last executing test programs: 13.755022293s ago: executing program 4 (id=1778): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) r5 = epoll_create1(0x0) close(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040)=0x200) sendto$inet6(r6, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 12.60273313s ago: executing program 4 (id=1782): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x8}, {0x9, 0xc8}}}}, 0x9) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.295827741s ago: executing program 3 (id=1786): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x18, 0x101, 0x0, 0x0) close(r0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x5, 0x19, "98"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @isdn={0x22, 0x8f, 0x1, 0x5, 0xfc}, @l2tp={0x2, 0x0, @multicast1}, @nfc={0x27, r6, 0x0, 0x4}, 0x200, 0x0, 0x0, 0x0, 0x4d78, &(0x7f0000000000)='veth0\x00', 0x0, 0x8000000, 0x6}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x13c, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x44, 0x19, "d26c72f56637027d57a8b6a1f9b198ce3e653d922139eb5de61adaeaf376191ead194dc65797a1409ea72f4ef5437e1c4b4f9e2444201803a56235c0c8e56712"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0xc3, 0x19, "c2796ac2be7402bcdbdf7ecfe8c311763dc507d9f14040e09bc1b80f3c7c6433b3f4c9141b41de9576eabf13a807b47f865a8791d072378a206af65f8113094e987d7d7d4a77358420a87e632cbb24896632e6282824a94abe8c7e93e84343a2d1f3c67fa9c1bc73311033010659d0a230f103226077120cafaa6b151d58f65a2a45ca9014c3584d8e45b7e1ba7fef933fd4b4d8046d2af1e7e4c85e4afa226a54814fd98350087714e898aec6a89c3a8cad40531efc1d87faae62c213dcc8"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x20008810) 10.205524381s ago: executing program 4 (id=1788): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.317663523s ago: executing program 3 (id=1793): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="800066180a000200aaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, 0x0, 0x3317, 0x0, 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESHEX, @ANYRES8=r0, @ANYRES16=r2, @ANYRES64=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 8.314796906s ago: executing program 2 (id=1795): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="800066180a000200aaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, 0x0, 0x3317, 0x0, 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESHEX, @ANYRES8=r0, @ANYRES16=r2, @ANYRES64=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 7.8082991s ago: executing program 4 (id=1798): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) r5 = epoll_create1(0x0) close(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040)=0x200) sendto$inet6(r6, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 7.661655053s ago: executing program 1 (id=1799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.917649626s ago: executing program 1 (id=1800): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="800066180a000200aaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, 0x0, 0x3317, 0x0, 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESHEX, @ANYRES8=r0, @ANYRES16=r2, @ANYRES64=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) 6.760993815s ago: executing program 4 (id=1801): r0 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x8}, {0x9, 0xc8}}}}, 0x9) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.768334742s ago: executing program 3 (id=1802): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="02000000c000"}) 5.717159594s ago: executing program 2 (id=1803): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @remote, 0xa4}, 0x20000) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) 4.623305455s ago: executing program 1 (id=1804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc834280f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.621500204s ago: executing program 3 (id=1805): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x4, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.019645239s ago: executing program 2 (id=1806): r0 = timerfd_create(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x73, 0x1, '('}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x8}, 0x8) timerfd_settime(r0, 0x3, &(0x7f0000000200), 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000180)=0x800) 2.894966157s ago: executing program 3 (id=1807): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x8}, {0x9, 0xc8}}}}, 0x9) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.639964349s ago: executing program 1 (id=1808): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cad000e004000"}) r2 = syz_open_pts(r1, 0x141401) fcntl$setstatus(r2, 0x4, 0x2000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x10001, &(0x7f0000000080)=0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r4, &(0x7f0000000180)='\x00', 0x89901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat2(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0xc000, 0x2, 0x10}, 0x18) io_submit(r3, 0x3, &(0x7f0000000580)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x7fff, r0, &(0x7f0000000240)="8c1740f6fd6396c73324a0044d357a8617a2f51f0ce421684d4c3b16dc003863f02ca1a6944829ba0f5d835facfa0dfec1cb19d74edfa29799e4bca0363a28d5a5c45186d02290f0c08629f962264bebe21e3e253e001372cc19ed7607780e1ac27e6dadc460014c8731c42ab17e8bf11a50ec8ee1ff33503665cac924c53b05273cd06afa5f36ee52af4dc04be9d596665879c17265af133e9beebda9f68b11437b1a51c87935b2b3207093eb7b03ccc07c4412214b11facefe3ea54315588788e58e69df", 0xc5, 0x7fffffffffffffff}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x8, r4, &(0x7f0000000380)="75c92f060ef3c6cec2a52b19cf42ea1ee3ad6726589782e9e1508acbfa776005ea1f9992b544322c2df9edbb", 0x2c, 0x40000000, 0x0, 0x2, r2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0xffff, r5, &(0x7f0000000400)="4cc2755bae22993e3965e1e29b73fcf85ec2562e5fa25b94a408b028c42135ef28c071aa975d9a993c8f8e69de8d7b8e77944affffe63cc685ceb69cc5999bc6886ddcff640aebe2f0b90821dee64003e90059e9df18a3fa37f8098d346e5de11e9a795ba67c30d44e57df7348fd1333162b3a9b77a5ee6efccbeb53f841e549e9b71ccfbd0622144812", 0x8a, 0x6, 0x0, 0x1, r6}]) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) close_range(r0, 0xffffffffffffffff, 0x0) 2.62745904s ago: executing program 0 (id=1809): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 2.547416493s ago: executing program 2 (id=1810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.304242944s ago: executing program 0 (id=1811): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r2, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) 2.082789226s ago: executing program 2 (id=1812): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x4, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7, 0x8000, 0x9, 0xa, {{0x14, 0x4, 0x2, 0x1, 0x50, 0x64, 0x0, 0x83, 