last executing test programs: 13m26.054132867s ago: executing program 2 (id=3): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 13m24.933948811s ago: executing program 2 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r5}}], 0x20, 0x2400e044}, 0x0) 13m23.6078739s ago: executing program 2 (id=7): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 13m21.730954618s ago: executing program 3 (id=4): r0 = inotify_init() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) read(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) dup2(r0, r3) 13m18.559843683s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x20000000, 0x800000}], 0x0) 13m17.15121113s ago: executing program 3 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 13m5.624714362s ago: executing program 32 (id=7): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 13m1.686256517s ago: executing program 33 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 12m40.118791856s ago: executing program 0 (id=43): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) ioperm(0x1, 0x8000, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 12m38.114970017s ago: executing program 0 (id=44): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x10000}, 0x18) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r4, 0x2, &(0x7f0000000000)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x3}]) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/raw6\x00') read$FUSE(r5, &(0x7f0000003800)={0x2020}, 0x2020) 12m29.891676962s ago: executing program 0 (id=51): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpo']) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1d) 12m28.617461824s ago: executing program 0 (id=53): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 12m27.161627261s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040080) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806, 0x7c0}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2, r5}) 12m24.84076248s ago: executing program 0 (id=57): ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 12m9.46795702s ago: executing program 34 (id=57): ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1m34.731545817s ago: executing program 4 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000ff"], 0x5c}}, 0x0) 1m33.104118187s ago: executing program 4 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="034402000800000008000500", @ANYRES32=r1, @ANYBLOB="140012800b0001006d616373656300bbbbbb00000a000200ff"], 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m31.870610467s ago: executing program 4 (id=1927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}}, 0x0) 1m31.355076338s ago: executing program 4 (id=1931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) mq_open(0x0, 0x840, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r6, 0xffffffffffffffff, 0x0) 1m29.863307194s ago: executing program 4 (id=1938): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1000000) 1m28.680091622s ago: executing program 4 (id=1940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20c40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x8}) 1m12.107173118s ago: executing program 35 (id=1940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20c40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x8}) 1m5.058551656s ago: executing program 5 (id=2010): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000004c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)="62042700ffff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24", 0x31}, {&(0x7f0000000540)="ec2091f1f9f204b25eaf6b46fe022ea5112d0485e8", 0x15}], 0x2}, 0x20004004) 1m2.401382516s ago: executing program 5 (id=2015): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000440)) 1m1.275832353s ago: executing program 5 (id=2019): unshare(0x400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404840c}, 0x40040) 1m0.683285374s ago: executing program 5 (id=2022): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) 55.857217299s ago: executing program 5 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) 54.716435917s ago: executing program 5 (id=2039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 52.95102558s ago: executing program 6 (id=2048): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414"], 0x18) 49.080358033s ago: executing program 6 (id=2054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001cb4d0d6850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) 48.712058109s ago: executing program 6 (id=2056): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) 48.59860801s ago: executing program 6 (id=2058): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e8) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 47.423516278s ago: executing program 6 (id=2060): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x5, 0x0, 0xfffffff8}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 45.882553044s ago: executing program 6 (id=2063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 43.705297345s ago: executing program 7 (id=2070): r0 = open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) truncate(&(0x7f0000000080)='./bus\x00', 0x95a) 42.568062085s ago: executing program 7 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) mq_open(0x0, 0x840, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r6, 0xffffffffffffffff, 0x0) 41.047894347s ago: executing program 7 (id=2074): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xfff8}, {0xffff, 0xffff}, {0x16, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x0, 0x81, 0xc, 0x2, 0x12, 0x5}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 37.543426335s ago: executing program 36 (id=2039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 32.5345171s ago: executing program 7 (id=2094): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x0, "9e39baea"}, @global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) 28.640537957s ago: executing program 37 (id=2063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 28.444569411s ago: executing program 7 (id=2101): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) 27.870428395s ago: executing program 7 (id=2103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x48e8d4545d160e34, 0xffffffffffffffff, 0x1}) 22.317815658s ago: executing program 1 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x44}}, 0x80) 22.127849487s ago: executing program 1 (id=2111): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x7ffc, 0x7f, 0x192, 0xd, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x9, 0xab, 0xe285}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x4040) 20.040648024s ago: executing program 1 (id=2112): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x18, &(0x7f0000000400)={0x40, 0x5, 0x5, {0x5, 0x1, "3cc1e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17.632854434s ago: executing program 1 (id=2113): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000003c0)={0x2, 0x2, 0x3, 0x2006, r0}) 16.638323883s ago: executing program 1 (id=2114): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x30, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x6048004) 16.419212154s ago: executing program 1 (id=2115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6300f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 11.378819766s ago: executing program 38 (id=2103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x48e8d4545d160e34, 0xffffffffffffffff, 0x1}) 0s ago: executing program 39 (id=2115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6300f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) kernel console output (not intermixed with test programs): axpacket: 32 [ 607.095757][ T5996] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 607.095833][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.470551][ T5996] usb 8-1: config 0 descriptor?? [ 608.341909][ T5996] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 608.638883][ T5996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 608.656008][ T5996] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 608.656122][ T5996] usb 8-1: media controller created [ 608.752480][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.897528][ T5996] DVB: Unable to find symbol dib7000p_attach() [ 609.897559][ T5996] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 610.053280][ T5821] Bluetooth: hci3: unexpected event for opcode 0x041c [ 610.223093][ T5996] rc_core: IR keymap rc-dib0700-rc5 not found [ 610.223174][ T5996] Registered IR keymap rc-empty [ 610.226368][ T5996] dvb-usb: could not initialize remote control. [ 610.226491][ T5996] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 610.410751][ T37] audit: type=1400 audit(1766261293.489:34): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9266 comm="syz.6.791" daddr=fe80::aa dest=17959 [ 610.415799][ T37] audit: type=1400 audit(1766261293.499:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9266 comm="syz.6.791" daddr=::ffff:127.0.0.1 dest=15 [ 610.970000][ T5996] usb 8-1: USB disconnect, device number 4 [ 611.258556][ T9283] netlink: 'syz.1.797': attribute type 2 has an invalid length. [ 611.258584][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 611.429206][ T5996] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 611.684995][ T37] audit: type=1400 audit(1766261294.769:36): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9286 comm="syz.4.798" daddr=fe80::aa dest=17959 [ 611.685096][ T37] audit: type=1400 audit(1766261294.769:37): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9286 comm="syz.4.798" daddr=::ffff:127.0.0.1 dest=15 [ 612.699246][ T9296] netlink: 84 bytes leftover after parsing attributes in process `syz.1.802'. [ 614.341475][ T5821] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 614.341748][ T5821] Bluetooth: hci3: Injecting HCI hardware error event [ 614.343901][ T5812] Bluetooth: hci3: hardware error 0x00 [ 614.709395][ T37] audit: type=1400 audit(1766261297.789:38): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9309 comm="syz.6.806" daddr=fe80::aa dest=17959 [ 614.720871][ T37] audit: type=1400 audit(1766261297.799:39): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9309 comm="syz.6.806" daddr=::ffff:127.0.0.1 dest=15 [ 615.878100][ T37] audit: type=1400 audit(1766261298.959:40): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9324 comm="syz.7.814" daddr=fe80::aa dest=17959 [ 615.880811][ T37] audit: type=1400 audit(1766261298.969:41): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9324 comm="syz.7.814" daddr=::ffff:127.0.0.1 dest=15 [ 616.360234][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 619.769380][ T37] audit: type=1400 audit(1766261302.849:42): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9342 comm="syz.1.819" daddr=fe80::aa dest=17959 [ 619.773529][ T37] audit: type=1400 audit(1766261302.859:43): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9342 comm="syz.1.819" daddr=::ffff:127.0.0.1 dest=15 [ 621.102030][ T37] audit: type=1400 audit(1766261304.189:44): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9356 comm="syz.4.823" daddr=fe80::aa dest=17959 [ 621.104861][ T37] audit: type=1400 audit(1766261304.189:45): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9356 comm="syz.4.823" daddr=::ffff:127.0.0.1 dest=15 [ 621.325551][ T9364] netlink: 28 bytes leftover after parsing attributes in process `syz.7.824'. [ 621.733164][ T37] audit: type=1400 audit(1766261304.809:46): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9369 comm="syz.7.828" daddr=fe80::aa dest=17959 [ 621.733293][ T37] audit: type=1400 audit(1766261304.819:47): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9369 comm="syz.7.828" daddr=::ffff:127.0.0.1 dest=15 [ 624.040470][ T5812] Bluetooth: hci1: unexpected event for opcode 0x080c [ 624.099717][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 624.136090][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.839'. [ 625.121669][ T37] audit: type=1400 audit(1766261308.209:48): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9404 comm="syz.6.842" daddr=fe80::aa dest=17959 [ 625.123851][ T37] audit: type=1400 audit(1766261308.209:49): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9404 comm="syz.6.842" daddr=::ffff:127.0.0.1 dest=15 [ 626.527208][ T37] audit: type=1400 audit(1766261309.609:50): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9422 comm="syz.4.847" daddr=fe80::aa dest=17959 [ 626.527330][ T37] audit: type=1400 audit(1766261309.609:51): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9422 comm="syz.4.847" daddr=::ffff:127.0.0.1 dest=15 [ 629.061682][ T9469] ªªªªª2: renamed from veth0_vlan (while UP) [ 629.068459][ T9467] netlink: 232 bytes leftover after parsing attributes in process `syz.4.865'. [ 630.360542][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.591079][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'. [ 630.790006][ T8321] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 630.951494][ T8321] usb 7-1: Using ep0 maxpacket: 16 [ 630.953862][ T8321] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 630.953924][ T8321] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 630.953952][ T8321] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 630.953980][ T8321] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 630.954004][ T8321] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 630.954032][ T8321] usb 7-1: config 1 interface 0 has no altsetting 0 [ 630.954166][ T8321] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 630.954184][ T8321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.068234][ T8321] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 631.299982][ T8321] scsi host1: usb-storage 7-1:1.0 [ 631.495922][ T9355] usb 7-1: USB disconnect, device number 2 [ 633.525020][ T37] audit: type=1400 audit(1766261316.609:52): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9529 comm="syz.7.890" daddr=fe80::aa dest=17959 [ 633.525585][ T37] audit: type=1400 audit(1766261316.609:53): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9529 comm="syz.7.890" daddr=::ffff:127.0.0.1 dest=15 [ 636.863973][ T5812] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 638.542191][ T37] audit: type=1400 audit(1766261321.629:54): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9573 comm="syz.6.904" daddr=fe80::aa dest=17959 [ 638.549013][ T37] audit: type=1400 audit(1766261321.629:55): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9573 comm="syz.6.904" daddr=::ffff:127.0.0.1 dest=15 [ 640.739504][ T37] audit: type=1400 audit(1766261323.669:56): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9587 comm="syz.5.905" daddr=fe80::aa dest=17959 [ 640.739629][ T37] audit: type=1400 audit(1766261323.679:57): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9587 comm="syz.5.905" daddr=::ffff:127.0.0.1 dest=15 [ 640.739763][ T37] audit: type=1400 audit(1766261323.699:58): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9588 comm="syz.4.908" daddr=fe80::aa dest=17959 [ 640.753965][ T37] audit: type=1400 audit(1766261323.709:59): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9588 comm="syz.4.908" daddr=::ffff:127.0.0.1 dest=15 [ 640.916979][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.910'. [ 643.690987][ T37] audit: type=1400 audit(1766261326.769:60): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9631 comm="syz.4.923" daddr=fe80::aa dest=17959 [ 643.691045][ T37] audit: type=1400 audit(1766261326.769:61): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9631 comm="syz.4.923" daddr=::ffff:127.0.0.1 dest=15 [ 646.387169][ T37] audit: type=1326 audit(1766261329.469:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.389637][ T37] audit: type=1326 audit(1766261329.469:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.397755][ T37] audit: type=1326 audit(1766261329.479:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.402382][ T37] audit: type=1326 audit(1766261329.489:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.402815][ T37] audit: type=1326 audit(1766261329.489:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.403718][ T37] audit: type=1326 audit(1766261329.489:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.403772][ T37] audit: type=1326 audit(1766261329.489:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.404898][ T37] audit: type=1326 audit(1766261329.489:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.1.