last executing test programs: 13.367932696s ago: executing program 3 (id=424): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) recvfrom(r0, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 12.035546714s ago: executing program 3 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dmmidi(0x0, 0x7, 0x920) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) 8.608141919s ago: executing program 2 (id=448): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1f, 0x1000, 0x2d, 0x5, 0x10380, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 7.660939001s ago: executing program 2 (id=452): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) 7.602460287s ago: executing program 0 (id=453): syz_emit_ethernet(0x82, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x10, @dev={0xac, 0x14, 0x14, 0x1a}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@local}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 7.530926401s ago: executing program 4 (id=454): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{0x0}], 0x1, 0x182, 0x0) 7.45606575s ago: executing program 1 (id=455): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="021707080700000025bd7000fcdbdf25050007006ca0"], 0x38}}, 0x4000000) 7.455820895s ago: executing program 2 (id=456): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x10000a007) 7.436636779s ago: executing program 0 (id=457): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x14002, 0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) fchdir(r1) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) 7.384508654s ago: executing program 3 (id=458): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000000c0)={0x2, 0x240, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0x3, 0x6}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_delete(0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) 7.311578175s ago: executing program 4 (id=459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e818beb654cf4a7", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x805}], 0x1, 0x40800) recvmsg(r1, 0x0, 0xf0ff) 7.310626472s ago: executing program 1 (id=460): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$isdn(0x22, 0x3, 0x26) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x8000, 0x5, 0x0, 0x3}}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, 0x0, &(0x7f0000000f80)) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) 7.292790655s ago: executing program 2 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) socket(0x400000000010, 0x3, 0x0) 7.210128121s ago: executing program 0 (id=462): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 7.16393658s ago: executing program 4 (id=463): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000400)) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001b80)={0x2f}) sendfile(r0, r3, 0x0, 0x106f) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) truncate(&(0x7f0000000000)='./file1\x00', 0xfff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x7, 0x0, 0xfffe, 0x40}, 'syz1\x00', 0x18}) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x82, 0x4, 0xdd7, 0x88d7, 0x8f, 0x2, 0x8012, 0x1006, 0xffffffff, 0x5, 0x7, 0x10000009, 0x3, 0x800007, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 5.941234781s ago: executing program 0 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x52e}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2b}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4030) 5.196564644s ago: executing program 4 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000180)) 4.969302149s ago: executing program 0 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.683632042s ago: executing program 4 (id=467): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) 3.73957097s ago: executing program 0 (id=468): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dmmidi(&(0x7f0000019300), 0x7, 0x920) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x1008, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x1ff}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40000) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000001a40)={0x1, 0x6, 0x0, 0x8004, '\x00', '\x00', '\x00', 0x0, 0x5d05, 0x10000004, 0x1, "38d49788ead5f71fd65acf7132de72ec"}) 3.739128946s ago: executing program 1 (id=469): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.701686106s ago: executing program 4 (id=470): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x408c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) openat$fb0(0xffffffffffffff9c, 0x0, 0x20002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 3.559952197s ago: executing program 2 (id=471): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.366810691s ago: executing program 1 (id=472): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) 1.330745598s ago: executing program 1 (id=473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x10000a007) 1.116041136s ago: executing program 1 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 1.107193032s ago: executing program 3 (id=475): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000400)) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001b80)={0x2f}) sendfile(r0, r3, 0x0, 0x106f) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) truncate(&(0x7f0000000000)='./file1\x00', 0xfff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x7, 0x0, 0xfffe, 0x40}, 'syz1\x00', 0x18}) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x82, 0x4, 0xdd7, 0x88d7, 0x8f, 0x2, 0x8012, 0x1006, 0xffffffff, 0x5, 0x7, 0x10000009, 0x3, 0x800007, 0xfffffffd, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 369.349784ms ago: executing program 3 (id=476): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "858351", 0x8, 0x11, 0x0, @empty, @empty, {[], {0x4e20, 0x4e22, 0x8}}}}}}, 0x0) 337.170337ms ago: executing program 2 (id=477): io_setup(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 3 (id=478): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x70, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x4}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x70}}, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$SNDCTL_SYNTH_INFO(r6, 0xc08c5102, &(0x7f0000000840)={"b30ab7af0277d7e2de35ec2548bd108b751ebaab0d5281885e41e5fe4353", 0x0, 0x3, 0x1, 0x5a, 0x2, 0x101, 0xcd, 0x9, [0x9, 0x1, 0xc5b, 0x1, 0x8, 0x3, 0x7, 0x80000001, 0x0, 0x7, 0x8, 0x100, 0x3, 0x7, 0x0, 0x9, 0x81, 0x4, 0x5]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="58010000", @ANYRES16=r9, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000006c0)=""/224) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 73.277855][ T5782] cgroup: Unknown subsys name 'net' [ 73.518806][ T5782] cgroup: Unknown subsys name 'cpuset' [ 73.574918][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.186863][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.379855][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.383419][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.392668][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.404535][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.408527][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.410790][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.411347][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.412520][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.412639][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.414731][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.415057][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.416100][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.416234][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.422435][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.423459][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.436094][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.462970][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.463824][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.465069][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.465923][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.565504][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.576240][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.579203][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.580923][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.581681][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.272617][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 78.338456][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 78.418498][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 78.462782][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 78.472728][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 78.649943][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.651008][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.651189][ T5795] bridge_slave_0: entered allmulticast mode [ 78.652900][ T5795] bridge_slave_0: entered promiscuous mode [ 78.705361][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.705427][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.705533][ T5795] bridge_slave_1: entered allmulticast mode [ 78.706841][ T5795] bridge_slave_1: entered promiscuous mode [ 78.708087][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.708762][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.708906][ T5803] bridge_slave_0: entered allmulticast mode [ 78.710546][ T5803] bridge_slave_0: entered promiscuous mode [ 78.788647][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.788747][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.788852][ T5803] bridge_slave_1: entered allmulticast mode [ 78.790220][ T5803] bridge_slave_1: entered promiscuous mode [ 78.867207][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.867298][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.867440][ T5794] bridge_slave_0: entered allmulticast mode [ 78.868823][ T5794] bridge_slave_0: entered promiscuous mode [ 78.907192][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.922054][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.923190][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.923649][ T5794] bridge_slave_1: entered allmulticast mode [ 78.926924][ T5794] bridge_slave_1: entered promiscuous mode [ 78.928390][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.928507][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.928953][ T5796] bridge_slave_0: entered allmulticast mode [ 78.931303][ T5796] bridge_slave_0: entered promiscuous mode [ 78.935066][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.935251][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.935408][ T5800] bridge_slave_0: entered allmulticast mode [ 78.937648][ T5800] bridge_slave_0: entered promiscuous mode [ 