0x4, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x4e, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @timestamp={0x44, 0xc, 0x96, 0x0, 0x5, [0x80, 0x23044aee]}, @ssrr={0x89, 0x23, 0x88, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)={@remote, 0x0}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@deltclass={0x0, 0x29, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {0xa}, {0x3, 0x5}}, [@TCA_RATE={0x0, 0x5, {0x5c, 0x7}}, @TCA_RATE={0x0, 0x5, {0x5, 0x2}}]}, 0x148}}, 0x4000010) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)={0x120, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0xb9e70bae3102d349}, 0x4000080) close(r0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @empty}, &(0x7f0000000280)=0xc) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0x3}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x20075d5}]}, 0x54}}, 0x10000810) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x200002, 0x86) r11 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce1e, 0x2, @rand_addr=' \x01\x00', 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000cfcffff2a0000000000000718"], 0x30}, 0x4081) lseek(r10, 0x9, 0x3) setns(0xc9, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r12, 0x4b45, 0x8000000000001) 1.973460351s ago: executing program 0 (id=1813): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) r5 = epoll_create1(0x0) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000040)=0x200) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 1.890369682s ago: executing program 1 (id=1814): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_DELSETELEM={0x21c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x208, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "65f99a26bbd265d1535b89436795e6bdc8c988ed4044c789da6717caaff956d8176b2bb1a7abb8c33b32026ad028b477ab544dd2333586911d00eb3d4b8426a0831f5d7ae1085fa44c7b27a361f0ccb48446e9b96ef9b12adf1f53163cce5280819ce12e4a0038d14001f0fdbce0afacaf191826c1bfd68bd4521b0b25a63277562aa6f6e421ff947f8225fd09cebbfec2b93d731b6dd16211d30bc4e18e3673c1f9bb143eb3be8f32addd30105e08e9"}]}, {0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x1c0d8a4a}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2000000000010}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe4}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x278}}, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r5, &(0x7f0000001680)=[{&(0x7f0000000280)=""/147, 0x93}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000000100)=@tcp6=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)="612bd87c556c21b00abe1c6d5394a1aa86efecd421fe07cac3072366a0c2a26670648f5b321cfd9dccaadd40ca83d4bcf0f6f290f37b12b3e1e698f882051070d8356e8e53a21ca42e9946", 0x4b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffee6}, {0x0, 0xffffffffffffffa0}, {0x0}, {0x0}], 0x9}, 0x20001) r7 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x100, 0xaf82, 0x1}}], 0x30}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, &(0x7f0000000180)={0x20, 0x1, 0x64, {0x64, 0xa, "c4965ee82cadb29e8399bcbc3c1d51bf2fd82ec466a3a82ecdb3b2ae3d6c21ecca8466d6d25f6dc1bb97a151d666a58d59f051b3d4e394f4a6cf619831b6f977f25fe3bd392abfe2a034a5aa1c913d0f046ac221a2e627e502afde364e4206ab5d2f"}}, &(0x7f0000000400)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6252ccbd950309225d9bf6"}}, &(0x7f0000000440)={0x0, 0xf, 0x13d, {0x5, 0xf, 0x13d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xfd, "2b7cb89d7581cec40b4db2603c391749"}, @generic={0x9c, 0x10, 0x3, "69bfc169144ac06a436af394cf57eda21787010099851ed04cfe6193c86695377d27aa32359e9363157eec4cda099e798519591e4639d2466887170bd03e0d436fd5b93c9dfe06cdf186ce5b05d4f98112513ab909f2b500f83687d34b8e748b8ce996cf30e64ae3053a5dfce81d66c8b20c9cc2aa82f83ca42e575bce81ac48f683394a51a8befa1128820b9efc936862078baffcc660243c"}, @ptm_cap={0x3}, @generic={0x85, 0x10, 0x2, "4c656ac02f0330d3d19d64056812a12ffafcefac8dfd7f58345123dd9eae1cfbf57fee13806a14b3cbe40864295240c3861a8a6cfbdfc6a7a160764b3aa1621d0fc591b68e535d2f498a0112c7d92734330bbf27083e629b6a294d6d157da0da87029f45674b58c5644912ae7352ebaf30a9108b987751a66550cee475c600bedfa4"}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe7, 0x18, 0x7, 0x10, "2c3bfd3a", "a58d5fec"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x46, 0x60, 0xb, 0x9, 0x2}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="400e3900000068e4988ad0aee88cd8034206adfc60692c8debd1b996afd3d79d57ed3e19ed9790ce20fcffaa75e24477dd78ee819b38a76baec40504751dcb"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="20000800000060008000007700009a"], &(0x7f00000007c0)={0x40, 0x7, 0x2}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0xb, 0x2, 'XY'}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000900)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "62f8"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x7fff}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x66}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x5}}) r10 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000380)={0x0, &(0x7f0000000280)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control_nat=0x6002, 0x71, 0x2, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0xe19c}}, @nested_vmresume={0x130, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xa0b}}, @wrmsr={0x65, 0x20, {0x95f, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600e, 0xf, 0xa089, 0x80000000000}}], 0xf8}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x33e, 0x0, 0x9}, {0x3b005d1968185e43, 0x0, 0x2}, {0x869, 0x0, 0x9}]}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$media(&(0x7f0000000b40), 0x8, 0x40000) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000d80)={0x80000000, &(0x7f0000000b80), &(0x7f0000000cc0)}) 1.00935078s ago: executing program 4 (id=1815): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000040)='1\x00', 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000100)={0x11}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r6, 0xc0106441, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000}) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x300, 0x140) readv(r7, &(0x7f0000000980)=[{&(0x7f0000000480)=""/214, 0xd6}], 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e2300070600010002"], 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setresgid(0x0, 0xee01, 0xee00) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}, 0x1, 0x0, 0x0, 0x24040041}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x3, 0x70000, 0x200000, &(0x7f0000000000/0x200000)=nil}) 986.08781ms ago: executing program 2 (id=1816): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') lseek(r0, 0xffffff60, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000780)=0xfefffffd, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r5, 0x8000000000000001, 