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 646.553781][ T9672] openvswitch: netlink: Actions may not be safe on all matching packets [ 647.534246][ T9682] netlink: 'syz.5.941': attribute type 2 has an invalid length. [ 647.534271][ T9682] netlink: 'syz.5.941': attribute type 1 has an invalid length. [ 648.565075][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.950'. [ 648.565108][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.950'. [ 652.379159][ T9753] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 652.421662][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 652.421683][ T37] audit: type=1400 audit(1766261335.509:73): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9742 comm="syz.5.962" daddr=fe80::aa dest=17959 [ 652.422359][ T37] audit: type=1400 audit(1766261335.509:74): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9742 comm="syz.5.962" daddr=::ffff:127.0.0.1 dest=15 [ 653.558180][ T9765] random: crng reseeded on system resumption [ 653.897054][ T37] audit: type=1400 audit(1766261336.979:75): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9768 comm="syz.4.974" daddr=fe80::aa dest=17959 [ 653.897112][ T37] audit: type=1400 audit(1766261336.979:76): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9768 comm="syz.4.974" daddr=::ffff:127.0.0.1 dest=15 [ 654.101942][ T37] audit: type=1400 audit(1766261337.179:77): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9767 comm="syz.5.973" daddr=fe80::aa dest=17959 [ 654.102097][ T37] audit: type=1400 audit(1766261337.189:78): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9767 comm="syz.5.973" daddr=::ffff:127.0.0.1 dest=15 [ 656.262275][ T5812] Bluetooth: hci5: unexpected event for opcode 0x080c [ 656.360827][ T37] audit: type=1400 audit(1766261339.429:79): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9791 comm="syz.4.983" daddr=fe80::aa dest=17959 [ 656.360939][ T37] audit: type=1400 audit(1766261339.439:80): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9791 comm="syz.4.983" daddr=::ffff:127.0.0.1 dest=15 [ 657.313020][ T37] audit: type=1400 audit(1766261340.399:81): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9801 comm="syz.6.988" daddr=fe80::aa dest=17959 [ 657.313487][ T37] audit: type=1400 audit(1766261340.399:82): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9801 comm="syz.6.988" daddr=::ffff:127.0.0.1 dest=15 [ 658.726336][ T37] audit: type=1400 audit(1766261341.809:83): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9829 comm="syz.5.999" daddr=fe80::aa dest=17959 [ 658.726397][ T37] audit: type=1400 audit(1766261341.809:84): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9829 comm="syz.5.999" daddr=::ffff:127.0.0.1 dest=15 [ 659.103868][ T9844] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1005'. [ 659.103898][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1005'. [ 659.103920][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1005'. [ 659.103938][ T9844] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1005'. [ 659.767987][ T9860] netlink: 'syz.7.1012': attribute type 6 has an invalid length. [ 659.768015][ T9860] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1012'. [ 660.686482][ T37] audit: type=1326 audit(1766261343.769:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 660.687164][ T37] audit: type=1326 audit(1766261343.769:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 660.687552][ T37] audit: type=1326 audit(1766261343.769:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 660.764487][ T37] audit: type=1326 audit(1766261343.849:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 660.765110][ T37] audit: type=1326 audit(1766261343.849:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 660.765163][ T37] audit: type=1326 audit(1766261343.849:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 660.765471][ T37] audit: type=1326 audit(1766261343.849:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 660.765907][ T37] audit: type=1326 audit(1766261343.849:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9868 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 663.120359][ T5812] Bluetooth: hci0: unexpected event for opcode 0x203b [ 664.137993][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 665.604597][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 665.604616][ T37] audit: type=1326 audit(1766261348.689:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9925 comm="syz.7.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896828f749 code=0x7ffc0000 [ 665.615807][ T37] audit: type=1326 audit(1766261348.699:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9925 comm="syz.7.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f896828f749 code=0x7ffc0000 [ 665.616115][ T37] audit: type=1326 audit(1766261348.699:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9925 comm="syz.7.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896828f749 code=0x7ffc0000 [ 665.616410][ T37] audit: type=1326 audit(1766261348.699:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9925 comm="syz.7.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896828f749 code=0x7ffc0000 [ 665.842129][ T9931] overlayfs: missing 'lowerdir' [ 665.915453][ T37] audit: type=1400 audit(1766261348.999:103): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9927 comm="syz.1.1037" daddr=fe80::aa dest=17959 [ 665.934155][ T37] audit: type=1400 audit(1766261349.019:104): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9927 comm="syz.1.1037" daddr=::ffff:127.0.0.1 dest=15 [ 671.077265][ T37] audit: type=1400 audit(1766261354.159:105): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9964 comm="syz.6.1052" daddr=fe80::aa dest=17959 [ 671.099587][ T37] audit: type=1400 audit(1766261354.169:106): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9964 comm="syz.6.1052" daddr=::ffff:127.0.0.1 dest=15 [ 671.171512][ T9972] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 671.171554][ T9972] netlink: 9184 bytes leftover after parsing attributes in process `syz.4.1054'. [ 671.801812][ T9984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.942989][ T9988] overlay: Bad value for 'upperdir' [ 673.535445][ T37] audit: type=1400 audit(1766261356.619:107): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9992 comm="syz.7.1060" daddr=fe80::aa dest=17959 [ 673.537010][ T37] audit: type=1400 audit(1766261356.619:108): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=9992 comm="syz.7.1060" daddr=::ffff:127.0.0.1 dest=15 [ 673.889651][ T37] audit: type=1400 audit(1766261356.969:109): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10004 comm="syz.4.1065" daddr=fe80::aa dest=17959 [ 673.889877][ T37] audit: type=1400 audit(1766261356.969:110): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10004 comm="syz.4.1065" daddr=::ffff:127.0.0.1 dest=15 [ 674.692102][ T37] audit: type=1400 audit(1766261357.779:111): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10012 comm="syz.6.1067" daddr=fe80::aa dest=17959 [ 674.693020][ T37] audit: type=1400 audit(1766261357.779:112): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10012 comm="syz.6.1067" daddr=::ffff:127.0.0.1 dest=15 [ 675.241783][ T37] audit: type=1400 audit(1766261358.319:113): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10020 comm="syz.7.1072" daddr=fe80::aa dest=17959 [ 675.241900][ T37] audit: type=1400 audit(1766261358.319:114): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10020 comm="syz.7.1072" daddr=::ffff:127.0.0.1 dest=15 [ 679.663973][T10055] hub 1-0:1.0: USB hub found [ 679.704962][T10055] hub 1-0:1.0: 1 port detected [ 682.285893][ T37] audit: type=1400 audit(1766261365.049:115): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10060 comm="syz.4.1084" daddr=fe80::aa dest=17959 [ 682.287445][ T37] audit: type=1400 audit(1766261365.049:116): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10060 comm="syz.4.1084" daddr=::ffff:127.0.0.1 dest=15 [ 682.912086][ T9229] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 683.022700][T10082] netlink: 'syz.4.1091': attribute type 39 has an invalid length. [ 683.075371][ T9229] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 683.093475][ T9229] usb 6-1: string descriptor 0 read error: -22 [ 683.093760][ T9229] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 683.093789][ T9229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.540704][ T9229] usb 6-1: USB disconnect, device number 4 [ 684.786165][ T37] audit: type=1400 audit(1766261367.396:117): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10092 comm="syz.4.1094" daddr=fe80::aa dest=17959 [ 684.789274][ T37] audit: type=1400 audit(1766261367.396:118): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10092 comm="syz.4.1094" daddr=::ffff:127.0.0.1 dest=15 [ 685.124667][T10097] bond1: entered promiscuous mode [ 685.213582][T10097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.507120][T10104] netlink: 'syz.4.1098': attribute type 10 has an invalid length. [ 685.986604][ T37] audit: type=1400 audit(1766261368.510:119): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10109 comm="syz.1.1101" daddr=fe80::aa dest=17959 [ 685.990139][ T37] audit: type=1400 audit(1766261368.510:120): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10109 comm="syz.1.1101" daddr=::ffff:127.0.0.1 dest=15 [ 688.338272][T10141] netlink: 'syz.7.1113': attribute type 1 has an invalid length. [ 688.338306][T10141] NCSI netlink: No device for ifindex 0 [ 688.867324][ T37] audit: type=1400 audit(1766261371.213:121): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10147 comm="syz.6.1119" daddr=fe80::aa dest=17959 [ 688.869347][ T37] audit: type=1400 audit(1766261371.213:122): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10147 comm="syz.6.1119" daddr=::ffff:127.0.0.1 dest=15 [ 689.635410][T10163] netlink: 'syz.7.1123': attribute type 10 has an invalid length. [ 690.854614][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1126'. [ 691.491461][T10163] team0: Port device netdevsim0 added [ 692.328050][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.946333][ T37] audit: type=1400 audit(1766261375.955:123): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10198 comm="syz.7.1137" daddr=fe80::aa dest=17959 [ 693.947007][ T37] audit: type=1400 audit(1766261375.965:124): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10198 comm="syz.7.1137" daddr=::ffff:127.0.0.1 dest=15 [ 694.671524][T10226] netlink: 676 bytes leftover after parsing attributes in process `syz.7.1146'. [ 694.673398][T10226] netlink: 676 bytes leftover after parsing attributes in process `syz.7.1146'. [ 696.392360][ T37] audit: type=1400 audit(1766261378.247:125): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10239 comm="syz.4.1153" daddr=fe80::aa dest=17959 [ 696.434475][ T37] audit: type=1400 audit(1766261378.275:126): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10239 comm="syz.4.1153" daddr=::ffff:127.0.0.1 dest=15 [ 696.870853][T10269] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 697.166155][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1164'. [ 697.222324][T10273] gre1: entered allmulticast mode [ 697.575232][ T37] audit: type=1400 audit(1766261379.351:127): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10281 comm="syz.7.1170" daddr=fe80::aa dest=17959 [ 697.607639][ T37] audit: type=1400 audit(1766261379.370:128): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10281 comm="syz.7.1170" daddr=::ffff:127.0.0.1 dest=15 [ 697.782923][ T6207] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 697.824088][ T37] audit: type=1400 audit(1766261379.585:129): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10286 comm="syz.4.1172" daddr=fe80::aa dest=17959 [ 697.824825][ T37] audit: type=1400 audit(1766261379.585:130): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10286 comm="syz.4.1172" daddr=::ffff:127.0.0.1 dest=15 [ 697.958215][ T6207] usb 7-1: Using ep0 maxpacket: 32 [ 697.975182][ T6207] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 697.975214][ T6207] usb 7-1: config 2 has no interface number 0 [ 697.975264][ T6207] usb 7-1: config 2 interface 88 has no altsetting 0 [ 697.982147][ T6207] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 697.982182][ T6207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.982206][ T6207] usb 7-1: Product: syz [ 697.982223][ T6207] usb 7-1: Manufacturer: syz [ 697.982239][ T6207] usb 7-1: SerialNumber: syz [ 698.514074][ T6207] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 698.514395][ T6207] asix 7-1:2.88: probe with driver asix failed with error -71 [ 698.554116][ T5906] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 698.585840][ T6207] usb 7-1: USB disconnect, device number 3 [ 698.714468][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 698.718440][ T5906] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 698.718470][ T5906] usb 6-1: config 0 has no interface number 0 [ 698.718519][ T5906] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 698.718551][ T5906] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 698.718572][ T5906] usb 6-1: config 0 interface 200 has no altsetting 0 [ 698.722163][ T5906] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 698.722201][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.722217][ T5906] usb 6-1: Product: syz [ 698.722249][ T5906] usb 6-1: Manufacturer: syz [ 698.722266][ T5906] usb 6-1: SerialNumber: syz [ 698.779267][ T5906] usb 6-1: config 0 descriptor?? [ 699.149387][ T5906] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input11 [ 699.169674][ T5906] usb 6-1: USB disconnect, device number 5 [ 699.279410][ T8321] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 699.578752][T10310] netlink: 'syz.4.1182': attribute type 25 has an invalid length. [ 699.618112][ T37] audit: type=1326 audit(1766261381.212:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 699.618174][ T37] audit: type=1326 audit(1766261381.212:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 699.618224][ T37] audit: type=1326 audit(1766261381.222:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 699.618272][ T37] audit: type=1326 audit(1766261381.222:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.1.