78.947429][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.951904][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.972838][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.972980][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.973129][ T5796] bridge_slave_1: entered allmulticast mode [ 78.977369][ T5796] bridge_slave_1: entered promiscuous mode [ 78.979394][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.979501][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.979694][ T5800] bridge_slave_1: entered allmulticast mode [ 78.982308][ T5800] bridge_slave_1: entered promiscuous mode [ 79.008602][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.095757][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.138726][ T5795] team0: Port device team_slave_0 added [ 79.140943][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.143395][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.166749][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.169170][ T5803] team0: Port device team_slave_0 added [ 79.172586][ T5795] team0: Port device team_slave_1 added [ 79.193913][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.197176][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.200008][ T5803] team0: Port device team_slave_1 added [ 79.495736][ T5802] Bluetooth: hci4: command tx timeout [ 79.496331][ T5804] Bluetooth: hci0: command tx timeout [ 79.570659][ T5794] team0: Port device team_slave_0 added [ 79.584439][ T5804] Bluetooth: hci1: command tx timeout [ 79.613665][ T5794] team0: Port device team_slave_1 added [ 79.615075][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.615088][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.615111][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.619254][ T5800] team0: Port device team_slave_0 added [ 79.620093][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.620104][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.620127][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.626785][ T5796] team0: Port device team_slave_0 added [ 79.648499][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.648515][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.648538][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.649958][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.649969][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.649991][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.653150][ T5800] team0: Port device team_slave_1 added [ 79.654278][ T5804] Bluetooth: hci3: command tx timeout [ 79.654441][ T5804] Bluetooth: hci2: command tx timeout [ 79.656974][ T5796] team0: Port device team_slave_1 added [ 79.738427][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.738442][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.738465][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.765729][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.765746][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.765769][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.838557][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.838573][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.838596][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.840311][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.840324][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.840348][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.867823][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.867838][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.867861][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.869537][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.869550][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.869572][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.917544][ T5795] hsr_slave_0: entered promiscuous mode [ 79.919024][ T5795] hsr_slave_1: entered promiscuous mode [ 79.953549][ T5803] hsr_slave_0: entered promiscuous mode [ 79.955501][ T5803] hsr_slave_1: entered promiscuous mode [ 79.956496][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 79.956603][ T5803] Cannot create hsr debugfs directory [ 80.016915][ T5794] hsr_slave_0: entered promiscuous mode [ 80.018096][ T5794] hsr_slave_1: entered promiscuous mode [ 80.018931][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 80.018953][ T5794] Cannot create hsr debugfs directory [ 80.137490][ T5796] hsr_slave_0: entered promiscuous mode [ 80.139096][ T5796] hsr_slave_1: entered promiscuous mode [ 80.139924][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 80.139946][ T5796] Cannot create hsr debugfs directory [ 80.175877][ T5800] hsr_slave_0: entered promiscuous mode [ 80.176667][ T5800] hsr_slave_1: entered promiscuous mode [ 80.177172][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 80.177186][ T5800] Cannot create hsr debugfs directory [ 81.108170][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.132763][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.170499][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.218643][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.335956][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.372307][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.420486][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.453428][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.549034][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.574378][ T5802] Bluetooth: hci4: command tx timeout [ 81.575210][ T5802] Bluetooth: hci0: command tx timeout [ 81.575279][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.632077][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.656083][ T5802] Bluetooth: hci1: command tx timeout [ 81.690230][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.735233][ T5802] Bluetooth: hci2: command tx timeout [ 81.735266][ T5802] Bluetooth: hci3: command tx timeout [ 81.761136][ T9] cfg80211: failed to load regulatory.db [ 81.882565][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.933045][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.981550][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.031842][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.167476][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.184790][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.217822][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.253346][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.292876][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.367974][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.402537][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.403213][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.448547][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.448688][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.474414][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.539574][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.542429][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.586123][ T1415] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.586197][ T1415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.629749][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.629848][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.663296][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.690959][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.712106][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.712229][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.776850][ T1415] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.778796][ T1415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.837041][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.857773][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.890552][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.890788][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.927116][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.927341][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.980045][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.030023][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.030215][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.069454][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.071353][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.161531][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.423861][ T5795] veth0_vlan: entered promiscuous mode [ 83.461509][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.485836][ T5795] veth1_vlan: entered promiscuous mode [ 83.502206][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.654697][ T5802] Bluetooth: hci0: command tx timeout [ 83.654704][ T5804] Bluetooth: hci4: command tx timeout [ 83.717339][ T5795] veth0_macvtap: entered promiscuous mode [ 83.734607][ T5804] Bluetooth: hci1: command tx timeout [ 83.741901][ T5795] veth1_macvtap: entered promiscuous mode [ 83.751449][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.768786][ T5803] veth0_vlan: entered promiscuous mode [ 83.783844][ T5794] veth0_vlan: entered promiscuous mode [ 83.810272][ T5803] veth1_vlan: entered promiscuous mode [ 83.814416][ T5804] Bluetooth: hci2: command tx timeout [ 83.814441][ T5804] Bluetooth: hci3: command tx timeout [ 83.833420][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.845930][ T5794] veth1_vlan: entered promiscuous mode [ 83.850116][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.882971][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.928726][ T1415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.944049][ T1415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950391][ T1415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.962373][ T1415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078086][ T5796] veth0_vlan: entered promiscuous mode [ 84.091388][ T5803] veth0_macvtap: entered promiscuous mode [ 84.154000][ T5794] veth0_macvtap: entered promiscuous mode [ 84.171790][ T5803] veth1_macvtap: entered promiscuous mode [ 84.210584][ T5794] veth1_macvtap: entered promiscuous mode [ 84.212999][ T5796] veth1_vlan: entered promiscuous mode [ 84.283369][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.283394][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.347332][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.374381][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.376899][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.376915][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.379746][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.408575][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.421674][ T1444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.433062][ T1444] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.448295][ T1444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.454008][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.479625][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.493118][ T4513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.502946][ T4513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.503970][ T4513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.542104][ T5796] veth0_macvtap: entered promiscuous mode [ 84.605650][ T5796] veth1_macvtap: entered promiscuous mode [ 84.664634][ T5800] veth0_vlan: entered promiscuous mode [ 84.827693][ T5800] veth1_vlan: entered promiscuous mode [ 84.886567][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.920092][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.920110][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.921391][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.948735][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.983482][ T1415] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.994769][ T1415] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999367][ T1415] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.011236][ T1415] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.028520][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.028541][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.117885][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 85.128601][ T5870] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 85.128628][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.128680][ T5870] usb 1-1: Product: syz [ 85.128692][ T5870] usb 1-1: Manufacturer: syz [ 85.128704][ T5870] usb 1-1: SerialNumber: syz [ 85.140977][ T5870] usb 1-1: config 0 descriptor?? [ 85.160452][ T5870] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 85.196506][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.196717][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.247794][ T5800] veth0_macvtap: entered promiscuous mode [ 85.390694][ T5800] veth1_macvtap: entered promiscuous mode [ 85.415433][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.415457][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.514719][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.514739][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.577333][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.659370][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.718641][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.718661][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.734443][ T5802] Bluetooth: hci0: command tx timeout [ 85.734474][ T5802] Bluetooth: hci4: command tx timeout [ 85.777183][ T1415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.782571][ T1415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784696][ T1415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.795955][ T1415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.814806][ T5804] Bluetooth: hci1: command tx timeout [ 85.894491][ T5804] Bluetooth: hci3: command tx timeout [ 85.894521][ T5804] Bluetooth: hci2: command tx timeout [ 86.290035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.290056][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.657255][ T5870] gspca_topro: reg_r err -71 [ 86.657399][ T5870] gspca_topro: Sensor soi763a [ 87.205535][ T5870] usb 1-1: USB disconnect, device number 2 [ 87.263698][ T5095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.263718][ T5095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.965543][ T5945] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11'. [ 88.183920][ T5848] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 88.469612][ T5848] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.469638][ T5848] usb 3-1: config 0 has no interface number 0 [ 88.490056][ T5848] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 88.490085][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.490104][ T5848] usb 3-1: Product: syz [ 88.490117][ T5848] usb 3-1: Manufacturer: syz [ 88.490131][ T5848] usb 3-1: SerialNumber: syz [ 88.547005][ T5848] usb 3-1: config 0 descriptor?? [ 88.572468][ T5848] usb 3-1: selecting invalid altsetting 1 [ 88.573139][ T5848] dvb_ttusb_budget: ttusb_init_controller: error [ 88.573229][ T5848] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 89.783656][ T5848] DVB: Unable to find symbol stv0299_attach() [ 89.983546][ T5848] DVB: Unable to find symbol tda8083_attach() [ 89.983560][ T5848] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 90.005665][ T5959] Zero length message leads to an empty skb [ 90.040655][ T5848] usb 3-1: USB disconnect, device number 2 [ 90.066432][ T5963] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure [ 90.678330][ T5969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.752332][ T6004] random: crng reseeded on system resumption [ 95.553379][ T6025] bridge0: entered promiscuous mode [ 95.553585][ T6025] macsec1: entered promiscuous mode [ 95.683372][ T6029] block device autoloading is deprecated and will be removed. [ 97.284172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.721591][ T6046] loop2: detected capacity change from 0 to 7 [ 97.799709][ T6046] Dev loop2: unable to read RDB block 7 [ 97.799758][ T6046] loop2: unable to read partition table [ 97.799956][ T6046] loop2: partition table beyond EOD, truncated [ 97.799993][ T6046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.933852][ T6050] program syz.1.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.796411][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.431291][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 99.431321][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.431340][ T10] usb 4-1: Product: syz [ 99.431353][ T10] usb 4-1: Manufacturer: syz [ 99.431367][ T10] usb 4-1: SerialNumber: syz [ 99.441026][ T10] usb 4-1: config 0 descriptor?? [ 99.884171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 99.944170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.004153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.064216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.184176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.244173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.642914][ T10] usb 4-1: Firmware version (0.0) predates our first public release. [ 100.642938][ T10] usb 4-1: Please update to version 0.2 or newer [ 100.650792][ T10] usb 4-1: Firmware: build ! [ 100.876257][ T10] usb 4-1: USB disconnect, device number 2 [ 100.902771][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.104269][ T808] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.313000][ T808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.313810][ T808] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 101.313831][ T808] usb 3-1: can't read configurations, error -71 [ 101.864722][ T6093] program syz.3.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.827345][ T6102] random: crng reseeded on system resumption [ 103.634272][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.789541][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.789572][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.789592][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.789632][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.789653][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.863901][ T31] usb 4-1: config 0 descriptor?? [ 104.308347][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 104.308425][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 104.361596][ T31] usb 4-1: USB disconnect, device number 3 [ 104.714178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.734178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.744178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.754285][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.942786][ T6134] loop2: detected capacity change from 0 to 7 [ 105.962676][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.974489][ T31] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 105.974512][ T31] usb 5-1: can't read configurations, error -71 [ 106.000605][ T5973] Dev loop2: unable to read RDB block 7 [ 106.000648][ T5973] loop2: unable to read partition table [ 106.000875][ T5973] loop2: partition table beyond EOD, truncated [ 106.035007][ T6134] Dev loop2: unable to read RDB block 7 [ 106.035049][ T6134] loop2: unable to read partition table [ 106.035180][ T6134] loop2: partition table beyond EOD, truncated [ 106.035208][ T6134] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.646108][ T6154] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.629560][ T36] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.784718][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.784749][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.784770][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.784808][ T36] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.784827][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.790003][ T36] usb 5-1: config 0 descriptor?? [ 110.258470][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 110.258595][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 110.281293][ T36] usb 5-1: USB disconnect, device number 4 [ 110.766794][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.275756][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 111.277886][ T10] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.277912][ T10] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.277935][ T10] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.277959][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 111.328488][ T10] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 111.328515][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.328532][ T10] usb 2-1: Product: syz [ 111.328545][ T10] usb 2-1: Manufacturer: syz [ 111.328557][ T10] usb 2-1: SerialNumber: syz [ 111.576205][ T37] audit: type=1804 audit(1775070860.189:2): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.83" name="file0" dev="ramfs" ino=9464 res=1 errno=0 [ 111.635193][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 112.155265][ T10] usb 2-1: USB disconnect, device number 2 [ 112.323320][ T6170] usblp0: removed [ 113.927171][ T6204] Bluetooth: MGMT ver 1.23 [ 114.264241][ T5806] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.426029][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.426045][ T5806] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.427971][ T5806] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 114.427986][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.427996][ T5806] usb 5-1: Product: syz [ 114.428003][ T5806] usb 5-1: Manufacturer: syz [ 114.428010][ T5806] usb 5-1: SerialNumber: syz [ 114.463179][ T5806] usb 5-1: config 0 descriptor?? [ 114.731643][ T10] usb 5-1: USB disconnect, device number 5 [ 115.030028][ T6228] netlink: 164 bytes leftover after