0x8}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf257700000008000300", @ANYRES32=r4, @ANYBLOB="0800ef00060000000800ef00090000000500ee00080000000500ee00050000000800ef00020000000800ef0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24000880) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) bind$bt_l2cap(r1, &(0x7f0000000400), 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a03"], 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000066f000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000000000)=""/83, 0x53) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000040)) close(0x3) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x314, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) 814.212237ms ago: executing program 0 (id=1817): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x4, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 669.498346ms ago: executing program 3 (id=1818): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) openat$vga_arbiter(0xffffff9c, &(0x7f0000000100), 0x10000, 0x0) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0xf000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x14, 0x2f, 0x107, 0x870bd2e, 0x25dfdbfb, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = fsopen(&(0x7f0000000180)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x77, &(0x7f0000000880)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x305) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x8}, {0x9, 0xc8}}}}, 0x9) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) 454.227621ms ago: executing program 0 (id=1819): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) 194.183346ms ago: executing program 0 (id=1820): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) openat$cgroup_int(r2, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, 0x0, 0x48804) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@any, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) listen(r1, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) 0s ago: executing program 1 (id=1821): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x121802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a98", 0x3, 0xfffffffffffffffe) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r4, 0x0, 0x0, 0x3d63cc, 0x54, &(0x7f0000000240)="5265f5a4197d2b98f01be235910790b33ef471ae233d33ce7f34031245c38b537c155438d244f6d13112842887badbeb2f89f5322f29b24a14a2bdcff3abdd46df2956ad82044d0a2d7b6b3ca63a8c8e66072e14"}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r3, r3}, 0x0, 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, 0x0, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) kernel console output (not intermixed with test programs): ][T11183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 694.537060][T11183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 695.727746][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 695.963378][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 696.603573][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 696.603639][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 696.603755][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 698.396123][T11199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.509104][T11213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 700.509203][T11213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 700.509269][T11213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 700.509333][T11213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 700.509407][T11213] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 700.692021][ T5611] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 700.821950][ T5611] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 701.971238][ T5611] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 702.593451][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 702.593570][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 704.067277][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.956936][T11230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.040394][T11185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.051224][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.883870][T11246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 705.886055][T11246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 705.886181][T11246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 705.886275][T11246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 705.886373][T11246] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 706.057786][T11257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11257 comm=syz.0.1286 [ 706.575821][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1286'. [ 707.043559][ T30] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 707.366913][ T30] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 707.388201][ T30] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 707.388219][ T30] usb 1-1: Product: syz [ 707.388227][ T30] usb 1-1: SerialNumber: syz [ 707.391598][ T30] usb 1-1: config 0 descriptor?? [ 707.633161][ T5611] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 707.957312][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 707.957349][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 707.957371][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 708.630407][ T30] usb 1-1: USB disconnect, device number 43 [ 709.395292][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 710.616373][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 711.154425][T11289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11289 comm=syz.3.1292 [ 711.282597][T11289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 711.416172][T11250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.635479][T11272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 711.843608][ T5703] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 712.094047][T11278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.194832][T11285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.562051][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 712.957240][ T5703] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 713.132349][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 713.132368][ T5703] usb 4-1: Product: syz [ 713.132377][ T5703] usb 4-1: SerialNumber: syz [ 713.399267][ T5703] usb 4-1: config 0 descriptor?? [ 713.732864][ T5703] usb 4-1: USB disconnect, device number 45 [ 714.349882][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 714.350358][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 716.138460][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 716.181478][T11309] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 716.679860][T11309] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 