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 700.661299][ T8321] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 700.661332][ T8321] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 700.661354][ T8321] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 700.661412][ T8321] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.661444][ T8321] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.670633][ T8321] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 700.670666][ T8321] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 700.670689][ T8321] usb 8-1: Product: syz [ 700.670704][ T8321] usb 8-1: Manufacturer: syz [ 700.739546][ T8321] cdc_wdm 8-1:1.0: skipping garbage [ 700.739568][ T8321] cdc_wdm 8-1:1.0: skipping garbage [ 700.762371][ T8321] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 700.762397][ T8321] cdc_wdm 8-1:1.0: Unknown control protocol [ 701.070109][ T806] usb 8-1: USB disconnect, device number 5 [ 704.165816][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 704.165880][ T37] audit: type=1400 audit(1766261385.506:142): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10330 comm="syz.1.1191" daddr=fe80::aa dest=17959 [ 705.214302][ T37] audit: type=1400 audit(1766261386.507:143): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10330 comm="syz.1.1191" daddr=::ffff:127.0.0.1 dest=15 [ 705.640564][ T37] audit: type=1400 audit(1766261386.881:144): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10348 comm="syz.7.1193" daddr=fe80::aa dest=17959 [ 705.664210][ T37] audit: type=1400 audit(1766261386.928:145): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10348 comm="syz.7.1193" daddr=::ffff:127.0.0.1 dest=15 [ 705.951350][T10358] netlink: 'syz.5.1201': attribute type 24 has an invalid length. [ 706.033781][ T37] audit: type=1400 audit(1766261387.264:146): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10356 comm="syz.1.1202" daddr=fe80::aa dest=17959 [ 706.034539][ T37] audit: type=1400 audit(1766261387.264:147): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10356 comm="syz.1.1202" daddr=::ffff:127.0.0.1 dest=15 [ 707.985359][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1214'. [ 707.985405][T10382] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 708.158260][ T37] audit: type=1400 audit(1766261389.257:148): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10384 comm="syz.7.1213" daddr=fe80::aa dest=17959 [ 708.158694][ T37] audit: type=1400 audit(1766261389.257:149): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10384 comm="syz.7.1213" daddr=::ffff:127.0.0.1 dest=15 [ 708.410070][T10391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 708.597682][ T37] audit: type=1400 audit(1766261389.659:150): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10389 comm="syz.1.1216" daddr=fe80::aa dest=17959 [ 708.612503][ T37] audit: type=1400 audit(1766261389.678:151): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10389 comm="syz.1.1216" daddr=::ffff:127.0.0.1 dest=15 [ 710.302392][T10417] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1228'. [ 710.370618][T10419] netlink: 'syz.7.1229': attribute type 3 has an invalid length. [ 711.485498][T10428] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.1231'. [ 711.727863][T10425] hub 1-0:1.0: USB hub found [ 711.728270][T10425] hub 1-0:1.0: 1 port detected [ 713.391141][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 713.391163][ T37] audit: type=1400 audit(1766261394.149:154): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10434 comm="syz.5.1233" daddr=fe80::aa dest=17959 [ 713.398523][ T37] audit: type=1400 audit(1766261394.149:155): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10434 comm="syz.5.1233" daddr=::ffff:127.0.0.1 dest=15 [ 714.738225][ T5877] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 714.790727][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 715.454314][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 715.458754][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.458804][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0 [ 715.468972][ T5877] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 715.469008][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.469031][ T5877] usb 6-1: Product: syz [ 715.469048][ T5877] usb 6-1: Manufacturer: syz [ 715.469064][ T5877] usb 6-1: SerialNumber: syz [ 715.489751][ T5877] usb 6-1: config 0 descriptor?? [ 715.535620][ T5877] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 715.839478][ T5877] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 715.903497][ T5877] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 715.906866][ T5877] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 716.051267][ T5877] usb 6-1: USB disconnect, device number 6 [ 716.168590][ T37] audit: type=1400 audit(1766261396.740:156): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10468 comm="syz.4.1247" daddr=fe80::aa dest=17959 [ 716.169162][ T37] audit: type=1400 audit(1766261396.740:157): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10468 comm="syz.4.1247" daddr=::ffff:127.0.0.1 dest=15 [ 717.795916][ T37] audit: type=1400 audit(1766261398.265:158): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10480 comm="syz.4.1252" daddr=fe80::aa dest=17959 [ 717.833981][ T37] audit: type=1400 audit(1766261398.293:159): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10480 comm="syz.4.1252" daddr=::ffff:127.0.0.1 dest=15 [ 718.525086][T10501] random: crng reseeded on system resumption [ 718.693004][T10506] autofs4:pid:10506:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 720.066966][ T37] audit: type=1400 audit(1766261400.397:160): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10508 comm="syz.7.1262" daddr=fe80::aa dest=17959 [ 720.067028][ T37] audit: type=1400 audit(1766261400.397:161): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10508 comm="syz.7.1262" daddr=::ffff:127.0.0.1 dest=15 [ 720.369701][T10521] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1266'. [ 720.369732][T10521] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1266'. [ 720.443630][T10526] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1267'. [ 720.489591][ T5983] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 720.595477][ T37] audit: type=1400 audit(1766261400.884:162): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10528 comm="syz.6.1270" daddr=fe80::aa dest=17959 [ 720.595877][ T37] audit: type=1400 audit(1766261400.884:163): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10528 comm="syz.6.1270" daddr=::ffff:127.0.0.1 dest=15 [ 720.695772][ T5983] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 720.695807][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.695831][ T5983] usb 6-1: Product: syz [ 720.695847][ T5983] usb 6-1: Manufacturer: syz [ 720.695863][ T5983] usb 6-1: SerialNumber: syz [ 720.701406][ T5983] usb 6-1: config 0 descriptor?? [ 720.937522][ T5983] hso 6-1:0.0: Failed to find INT IN ep [ 720.938362][ T5983] usb-storage 6-1:0.0: USB Mass Storage device detected [ 721.189747][ T6207] usb 6-1: USB disconnect, device number 7 [ 721.215058][ T37] audit: type=1400 audit(1766261401.464:164): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10546 comm="syz.7.1278" daddr=fe80::aa dest=17959 [ 721.215115][ T37] audit: type=1400 audit(1766261401.464:165): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10546 comm="syz.7.1278" daddr=::ffff:127.0.0.1 dest=15 [ 721.416769][T10557] netlink: 'syz.7.1283': attribute type 10 has an invalid length. [ 721.452189][T10557] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 721.452550][T10557] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 721.452574][T10557] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 721.639972][ T37] audit: type=1400 audit(1766261401.866:166): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10558 comm="syz.4.1284" daddr=fe80::aa dest=17959 [ 721.641699][ T37] audit: type=1400 audit(1766261401.866:167): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10558 comm="syz.4.1284" daddr=::ffff:127.0.0.1 dest=15 [ 723.019962][ T37] audit: type=1400 audit(1766261403.157:168): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10582 comm="syz.7.1297" daddr=fe80::aa dest=17959 [ 723.020022][ T37] audit: type=1400 audit(1766261403.157:169): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10582 comm="syz.7.1297" daddr=::ffff:127.0.0.1 dest=15 [ 725.973888][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 725.974388][ T37] audit: type=1400 audit(1766261405.916:182): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10622 comm="syz.5.1311" daddr=fe80::aa dest=17959 [ 726.025951][ T37] audit: type=1400 audit(1766261405.963:183): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10622 comm="syz.5.1311" daddr=::ffff:127.0.0.1 dest=15 [ 726.141718][ T37] audit: type=1400 audit(1766261406.075:184): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10627 comm="syz.4.1312" daddr=fe80::aa dest=17959 [ 726.141778][ T37] audit: type=1400 audit(1766261406.075:185): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10627 comm="syz.4.1312" daddr=::ffff:127.0.0.1 dest=15 [ 726.702632][T10637] program syz.5.1315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.736370][ T37] audit: type=1400 audit(1766261406.636:186): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10630 comm="syz.7.1314" daddr=fe80::aa dest=17959 [ 726.736933][ T37] audit: type=1400 audit(1766261406.636:187): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10630 comm="syz.7.1314" daddr=::ffff:127.0.0.1 dest=15 [ 726.985493][T10641] random: crng reseeded on system resumption [ 727.921263][ T37] audit: type=1400 audit(1766261407.740:188): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10648 comm="syz.1.1323" daddr=fe80::aa dest=17959 [ 727.938273][ T37] audit: type=1400 audit(1766261407.750:189): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10648 comm="syz.1.1323" daddr=::ffff:127.0.0.1 dest=15 [ 729.371034][ T37] audit: type=1400 audit(1766261409.097:190): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10664 comm="syz.5.1325" daddr=fe80::aa dest=17959 [ 729.397272][ T37] audit: type=1400 audit(1766261409.125:191): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10664 comm="syz.5.1325" daddr=::ffff:127.0.0.1 dest=15 [ 729.587427][T10672] vlan0: entered promiscuous mode [ 731.410399][T10704] openvswitch: netlink: Flow key attribute not present in set flow. [ 732.264694][T10715] overlayfs: missing 'lowerdir' [ 732.300748][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1343'. [ 732.660603][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 732.660619][ T37] audit: type=1400 audit(1766261412.174:196): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10723 comm="syz.1.1349" daddr=fe80::aa dest=17959 [ 732.661119][ T37] audit: type=1400 audit(1766261412.174:197): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10723 comm="syz.1.1349" daddr=::ffff:127.0.0.1 dest=15 [ 732.663046][ T37] audit: type=1400 audit(1766261412.174:198): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10719 comm="syz.5.1346" daddr=fe80::aa dest=17959 [ 732.663550][ T37] audit: type=1400 audit(1766261412.174:199): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10719 comm="syz.5.1346" daddr=::ffff:127.0.0.1 dest=15 [ 734.387151][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'. [ 736.292146][ T37] audit: type=1400 audit(1766261415.551:200): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10770 comm="syz.6.1371" daddr=fe80::aa dest=17959 [ 736.350941][ T37] audit: type=1400 audit(1766261415.626:201): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10770 comm="syz.6.1371" daddr=::ffff:127.0.0.1 dest=15 [ 736.824432][ T37] audit: type=1400 audit(1766261416.065:202): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10776 comm="syz.7.1374" daddr=fe80::aa dest=17959 [ 736.844456][ T37] audit: type=1400 audit(1766261416.084:203): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10776 comm="syz.7.1374" daddr=::ffff:127.0.0.1 dest=15 [ 738.453292][T10819] netlink: 'syz.7.1388': attribute type 3 has an invalid length. [ 739.192969][ T37] audit: type=1400 audit(1766261418.282:204): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10844 comm="syz.7.1401" daddr=fe80::aa dest=17959 [ 739.197822][ T37] audit: type=1400 audit(1766261418.282:205): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10844 comm="syz.7.1401" daddr=::ffff:127.0.0.1 dest=15 [ 739.274914][T10853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 740.583031][T10875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.020449][T10881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 741.252471][ T37] audit: type=1400 audit(1766261420.209:206): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10882 comm="syz.1.1417" daddr=fe80::aa dest=17959 [ 741.252873][ T37] audit: type=1400 audit(1766261420.209:207): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10882 comm="syz.1.1417" daddr=::ffff:127.0.0.1 dest=15 [ 741.417456][ T37] audit: type=1326 audit(1766261420.359:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc598f749 code=0x7ffc0000 [ 741.417518][ T37] audit: type=1326 audit(1766261420.359:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc598f749 code=0x7ffc0000 [ 741.417566][ T37] audit: type=1326 audit(1766261420.359:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc598f749 code=0x7ffc0000 [ 741.424889][ T37] audit: type=1326 audit(1766261420.378:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f0fc598f749 code=0x7ffc0000 [ 741.425730][ T37] audit: type=1326 audit(1766261420.378:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc598f749 code=0x7ffc0000 [ 741.431473][ T37] audit: type=1326 audit(1766261420.378:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc598f749 code=0x7ffc0000 [ 743.342096][T10915] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 745.030660][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 745.030681][ T37] audit: type=1400 audit(1766261423.745:219): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10947 comm="syz.1.1443" daddr=fe80::aa dest=17959 [ 745.030734][ T37] audit: type=1400 audit(1766261423.745:220): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10947 comm="syz.1.1443" daddr=::ffff:127.0.0.1 dest=15 [ 745.034631][ T37] audit: type=1400 audit(1766261423.745:221): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10945 comm="syz.6.1442" daddr=fe80::aa dest=17959 [ 745.122985][ T37] audit: type=1400 audit(1766261423.829:222): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10945 comm="syz.6.1442" daddr=::ffff:127.0.0.1 dest=15 [ 746.404286][T10978] netlink: 'syz.5.1457': attribute type 3 has an invalid length. [ 747.602348][ T37] audit: type=1400 audit(1766261426.149:223): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10989 comm="syz.4.1461" daddr=fe80::aa dest=17959 [ 747.602909][ T37] audit: type=1400 audit(1766261426.149:224): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=10989 comm="syz.4.1461" daddr=::ffff:127.0.0.1 dest=15 [ 748.357261][T11007] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1468'. [ 749.334885][T11018] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.1470'. [ 749.414875][ T37] audit: type=1326 audit(1766261427.814:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11014 comm="syz.7.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896828f749 code=0x7ffc0000 [ 749.414937][ T37] audit: type=1400 audit(1766261427.842:226): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11017 comm="syz.6.1472" daddr=fe80::aa dest=17959 [ 749.417923][ T37] audit: type=1326 audit(1766261427.842:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11014 comm="syz.7.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f896828f749 code=0x7ffc0000 [ 749.440780][ T37] audit: type=1326 audit(1766261427.870:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11014 comm="syz.7.