parsing attributes in process `syz.2.97'. [ 115.414560][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98'. [ 115.415484][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.98'. [ 119.324274][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.476331][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.476357][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 119.478724][ T10] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 119.478751][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.478769][ T10] usb 5-1: Product: syz [ 119.478782][ T10] usb 5-1: Manufacturer: syz [ 119.478796][ T10] usb 5-1: SerialNumber: syz [ 119.565630][ T10] usb 5-1: config 0 descriptor?? [ 119.872615][ T6285] netlink: 164 bytes leftover after parsing attributes in process `syz.1.113'. [ 120.162288][ T10] usb 5-1: USB disconnect, device number 6 [ 120.282398][ T6287] dvmrp6: entered allmulticast mode [ 122.306358][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.704292][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 122.722714][ T31] usb 2-1: config 0 has no interfaces? [ 122.734628][ T31] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 122.734656][ T31] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 122.734675][ T31] usb 2-1: Product: syz [ 122.734689][ T31] usb 2-1: Manufacturer: syz [ 122.734702][ T31] usb 2-1: SerialNumber: syz [ 122.739554][ T31] usb 2-1: config 0 descriptor?? [ 123.176364][ T6316] netlink: 164 bytes leftover after parsing attributes in process `syz.4.124'. [ 123.701745][ T31] usb 2-1: USB disconnect, device number 3 [ 125.196833][ T6325] dvmrp6: entered allmulticast mode [ 125.201581][ T6325] dvmrp6: left allmulticast mode [ 125.544226][ T5841] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.712018][ T5841] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 125.712049][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.712068][ T5841] usb 3-1: Product: syz [ 125.712081][ T5841] usb 3-1: Manufacturer: syz [ 125.712095][ T5841] usb 3-1: SerialNumber: syz [ 125.717609][ T5841] usb 3-1: config 0 descriptor?? [ 126.028326][ T6349] random: crng reseeded on system resumption [ 127.099411][ T5841] usb 3-1: Firmware version (0.0) predates our first public release. [ 127.099426][ T5841] usb 3-1: Please update to version 0.2 or newer [ 129.334247][ T5806] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 129.474291][ T5806] usb 4-1: device descriptor read/64, error -71 [ 130.884271][ T5806] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 131.014272][ T5806] usb 4-1: device descriptor read/64, error -71 [ 131.046014][ T10] usb 3-1: USB disconnect, device number 5 [ 131.124512][ T5806] usb usb4-port1: attempt power cycle [ 131.464251][ T5806] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 131.484903][ T5806] usb 4-1: device descriptor read/8, error -71 [ 131.544432][ T36] IPVS: starting estimator thread 0... [ 131.674343][ T6419] IPVS: using max 11 ests per chain, 26400 per kthread [ 131.832208][ T5806] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 131.852659][ T5806] usb 4-1: device descriptor read/8, error -71 [ 131.954458][ T5806] usb usb4-port1: unable to enumerate USB device [ 132.320958][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 132.320994][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 132.321007][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.321014][ T5802] Workqueue: hci0 hci_rx_work [ 132.321046][ T5802] Call Trace: [ 132.321053][ T5802] [ 132.321059][ T5802] dump_stack_lvl+0xe8/0x150 [ 132.321077][ T5802] sysfs_create_dir_ns+0x271/0x2a0 [ 132.321090][ T5802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 132.321106][ T5802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 132.321120][ T5802] ? rt_spin_unlock+0x160/0x200 [ 132.321136][ T5802] kobject_add_internal+0x631/0xd10 [ 132.321154][ T5802] kobject_add+0x163/0x240 [ 132.321171][ T5802] ? __pfx_kobject_add+0x10/0x10 [ 132.321188][ T5802] ? get_device_parent+0x370/0x3a0 [ 132.321203][ T5802] device_add+0x408/0xb80 [ 132.321218][ T5802] hci_conn_add_sysfs+0xd5/0x210 [ 132.321235][ T5802] le_conn_complete_evt+0xf1d/0x1430 [ 132.321253][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 132.321266][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.321277][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.321289][ T5802] ? skb_pull_data+0xfb/0x200 [ 132.321306][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 132.321322][ T5802] hci_event_packet+0x7af/0x12c0 [ 132.321336][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 132.321348][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 132.321357][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 132.321376][ T5802] ? hci_send_to_monitor+0xe2/0x590 [ 132.321391][ T5802] hci_rx_work+0x3ee/0x1030 [ 132.321404][ T5802] ? process_scheduled_works+0xa8d/0x18c0 [ 132.321420][ T5802] process_scheduled_works+0xb6e/0x18c0 [ 132.321454][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.321471][ T5802] ? assign_work+0x3d5/0x5e0 [ 132.321487][ T5802] worker_thread+0xa53/0xfc0 [ 132.321516][ T5802] kthread+0x388/0x470 [ 132.321528][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 132.321541][ T5802] ? __pfx_kthread+0x10/0x10 [ 132.321552][ T5802] ret_from_fork+0x51e/0xb90 [ 132.321568][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 132.321581][ T5802] ? __switch_to+0xc7d/0x1450 [ 132.321596][ T5802] ? __pfx_kthread+0x10/0x10 [ 132.321607][ T5802] ret_from_fork_asm+0x1a/0x30 [ 132.321626][ T5802] [ 132.323041][ T5802] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 132.323069][ T5802] Bluetooth: hci0: failed to register connection device [ 132.342042][ T37] audit: type=1804 audit(1775070880.999:3): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.156" name="/newroot/37/file0" dev="tmpfs" ino=208 res=1 errno=0 [ 132.949254][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949311][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.644318][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.831179][ T31] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 136.831196][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.831206][ T31] usb 3-1: Product: syz [ 136.831213][ T31] usb 3-1: Manufacturer: syz [ 136.831220][ T31] usb 3-1: SerialNumber: syz [ 136.872001][ T31] usb 3-1: config 0 descriptor?? [ 136.988802][ T6454] team_slave_0: entered promiscuous mode [ 136.988872][ T6454] team_slave_1: entered promiscuous mode [ 137.018300][ T6454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.183100][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 137.183122][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.183135][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.183142][ T5804] Workqueue: hci3 hci_rx_work [ 137.183157][ T5804] Call Trace: [ 137.183162][ T5804] [ 137.183169][ T5804] dump_stack_lvl+0xe8/0x150 [ 137.183202][ T5804] sysfs_create_dir_ns+0x271/0x2a0 [ 137.183227][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 137.183258][ T5804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 137.183284][ T5804] ? rt_spin_unlock+0x160/0x200 [ 137.183314][ T5804] kobject_add_internal+0x631/0xd10 [ 137.183348][ T5804] kobject_add+0x163/0x240 [ 137.183376][ T5804] ? __pfx_kobject_add+0x10/0x10 [ 137.183406][ T5804] ? get_device_parent+0x370/0x3a0 [ 137.183436][ T5804] device_add+0x408/0xb80 [ 137.183459][ T5804] hci_conn_add_sysfs+0xd5/0x210 [ 137.183478][ T5804] le_conn_complete_evt+0xf1d/0x1430 [ 137.183512][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 137.183538][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.183560][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.183590][ T5804] ? skb_pull_data+0xfb/0x200 [ 137.183608][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 137.183625][ T5804] hci_event_packet+0x7af/0x12c0 [ 137.183638][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 137.183658][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 137.183676][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 137.183714][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 137.183744][ T5804] hci_rx_work+0x3ee/0x1030 [ 137.183764][ T5804] ? process_scheduled_works+0xa8d/0x18c0 [ 137.183780][ T5804] process_scheduled_works+0xb6e/0x18c0 [ 137.183812][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 137.183847][ T5804] ? assign_work+0x3d5/0x5e0 [ 137.183881][ T5804] worker_thread+0xa53/0xfc0 [ 137.183931][ T5804] kthread+0x388/0x470 [ 137.183943][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 137.183956][ T5804] ? __pfx_kthread+0x10/0x10 [ 137.183967][ T5804] ret_from_fork+0x51e/0xb90 [ 137.183992][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 137.184019][ T5804] ? __switch_to+0xc7d/0x1450 [ 137.184048][ T5804] ? __pfx_kthread+0x10/0x10 [ 137.184071][ T5804] ret_from_fork_asm+0x1a/0x30 [ 137.184107][ T5804] [ 137.187771][ T5804] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.187814][ T5804] Bluetooth: hci3: failed to register connection device [ 137.296963][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 137.434436][ T10] usb 2-1: device descriptor read/64, error -71 [ 137.831281][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 137.946892][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 138.173552][ T31] usb 3-1: Firmware version (0.0) predates our first public release. [ 138.173623][ T31] usb 3-1: Please update to version 0.2 or newer [ 138.487140][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 138.604232][ T10] usb 2-1: device descriptor read/64, error -71 [ 138.714625][ T10] usb usb2-port1: attempt power cycle [ 138.797064][ T6471] openvswitch: netlink: Duplicate or invalid key (type 0). [ 138.797106][ T6471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.099645][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 139.117285][ T10] usb 2-1: device descriptor read/8, error -71 [ 139.400301][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 139.400316][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 139.413466][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 139.413481][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 139.527449][ T1013] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.544839][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 139.601914][ T10] usb 2-1: device descriptor read/8, error -71 [ 139.643087][ T68] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.731544][ T10] usb usb2-port1: unable to enumerate USB device [ 139.907524][ T1415] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.149727][ T1111] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.884365][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.036140][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 142.172714][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 