716.679987][T11309] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 716.680053][T11309] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 716.680118][T11309] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 716.724883][T11323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.034383][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 718.259050][T11330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11330 comm=syz.2.1301 [ 718.276199][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 718.302845][T11317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.482064][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 719.482080][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 720.784450][ T30] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 720.982088][ T30] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 721.027229][ T30] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 721.027305][ T30] usb 3-1: Product: syz [ 721.027341][ T30] usb 3-1: SerialNumber: syz [ 721.149586][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 721.551858][ T30] usb 3-1: config 0 descriptor?? [ 721.553722][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 722.173551][ T30] usb 3-1: can't set config #0, error -71 [ 722.176395][ T30] usb 3-1: USB disconnect, device number 43 [ 722.788990][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 723.172855][T11347] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 723.173027][T11347] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 723.173171][T11347] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 723.173375][T11347] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 723.173497][T11347] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 724.475309][T11339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.513746][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 725.096422][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 725.244395][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 725.245973][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 725.246133][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 728.741984][T11385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11385 comm=syz.0.1314 [ 728.745479][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 729.437003][ T5703] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 729.604797][ T5703] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 729.639347][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 729.639434][ T5703] usb 1-1: Product: syz [ 729.639471][ T5703] usb 1-1: SerialNumber: syz [ 729.677333][ T5703] usb 1-1: config 0 descriptor?? [ 730.135160][ T5611] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 730.721512][T11390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.293452][ T5703] usb 1-1: USB disconnect, device number 44 [ 731.667570][T11402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11402 comm=syz.1.1318 [ 731.668081][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'. [ 731.753701][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.193810][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 735.433507][T10521] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 735.584074][T10521] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 735.615071][T10521] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 735.615146][T10521] usb 2-1: Product: syz [ 735.615182][T10521] usb 2-1: SerialNumber: syz [ 735.683532][T10521] usb 2-1: config 0 descriptor?? [ 735.857628][T10521] usb 2-1: can't set config #0, error -71 [ 736.559889][T10521] usb 2-1: USB disconnect, device number 46 [ 739.522187][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 740.054558][T11435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.524532][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 741.301165][T11461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11461 comm=syz.1.1326 [ 741.375684][T11463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11463 comm=syz.2.1327 [ 741.459600][T11461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1326'. [ 741.490435][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'. [ 741.645740][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.647073][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.130801][T11467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 742.130936][T11467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 742.131022][T11467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 742.131085][T11467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 742.131148][T11467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 742.403384][ T5703] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 742.569696][ T5703] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 742.640214][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 742.640290][ T5703] usb 3-1: Product: syz [ 742.640336][ T5703] usb 3-1: SerialNumber: syz [ 742.693467][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 742.718650][ T5611] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 742.772440][ T5611] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 742.892614][ T5703] usb 3-1: config 0 descriptor?? [ 743.713578][ T5611] Bluetooth: hci1: command 0x0c1a tx timeout [ 744.193440][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 744.193476][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 744.490285][ T10] usb 2-1: device descriptor read/all, error -71 [ 745.433429][ T5703] usb 3-1: can't set config #0, error -71 [ 745.434718][ T5703] usb 3-1: USB disconnect, device number 44 [ 745.650843][T11492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11492 comm=syz.1.1331 [ 745.708721][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 745.779778][T11481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.437058][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 746.479501][ T56] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 746.644743][ T56] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 746.695291][ T56] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 746.695315][ T56] usb 2-1: Product: syz [ 746.695324][ T56] usb 2-1: SerialNumber: syz [ 746.726483][ T56] usb 2-1: config 0 descriptor?? [ 746.764016][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 748.788993][ T56] usb 2-1: USB disconnect, device number 49 [ 750.431302][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 751.156931][T11522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11522 comm=syz.1.1338 [ 751.338077][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 752.239706][T11507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.569399][ T5703] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 