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f896828f749 code=0x7ffc0000 [ 749.948431][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1477'. [ 749.948454][T11032] netlink: 'syz.7.1477': attribute type 3 has an invalid length. [ 751.003554][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 751.003575][ T37] audit: type=1400 audit(1766261429.329:232): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11031 comm="syz.4.1479" daddr=fe80::aa dest=17959 [ 751.004185][ T37] audit: type=1400 audit(1766261429.329:233): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11031 comm="syz.4.1479" daddr=::ffff:127.0.0.1 dest=15 [ 751.545009][T11059] netlink: 'syz.1.1488': attribute type 1 has an invalid length. [ 751.545037][T11059] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1488'. [ 751.689974][ T37] audit: type=1400 audit(1766261429.975:234): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11061 comm="syz.7.1490" daddr=fe80::aa dest=17959 [ 751.690390][ T37] audit: type=1400 audit(1766261429.975:235): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11061 comm="syz.7.1490" daddr=::ffff:127.0.0.1 dest=15 [ 753.806111][ T37] audit: type=1400 audit(1766261431.958:236): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11070 comm="syz.4.1493" daddr=fe80::aa dest=17959 [ 753.807513][ T37] audit: type=1400 audit(1766261431.958:237): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11070 comm="syz.4.1493" daddr=::ffff:127.0.0.1 dest=15 [ 754.526721][T11106] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1506'. [ 755.511158][ T37] audit: type=1400 audit(1766261433.539:238): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11109 comm="syz.1.1509" daddr=fe80::aa dest=17959 [ 755.511683][ T37] audit: type=1400 audit(1766261433.539:239): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11109 comm="syz.1.1509" daddr=::ffff:127.0.0.1 dest=15 [ 755.733965][T11120] ip6gretap1: entered allmulticast mode [ 755.898535][ T37] audit: type=1400 audit(1766261433.913:240): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11119 comm="syz.5.1511" daddr=fe80::aa dest=17959 [ 755.904482][ T37] audit: type=1400 audit(1766261433.913:241): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11119 comm="syz.5.1511" daddr=::ffff:127.0.0.1 dest=15 [ 756.834202][ T37] audit: type=1400 audit(1766261434.783:242): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11132 comm="syz.6.1519" daddr=fe80::aa [ 757.630105][ T37] audit: type=1400 audit(1766261435.531:243): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11141 comm="syz.6.1523" daddr=fe80::aa dest=17959 [ 757.714478][ T37] audit: type=1400 audit(1766261435.578:244): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11141 comm="syz.6.1523" daddr=::ffff:127.0.0.1 dest=15 [ 757.862590][ T37] audit: type=1400 audit(1766261435.746:245): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11147 comm="syz.5.1525" daddr=fe80::aa dest=17959 [ 757.863026][ T37] audit: type=1400 audit(1766261435.746:246): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11147 comm="syz.5.1525" daddr=::ffff:127.0.0.1 dest=15 [ 758.008840][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.320739][ T37] audit: type=1400 audit(1766261436.176:247): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11159 comm="syz.4.1530" daddr=fe80::aa dest=17959 [ 758.324316][ T37] audit: type=1400 audit(1766261436.186:248): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11159 comm="syz.4.1530" daddr=::ffff:127.0.0.1 dest=15 [ 760.050496][ T37] audit: type=1400 audit(1766261437.795:249): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11178 comm="syz.6.1539" daddr=fe80::aa dest=17959 [ 760.053015][ T37] audit: type=1400 audit(1766261437.795:250): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11178 comm="syz.6.1539" daddr=::ffff:127.0.0.1 dest=15 [ 760.333588][ T5961] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 762.021766][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 762.111693][ T5961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.111777][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 762.117595][ T5961] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 762.117631][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.117653][ T5961] usb 6-1: Product: syz [ 762.117670][ T5961] usb 6-1: Manufacturer: syz [ 762.117686][ T5961] usb 6-1: SerialNumber: syz [ 762.167304][ T5961] usb 6-1: config 0 descriptor?? [ 762.366955][ T37] audit: type=1400 audit(1766261439.965:251): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11209 comm="syz.7.1550" daddr=fe80::aa dest=17959 [ 762.367017][ T37] audit: type=1400 audit(1766261439.965:252): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11209 comm="syz.7.1550" daddr=::ffff:127.0.0.1 dest=15 [ 762.502774][ T6207] usb 6-1: USB disconnect, device number 8 [ 763.296610][ T37] audit: type=1400 audit(1766261440.835:253): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11222 comm="syz.1.1554" daddr=fe80::aa dest=17959 [ 763.298808][ T37] audit: type=1400 audit(1766261440.835:254): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11222 comm="syz.1.1554" daddr=::ffff:127.0.0.1 dest=15 [ 763.568930][T11229] vivid-007: ================= START STATUS ================= [ 763.569057][T11229] vivid-007: Enable Output Cropping: true [ 763.569118][T11229] vivid-007: Enable Output Composing: true [ 763.569150][T11229] vivid-007: Enable Output Scaler: true [ 763.569192][T11229] vivid-007: Tx RGB Quantization Range: Automatic [ 763.569215][T11229] vivid-007: Transmit Mode: HDMI [ 763.569236][T11229] vivid-007: Hotplug Present: 0x00000000 [ 763.569258][T11229] vivid-007: RxSense Present: 0x00000000 [ 763.569280][T11229] vivid-007: EDID Present: 0x00000000 [ 763.569303][T11229] vivid-007: ================== END STATUS ================== [ 764.276249][ T37] audit: type=1400 audit(1766261441.742:255): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11250 comm="syz.1.1569" daddr=fe80::aa dest=17959 [ 764.321224][ T37] audit: type=1400 audit(1766261441.751:256): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11250 comm="syz.1.1569" daddr=::ffff:127.0.0.1 dest=15 [ 764.343101][ T6207] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 764.520409][ T6207] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.520450][ T6207] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.520493][ T6207] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 764.520520][ T6207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.580069][ T6207] usb 8-1: config 0 descriptor?? [ 765.077982][T11262] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 765.108145][ T6207] steelseries 0003:1038:1410.0001: item fetching failed at offset 3/7 [ 765.145928][ T6207] steelseries 0003:1038:1410.0001: parse failed [ 765.146050][ T6207] steelseries 0003:1038:1410.0001: probe with driver steelseries failed with error -22 [ 765.262701][T11264] netlink: 520 bytes leftover after parsing attributes in process `syz.5.1575'. [ 765.322727][ T6207] usb 8-1: USB disconnect, device number 6 [ 765.337001][T11268] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 765.434006][T11270] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1577'. [ 765.434298][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1577'. [ 765.791823][T11285] tipc: Enabling of bearer rejected, media not registered [ 765.957068][ T37] audit: type=1400 audit(1766261443.295:257): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11281 comm="syz.1.1583" daddr=fe80::aa dest=17959 [ 765.957583][ T37] audit: type=1400 audit(1766261443.295:258): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11281 comm="syz.1.1583" daddr=::ffff:127.0.0.1 dest=15 [ 767.824098][T11298] capability: warning: `syz.4.1590' uses 32-bit capabilities (legacy support in use) [ 767.952448][ T37] audit: type=1400 audit(1766261445.184:259): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11300 comm="syz.7.1588" daddr=fe80::bb dest=20000 [ 767.977479][ T37] audit: type=1400 audit(1766261445.212:260): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11300 comm="syz.7.1588" daddr=::ffff:172.30.1.8 dest=20004 [ 768.044706][T11306] warning: `syz.1.1592' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 768.597381][T10346] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 768.760020][T10346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 768.764765][T10346] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 768.764801][T10346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.764824][T10346] usb 6-1: Product: syz [ 768.764840][T10346] usb 6-1: Manufacturer: syz [ 768.764857][T10346] usb 6-1: SerialNumber: syz [ 768.770693][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1603'. [ 768.833415][T10346] usb 6-1: config 0 descriptor?? [ 769.965261][T10346] usb 6-1: USB disconnect, device number 9 [ 770.126436][ T5862] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 770.209833][ T37] audit: type=1400 audit(1766261447.289:261): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11346 comm="syz.5.1611" daddr=fe80::aa dest=17959 [ 770.233593][ T37] audit: type=1400 audit(1766261447.289:262): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11346 comm="syz.5.1611" daddr=::ffff:127.0.0.1 dest=15 [ 770.300572][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.300625][ T5862] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 770.300651][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.306079][ T5862] usb 7-1: config 0 descriptor?? [ 770.397982][ T8006] udevd[8006]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.714094][ T5961] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 770.804130][ T5862] logitech 0003:046D:C293.0002: unbalanced collection at end of report description [ 770.805034][ T5862] logitech 0003:046D:C293.0002: parse failed [ 770.805153][ T5862] logitech 0003:046D:C293.0002: probe with driver logitech failed with error -22 [ 770.874438][ T5961] usb 8-1: Using ep0 maxpacket: 32 [ 770.879245][ T5961] usb 8-1: config 0 interface 0 has no altsetting 0 [ 770.898551][ T5961] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 770.898576][ T5961] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.898591][ T5961] usb 8-1: Product: syz [ 770.898602][ T5961] usb 8-1: Manufacturer: syz [ 770.898613][ T5961] usb 8-1: SerialNumber: syz [ 771.124637][ T5961] usb 8-1: config 0 descriptor?? [ 771.711658][ T37] audit: type=1400 audit(1766261448.701:263): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11363 comm="syz.5.1619" daddr=fe80::aa dest=17959 [ 771.742472][ T37] audit: type=1400 audit(1766261448.730:264): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11363 comm="syz.5.1619" daddr=::ffff:127.0.0.1 dest=15 [ 771.834896][ T6050] usb 7-1: USB disconnect, device number 4 [ 771.901733][ T5961] gs_usb 8-1:0.0: Couldn't get device config: (err=-71) [ 771.901781][ T5961] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 772.210919][ T5961] usb 8-1: USB disconnect, device number 7 [ 772.527921][ T37] audit: type=1400 audit(1766261449.459:265): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11375 comm="syz.4.1623" daddr=fe80::aa dest=17959 [ 772.528619][ T37] audit: type=1400 audit(1766261449.459:266): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11375 comm="syz.4.1623" daddr=::ffff:127.0.0.1 dest=15 [ 772.602077][T10346] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 772.780299][T10346] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.780352][T10346] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 772.780380][T10346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.792160][T10346] usb 6-1: config 0 descriptor?? [ 773.125490][T11392] syz_tun: entered promiscuous mode [ 773.212700][ T37] audit: type=1400 audit(1766261450.105:267): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11394 comm="syz.1.1632" daddr=fe80::aa dest=17959 [ 773.214806][ T37] audit: type=1400 audit(1766261450.105:268): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11394 comm="syz.1.1632" daddr=::ffff:127.0.0.1 dest=15 [ 773.364243][T11392] team0: Port device syz_tun added [ 774.127315][T10346] hid-generic 0003:18D1:503C.0003: hidraw0: USB HID v10.00 Device [HID 18d1:503c] on usb-dummy_hcd.5-1/input0 [ 774.174718][T10346] usb 6-1: USB disconnect, device number 10 [ 774.575424][T11408] fido_id[11408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 776.062934][ T37] audit: type=1400 audit(1766261452.770:269): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11421 comm="syz.4.1645" daddr=fe80::aa dest=17959 [ 776.062997][ T37] audit: type=1400 audit(1766261452.770:270): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11421 comm="syz.4.1645" daddr=::ffff:127.0.0.1 dest=15 [ 776.804475][ T37] audit: type=1400 audit(1766261453.453:271): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11444 comm="syz.4.1652" daddr=fe80::aa dest=17959 [ 776.804534][ T37] audit: type=1400 audit(1766261453.463:272): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11444 comm="syz.4.1652" daddr=::ffff:127.0.0.1 dest=15 [ 777.672100][ T37] audit: type=1326 audit(1766261454.267:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 777.672851][ T37] audit: type=1326 audit(1766261454.276:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 777.674575][ T37] audit: type=1326 audit(1766261454.276:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11455 comm="syz.1.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8c0cf749 code=0x7ffc0000 [ 777.853513][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1659'. [ 777.903843][ T6050] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 777.999338][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1663'. [ 778.102592][ T37] audit: type=1400 audit(1766261454.651:276): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11464 comm="syz.5.1662" daddr=fe80::aa dest=17959 [ 778.102781][ T37] audit: type=1400 audit(1766261454.651:277): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11464 comm="syz.5.1662" daddr=::ffff:127.0.0.1 dest=15 [ 778.103546][ T6050] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 778.103578][ T6050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.103601][ T6050] usb 7-1: Product: syz [ 778.103617][ T6050] usb 7-1: Manufacturer: syz [ 778.103634][ T6050] usb 7-1: SerialNumber: syz [ 778.206203][ T6050] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 778.253088][ T37] audit: type=1400 audit(1766261454.819:278): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11471 comm="syz.1.1665" daddr=::ffff:172.20.20.0 [ 778.426712][ T5961] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 778.571916][T11482] tipc: Started in network mode [ 778.571937][T11482] tipc: Node identity , cluster identity 4711 [ 778.571957][T11482] tipc: Failed to obtain node identity [ 778.571978][T11482] tipc: Enabling of bearer rejected, failed to enable media [ 779.622342][ T6050] usb 7-1: USB disconnect, device number 5 [ 779.648277][ T5961] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 779.648776][ T5961] ath9k_htc: Failed to initialize the device [ 779.683142][ T6050] usb 7-1: ath9k_htc: USB layer deinitialized [ 779.690812][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 780.186223][T11509] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1680'. [ 781.652978][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 781.652997][ T37] audit: type=1326 audit(1766261457.999:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11524 comm="syz.7.1686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f896828f749 code=0x0 [ 781.719152][ T937] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 781.823155][ T37] audit: type=1400 audit(1766261458.168:282): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11527 comm="syz.6.1688" daddr=fe80::aa dest=17959 [ 781.826760][ T37] audit: type=1400 audit(1766261458.168:283): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11527 comm="syz.6.1688" daddr=::ffff:127.0.0.1 dest=15 [ 781.934433][ T937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.936539][ T937] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 781.936609][ T937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.170373][ T937] usb 6-1: config 0 descriptor?? [ 782.281577][ T937] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 782.714054][ T937] pwc: send_video_command error -71 [ 782.714175][ T937] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 782.714305][ T937] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 782.750666][ T937] usb 6-1: USB disconnect, device number 11 [ 782.934260][ T37] audit: type=1400 audit(1766261459.206:284): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11533 comm="syz.4.1690" daddr=fe80::aa dest=17959 [ 782.936590][ T37] audit: type=1400 audit(1766261459.206:285): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11533 comm="syz.4.1690" daddr=::ffff:127.0.0.1 dest=15 [ 785.948244][ T5812] Bluetooth: hci5: unexpected event for opcode 0x204e [ 786.255207][ T37] audit: type=1400 audit(1766261462.302:286): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11574 comm="syz.1.1704" [ 787.818110][ T37] audit: type=1400 audit(1766261463.761:287): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11585 comm="syz.7.1712" daddr=fe80::aa dest=17959 [ 787.818170][ T37] audit: type=1400 audit(1766261463.761:288): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11585 comm="syz.7.1712" daddr=::ffff:127.0.0.1 dest=15 [ 789.473414][ T6207] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 789.649497][ T6207] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 789.649532][ T6207] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 789.649553][ T6207] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 789.649575][ T6207] usb 7-1: config 220 has no interface number 2 [ 789.649669][ T6207] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 789.649702][ T6207] usb 7-1: config 220 interface 0 has no altsetting 0 [ 789.649724][ T6207] usb 7-1: config 220 interface 76 has no