142.172747][ T31] usb 4-1: can't read configurations, error -61 [ 142.307890][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.424276][ T5870] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 142.476374][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 142.478703][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 142.478724][ T31] usb 4-1: can't read configurations, error -61 [ 142.479061][ T31] usb usb4-port1: attempt power cycle [ 142.732180][ T5870] usb 1-1: config 0 has no interfaces? [ 142.732217][ T5870] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 142.732238][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.751761][ T5870] usb 1-1: config 0 descriptor?? [ 142.996885][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 143.552160][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 143.552834][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 143.556899][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 143.556929][ T31] usb 4-1: can't read configurations, error -61 [ 143.746125][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.764776][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 143.767195][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 143.767217][ T31] usb 4-1: can't read configurations, error -61 [ 143.769023][ T31] usb usb4-port1: unable to enumerate USB device [ 143.855724][ T6521] program syz.4.184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.069825][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.185'. [ 144.295814][ T5863] usb 1-1: USB disconnect, device number 3 [ 145.294550][ T5904] usb 3-1: USB disconnect, device number 6 [ 147.818103][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 150.360391][ T5841] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 150.515476][ T5841] usb 4-1: device descriptor read/64, error -71 [ 150.515479][ T5904] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.644199][ T5904] usb 3-1: device descriptor read/64, error -71 [ 150.744303][ T808] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.764739][ T5841] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 150.884208][ T5904] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.904352][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 150.904547][ T5841] usb 4-1: device descriptor read/64, error -71 [ 150.909155][ T808] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.909182][ T808] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.909204][ T808] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.909221][ T808] usb 5-1: config 1 interface 0 has no altsetting 0 [ 150.911488][ T808] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 150.911505][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.911515][ T808] usb 5-1: Product: syz [ 150.911522][ T808] usb 5-1: Manufacturer: syz [ 150.911529][ T808] usb 5-1: SerialNumber: syz [ 150.955034][ T5848] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.018526][ T5841] usb usb4-port1: attempt power cycle [ 151.024473][ T5904] usb 3-1: device descriptor read/64, error -71 [ 151.116798][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.116821][ T5848] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.120810][ T5848] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 151.120837][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.120904][ T5848] usb 2-1: Product: syz [ 151.120917][ T5848] usb 2-1: Manufacturer: syz [ 151.120930][ T5848] usb 2-1: SerialNumber: syz [ 151.141550][ T5904] usb usb3-port1: attempt power cycle [ 151.195446][ T5848] usb 2-1: config 0 descriptor?? [ 151.210379][ T808] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 151.374364][ T5841] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 151.394949][ T5841] usb 4-1: device descriptor read/8, error -71 [ 151.429898][ T5848] usb 5-1: USB disconnect, device number 7 [ 151.435976][ T5848] usblp0: removed [ 151.462926][ T5870] usb 2-1: USB disconnect, device number 8 [ 151.504554][ T5904] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.526222][ T5904] usb 3-1: device descriptor read/8, error -71 [ 151.576489][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576516][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576530][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576545][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576559][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576573][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576587][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576601][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576615][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.576628][ T808] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 151.671924][ T5841] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 151.675915][ T808] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz0] on syz0 [ 151.734962][ T5841] usb 4-1: device descriptor read/8, error -71 [ 151.844295][ T5904] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.847632][ T5841] usb usb4-port1: unable to enumerate USB device [ 151.864295][ T808] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 151.866461][ T5904] usb 3-1: device descriptor read/8, error -71 [ 151.974623][ T5904] usb usb3-port1: unable to enumerate USB device [ 152.044705][ T808] usb 1-1: config 0 has no interfaces? [ 152.044741][ T808] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 152.044762][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.048415][ T808] usb 1-1: config 0 descriptor?? [ 152.107764][ T6596] program syz.1.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.264299][ T5904] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.514455][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 152.531562][ T5904] usb 5-1: config index 0 descriptor too short (expected 17170, got 18) [ 152.531579][ T5904] usb 5-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 152.531589][ T5904] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 152.539313][ T5904] usb 5-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 152.539339][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.539357][ T5904] usb 5-1: Product: syz [ 152.539371][ T5904] usb 5-1: Manufacturer: syz [ 152.539383][ T5904] usb 5-1: SerialNumber: syz [ 152.621444][ T5904] usb 5-1: config 0 descriptor?? [ 152.631333][ T5904] ums-freecom 5-1:0.0: USB Mass Storage device detected [ 153.020327][ T5904] usb 5-1: USB disconnect, device number 8 [ 153.210438][ T6606] batadv0: entered promiscuous mode [ 153.210765][ T6606] vlan2: entered promiscuous mode [ 153.325312][ T37] audit: type=1326 audit(1775070901.969:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.2.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4729f76597 code=0x0 [ 154.059162][ T5804] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 154.493816][ T6518] usb 1-1: USB disconnect, device number 4 [ 154.926864][ T5804] Bluetooth: hci0: unexpected event for opcode 0x0023 [ 155.594211][ T5841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.659771][ T6630] program syz.4.218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.767518][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.767543][ T5841] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.771242][ T5841] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 155.771268][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.771284][ T5841] usb 1-1: Product: syz [ 155.771291][ T5841] usb 1-1: Manufacturer: syz [ 155.771298][ T5841] usb 1-1: SerialNumber: syz [ 155.787926][ T5841] usb 1-1: config 0 descriptor?? [ 155.994433][ T5841] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 156.059870][ T808] usb 1-1: USB disconnect, device number 5 [ 156.124245][ T5841] usb 4-1: device descriptor read/64, error -71 [ 156.374368][ T5841] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 156.514854][ T5841] usb 4-1: device descriptor read/64, error -71 [ 156.629329][ T5841] usb usb4-port1: attempt power cycle [ 156.974318][ T5841] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 156.994946][ T5841] usb 4-1: device descriptor read/8, error -71 [ 157.038182][ T5804] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 157.038206][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.038229][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.038241][ T5804] Workqueue: hci2 hci_rx_work [ 157.038265][ T5804] Call Trace: [ 157.038272][ T5804] [ 157.038280][ T5804] dump_stack_lvl+0xe8/0x150 [ 157.038313][ T5804] sysfs_create_dir_ns+0x271/0x2a0 [ 157.038338][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 157.038367][ T5804] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 157.038395][ T5804] ? rt_spin_unlock+0x160/0x200 [ 157.038425][ T5804] kobject_add_internal+0x631/0xd10 [ 157.038458][ T5804] kobject_add+0x163/0x240 [ 157.038487][ T5804] ? __pfx_kobject_add+0x10/0x10 [ 157.038516][ T5804] ? get_device_parent+0x370/0x3a0 [ 157.038544][ T5804] device_add+0x408/0xb80 [ 157.038570][ T5804] hci_conn_add_sysfs+0xd5/0x210 [ 157.038603][ T5804] le_conn_complete_evt+0xf1d/0x1430 [ 157.038645][ T5804] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.038671][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.038692][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.038717][ T5804] ? skb_pull_data+0xfb/0x200 [ 157.038747][ T5804] hci_le_conn_complete_evt+0x187/0x470 [ 157.038780][ T5804] hci_event_packet+0x7af/0x12c0 [ 157.038804][ T5804] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.038827][ T5804] ? __pfx_hci_event_packet+0x10/0x10 [ 157.038845][ T5804] ? rt_spin_unlock+0x14f/0x200 [ 157.038881][ T5804] ? hci_send_to_monitor+0xe2/0x590 [ 157.038910][ T5804] hci_rx_work+0x3ee/0x1030 [ 157.038937][ T5804] ? process_scheduled_works+0xa8d/0x18c0 [ 157.038975][ T5804] process_scheduled_works+0xb6e/0x18c0 [ 157.039036][ T5804] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.039071][ T5804] ? assign_work+0x3d5/0x5e0 [ 157.039105][ T5804] worker_thread+0xa53/0xfc0 [ 157.039162][ T5804] kthread+0x388/0x470 [ 157.039184][ T5804] ? __pfx_worker_thread+0x10/0x10 [ 157.039209][ T5804] ? __pfx_kthread+0x10/0x10 [ 157.039231][ T5804] ret_from_fork+0x51e/0xb90 [ 157.039263][ T5804] ? __pfx_ret_from_fork+0x10/0x10 [ 157.039289][ T5804] ? __switch_to+0xc7d/0x1450 [ 157.039318][ T5804] ? __pfx_kthread+0x10/0x10 [ 157.039340][ T5804] ret_from_fork_asm+0x1a/0x30 [ 157.039377][ T5804] [ 157.039407][ T5804] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.039444][ T5804] Bluetooth: hci2: failed to register connection device [ 157.234308][ T5841] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 157.309813][ T5841] usb 4-1: device descriptor read/8, error -71 [ 157.451399][ T5841] usb usb4-port1: unable to enumerate USB device [ 158.481914][ T6667] program syz.2.