752.778853][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 752.788241][T11470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.864593][ T5703] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 752.919780][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 752.919866][ T5703] usb 2-1: Product: syz [ 752.919906][ T5703] usb 2-1: SerialNumber: syz [ 753.012468][ T5703] usb 2-1: config 0 descriptor?? [ 753.423093][ T5703] usb 2-1: USB disconnect, device number 50 [ 754.566840][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 755.568485][T11544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.822154][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.477287][T11552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 756.477964][T11552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 756.478287][T11552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 756.478676][T11552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 756.479081][T11552] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 756.545264][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 758.030905][T11573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1347'. [ 758.073318][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 758.114304][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 758.544244][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 758.544340][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 758.544462][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 758.948845][T11575] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 759.380348][T11569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.417320][T11579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11579 comm=syz.0.1348 [ 759.419731][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 759.574563][T11581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11581 comm=syz.2.1349 [ 759.641147][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'. [ 760.114282][ T56] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 760.293954][ T56] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 760.314937][ T56] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 760.314954][ T56] usb 1-1: Product: syz [ 760.314962][ T56] usb 1-1: SerialNumber: syz [ 760.316291][ T56] usb 1-1: config 0 descriptor?? [ 760.413635][ T1193] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 761.068881][ T1193] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 761.092043][ T1193] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 761.092070][ T1193] usb 3-1: Product: syz [ 761.092083][ T1193] usb 3-1: SerialNumber: syz [ 761.094207][ T1193] usb 3-1: config 0 descriptor?? [ 761.172813][ T56] usb 1-1: USB disconnect, device number 45 [ 761.472447][ T1193] usb 3-1: USB disconnect, device number 45 [ 764.468327][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 767.048045][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.903472][T10521] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 767.949573][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 768.053380][T10521] usb 1-1: Using ep0 maxpacket: 8 [ 768.055052][T10521] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.057699][T10521] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 768.057949][T10521] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.058018][T10521] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.058086][T10521] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.058136][T10521] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.058289][T10521] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.535246][T10521] usb 1-1: usb_control_msg returned -32 [ 768.539110][T10521] usbtmc 1-1:16.0: can't read capabilities [ 769.004738][ T1193] usb 1-1: USB disconnect, device number 46 [ 771.049989][T11665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11665 comm=syz.2.1365 [ 771.733969][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 772.963578][T10521] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 773.217461][T10521] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 773.219873][T10521] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 773.219900][T10521] usb 3-1: Product: syz [ 773.219914][T10521] usb 3-1: SerialNumber: syz [ 773.222033][T10521] usb 3-1: config 0 descriptor?? [ 773.745997][T10521] usb 3-1: USB disconnect, device number 46 [ 773.817543][T11649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.898911][T11612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.650086][T11575] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 774.730554][T11575] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 777.587852][T11698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.433227][T11699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.236032][T11706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.531197][T11726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11726 comm=syz.1.1380 [ 780.906556][T11737] Invalid ELF header magic: != ELF [ 781.702001][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 782.325780][T11575] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 782.681294][T11673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.988819][ T56] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 783.165183][ T5728] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 783.170562][ T56] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 783.210012][ T56] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 783.210075][ T56] usb 2-1: Product: syz [ 783.210111][ T56] usb 2-1: SerialNumber: syz [ 783.267708][ T56] usb 2-1: config 0 descriptor?? [ 783.313470][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 783.315227][ T5728] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 783.323729][ T5728] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 783.323990][ T5728] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 783.324018][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 783.324046][ T5728] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 783.324073][ T5728] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.324192][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.674138][ T56] usb 2-1: USB disconnect, device number 51 [ 783.790663][ T5728] usb 1-1: usb_control_msg returned -32 [ 783.790689][ T5728] usbtmc 1-1:16.0: can't read capabilities [ 783.939359][ T56] usb 1-1: USB disconnect, device number 47 [ 784.499151][T11746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.774046][T11765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11765 comm=syz.2.1377 [ 784.796227][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 785.538922][T11762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 