altsetting 0 [ 789.649745][ T6207] usb 7-1: config 220 interface 1 has no altsetting 0 [ 789.652848][ T6207] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 789.652879][ T6207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.652901][ T6207] usb 7-1: Product: syz [ 789.652917][ T6207] usb 7-1: Manufacturer: syz [ 789.652932][ T6207] usb 7-1: SerialNumber: syz [ 789.957472][ T37] audit: type=1400 audit(1766261465.763:289): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11634 comm="syz.5.1727" daddr=fe80::aa dest=17959 [ 789.957535][ T37] audit: type=1400 audit(1766261465.763:290): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11634 comm="syz.5.1727" daddr=::ffff:127.0.0.1 dest=15 [ 790.164043][ T6207] usb 7-1: selecting invalid altsetting 0 [ 790.164611][ T6207] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 790.164646][ T6207] uvcvideo 7-1:220.0: No valid video chain found. [ 790.306656][ T6207] usb 7-1: selecting invalid altsetting 0 [ 790.306700][ T6207] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 790.343811][ T6207] usb 7-1: USB disconnect, device number 6 [ 790.364811][ T37] audit: type=1326 audit(1766261466.147:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11647 comm="syz.7.1732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f896828f749 code=0x0 [ 792.308132][ T37] audit: type=1400 audit(1766261467.961:292): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11681 comm="syz.5.1742" daddr=fe80::aa dest=17959 [ 792.315698][ T37] audit: type=1400 audit(1766261467.961:293): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11681 comm="syz.5.1742" daddr=::ffff:127.0.0.1 dest=15 [ 793.029910][ T37] audit: type=1400 audit(1766261468.635:294): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11696 comm="syz.6.1747" daddr=fe80::aa dest=17959 [ 793.030184][ T37] audit: type=1400 audit(1766261468.644:295): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11696 comm="syz.6.1747" daddr=::ffff:127.0.0.1 dest=15 [ 794.129562][ T37] audit: type=1326 audit(1766261469.673:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11712 comm="syz.4.1754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fc598f749 code=0x0 [ 794.224238][ T37] audit: type=1400 audit(1766261469.767:297): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11716 comm="syz.1.1756" daddr=fe80::aa dest=17959 [ 794.224870][ T37] audit: type=1400 audit(1766261469.767:298): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11716 comm="syz.1.1756" daddr=::ffff:127.0.0.1 dest=15 [ 795.223306][ T37] audit: type=1400 audit(1766261470.693:299): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11738 comm="syz.6.1766" daddr=fe80::aa dest=17959 [ 795.247590][ T37] audit: type=1400 audit(1766261470.702:300): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11738 comm="syz.6.1766" daddr=::ffff:127.0.0.1 dest=15 [ 795.357268][ T806] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 795.654909][T11744] tmpfs: Cannot change global quota limit on remount [ 795.655995][ T806] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 795.656028][ T806] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 795.656058][ T806] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 795.728966][ T806] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 795.729002][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.729025][ T806] usb 2-1: Product: syz [ 795.729042][ T806] usb 2-1: Manufacturer: syz [ 795.729058][ T806] usb 2-1: SerialNumber: syz [ 795.795181][ T806] usb 2-1: config 0 descriptor?? [ 795.822040][T11737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 795.823012][T11737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 795.849375][ T806] usb 2-1: ucan: probing device on interface #0 [ 796.346472][ T806] usb 2-1: ucan: device reported invalid device info [ 796.346499][ T806] usb 2-1: ucan: probe failed; try to update the device firmware [ 796.645320][ T37] audit: type=1400 audit(1766261472.021:301): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11753 comm="syz.5.1773" daddr=fe80::aa dest=17959 [ 796.645420][ T37] audit: type=1400 audit(1766261472.021:302): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11753 comm="syz.5.1773" daddr=::ffff:127.0.0.1 dest=15 [ 796.850524][ T937] usb 2-1: USB disconnect, device number 20 [ 797.467175][T11762] netdevsim netdevsim6: Direct firmware load for þ failed with error -2 [ 797.467208][T11762] netdevsim netdevsim6: Falling back to sysfs fallback for: þ [ 797.831729][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1780'. [ 797.831750][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1780'. [ 797.831771][T11772] netlink: 'syz.5.1780': attribute type 12 has an invalid length. [ 797.831782][T11772] netlink: 'syz.5.1780': attribute type 11 has an invalid length. [ 798.955015][ T37] audit: type=1326 audit(1766261474.182:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11783 comm="syz.5.1785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca438f749 code=0x0 [ 799.914022][ T5958] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 800.734416][ T5958] usb 8-1: Using ep0 maxpacket: 16 [ 800.766478][ T5958] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 800.766515][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.766539][ T5958] usb 8-1: Product: syz [ 800.766564][ T5958] usb 8-1: Manufacturer: syz [ 800.766581][ T5958] usb 8-1: SerialNumber: syz [ 800.820324][ T5958] r8152-cfgselector 8-1: Unknown version 0x0000 [ 800.820355][ T5958] r8152-cfgselector 8-1: config 0 descriptor?? [ 800.845671][ T37] audit: type=1400 audit(1766261475.922:304): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11800 comm="syz.1.1793" daddr=fe80::aa dest=17959 [ 800.845743][ T37] audit: type=1400 audit(1766261475.922:305): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11800 comm="syz.1.1793" daddr=::ffff:127.0.0.1 dest=15 [ 802.181364][ T937] r8152-cfgselector 8-1: USB disconnect, device number 8 [ 802.908170][ T37] audit: type=1400 audit(1766261477.877:306): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11808 comm="syz.6.1794" daddr=fe80::aa dest=17959 [ 802.908304][ T37] audit: type=1400 audit(1766261477.877:307): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11808 comm="syz.6.1794" daddr=::ffff:127.0.0.1 dest=15 [ 803.592252][ T937] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 803.694658][ T37] audit: type=1400 audit(1766261478.616:308): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11828 comm="syz.4.1804" dest=20000 [ 803.763568][ T937] usb 2-1: config 4 has an invalid interface number: 28 but max is 0 [ 803.763600][ T937] usb 2-1: config 4 has no interface number 0 [ 803.775842][ T937] usb 2-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 803.775877][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.775900][ T937] usb 2-1: Product: syz [ 803.775916][ T937] usb 2-1: Manufacturer: syz [ 803.775933][ T937] usb 2-1: SerialNumber: syz [ 803.925350][ T937] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.28/input/input13 [ 804.903455][ T5153] bcm5974 2-1:4.28: could not read from device [ 805.259340][ T937] bcm5974 2-1:4.28: could not read from device [ 805.576203][ T6050] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 805.739433][ T6050] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 805.739470][ T6050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.791092][T11858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1816'. [ 805.822353][ T6050] usb 6-1: config 0 descriptor?? [ 805.849878][ T6050] cp210x 6-1:0.0: cp210x converter detected [ 806.298923][ T5153] bcm5974 2-1:4.28: could not read from device [ 806.376164][ T6050] usb 6-1: cp210x converter now attached to ttyUSB0 [ 806.557824][ T6050] usb 6-1: USB disconnect, device number 12 [ 806.588800][ T6050] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 806.752924][ T6050] cp210x 6-1:0.0: device disconnected [ 806.949587][ T937] input: failed to attach handler mousedev to device input13, error: -5 [ 807.014056][ T5153] bcm5974 2-1:4.28: could not read from device [ 807.017876][ T937] usb 2-1: USB disconnect, device number 21 [ 807.347579][T11875] pim6reg: entered allmulticast mode [ 807.360564][T11876] pim6reg: left allmulticast mode [ 807.716488][T11882] netlink: 'syz.5.1826': attribute type 1 has an invalid length. [ 809.172502][T11888] kthread_run failed with err -4 [ 809.551701][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1834'. [ 810.034539][ T937] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 810.194442][ T937] usb 6-1: Using ep0 maxpacket: 16 [ 810.197310][ T937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.197345][ T937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.197387][ T937] usb 6-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 810.197414][ T937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.204707][ T937] usb 6-1: config 0 descriptor?? [ 810.780969][ T937] elecom 0003:056E:00FF.0004: unknown main item tag 0x4 [ 810.781117][ T937] elecom 0003:056E:00FF.0004: unknown main item tag 0x1 [ 810.781147][ T937] elecom 0003:056E:00FF.0004: unknown main item tag 0x6 [ 810.781308][ T937] elecom 0003:056E:00FF.0004: reserved main item tag 0xe [ 810.781337][ T937] elecom 0003:056E:00FF.0004: unknown global tag 0xe [ 810.781355][ T937] elecom 0003:056E:00FF.0004: item 0 2 1 14 parsing failed [ 810.837725][ T937] elecom 0003:056E:00FF.0004: probe with driver elecom failed with error -22 [ 810.994027][ T937] usb 6-1: USB disconnect, device number 13 [ 812.672675][ T37] audit: type=1400 audit(1766261487.015:309): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11913 comm="syz.7.1838" daddr=fe80::aa dest=17959 [ 812.687078][ T37] audit: type=1400 audit(1766261487.025:310): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=11913 comm="syz.7.1838" daddr=::ffff:127.0.0.1 dest=15 [ 813.112221][ T5961] IPVS: starting estimator thread 0... [ 813.220452][T11927] IPVS: using max 7 ests per chain, 16800 per kthread [ 815.733806][T11959] binder: BINDER_SET_CONTEXT_MGR already set [ 815.733826][T11959] binder: 11956:11959 ioctl 40046207 0 returned -16 [ 815.834309][ T5812] Bluetooth: hci5: unexpected event for opcode 0x0c0d [ 815.940956][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1859'. [ 816.790606][ T5961] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 816.951014][ T5961] usb 8-1: Using ep0 maxpacket: 32 [ 816.958096][ T5961] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 816.958127][ T5961] usb 8-1: config 0 has no interface number 0 [ 816.958178][ T5961] usb 8-1: config 0 interface 12 has no altsetting 0 [ 817.006406][ T5961] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 817.006441][ T5961] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.006464][ T5961] usb 8-1: Product: syz [ 817.006481][ T5961] usb 8-1: Manufacturer: syz [ 817.006498][ T5961] usb 8-1: SerialNumber: syz [ 817.051402][ T5961] usb 8-1: config 0 descriptor?? [ 817.822737][ T5961] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 817.822803][ T5961] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 817.822824][ T5961] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 817.822930][ T5961] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 817.907572][ T5961] usb 8-1: USB disconnect, device number 9 [ 818.821871][ T5961] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 818.903824][T11999] netlink: 6912 bytes leftover after parsing attributes in process `syz.4.1875'. [ 818.904055][T11999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.017359][ T5961] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 819.017395][ T5961] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.017418][ T5961] usb 8-1: Product: syz [ 819.017434][ T5961] usb 8-1: Manufacturer: syz [ 819.017451][ T5961] usb 8-1: SerialNumber: syz [ 819.086860][ T5961] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 819.174117][T11499] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 820.701159][T11499] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 820.701364][T11499] ath9k_htc: Failed to initialize the device [ 821.758619][ T5961] usb 8-1: USB disconnect, device number 10 [ 821.848675][ T5961] usb 8-1: ath9k_htc: USB layer deinitialized [ 822.110411][ T37] audit: type=1400 audit(1766261495.846:311): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12005 comm="syz.5.1878" daddr=fe80::aa dest=17959 [ 822.113528][ T37] audit: type=1400 audit(1766261495.846:312): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12005 comm="syz.5.1878" daddr=::ffff:127.0.0.1 dest=15 [ 822.488772][T12010] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 823.286970][T12013] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1879'. [ 823.540581][ T37] audit: type=1400 audit(1766261497.165:313): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12022 comm="syz.6.1886" daddr=fe80::aa dest=17959 [ 823.540641][ T37] audit: type=1400 audit(1766261497.165:314): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12022 comm="syz.6.1886" daddr=::ffff:127.0.0.1 dest=15 [ 823.687019][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.917872][ T37] audit: type=1400 audit(1766261497.529:315): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12014 comm="syz.7.1882" daddr=fe80::aa dest=17959 [ 823.919029][ T37] audit: type=1400 audit(1766261497.529:316): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12014 comm="syz.7.1882" daddr=::ffff:127.0.0.1 dest=15 [ 826.513993][ T37] audit: type=1400 audit(1766261499.961:317): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12053 comm="syz.6.1900" daddr=fe80::aa dest=17959 [ 826.514052][ T37] audit: type=1400 audit(1766261499.961:318): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12053 comm="syz.6.1900" daddr=::ffff:127.0.0.1 dest=15 [ 826.516392][ T37] audit: type=1400 audit(1766261499.961:319): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12055 comm="syz.5.1898" daddr=fc01::1 [ 828.232506][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1909'. [ 828.504812][ T37] audit: type=1400 audit(1766261501.813:320): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12085 comm="syz.4.1912" daddr=fe80::aa dest=17959 [ 828.504974][ T37] audit: type=1400 audit(1766261501.823:321): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12085 comm="syz.4.1912" daddr=::ffff:127.0.0.1 dest=15 [ 828.626799][ T806] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 828.830755][ T806] usb 6-1: Using ep0 maxpacket: 32 [ 829.316194][ T806] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 829.316229][ T806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.316253][ T806] usb 6-1: Product: syz [ 829.316270][ T806] usb 6-1: Manufacturer: syz [ 829.316286][ T806] usb 6-1: SerialNumber: syz [ 829.371524][ T806] usb 6-1: config 0 descriptor?? [ 829.693570][ T37] audit: type=1400 audit(1766261502.936:322): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12095 comm="syz.7.1914" daddr=fe80::aa dest=17959 [ 829.706988][ T37] audit: type=1400 audit(1766261502.955:323): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12095 comm="syz.7.1914" daddr=::ffff:127.0.0.1 dest=15 [ 830.565635][ T806] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 830.565660][ T806] 5e 57 f9 3a eb 9a 47 80 [ 830.565750][ T806] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 830.740311][ T5906] usb 6-1: USB disconnect, device number 14 [ 832.416285][ T37] audit: type=1400 audit(1766261505.480:324): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12110 comm="syz.7.1920" daddr=fe80::aa dest=17959 [ 832.419536][ T37] audit: type=1400 audit(1766261505.480:325): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12110 comm="syz.7.1920" daddr=::ffff:127.0.0.1 dest=15 [ 833.170608][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1923'. [ 833.170636][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 833.788360][T12123] binder: 12122:12123 ioctl 541b 0 returned -22 [ 836.260493][ T37] audit: type=1400 audit(1766261509.082:326): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12146 comm="syz.1.1936" daddr=fe80::aa dest=17959 [ 836.273590][ T37] audit: type=1400 audit(1766261509.082:327): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12146 comm="syz.1.1936" daddr=::ffff:127.0.0.1 dest=15 [ 837.338693][ T49] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 837.414832][ T37] audit: type=1400 audit(1766261510.157:328): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12157 comm="syz.6.1939" daddr=fe80::aa dest=17959 [ 837.417068][ T37] audit: type=1400 audit(1766261510.167:329): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12157 comm="syz.6.1939" daddr=::ffff:127.0.0.1 dest=15 [ 837.733608][ T49] usb 8-1: Using ep0 maxpacket: 8 [ 837.822933][ T49] usb 8-1: config 125 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.822978][ T49] usb 8-1: config 125 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.823008][ T49] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 837.823032][ T49] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.461100][ T49] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 838.461161][ T49] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 838.461190][ T49] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 838.461219][ T49] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 838.461248][ T49] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 838.479843][ T49] kone 0003:1E7D:2CED.