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.924258][ T6518] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.052267][ T5802] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 159.076508][ T6518] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.076533][ T6518] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.080047][ T6518] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 159.080074][ T6518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.080092][ T6518] usb 3-1: Product: syz [ 159.080106][ T6518] usb 3-1: Manufacturer: syz [ 159.080119][ T6518] usb 3-1: SerialNumber: syz [ 159.155169][ T6518] usb 3-1: config 0 descriptor?? [ 159.228590][ T6683] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.237'. [ 159.382529][ T5841] usb 3-1: USB disconnect, device number 11 [ 159.558162][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'. [ 159.773859][ T6701] program syz.1.244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.124285][ T6518] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.274238][ T6518] usb 5-1: Using ep0 maxpacket: 16 [ 160.277573][ T6518] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 160.277603][ T6518] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 160.280117][ T6518] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.280143][ T6518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.280161][ T6518] usb 5-1: Product: syz [ 160.280174][ T6518] usb 5-1: Manufacturer: syz [ 160.280187][ T6518] usb 5-1: SerialNumber: syz [ 160.349177][ T6518] usb 5-1: config 0 descriptor?? [ 160.370256][ T6518] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.370300][ T6518] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 160.474232][ T5870] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 160.644185][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 160.647783][ T5870] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.647810][ T5870] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.647858][ T5870] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.647872][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 160.651169][ T5870] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 160.651187][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.651197][ T5870] usb 4-1: Product: syz [ 160.651203][ T5870] usb 4-1: Manufacturer: syz [ 160.651211][ T5870] usb 4-1: SerialNumber: syz [ 160.981410][ T6518] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 160.983443][ T6518] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 161.026573][ T5870] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 161.056243][ T5870] usb 4-1: USB disconnect, device number 20 [ 161.127581][ T5870] usblp0: removed [ 161.591286][ T6518] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 161.594345][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 161.596587][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 161.597187][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 161.599025][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 161.603702][ T6721] capability: warning: `syz.3.253' uses 32-bit capabilities (legacy support in use) [ 161.603960][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 161.819107][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 161.819129][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 161.819142][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 161.819155][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 161.819169][ T6518] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 161.882641][ T6518] usb 5-1: USB disconnect, device number 9 [ 162.333179][ T5802] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 162.512727][ T6732] program syz.4.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.896483][ T6518] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.061742][ T6518] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.061767][ T6518] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.077952][ T6518] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 163.077980][ T6518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.077998][ T6518] usb 5-1: Product: syz [ 163.078012][ T6518] usb 5-1: Manufacturer: syz [ 163.078025][ T6518] usb 5-1: SerialNumber: syz [ 163.102336][ T6518] usb 5-1: config 0 descriptor?? [ 163.174296][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 163.340278][ T6518] usb 5-1: USB disconnect, device number 10 [ 164.834224][ T5848] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.995535][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 165.000169][ T5848] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 165.000195][ T5848] usb 2-1: config 0 has no interface number 0 [ 165.000249][ T5848] usb 2-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.000291][ T5848] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 165.000312][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.020331][ T5848] usb 2-1: config 0 descriptor?? [ 165.038312][ T5848] usbhid 2-1:0.4: couldn't find an input interrupt endpoint [ 165.738282][ T6752] netlink: 240 bytes leftover after parsing attributes in process `syz.4.264'. [ 165.738558][ T6752] netlink: 'syz.4.264': attribute type 2 has an invalid length. [ 167.797720][ T5804] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 174.246772][ T6518] usb 2-1: USB disconnect, device number 9 [ 174.374370][ T5848] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.543983][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.544008][ T5848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.569465][ T5848] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 174.569496][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.569514][ T5848] usb 3-1: Product: syz [ 174.569528][ T5848] usb 3-1: Manufacturer: syz [ 174.569542][ T5848] usb 3-1: SerialNumber: syz [ 174.596244][ T5848] usb 3-1: config 0 descriptor?? [ 174.624597][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 174.679171][ T4465] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.679422][ T4465] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.679462][ T4465] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.679495][ T4465] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.679664][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 174.812245][ T5848] usb 3-1: USB disconnect, device number 12 [ 175.089265][ T5904] hid_parser_main: 5 callbacks suppressed [ 175.089285][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089312][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089338][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089363][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089387][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089412][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089436][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089460][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089484][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.089508][ T5904] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 175.142036][ T5802] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 175.226014][ T5904] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz0] on syz0 [ 175.274213][ T6518] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.482203][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.281'. [ 175.731716][ T6815] pimreg: entered allmulticast mode [ 176.163313][ T5841] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 176.208735][ T6518] usb 4-1: device descriptor read/64, error -71 [ 176.444187][ T6518] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 176.575594][ T6518] usb 4-1: device descriptor read/64, error -71 [ 176.601065][ T5841] usb 1-1: config 0 has no interfaces? [ 176.601111][ T5841] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 176.601132][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.618859][ T5841] usb 1-1: config 0 descriptor?? [ 176.684501][ T6518] usb usb4-port1: attempt power cycle [ 177.063827][ T6518] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 177.104856][ T6518] usb 4-1: device descriptor read/8, error -71 [ 177.344202][ T6518] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 177.365114][ T6518] usb 4-1: device descriptor read/8, error -71 [ 177.512972][ T6518] usb usb4-port1: unable to enumerate USB device [ 177.726481][ T5841] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.994254][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.994279][ T5841] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.999182][ T5841] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 177.999208][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.999224][ T5841] usb 2-1: Product: syz [ 177.999236][ T5841] usb 2-1: Manufacturer: syz [ 177.999247][ T5841] usb 2-1: SerialNumber: syz [ 178.002108][ T5841] usb 2-1: config 0 descriptor?? [ 178.221807][ T5848] usb 2-1: USB disconnect, device number 10 [ 178.264189][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 179.022643][ T6877] netlink: 'syz.3.301': attribute type 72 has an invalid length. [ 179.022656][ T6877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 179.105096][ T5863] usb 1-1: USB disconnect, device number 6 [ 179.119170][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 179.119194][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.119216][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.119228][ T5802] Workqueue: hci4 hci_rx_work [ 179.119253][ T5802] Call Trace: [ 179.119261][ T5802] [ 179.119277][ T5802] dump_stack_lvl+0xe8/0x150 [ 179.119309][ T5802] sysfs_create_dir_ns+0x271/0x2a0 [ 179.119333][ T5802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.119363][ T5802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 179.119389][ T5802] ? rt_spin_unlock+0x160/0x200 [ 179.119418][ T5802] kobject_add_internal+0x631/0xd10 [ 179.119451][ T5802] kobject_add+0x163/0x240 [ 179.119480][ T5802] ? __pfx_kobject_add+0x10/0x10 [ 179.119509][ T5802] ? get_device_parent+0x370/0x3a0 [ 179.119537][ T5802] device_add+0x408/0xb80 [ 179.119565][ T5802] hci_conn_add_sysfs+0xd5/0x210 [ 179.119597][ T5802] le_conn_complete_evt+0xf1d/0x1430 [ 179.119630][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 179.119656][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.119677][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.119700][ T5802] ? skb_pull_data+0xfb/0x200 [ 179.119736][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 179.119767][ T5802] hci_event_packet+0x7af/0x12c0 [ 179.119792][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 179.119815][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 179.119832][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 179.119867][ T5802] ? hci_send_to_monitor+0xe2/0x590 [ 179.119896][ T5802] hci_rx_work+0x3ee/0x1030 [ 179.119923][ T5802] ? process_scheduled_works+0xa8d/0x18c0 [ 179.119951][ T5802] process_scheduled_works+0xb6e/0x18c0 [ 179.120008][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 179.120040][ T5802] ? assign_work+0x3d5/0x5e0 [ 179.120068][ T5802] worker_thread+0xa53/0xfc0 [ 179.120120][ T5802] kthread+0x388/0x470 [ 179.120141][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 179.120167][ T5802] ? __pfx_kthread+0x10/0x10 [ 179.120188][ T5802] ret_from_fork+0x51e/0xb90 [ 179.120217][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 179.120242][ T5802] ? __switch_to+0xc7d/0x1450 [ 179.120278][ T5802] ? __pfx_kthread+0x10/0x10 [ 179.120299][ T5802] ret_from_fork_asm+0x1a/0x30 [ 179.120334][ T5802] [ 179.121914][ T5802] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 179.121955][ T5802] Bluetooth: hci4: failed to register connection device [ 179.124836][ T5904] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 179.299097][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.299113][ T5904] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 179.361074][ T5904] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 179.361091][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.361101][ T5904] usb 2-1: Product: syz [ 179.361108][ T5904] usb 2-1: Manufacturer: syz [ 179.361115][ T5904] usb 2-1: SerialNumber: syz [ 179.459740][ T5904] usb 2-1: config 0 descriptor?? [ 179.740209][ T6888] netlink: 240 bytes leftover after parsing attributes in process `syz.3.303'. [ 179.740279][ T6888] netlink: 'syz.3.303': attribute type 2 has an invalid length. [ 180.237823][ T5841] usb 2-1: USB disconnect, device number 11 [ 180.776037][ T6899] dvmrp6: entered allmulticast mode [ 180.784366][ T5841] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.927070][ T6903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.954491][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.954523][ T5841] usb 1-1: config 0 has no interfaces? [ 180.956628][ T5841] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 180.956647][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.956657][ T5841] usb 1-1: Product: syz [ 180.956664][ T5841] usb 1-1: Manufacturer: syz [ 180.956671][ T5841] usb 1-1: SerialNumber: syz [ 180.960610][ T5841] usb 1-1: config 0 descriptor?? [ 181.074686][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.313'. [ 181.495276][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.495643][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.496149][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.496492][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.496774][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.497208][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.497517][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.497830][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.498117][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.499731][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.477399][ T6933] netlink: 'syz.2.319': attribute type 2 has an invalid length. [ 182.477419][ T6933] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 182.477685][ T6933] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 183.005610][ T6932] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 183.005651][ T6932] block device autoloading is deprecated and will be removed. [ 183.532253][ T5841] usb 1-1: USB disconnect, device number 7 [ 183.584232][ T5904] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.734227][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 183.735797][ T5904] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 183.735813][ T5904] usb 2-1: config 0 has no interface number 0 [ 183.735836][ T5904] usb 2-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.735860][ T5904] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 183.735871][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.738654][ T5904] usb 2-1: config 0 descriptor?? [ 183.743955][ T5904] usbhid 2-1:0.4: couldn't find an input interrupt endpoint [ 183.744537][ T5848] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.906095][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.906111][ T5848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.910530][ T5848] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 183.910546][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.910556][ T5848] usb 3-1: Product: syz [ 183.910563][ T5848] usb 3-1: Manufacturer: syz [ 183.910570][ T5848] usb 3-1: SerialNumber: syz [ 183.915080][ T5848] usb 3-1: config 0 descriptor?? [ 183.967916][ T5841] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 184.094177][ T5841] usb 1-1: device descriptor read/64, error -71 [ 184.178339][ T5863] usb 3-1: USB disconnect, device number 13 [ 184.344322][ T5841] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.484232][ T5841] usb 1-1: device descriptor read/64, error -71 [ 184.596442][ T5841] usb usb1-port1: attempt power cycle [ 184.798635][ T6950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'. [ 185.004593][ T5841] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.037485][ T5841] usb 1-1: device descriptor read/8, error -71 [ 185.256054][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 185.300463][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.344331][ T5841] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 185.515350][ T5841] usb 1-1: device descriptor read/8, error -71 [ 186.337629][ T5841] usb usb1-port1: unable to enumerate USB device [ 186.411536][ T5904] usb 2-1: USB disconnect, device number 12 [ 187.200434][ T6985] pimreg3: entered allmulticast mode [ 187.874326][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 188.390424][ T6995] netlink: 164 bytes leftover after parsing attributes in process `syz.3.340'. [ 190.147885][ T5841] hid_parser_main: 1 callbacks suppressed [ 190.147906][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.147933][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.147962][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.147985][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.148006][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.148031][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.148056][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.148080][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.148105][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.148130][ T5841] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0 [ 190.263986][ T5841] hid-generic 00A0:0006:0003.0003: hidraw0: HID v0.05 Device [syz0] on syz0 [ 190.404352][ T5863] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 190.424985][ T7027] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.353'. [ 190.679152][ T5863] usb 3-1: config 0 has no interfaces? [ 190.679190][ T5863] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 190.679211][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.741710][ T5863] usb 3-1: config 0 descriptor?? [ 191.918959][ T7040] dvmrp6: entered allmulticast mode [ 193.974324][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 194.314205][ T31] usb 1-1: device descriptor read/64, error -71 [ 194.474997][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.475070][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.334245][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 195.369670][ T5848] usb 3-1: USB disconnect, device number 14 [ 195.515227][ T31] usb 1-1: device descriptor read/64, error -71 [ 195.637670][ T31] usb usb1-port1: attempt power cycle [ 196.734284][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.823529][ T7083] dvmrp6: entered allmulticast mode [ 197.056586][ T31] usb 1-1: device not accepting address 14, error -71 [ 198.243141][ T5863] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.634205][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 198.636060][ T5863] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 198.636084][ T5863] usb 2-1: config 0 has no interface number 0 [ 198.636126][ T5863] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.636150][ T5863] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.636170][ T5863] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 198.636210][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 198.636231][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.642389][ T5863] usb 2-1: config 0 descriptor?? [ 199.852999][ T5863] usbhid 2-1:0.4: can't add hid device: -71 [ 199.859070][ T5863] usbhid 2-1:0.4: probe with driver usbhid failed with error -71 [ 199.892002][ T5863] usb 2-1: USB disconnect, device number 13 [ 202.096249][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 202.096363][ T5115] Bluetooth: hci1: command 0x0406 tx timeout [ 202.096451][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 202.096530][ T5115] Bluetooth: hci2: command 0x0406 tx timeout [ 202.096553][ T5115] Bluetooth: hci3: command 0x0406 tx timeout [ 203.234896][ T7136] syz.2.389 (7136) used greatest stack depth: 17920 bytes left [ 205.490141][ T7160] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 205.490171][ T7160] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 207.843484][ T7204] pimreg: entered allmulticast mode [ 208.370740][ T7206] netlink: 'syz.2.411': attribute type 2 has an invalid length. [ 208.370754][ T7206] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 211.204611][ T7224] netlink: 164 bytes leftover after parsing attributes in process `syz.0.418'. [ 211.276210][ T7230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 211.865091][ T5904] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.020144][ T5904] usb 3-1: device descriptor read/64, error -71 [ 212.330613][ T5904] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 212.844260][ T5904] usb 3-1: device descriptor read/64, error -71 [ 212.954648][ T5904] usb usb3-port1: attempt power cycle [ 213.904251][ T5904] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 213.925006][ T5904] usb 3-1: device descriptor read/8, error -71 [ 214.231604][ T5904] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 214.269473][ T5804] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 214.294624][ T5904] usb 3-1: device descriptor read/8, error -71 [ 214.406290][ T5904] usb usb3-port1: unable to enumerate USB device [ 217.690151][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 222.464191][ T6518] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 222.624170][ T6518] usb 3-1: Using ep0 maxpacket: 16 [ 222.625832][ T6518] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.628707][ T6518] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 222.628732][ T6518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.628749][ T6518] usb 3-1: Product: syz [ 222.628757][ T6518] usb 3-1: Manufacturer: syz [ 222.628764][ T6518] usb 3-1: SerialNumber: syz [ 222.664193][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 222.882179][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 222.882200][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 222.882214][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 222.921855][ T5870] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 222.921873][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.921883][ T5870] usb 1-1: Product: syz [ 222.921890][ T5870] usb 1-1: Manufacturer: syz [ 222.921897][ T5870] usb 1-1: SerialNumber: syz [ 222.987604][ T5870] usb 1-1: config 0 descriptor?? [ 222.992043][ T7368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.215404][ T7368] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 224.472401][ T5848] usb 3-1: USB disconnect, device number 19 [ 225.191812][ T7397] netlink: 'syz.3.478': attribute type 2 has an invalid length. [ 225.191857][ T7397] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 225.193405][ T7397] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 225.830739][ T7399] ------------[ cut here ]------------ [ 225.830750][ T7399] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 225.830777][ T7399] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.2.477/7399 [ 225.830805][ T7399] Modules linked in: [ 225.830818][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.2.477 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.830830][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.830836][ T7399] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 225.830854][ T7399] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 225.830862][ T7399] RSP: 0018:ffffc9000efc6eb0 EFLAGS: 00010246 [ 225.830872][ T7399] RAX: dffffc0000000000 RBX: 1ffff11007ffb004 RCX: 0000000000000000 [ 225.830880][ T7399] RDX: ffffffff8b5495c0 RSI: ffffffff8b551fa0 RDI: ffffffff8f6e5230 [ 225.830887][ T7399] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 225.830894][ T7399] R10: 0000000000000100 R11: 00000000000000d0 R12: ffff88803ffd8020 [ 225.830901][ T7399] R13: 0000000000000000 R14: 1ffff11007ffb003 R15: 0000000000000000 [ 225.830907][ T7399] FS: 00007f472818c6c0(0000) GS:ffff888126436000(0000) knlGS:0000000000000000 [ 225.830916][ T7399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.830923][ T7399] CR2: 0000200000401030 CR3: 00000000335f8000 CR4: 00000000003526f0 [ 225.830934][ T7399] Call Trace: [ 225.830938][ T7399] [ 225.830956][ T7399] reg_set_min_max+0x28c/0x340 [ 225.830976][ T7399] check_cond_jmp_op+0x1dbb/0x31a0 [ 225.830998][ T7399] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 225.831015][ T7399] ? compute_scc_callchain+0x2d9/0x350 [ 225.831030][ T7399] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 225.831042][ T7399] do_check+0x7970/0x10610 [ 225.831087][ T7399] ? __pfx_do_check+0x10/0x10 [ 225.831100][ T7399] ? init_func_state+0x1ab2/0x28d0 [ 225.831117][ T7399] do_check_common+0x19c8/0x25b0 [ 225.831138][ T7399] bpf_check+0x5f4b/0x1ce10 [ 225.831152][ T7399] ? try_to_take_rt_mutex+0x840/0xb00 [ 225.831172][ T7399] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 225.831189][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.831201][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.831216][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.831228][ T7399] ? css_rstat_updated+0x23a/0x530 [ 225.831244][ T7399] ? __pfx_css_rstat_updated+0x10/0x10 [ 225.831262][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.831276][ T7399] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 225.831288][ T7399] ? __pfx_bpf_check+0x10/0x10 [ 225.831299][ T7399] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 225.831316][ T7399] ? ktime_get_with_offset+0x93/0x2a0 [ 225.831330][ T7399] ? ktime_get_with_offset+0x93/0x2a0 [ 225.831345][ T7399] ? __asan_memset+0x22/0x50 [ 225.831359][ T7399] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 225.831371][ T7399] ? security_bpf_prog_load+0x125/0x3c0 [ 225.831385][ T7399] bpf_prog_load+0x1484/0x1ae0 [ 225.831405][ T7399] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.831418][ T7399] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.831430][ T7399] ? rcu_is_watching+0x15/0xb0 [ 225.831448][ T7399] ? __sys_bpf+0x293/0x950 [ 225.831463][ T7399] __sys_bpf+0x618/0x950 [ 225.831476][ T7399] ? __pfx___sys_bpf+0x10/0x10 [ 225.831498][ T7399] ? rcu_is_watching+0x15/0xb0 [ 225.831513][ T7399] __x64_sys_bpf+0x7c/0x90 [ 225.831525][ T7399] do_syscall_64+0x14d/0xf80 [ 225.831535][ T7399] ? trace_irq_disable+0x3b/0x150 [ 225.831547][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.831557][ T7399] ? clear_bhb_loop+0x40/0x90 [ 225.831569][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.831579][ T7399] RIP: 0033:0x7f4729f7c819 [ 225.831594][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.831609][ T7399] RSP: 002b:00007f472818c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.831619][ T7399] RAX: ffffffffffffffda RBX: 00007f472a1f6180 RCX: 00007f4729f7c819 [ 225.831626][ T7399] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 225.831633][ T7399] RBP: 00007f472a012c91 R08: 0000000000000000 R09: 0000000000000000 [ 225.831640][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.831646][ T7399] R13: 00007f472a1f6218 R14: 00007f472a1f6180 R15: 00007ffcead4bfa8 [ 225.831661][ T7399] [ 225.831671][ T7399] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.831679][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.2.477 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.831690][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 225.831696][ T7399] Call Trace: [ 225.831700][ T7399] [ 225.831704][ T7399] vpanic+0x56c/0xa60 [ 225.831721][ T7399] ? __pfx__printk+0x10/0x10 [ 225.831732][ T7399] ? __pfx_vpanic+0x10/0x10 [ 225.831745][ T7399] ? is_bpf_text_address+0x292/0x2b0 [ 225.831759][ T7399] ? is_bpf_text_address+0x26/0x2b0 [ 225.831776][ T7399] panic+0xc5/0xd0 [ 225.831791][ T7399] ? __pfx_panic+0x10/0x10 [ 225.831813][ T7399] __warn+0x315/0x4f0 [ 225.831827][ T7399] ? reg_bounds_sanity_check+0x201/0xc30 [ 225.831844][ T7399] ? reg_bounds_sanity_check+0x201/0xc30 [ 225.831860][ T7399] __report_bug+0x29a/0x540 [ 225.831871][ T7399] ? __pfx_stack_trace_save+0x10/0x10 [ 225.831887][ T7399] ? reg_bounds_sanity_check+0x201/0xc30 [ 225.831903][ T7399] ? __pfx___report_bug+0x10/0x10 [ 225.831915][ T7399] ? copy_verifier_state+0x876/0xf90 [ 225.831928][ T7399] ? push_stack+0x19d/0x3a0 [ 225.831937][ T7399] ? check_cond_jmp_op+0x1c5b/0x31a0 [ 225.831951][ T7399] ? do_check+0x7970/0x10610 [ 225.831963][ T7399] ? do_check_common+0x19c8/0x25b0 [ 225.831975][ T7399] ? bpf_check+0x5f4b/0x1ce10 [ 225.831985][ T7399] ? bpf_prog_load+0x1484/0x1ae0 [ 225.831997][ T7399] ? __x64_sys_bpf+0x7c/0x90 [ 225.832007][ T7399] ? do_syscall_64+0x14d/0xf80 [ 225.832017][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.832029][ T7399] report_bug_entry+0x19a/0x290 [ 225.832040][ T7399] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 225.832054][ T7399] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 225.832069][ T7399] handle_bug+0xce/0x200 [ 225.832082][ T7399] exc_invalid_op+0x1a/0x50 [ 225.832094][ T7399] asm_exc_invalid_op+0x1a/0x20 [ 225.832104][ T7399] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 225.832120][ T7399] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 225.832128][ T7399] RSP: 0018:ffffc9000efc6eb0 EFLAGS: 00010246 [ 225.832136][ T7399] RAX: dffffc0000000000 RBX: 1ffff11007ffb004 RCX: 0000000000000000 [ 225.832143][ T7399] RDX: ffffffff8b5495c0 RSI: ffffffff8b551fa0 RDI: ffffffff8f6e5230 [ 225.832150][ T7399] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 225.832156][ T7399] R10: 0000000000000100 R11: 00000000000000d0 R12: ffff88803ffd8020 [ 225.832162][ T7399] R13: 0000000000000000 R14: 1ffff11007ffb003 R15: 0000000000000000 [ 225.832189][ T7399] reg_set_min_max+0x28c/0x340 [ 225.832208][ T7399] check_cond_jmp_op+0x1dbb/0x31a0 [ 225.832229][ T7399] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 225.832246][ T7399] ? compute_scc_callchain+0x2d9/0x350 [ 225.832260][ T7399] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 225.832272][ T7399] do_check+0x7970/0x10610 [ 225.832314][ T7399] ? __pfx_do_check+0x10/0x10 [ 225.832327][ T7399] ? init_func_state+0x1ab2/0x28d0 [ 225.832344][ T7399] do_check_common+0x19c8/0x25b0 [ 225.832365][ T7399] bpf_check+0x5f4b/0x1ce10 [ 225.832378][ T7399] ? try_to_take_rt_mutex+0x840/0xb00 [ 225.832398][ T7399] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 225.832414][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.832425][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.832440][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.832452][ T7399] ? css_rstat_updated+0x23a/0x530 [ 225.832467][ T7399] ? __pfx_css_rstat_updated+0x10/0x10 [ 225.832484][ T7399] ? __lock_acquire+0x6b5/0x2cf0 [ 225.832497][ T7399] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 225.832509][ T7399] ? __pfx_bpf_check+0x10/0x10 [ 225.832519][ T7399] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 225.832536][ T7399] ? ktime_get_with_offset+0x93/0x2a0 [ 225.832550][ T7399] ? ktime_get_with_offset+0x93/0x2a0 [ 225.832565][ T7399] ? __asan_memset+0x22/0x50 [ 225.832578][ T7399] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 225.832589][ T7399] ? security_bpf_prog_load+0x125/0x3c0 [ 225.832614][ T7399] bpf_prog_load+0x1484/0x1ae0 [ 225.832637][ T7399] ? __pfx_bpf_prog_load+0x10/0x10 [ 225.832650][ T7399] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.832661][ T7399] ? rcu_is_watching+0x15/0xb0 [ 225.832678][ T7399] ? __sys_bpf+0x293/0x950 [ 225.832693][ T7399] __sys_bpf+0x618/0x950 [ 225.832708][ T7399] ? __pfx___sys_bpf+0x10/0x10 [ 225.832729][ T7399] ? rcu_is_watching+0x15/0xb0 [ 225.832744][ T7399] __x64_sys_bpf+0x7c/0x90 [ 225.832756][ T7399] do_syscall_64+0x14d/0xf80 [ 225.832766][ T7399] ? trace_irq_disable+0x3b/0x150 [ 225.832778][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.832788][ T7399] ? clear_bhb_loop+0x40/0x90 [ 225.832800][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.832811][ T7399] RIP: 0033:0x7f4729f7c819 [ 225.832820][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.832828][ T7399] RSP: 002b:00007f472818c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.832838][ T7399] RAX: ffffffffffffffda RBX: 00007f472a1f6180 RCX: 00007f4729f7c819 [ 225.832845][ T7399] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 225.832851][ T7399] RBP: 00007f472a012c91 R08: 0000000000000000 R09: 0000000000000000 [ 225.832857][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.832862][ T7399] R13: 00007f472a1f6218 R14: 00007f472a1f6180 R15: 00007ffcead4bfa8 [ 225.832877][ T7399] [ 225.833317][ T7399] Kernel Offset: disabled