785.539682][T11762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 785.540404][T11762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 785.540951][T11762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 785.595984][T11762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 785.669529][T11575] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 786.118412][ T9714] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 786.839360][ T9714] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 787.003458][T11575] Bluetooth: hci1: command 0x0c1a tx timeout [ 787.563437][T11575] Bluetooth: hci3: command 0x0c1a tx timeout [ 787.563476][T11575] Bluetooth: hci2: command 0x0c1a tx timeout [ 787.643452][T11575] Bluetooth: hci4: command 0x0c1a tx timeout [ 787.654910][ T9714] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 787.654973][ T9714] usb 3-1: Product: syz [ 787.655010][ T9714] usb 3-1: SerialNumber: syz [ 788.115796][ T9714] usb 3-1: config 0 descriptor?? [ 788.734855][ T9714] usb 3-1: can't set config #0, error -71 [ 788.743009][ T9714] usb 3-1: USB disconnect, device number 47 [ 789.112682][T11788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11788 comm=syz.2.1390 [ 789.339163][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'. [ 789.730682][T11800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1392'. [ 789.773629][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 790.400563][ T56] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 790.518092][T11772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.549396][ T56] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 790.565561][ T56] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 790.565578][ T56] usb 3-1: Product: syz [ 790.565587][ T56] usb 3-1: SerialNumber: syz [ 790.571376][ T56] usb 3-1: config 0 descriptor?? [ 791.111376][T11575] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 791.288914][ T56] usb 3-1: USB disconnect, device number 48 [ 791.531079][T11815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11815 comm=syz.1.1394 [ 791.581318][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1394'. [ 792.220643][T11755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.723379][ T9714] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 792.884160][ T9714] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 792.912846][ T9714] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 792.912924][ T9714] usb 2-1: Product: syz [ 792.912971][ T9714] usb 2-1: SerialNumber: syz [ 793.127278][T11575] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 793.413545][ T9714] usb 2-1: config 0 descriptor?? [ 793.820076][ T9714] usb 2-1: USB disconnect, device number 52 [ 794.434867][T11828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.467538][T11831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11831 comm=syz.0.1398 [ 794.467975][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 795.264856][T11846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'. [ 795.310199][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 795.493400][ T5728] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 798.401461][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.416360][T11782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.466242][ T5728] usb 1-1: device descriptor read/all, error -71 [ 798.500923][T11855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.295528][ T5726] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 801.124675][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 801.336513][ T5726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 802.316001][ T5726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 802.316033][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 802.316047][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 802.316060][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 802.316072][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 802.316094][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.583389][ T5726] usb 1-1: usb_control_msg returned -71 [ 802.583427][ T5726] usbtmc 1-1:16.0: can't read capabilities [ 802.597937][ T5726] usb 1-1: USB disconnect, device number 50 [ 802.759400][T11892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11892 comm=syz.3.1412 [ 802.868505][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 803.074554][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.074600][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.204632][T11575] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 803.573378][ T5726] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 803.660441][T11875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.764614][ T5726] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 803.847408][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 803.847445][ T5726] usb 4-1: Product: syz [ 803.847483][ T5726] usb 4-1: SerialNumber: syz [ 804.002078][ T5726] usb 4-1: config 0 descriptor?? [ 804.061556][T11884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.582242][ T5726] usb 4-1: USB disconnect, device number 46 [ 806.243477][ T5726] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 806.413426][ T5726] usb 3-1: Using ep0 maxpacket: 8 [ 806.421353][ T5726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 806.431850][ T5726] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 806.432009][ T5726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 806.432035][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 806.432092][ T5726] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 806.432148][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.432252][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.934115][ T5726] usb 3-1: usb_control_msg returned -32 [ 806.934274][ T5726] usbtmc 3-1:16.0: can't read capabilities [ 807.367846][T11912] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 807.371345][ T5726] usb 3-1: USB disconnect, device number 49 [ 809.986937][T11932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11932 comm=syz.3.1419 [ 810.042042][T11933] Invalid ELF header magic: != ELF [ 810.735296][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 811.033363][ T9714] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 811.052579][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 811.188308][ T9714] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 811.201349][ T9714] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 811.201368][ T9714] usb 4-1: Product: syz [ 811.201377][ T9714] usb 4-1: SerialNumber: syz [ 811.204402][ T9714] usb 4-1: config 0 descriptor?? [ 814.254704][ T9714] usb 4-1: USB disconnect, device number 47 [ 