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.7-1/input0 [ 838.596672][ T5906] usb 8-1: USB disconnect, device number 11 [ 839.093682][ T5906] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 839.109824][ T5884] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 839.273102][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 839.282002][ T5884] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 839.282033][ T5884] usb 2-1: config 0 has no interface number 0 [ 839.294381][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 839.377648][ T5906] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.377920][ T5906] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.377948][ T5906] usb 6-1: config 0 interface 0 has no altsetting 0 [ 839.377982][ T5906] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 839.378006][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.478980][ T5906] usb 6-1: config 0 descriptor?? [ 839.494332][ T5884] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 839.494368][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.494390][ T5884] usb 2-1: Product: syz [ 839.494406][ T5884] usb 2-1: Manufacturer: syz [ 839.494423][ T5884] usb 2-1: SerialNumber: syz [ 839.549457][ T5884] usb 2-1: config 0 descriptor?? [ 839.731325][ T5884] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 840.110290][ T5884] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 840.465677][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 840.514241][T12188] fido_id[12188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 840.559235][ T5884] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 840.651090][ T5884] usb 2-1: USB disconnect, device number 22 [ 840.747657][ T5906] input: HID 28bd:0905 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0905.0006/input/input14 [ 840.887567][ T5884] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 840.998210][ T37] audit: type=1400 audit(1766261513.515:330): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12193 comm="syz.7.1953" daddr=fe80::aa dest=17959 [ 841.011762][ T37] audit: type=1400 audit(1766261513.515:331): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12193 comm="syz.7.1953" daddr=::ffff:127.0.0.1 dest=15 [ 843.659816][T12197] tipc: Enabling of bearer rejected, failed to enable media [ 844.131840][ T5884] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 844.155603][ T5906] uclogic 0003:28BD:0905.0006: input,hidraw0: USB HID v8.15 Mouse [HID 28bd:0905] on usb-dummy_hcd.5-1/input0 [ 844.172545][ T5906] usb 6-1: USB disconnect, device number 15 [ 844.201969][ T5884] quatech2 2-1:0.51: device disconnected [ 845.539837][T12207] 9pnet_virtio: no channels available for device syz [ 845.843786][T12201] fido_id[12201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 845.949533][T12213] block nbd1: not configured, cannot reconfigure [ 846.104337][ T6050] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 846.268486][ T6050] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 846.268519][ T6050] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 846.268540][ T6050] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 846.268563][ T6050] usb 8-1: config 220 has no interface number 2 [ 846.268657][ T6050] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 846.268695][ T6050] usb 8-1: config 220 interface 0 has no altsetting 0 [ 846.268717][ T6050] usb 8-1: config 220 interface 76 has no altsetting 0 [ 846.268738][ T6050] usb 8-1: config 220 interface 1 has no altsetting 0 [ 846.271894][ T6050] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 846.271926][ T6050] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.271949][ T6050] usb 8-1: Product: syz [ 846.271965][ T6050] usb 8-1: Manufacturer: syz [ 846.271982][ T6050] usb 8-1: SerialNumber: syz [ 846.946246][ T37] audit: type=1400 audit(1766261519.072:332): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12215 comm="syz.5.1962" daddr=fe80::aa dest=17959 [ 846.954833][ T37] audit: type=1400 audit(1766261519.081:333): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12215 comm="syz.5.1962" daddr=::ffff:127.0.0.1 dest=15 [ 847.524763][ T6050] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 847.524804][ T6050] uvcvideo 8-1:220.0: No valid video chain found. [ 847.524872][ T6050] usb 8-1: selecting invalid altsetting 0 [ 847.596413][ T6050] usb 8-1: selecting invalid altsetting 0 [ 847.596456][ T6050] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 847.632476][ T6050] usb 8-1: USB disconnect, device number 12 [ 849.365999][T12239] EXT4-fs: Conflicting test_dummy_encryption options [ 851.171765][ T5906] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 852.599184][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.599241][ T5906] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 852.599268][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.661127][ T5906] usb 2-1: config 0 descriptor?? [ 853.213577][ T5906] hid_mf 0003:0079:1846.0007: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 853.213618][ T5906] hid_mf 0003:0079:1846.0007: Invalid report, this should never happen! [ 853.213635][ T5906] hid_mf 0003:0079:1846.0007: Force feedback init failed. [ 853.411661][ T5906] usb 2-1: USB disconnect, device number 23 [ 854.919737][T12268] fido_id[12268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 856.158379][ T5884] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 856.643273][ T5821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 856.659096][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 856.660796][ T5821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 856.663973][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 856.703318][ T5821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 856.852406][ T5884] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.852447][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 856.852484][ T5884] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 856.852511][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.866974][ T5884] usb 2-1: config 0 descriptor?? [ 857.401752][ T5884] sigmamicro 0003:1C4F:0059.0008: unknown main item tag 0x0 [ 857.401793][ T5884] sigmamicro 0003:1C4F:0059.0008: item fetching failed at offset 6/7 [ 857.402714][ T5884] sigmamicro 0003:1C4F:0059.0008: probe with driver sigmamicro failed with error -22 [ 857.445662][T12295] wg1 speed is unknown, defaulting to 1000 [ 857.567975][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1998'. [ 857.603459][ T5884] usb 2-1: USB disconnect, device number 24 [ 859.171372][ T5821] Bluetooth: hci4: command tx timeout [ 859.769858][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2003'. [ 860.345574][T11499] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 860.504500][T11499] usb 2-1: Using ep0 maxpacket: 8 [ 860.507782][T11499] usb 2-1: unable to get BOS descriptor or descriptor too short [ 860.509396][T11499] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 860.509422][T11499] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.509451][T11499] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 860.509476][T11499] usb 2-1: config 1 has no interface number 1 [ 860.509526][T11499] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 860.509572][T11499] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.509603][T11499] usb 2-1: config 1 interface 2 has no altsetting 0 [ 860.518740][T11499] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 860.518773][T11499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.518796][T11499] usb 2-1: Product: syz [ 860.518812][T11499] usb 2-1: Manufacturer: syz [ 860.518828][T11499] usb 2-1: SerialNumber: syz [ 860.931414][T11499] usb 2-1: USB disconnect, device number 25 [ 861.013851][T12155] udevd[12155]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.383308][ T5821] Bluetooth: hci4: command tx timeout [ 861.704098][T12295] chnl_net:caif_netlink_parms(): no params data found [ 863.081312][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2013'. [ 863.274648][ T37] audit: type=1400 audit(1766261534.356:334): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12348 comm="syz.1.2014" daddr=fe80::aa dest=17959 [ 863.277963][ T37] audit: type=1400 audit(1766261534.356:335): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12348 comm="syz.1.2014" daddr=::ffff:127.0.0.1 dest=15 [ 863.605653][ T5821] Bluetooth: hci4: command tx timeout [ 865.113075][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 865.283533][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 865.313118][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 865.313152][ T10] usb 6-1: config 179 has no interface number 0 [ 865.313204][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 865.313236][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 865.313268][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 865.313299][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 865.313329][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 865.313376][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 865.313401][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.453402][T12375] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 865.821710][ T5812] Bluetooth: hci4: command tx timeout [ 866.569419][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.671796][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.023602][T12381] IPVS: Error connecting to the multicast addr [ 868.042504][ T5812] Bluetooth: hci4: command 0x0405 tx timeout [ 868.624512][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 868.624593][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 868.651461][ T10] usb 6-1: USB disconnect, device number 16 [ 869.090104][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.111426][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.111704][T12295] bridge_slave_0: entered allmulticast mode [ 869.114602][T12295] bridge_slave_0: entered promiscuous mode [ 869.157791][T12295] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.173479][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.173749][T12295] bridge_slave_1: entered allmulticast mode [ 869.197580][T12295] bridge_slave_1: entered promiscuous mode [ 869.656316][ T37] audit: type=1400 audit(1766261540.324:336): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12405 comm="syz.1.2034" daddr=::7fff:fffe dest=20321 [ 870.597050][ T6207] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 870.800112][ T6207] usb 8-1: Using ep0 maxpacket: 32 [ 870.980188][ T6207] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 870.980224][ T6207] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.980248][ T6207] usb 8-1: Product: syz [ 870.980263][ T6207] usb 8-1: Manufacturer: syz [ 870.980280][ T6207] usb 8-1: SerialNumber: syz [ 871.016937][ T6207] usb 8-1: config 0 descriptor?? [ 871.080304][ T6207] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 871.080939][ T6207] dvb-usb: bulk message failed: -22 (2/0) [ 871.143218][ T6207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 871.144092][ T6207] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 871.144153][ T6207] usb 8-1: media controller created [ 871.202147][ T6207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 871.262563][T12404] dvb-usb: bulk message failed: -22 (4/0) [ 871.262591][T12404] cxusb: i2c read failed [ 871.645336][ T6207] usb 8-1: selecting invalid altsetting 7 [ 871.645359][ T6207] cxusb: set interface failed [ 871.645373][ T6207] dvb-usb: bulk message failed: -22 (1/0) [ 872.059686][ T6207] DVB: Unable to find symbol lgdt330x_attach() [ 872.059706][ T6207] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 872.345178][ T6207] rc_core: IR keymap rc-dvico-portable not found [ 872.345206][ T6207] Registered IR keymap rc-empty [ 872.398582][ T6207] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 872.467613][ T6207] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input15 [ 872.470946][ T6207] dvb-usb: schedule remote query interval to 100 msecs. [ 872.470971][ T6207] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 872.510109][ T6207] usb 8-1: USB disconnect, device number 13 [ 875.376611][ T6207] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 875.449112][T12295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.217036][T12295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.543400][T12456] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 877.907520][T12465] autofs: Bad value for 'fd' [ 878.363279][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2061'. [ 879.416619][T12295] team0: Port device team_slave_0 added [ 879.433338][T12295] team0: Port device team_slave_1 added [ 888.174415][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 888.201385][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 888.211153][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 888.213349][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 888.249800][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.304445][T12527] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 889.344069][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 889.452241][T12535] program syz.1.2083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 890.449111][ T5812] Bluetooth: hci3: command tx timeout [ 892.629871][T12295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.629894][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.629926][T12295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.633909][T12295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.633927][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.633959][T12295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.685029][ T5812] Bluetooth: hci3: command tx timeout [ 894.896149][ T5812] Bluetooth: hci3: command tx timeout [ 896.684203][T12295] hsr_slave_0: entered promiscuous mode [ 896.685734][T12295] hsr_slave_1: entered promiscuous mode [ 896.686775][T12295] debugfs: 'hsr0' already exists in 'hsr' [ 896.686802][T12295] Cannot create hsr debugfs directory [ 897.119834][ T5812] Bluetooth: hci3: command tx timeout [ 897.180866][ T37] audit: type=1400 audit(1766261566.057:337): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12579 comm="syz.1.2102" daddr=fe80::aa dest=17959 [ 897.180982][ T37] audit: type=1400 audit(1766261566.066:338): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=12579 comm="syz.1.2102" daddr=::ffff:127.0.0.1 dest=15 [ 899.794561][T12588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 899.813656][T12588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 899.815595][T12588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 899.816928][T12588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 899.817841][T12588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 900.445311][ T6050] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 