]=SOFTLOCKUP [ 1526.025402][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1526.035447][ T31] Call Trace: [ 1526.038715][ T31] [ 1526.041635][ T31] dump_stack_lvl+0x100/0x190 [ 1526.046311][ T31] vpanic+0x552/0x970 [ 1526.050291][ T31] ? __pfx_vpanic+0x10/0x10 [ 1526.054796][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1526.060957][ T31] panic+0xd1/0xe0 [ 1526.064674][ T31] ? __pfx_panic+0x10/0x10 [ 1526.069084][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1526.075238][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1526.081389][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1526.087543][ T31] ? watchdog.cold+0x1ec/0x234 [ 1526.092302][ T31] ? watchdog+0xcc1/0x1030 [ 1526.096731][ T31] watchdog.cold+0x1fd/0x234 [ 1526.101319][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1526.107389][ T31] ? __pfx_watchdog+0x10/0x10 [ 1526.112072][ T31] ? __kthread_parkme+0x18c/0x230 [ 1526.117096][ T31] ? kthread+0x13a/0x450 [ 1526.121342][ T31] ? __pfx_watchdog+0x10/0x10 [ 1526.126020][ T31] kthread+0x370/0x450 [ 1526.130091][ T31] ? __pfx_kthread+0x10/0x10 [ 1526.134684][ T31] ret_from_fork+0x72b/0xd50 [ 1526.139272][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1526.144379][ T31] ? __switch_to+0x800/0x10f0 [ 1526.149063][ T31] ? __pfx_kthread+0x10/0x10 [ 1526.153656][ T31] ret_from_fork_asm+0x1a/0x30 [ 1526.158428][ T31] [ 1526.161667][ T31] Kernel Offset: disabled [ 1526.165967][ T31] Rebooting in 86400 seconds..