900.604909][ T6050] usb 2-1: Using ep0 maxpacket: 8 [ 900.609045][ T6050] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 900.609077][ T6050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.706368][ T6050] pvrusb2: Hardware description: Terratec Grabster AV400 [ 900.706394][ T6050] pvrusb2: ********** [ 900.706402][ T6050] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 900.706416][ T6050] pvrusb2: Important functionality might not be entirely working. [ 900.706426][ T6050] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 900.706439][ T6050] pvrusb2: ********** [ 900.758934][T12523] wg1 speed is unknown, defaulting to 1000 [ 900.934171][ T2366] pvrusb2: Invalid write control endpoint [ 900.955558][ T6050] usb 2-1: USB disconnect, device number 26 [ 901.268726][ T2366] pvrusb2: Invalid write control endpoint [ 901.268745][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 901.268756][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 901.268766][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 901.268784][ T2366] pvrusb2: Device being rendered inoperable [ 901.269346][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 901.269905][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 901.410705][ T2366] pvrusb2: Attached sub-driver cx25840 [ 901.410738][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 901.410751][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 901.786993][T12587] wg1 speed is unknown, defaulting to 1000 [ 902.084038][T12588] Bluetooth: hci6: command tx timeout [ 904.304098][T12588] Bluetooth: hci6: command tx timeout [ 905.672977][ T6050] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 905.844954][ T6050] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.845012][ T6050] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 905.845038][ T6050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.901576][ T6050] usb 2-1: config 0 descriptor?? [ 906.428857][ T6050] waltop 0003:172F:0037.0009: collection stack underflow [ 906.428893][ T6050] waltop 0003:172F:0037.0009: item 0 1 0 12 parsing failed [ 906.429834][ T6050] waltop 0003:172F:0037.0009: probe with driver waltop failed with error -22 [ 906.515476][T12295] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 906.527511][T12588] Bluetooth: hci6: command tx timeout [ 906.672768][ T6050] usb 2-1: USB disconnect, device number 27 [ 906.873350][T12295] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 907.835719][T12523] chnl_net:caif_netlink_parms(): no params data found [ 907.877848][T12295] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 908.751147][T12588] Bluetooth: hci6: command tx timeout [ 908.878630][T12295] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 909.998572][T12620] dummy0: entered promiscuous mode [ 910.531599][T12620] dummy0: left promiscuous mode [ 914.125632][T12587] chnl_net:caif_netlink_parms(): no params data found [ 914.747260][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 914.781093][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 914.807964][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 914.811048][ T5812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 914.812111][ T5812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 917.047374][T12588] Bluetooth: hci7: command tx timeout [ 918.581207][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 918.588484][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 918.598934][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 918.612173][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 918.618190][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 918.918972][T12523] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.921156][T12523] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.921440][T12523] bridge_slave_0: entered allmulticast mode [ 918.924472][T12523] bridge_slave_0: entered promiscuous mode [ 919.270901][T12588] Bluetooth: hci7: command tx timeout [ 920.609496][T12523] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.612778][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.613015][T12523] bridge_slave_1: entered allmulticast mode [ 920.616211][T12523] bridge_slave_1: entered promiscuous mode [ 920.810715][T12588] Bluetooth: hci5: command tx timeout [ 921.494674][T12588] Bluetooth: hci7: command tx timeout [ 923.034261][T12588] Bluetooth: hci5: command tx timeout [ 923.740984][T12588] Bluetooth: hci7: command tx timeout [ 924.839666][T12632] wg1 speed is unknown, defaulting to 1000 [ 925.257615][T12588] Bluetooth: hci5: command tx timeout [ 925.654959][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 925.663084][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 925.688303][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 925.712625][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 925.713714][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 927.481351][T12588] Bluetooth: hci5: command tx timeout [ 927.909156][T12588] Bluetooth: hci4: command tx timeout [ 929.089801][T12523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.132525][T12588] Bluetooth: hci4: command tx timeout [ 932.085069][T12523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.356337][T12588] Bluetooth: hci4: command tx timeout [ 932.931822][T12638] wg1 speed is unknown, defaulting to 1000 [ 933.819617][T12587] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.819865][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.820095][T12587] bridge_slave_0: entered allmulticast mode [ 933.848168][T12587] bridge_slave_0: entered promiscuous mode [ 934.034005][T12587] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.034149][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.034700][T12587] bridge_slave_1: entered allmulticast mode [ 934.037607][T12587] bridge_slave_1: entered promiscuous mode [ 934.079737][T12523] team0: Port device team_slave_0 added [ 934.580041][T12588] Bluetooth: hci4: command tx timeout [ 935.684312][T12523] team0: Port device team_slave_1 added [ 940.038673][T12587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.486198][T12644] wg1 speed is unknown, defaulting to 1000 [ 941.491948][T12587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.492932][T12523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.492948][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.492980][T12523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.584319][T12523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.584340][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.584371][T12523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.124080][T12587] team0: Port device team_slave_0 added [ 945.170137][T12587] team0: Port device team_slave_1 added [ 951.186892][T12523] hsr_slave_0: entered promiscuous mode [ 951.188533][T12523] hsr_slave_1: entered promiscuous mode [ 951.189642][T12523] debugfs: 'hsr0' already exists in 'hsr' [ 951.189669][T12523] Cannot create hsr debugfs directory [ 951.229739][T12587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.229760][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.229792][T12587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.315282][T12587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.315302][T12587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.315333][T12587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.263349][ T5812] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 953.291368][ T5812] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 953.293816][ T5812] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 953.327875][ T5812] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 953.328814][ T5812] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 955.034549][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.533421][ T5812] Bluetooth: hci8: command tx timeout [ 957.757886][ T5812] Bluetooth: hci8: command tx timeout [ 959.980743][ T5812] Bluetooth: hci8: command tx timeout [ 961.738282][T12588] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 961.770307][T12588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 961.771989][T12588] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 961.773402][T12588] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 961.774295][T12588] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 962.204402][T12588] Bluetooth: hci8: command tx timeout [ 964.011165][T12588] Bluetooth: hci3: command tx timeout [ 964.460161][T12587] hsr_slave_0: entered promiscuous mode [ 964.461813][T12587] hsr_slave_1: entered promiscuous mode [ 964.462922][T12587] debugfs: 'hsr0' already exists in 'hsr' [ 964.462949][T12587] Cannot create hsr debugfs directory [ 964.721111][T12632] chnl_net:caif_netlink_parms(): no params data found [ 964.766391][T12661] wg1 speed is unknown, defaulting to 1000 [ 964.854039][T12638] chnl_net:caif_netlink_parms(): no params data found [ 966.223988][T12588] Bluetooth: hci3: command tx timeout [ 967.850726][T12670] wg1 speed is unknown, defaulting to 1000 [ 968.447627][T12588] Bluetooth: hci3: command tx timeout [ 970.671490][T12588] Bluetooth: hci3: command tx timeout [ 971.397964][T12644] chnl_net:caif_netlink_parms(): no params data found [ 978.669265][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 978.700193][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 978.706728][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 978.709073][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 978.710031][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 978.814273][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.814577][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.814870][T12632] bridge_slave_0: entered allmulticast mode [ 978.840433][T12632] bridge_slave_0: entered promiscuous mode [ 980.934542][T12588] Bluetooth: hci6: command tx timeout [ 982.246314][T12638] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.246561][T12638] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.246815][T12638] bridge_slave_0: entered allmulticast mode [ 982.287661][T12638] bridge_slave_0: entered promiscuous mode [ 983.157962][T12588] Bluetooth: hci6: command tx timeout [ 984.276280][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 984.357683][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 984.379961][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 984.396097][ T5812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 984.396994][ T5812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 985.385515][ T5812] Bluetooth: hci6: command tx timeout [ 986.334018][T12638] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.334204][T12638] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.334463][T12638] bridge_slave_1: entered allmulticast mode [ 986.337410][T12638] bridge_slave_1: entered promiscuous mode [ 986.666085][ T5812] Bluetooth: hci7: command tx timeout [ 987.605236][ T5812] Bluetooth: hci6: command tx timeout [ 988.888004][ T5812] Bluetooth: hci7: command tx timeout [ 990.241328][T12588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 990.258626][T12588] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 990.260418][T12588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 990.262160][T12588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 990.262948][T12588] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 991.111663][T12588] Bluetooth: hci7: command tx timeout [ 991.611996][T12644] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 992.480475][T12588] Bluetooth: hci0: command tx timeout [ 993.337131][T12588] Bluetooth: hci7: command tx timeout [ 994.703932][T12588] Bluetooth: hci0: command tx timeout [ 996.928432][T12588] Bluetooth: hci0: command tx timeout [ 999.150960][T12588] Bluetooth: hci0: command tx timeout [ 1004.265292][T12683] wg1 speed is unknown, defaulting to 1000 [ 1004.378212][T12690] wg1 speed is unknown, defaulting to 1000 [ 1004.432240][T12696] wg1 speed is unknown, defaulting to 1000 [ 1005.110431][T12670] chnl_net:caif_netlink_parms(): no params data found [ 1005.214546][T12661] chnl_net:caif_netlink_parms(): no params data found [ 1014.851664][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.851951][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.852238][T12670] bridge_slave_0: entered allmulticast mode [ 1014.885592][T12670] bridge_slave_0: entered promiscuous mode [ 1015.734654][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.734824][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.735126][T12670] bridge_slave_1: entered allmulticast mode [ 1015.739320][T12670] bridge_slave_1: entered promiscuous mode [ 1015.806435][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.806578][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.825575][T12661] bridge_slave_0: entered allmulticast mode [ 1015.837566][T12661] bridge_slave_0: entered promiscuous mode [ 1016.639640][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.639875][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.640214][T12661] bridge_slave_1: entered allmulticast mode [ 1016.665185][T12661] bridge_slave_1: entered promiscuous mode [ 1017.772309][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1017.803243][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1017.830846][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1017.847821][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1017.856454][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.815582][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.950015][T12683] chnl_net:caif_netlink_parms(): no params data found [ 1019.008161][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.104764][ T5812] Bluetooth: hci4: command tx timeout [ 1020.721707][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1022.342435][ T5812] Bluetooth: hci4: command tx timeout [ 1023.543112][T12690] chnl_net:caif_netlink_parms(): no params data found [ 1023.570694][T12670] team0: Port device team_slave_0 added [ 1023.571202][T12696] chnl_net:caif_netlink_parms(): no params data found [ 1024.552065][ T5812] Bluetooth: hci4: command tx timeout [ 1026.287131][T12588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1026.292341][T12588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1026.322625][T12588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1026.366992][T12588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1026.367928][T12588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1026.775827][T12588] Bluetooth: hci4: command tx timeout [ 1028.069934][T12670] team0: Port device team_slave_1 added [ 1028.154586][T12728] wg1 speed is unknown, defaulting to 1000 [ 1028.572052][T12588] Bluetooth: hci5: command tx timeout [ 1030.795767][T12588] Bluetooth: hci5: command tx timeout [ 1033.019348][ T5812] Bluetooth: hci5: command tx timeout [ 1035.243168][T12588] Bluetooth: hci5: command tx timeout [ 1039.003090][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.004287][T12683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.004572][T12683] bridge_slave_0: entered allmulticast mode [ 1039.041459][T12683] bridge_slave_0: entered promiscuous mode [ 1039.334320][T12683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.334492][T12683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.335438][T12683] bridge_slave_1: entered allmulticast mode [ 1039.370951][T12683] bridge_slave_1: entered promiscuous mode [ 1040.422524][T12738] wg1 speed is unknown, defaulting to 1000 [ 1043.318507][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1043.356849][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1043.359462][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1043.360912][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1043.361886][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1045.591079][ T5812] Bluetooth: hci3: command tx timeout [ 1046.406713][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.406862][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.407144][T12690] bridge_slave_0: entered allmulticast mode [ 1046.425846][T12690] bridge_slave_0: entered promiscuous mode [ 1046.525873][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.526813][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.527125][T12696] bridge_slave_0: entered allmulticast mode [ 1046.530117][T12696] bridge_slave_0: entered promiscuous mode [ 1046.566651][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.566812][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.567085][T12690] bridge_slave_1: entered allmulticast mode [ 1046.571617][T12690] bridge_slave_1: entered promiscuous mode [ 1046.650595][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.650740][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.651004][T12696] bridge_slave_1: entered allmulticast mode [ 1046.655069][T12696] bridge_slave_1: entered promiscuous mode [ 1047.814808][ T5812] Bluetooth: hci3: command tx timeout [ 1050.038604][ T5812] Bluetooth: hci3: command tx timeout [ 1051.266190][T12588] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1051.287087][T12588] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1051.288698][T12588] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1051.310506][T12588] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1051.311443][T12588] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1051.493165][ T38] INFO: task syz.4.1940:12160 blocked for more than 143 seconds. [ 1051.493197][ T38] Tainted: G L syzkaller #0 [ 1051.493210][ T38] Blocked by coredump. [ 1051.493218][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1051.493230][ T38] task:syz.4.1940 state:D stack:23712 pid:12160 tgid:12160 ppid:5806 task_flags:0x40044c flags:0x00080003 [ 1051.493311][ T38] Call Trace: [ 1051.493327][ T38] [ 1051.493343][ T38] __schedule+0x1480/0x50a0 [ 1051.493597][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1051.493696][ T38] ? __pfx___schedule+0x10/0x10 [ 1051.493750][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1051.493802][ T38] rt_mutex_schedule+0x77/0xf0 [ 1051.493837][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1051.493870][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 1051.493921][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 1051.493956][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 1051.493991][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1051.494036][ T38] ? rcu_barrier+0x4c/0x570 [ 1051.494098][ T38] ? rcu_barrier+0x4c/0x570 [ 1051.494121][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1051.494151][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1051.494185][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1051.494300][ T38] rcu_barrier+0x4c/0x570 [ 1051.494331][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1051.494369][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1051.494399][ T38] netdev_run_todo+0x327/0xea0 [ 1051.494502][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 1051.494550][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1051.494584][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 1051.494619][ T38] ? netdev_state_change+0x1ca/0x220 [ 1051.494671][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 1051.494703][ T38] tun_chr_close+0x13f/0x1c0 [ 1051.494734][ T38] __fput+0x45b/0xa80 [ 1051.494805][ T38] task_work_run+0x1d4/0x260 [ 1051.494845][ T38] ? __pfx_task_work_run+0x10/0x10 [ 1051.494880][ T38] ? do_exit+0x6c0/0x2310 [ 1051.494931][ T38] ? do_exit+0x6c0/0x2310 [ 1051.494971][ T38] do_exit+0x6c5/0x2310 [ 1051.495005][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1051.495043][ T38] ? __pfx_do_exit+0x10/0x10 [ 1051.495075][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1051.495105][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 1051.495154][ T38] do_group_exit+0x21c/0x2d0 [ 1051.495191][ T38] ? rt_spin_unlock+0x161/0x200 [ 1051.495227][ T38] get_signal+0x125d/0x1310 [ 1051.495278][ T38] arch_do_signal_or_restart+0x9a/0x7a0 [ 1051.495330][ T38] ? task_work_run+0x1d4/0x260 [ 1051.495374][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1051.495420][ T38] ? __se_sys_close_range+0x4f0/0x650 [ 1051.495452][ T38] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1051.495489][ T38] exit_to_user_mode_loop+0x87/0x4f0 [ 1051.495522][ T38] ? rcu_is_watching+0x15/0xb0 [ 1051.495550][ T38] do_syscall_64+0x2d0/0xf80 [ 1051.495577][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.495627][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1051.495656][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.495681][ T38] RIP: 0033:0x7f0fc598f749 [ 1051.495708][ T38] RSP: 002b:00007ffd9543c878 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1051.495734][ T38] RAX: 0000000000000000 RBX: 00007f0fc5be7da0 RCX: 00007f0fc598f749 [ 1051.495750][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1051.495765][ T38] RBP: 00007f0fc5be7da0 R08: 0000000000004334 R09: 000000039543cb6f [ 1051.495782][ T38] R10: 00000000005f92a4 R11: 0000000000000246 R12: 00000000000c9fcf [ 1051.495797][ T38] R13: 00007f0fc5be6090 R14: ffffffffffffffff R15: 00007ffd9543c990 [ 1051.495834][ T38] [ 1051.495895][ T38] [ 1051.495895][ T38] Showing all locks held in the system: [ 1051.495908][ T38] 3 locks held by rcuc/1/28: [ 1051.495924][ T38] 1 lock held by khungtaskd/38: [ 1051.495937][ T38] #0: ffffffff8d5ae8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1051.496044][ T38] 3 locks held by kworker/u8:8/1101: [ 1051.496058][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1051.496124][ T38] #1: ffffc90004ddfb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1051.496182][ T38] #2: ffffffff8e8a5738 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1051.496311][ T38] 2 locks held by getty/5562: [ 1051.496325][ T38] #0: ffff88814def50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1051.496444][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1051.496502][ T38] 3 locks held by kworker/1:3/5862: [ 1051.496518][ T38] 2 locks held by kworker/0:10/6050: [ 1051.496531][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1051.496589][ T38] #1: ffffc90004b1fb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1051.496647][ T38] 3 locks held by kworker/u8:19/6104: [ 1051.496660][ T38] #0: ffff88814cb39138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1051.496719][ T38] #1: ffffc9000499fb80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1051.496780][ T38] #2: ffffffff8e8a5738 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1051.496918][ T38] 1 lock held by syz-executor/7754: [ 1051.496932][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.496995][ T38] 1 lock held by syz.4.1940/12160: [ 1051.497009][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497066][ T38] 1 lock held by syz-executor/12295: [ 1051.497079][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497138][ T38] 1 lock held by syz.5.2039/12416: [ 1051.497151][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497209][ T38] 1 lock held by syz.6.2063/12481: [ 1051.497222][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497280][ T38] 1 lock held by syz-executor/12523: [ 1051.497294][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497356][ T38] 1 lock held by syz.7.2103/12585: [ 1051.497370][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497427][ T38] 1 lock held by syz-executor/12587: [ 1051.497440][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497498][ T38] 4 locks held by kworker/u9:0/12588: [ 1051.497511][ T38] #0: ffff888065030138 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1051.497576][ T38] #1: ffffc900050dfb80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1051.497636][ T38] #2: ffff88807f2080b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x920 [ 1051.497745][ T38] #3: ffffffff8ea15278 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x51c/0x920 [ 1051.497804][ T38] 2 locks held by syz.1.2115/12620: [ 1051.497818][ T38] #0: ffffffff8edb4e70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1051.497884][ T38] #1: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.497942][ T38] 1 lock held by syz-executor/12632: [ 1051.497956][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.498014][ T38] 1 lock held by syz-executor/12638: [ 1051.498028][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.498086][ T38] 1 lock held by syz-executor/12644: [ 1051.498099][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.498158][ T38] 1 lock held by syz-executor/12661: [ 1051.498172][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.498231][ T38] 1 lock held by syz-executor/12670: [ 1051.498244][ T38] #0: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1051.498303][ T38] 2 locks held by syz-executor/12683: [ 1051.498317][ T38] #0: ffff888064f14f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 1051.498379][ T38] #1: ffff888064f140b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 1051.498473][ T38] 4 locks held by syz-executor/12690: [ 1051.498487][ T38] #0: ffff8880846ccf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 1051.498542][ T38] #1: ffff8880846cc0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 1051.498604][ T38] #2: ffffffff8ea15278 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1051.498669][ T38] #3: ffff88801f6c6358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 1051.498780][ T38] 2 locks held by syz-executor/12696: [ 1051.498794][ T38] #0: ffffffff8e021c88 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1051.498859][ T38] #1: ffffffff8e8a5738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1051.498920][ T38] 1 lock held by syz-executor/12728: [ 1051.498933][ T38] #0: ffffffff8e8a5738 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 1051.498997][ T38] 2 locks held by syz-executor/12738: [ 1051.499010][ T38] #0: ffffffff8e898600 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 1051.499101][ T38] #1: ffffffff8e8a5738 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1051.499201][ T38] 1 lock held by syz-executor/12756: [ 1051.499214][ T38] #0: ffffffff8e8a5738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 1051.499272][ T38] 1 lock held by syz-executor/12764: [ 1051.499285][ T38] #0: ffffffff8e8a5738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1051.499371][ T38] [ 1051.499377][ T38] ============================================= [ 1051.499377][ T38] [ 1051.499387][ T38] NMI backtrace for cpu 0 [ 1051.499413][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1051.499443][ T38] Tainted: [L]=SOFTLOCKUP [ 1051.499451][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1051.499466][ T38] Call Trace: [ 1051.499476][ T38] [ 1051.499485][ T38] dump_stack_lvl+0x189/0x250 [ 1051.499528][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1051.499560][ T38] ? __pfx__printk+0x10/0x10 [ 1051.499596][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1051.499690][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1051.499725][ T38] ? __pfx__printk+0x10/0x10 [ 1051.499754][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1051.499782][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1051.499817][ T38] sys_info+0x135/0x170 [ 1051.499866][ T38] watchdog+0xf95/0xfe0 [ 1051.499905][ T38] ? watchdog+0x20a/0xfe0 [ 1051.499939][ T38] kthread+0x711/0x8a0 [ 1051.499976][ T38] ? __pfx_watchdog+0x10/0x10 [ 1051.500000][ T38] ? __pfx_kthread+0x10/0x10 [ 1051.500030][ T38] ? rt_spin_unlock+0x150/0x200 [ 1051.500067][ T38] ? rt_spin_unlock+0x161/0x200 [ 1051.500096][ T38] ? __pfx_kthread+0x10/0x10 [ 1051.500129][ T38] ret_from_fork+0x599/0xb30 [ 1051.500159][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1051.500196][ T38] ? __switch_to_asm+0x39/0x70 [ 1051.500228][ T38] ? __switch_to_asm+0x33/0x70 [ 1051.500260][ T38] ? __pfx_kthread+0x10/0x10 [ 1051.500294][ T38] ret_from_fork_asm+0x1a/0x30 [ 1051.500357][ T38] [ 1051.500364][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1051.500392][ C1] NMI backtrace for cpu 1 [ 1051.500410][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1051.500436][ C1] Tainted: [L]=SOFTLOCKUP [ 1051.500443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1051.500454][ C1] RIP: 0010:debug_object_active_state+0xc9/0x360 [ 1051.500570][ C1] Code: 00 00 00 48 85 ed 74 49 45 31 e4 eb 0c 48 8b 6d 00 41 ff c4 48 85 ed 74 38 4c 8d 75 18 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 <74> 08 4c 89 f7 e8 3d 3f 9a fd 49 39 1e 74 38 48 89 e8 48 c1 e8 03 [ 1051.500587][ C1] RSP: 0000:ffffc90000a2f960 EFLAGS: 00000046 [ 1051.500603][ C1] RAX: 1ffff1100fd945ab RBX: ffff8880288d8e50 RCX: dffffc0000000000 [ 1051.500618][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a2f840 [ 1051.500630][ C1] RBP: ffff8880568b2498 R08: 0000000000000003 R09: 0000000000000004 [ 1051.500642][ C1] R10: dffffc0000000000 R11: fffff52000145f08 R12: 0000000000000020 [ 1051.500655][ C1] R13: 1ffff1100ad16496 R14: ffff8880568b24b0 R15: dffffc0000000000 [ 1051.500669][ C1] FS: 0000000000000000(0000) GS:ffff888126e01000(0000) knlGS:0000000000000000 [ 1051.500685][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1051.500698][ C1] CR2: 0000555574bea350 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 1051.500714][ C1] Call Trace: [ 1051.500722][ C1] [ 1051.500733][ C1] ? rcu_cpu_kthread+0x243/0x1c40 [ 1051.500762][ C1] rcu_cpu_kthread+0xc0d/0x1c40 [ 1051.500795][ C1] ? rcu_cpu_kthread+0x243/0x1c40 [ 1051.500833][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1051.500862][ C1] ? preempt_schedule_irq+0xde/0x150 [ 1051.500879][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1051.500900][ C1] ? irqentry_exit+0x5dd/0x660 [ 1051.500919][ C1] ? preempt_schedule+0xae/0xc0 [ 1051.500949][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1051.500979][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1051.501002][ C1] ? preempt_schedule+0xae/0xc0 [ 1051.501030][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1051.501058][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1051.501083][ C1] ? __pfx_rcu_cpu_kthread_should_run+0x10/0x10 [ 1051.501125][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1051.501148][ C1] smpboot_thread_fn+0x542/0xa60 [ 1051.501173][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1051.501202][ C1] kthread+0x711/0x8a0 [ 1051.501230][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1051.501254][ C1] ? __pfx_kthread+0x10/0x10 [ 1051.501278][ C1] ? rt_spin_unlock+0x150/0x200 [ 1051.501306][ C1] ? rt_spin_unlock+0x161/0x200 [ 1051.501330][ C1] ? __pfx_kthread+0x10/0x10 [ 1051.501358][ C1] ret_from_fork+0x599/0xb30 [ 1051.501379][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1051.501406][ C1] ? __switch_to_asm+0x39/0x70 [ 1051.501432][ C1] ? __switch_to_asm+0x33/0x70 [ 1051.501459][ C1] ? __pfx_kthread+0x10/0x10 [ 1051.501486][ C1] ret_from_fork_asm+0x1a/0x30 [ 1051.501524][ C1] [ 1051.502402][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1051.502427][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1051.502459][ T38] Tainted: [L]=SOFTLOCKUP [ 1051.502467][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1051.502482][ T38] Call Trace: [ 1051.502491][ T38] [ 1051.502501][ T38] dump_stack_lvl+0x99/0x250 [ 1051.502532][ T38] ? __asan_memcpy+0x40/0x70 [ 1051.502578][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1051.502610][ T38] ? __pfx__printk+0x10/0x10 [ 1051.502649][ T38] vpanic+0x237/0x6d0 [ 1051.502687][ T38] ? __pfx_vpanic+0x10/0x10 [ 1051.502729][ T38] panic+0xb9/0xc0 [ 1051.502757][ T38] ? __pfx_panic+0x10/0x10 [ 1051.502798][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1051.502834][ T38] watchdog+0xfdf/0xfe0 [ 1051.502866][ T38] ? watchdog+0x20a/0xfe0 [ 1051.502900][ T38] kthread+0x711/0x8a0 [ 1051.502936][ T38] ? __pfx_watchdog+0x10/0x10 [ 1051.502962][ T38] ? __pfx_kthread+0x10/0x10 [ 1051.502992][ T38] ? rt_spin_unlock+0x150/0x200 [ 1051.503028][ T38] ? rt_spin_unlock+0x161/0x200 [ 1051.503057][ T38] ? __pfx_kthread+0x10/0x10 [ 1051.503091][ T38] ret_from_fork+0x599/0xb30 [ 1051.503121][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1051.503158][ T38] ? __switch_to_asm+0x39/0x70 [ 1051.503189][ T38] ? __switch_to_asm+0x33/0x70 [ 1051.503221][ T38] ? __pfx_kthread+0x10/0x10 [ 1051.503255][ T38] ret_from_fork_asm+0x1a/0x30 [ 1051.503307][ T38] [ 1051.503897][ T38] Kernel Offset: disabled