814.814656][T11958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.052571][T11575] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 816.308743][T11977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.350338][T11978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.405334][T11991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11991 comm=syz.4.1430 [ 818.406006][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 819.363072][ T5689] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 819.658979][T11575] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 819.761764][ T5689] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 819.938083][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 819.938112][ T5689] usb 5-1: Product: syz [ 819.938127][ T5689] usb 5-1: SerialNumber: syz [ 820.277836][ T5689] usb 5-1: config 0 descriptor?? [ 820.637289][T12003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12003 comm=syz.3.1432 [ 820.639144][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 820.784784][ T5689] usb 5-1: USB disconnect, device number 36 [ 821.244118][T11575] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 821.704743][T11969] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 821.918184][T11969] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 821.980845][T11969] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 821.980880][T11969] usb 4-1: Product: syz [ 821.980918][T11969] usb 4-1: SerialNumber: syz [ 822.079907][T11969] usb 4-1: config 0 descriptor?? [ 822.248109][T12014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12014 comm=syz.4.1435 [ 822.249833][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 823.379308][T12026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12026 comm=syz.0.1437 [ 823.399310][T11969] usb 4-1: USB disconnect, device number 48 [ 823.414331][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 824.553388][T11969] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 824.554456][T12002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.854648][T11969] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 824.883964][T11969] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 824.883982][T11969] usb 1-1: Product: syz [ 824.883991][T11969] usb 1-1: SerialNumber: syz [ 824.890358][T11969] usb 1-1: config 0 descriptor?? [ 825.697674][T11969] usb 1-1: USB disconnect, device number 51 [ 825.784356][T11575] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 826.227459][T12018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.945046][T11575] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 829.633339][T12065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12065 comm=syz.0.1444 [ 829.670023][T11575] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 830.631328][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 831.963347][ T1193] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 832.051296][T12049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.567518][T12062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.190794][T12107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.726896][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 838.361786][T12117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.953393][T11575] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 839.054218][T11575] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 841.465352][T12153] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 841.465733][T12153] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 841.465859][T12153] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 841.465982][T12153] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 841.466104][T12153] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 842.326098][T11969] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 842.473615][T11969] usb 1-1: Using ep0 maxpacket: 8 [ 842.474124][T11969] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 842.474994][T11969] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 842.475034][T11969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 842.475055][T11969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.475076][T11969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.475098][T11969] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.475132][T11969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.069790][T12175] Invalid ELF header magic: != ELF [ 843.629153][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 843.629191][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 843.629211][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 843.629232][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 843.629272][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 843.638846][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 844.419586][T11969] usb 1-1: usb_control_msg returned -32 [ 844.419627][T11969] usbtmc 1-1:16.0: can't read capabilities [ 844.520252][T11969] usb 1-1: USB disconnect, device number 53 [ 845.531228][T12127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.352877][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 850.322910][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.644960][T12223] Invalid ELF header magic: != ELF [ 851.849796][T11575] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 852.247716][T12235] Invalid ELF header magic: != ELF [ 853.681839][T12244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12244 comm=syz.0.1479 [ 853.685325][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 854.193458][ T1193] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 854.295378][T11969] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 854.373446][ T1193] usb 2-1: Using ep0 maxpacket: 8 [ 854.374172][ T1193] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 854.377927][ T1193] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 854.377955][ T1193] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 854.377969][ T1193] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 854.377990][ T1193] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 854.378007][ T1193] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.378029][ T1193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.464246][T11969] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 854.483829][T11969] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 854.483862][T11969] usb 1-1: Product: syz [ 854.483870][T11969] usb 1-1: SerialNumber: syz [ 854.490699][T11969] usb 1-1: config 0 descriptor?? [ 854.701580][ T1193] usb 2-1: usb_control_msg returned -32 [ 854.701608][ T1193] usbtmc 2-1:16.0: can't read capabilities [ 854.845488][T11969] usb 1-1: USB disconnect, device number 54 [ 855.005786][T12255] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 855.007283][ T56] usb 2-1: USB disconnect, device number 53 [ 856.630408][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'. [ 857.020969][T12277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12277 comm=syz.0.1485 [ 857.022484][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 857.131142][T12269] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 857.145479][T12269] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 857.145662][T12269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 857.145770][T12269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 857.145867][T12269] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 858.330314][T12182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.434903][T11575] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 858.459725][T11575] Bluetooth: hci1: command 0x0c1a tx timeout [ 859.156131][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 859.156237][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 859.156353][T11575] Bluetooth: hci4: command 0x0c1a tx timeout [ 859.390789][T12248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.509762][ T5689] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 859.713138][ T5689] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 859.844002][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 859.844041][ T5689] usb 1-1: Product: syz [ 859.844082][ T5689] usb 1-1: SerialNumber: syz [ 860.038957][ T5689] usb 1-1: config 0 descriptor?? [ 860.282724][T12305] Invalid ELF header magic: != ELF [ 860.995576][ T5689] usb 1-1: USB disconnect, device number 55 [ 862.586479][T11575] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 862.723204][T12316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 862.737044][T12316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 862.761869][T12316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 862.762664][T12316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 862.764939][T12316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 863.403354][T11575] Bluetooth: hci1: command 0x0c1a tx timeout [ 863.523600][ T56] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 863.689071][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 863.691582][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 864.234687][ T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 864.234745][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.234767][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 864.234790][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 864.234812][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.234846][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.350117][T12342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12342 comm=syz.0.1506 [ 864.422806][T12343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12343 comm=syz.1.1496 [ 864.515596][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.515681][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.611390][ T56] usb 5-1: usb_control_msg returned -32 [ 864.611431][ T56] usbtmc 5-1:16.0: can't read capabilities [ 864.670311][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 864.670368][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 864.753996][T11575] Bluetooth: hci0: command 0x0c1a tx timeout [ 864.843631][T11575] Bluetooth: hci4: command 0x0c1a tx timeout [ 864.843676][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 864.843714][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 864.876626][T12332] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 864.877433][T10521] usb 5-1: USB disconnect, device number 37 [ 865.066007][ T56] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 865.223349][T11969] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 865.243578][ T56] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 865.296537][ T56] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 865.296556][ T56] usb 1-1: Product: syz [ 865.296565][ T56] usb 1-1: SerialNumber: syz [ 865.303033][ T56] usb 1-1: config 0 descriptor?? [ 865.375870][T11969] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 865.407767][T11969] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 865.407788][T11969] usb 2-1: Product: syz [ 865.407798][T11969] usb 2-1: SerialNumber: syz [ 865.410031][T11969] usb 2-1: config 0 descriptor?? [ 865.577047][ T56] usb 1-1: USB disconnect, device number 56 [ 866.250957][ T1193] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 866.300691][T11969] usb 2-1: USB disconnect, device number 54 [ 866.394262][ T1193] usb 4-1: Using ep0 maxpacket: 8 [ 866.405646][ T1193] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 866.411103][ T1193] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 866.411149][ T1193] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.411181][ T1193] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 866.411200][ T1193] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 866.411219][ T1193] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.411250][ T1193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.886974][ T1193] usb 4-1: usb_control_msg returned -32 [ 866.887076][ T1193] usbtmc 4-1:16.0: can't read capabilities [ 867.053953][T12364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12364 comm=syz.2.1501 [ 867.066402][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 867.269358][T12350] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 867.838485][T10521] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 867.838683][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 868.020914][T12301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.025939][T10521] usb 3-1: device descriptor read/64, error -32 [ 868.056014][ T1193] usb 4-1: USB disconnect, device number 49 [ 868.131787][T12369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12369 comm=syz.1.1503 [ 868.250177][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1503'. [ 868.263383][T10521] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 868.653940][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 868.823630][ T1193] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 868.907808][T10521] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 869.027123][ T1193] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 869.058678][T10521] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 869.058709][T10521] usb 3-1: Product: syz [ 869.058724][T10521] usb 3-1: SerialNumber: syz [ 869.061720][T10521] usb 3-1: config 0 descriptor?? [ 869.122264][ T1193] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 869.122294][ T1193] usb 2-1: Product: syz [ 869.122310][ T1193] usb 2-1: SerialNumber: syz [ 869.155147][ T1193] usb 2-1: config 0 descriptor?? [ 869.599024][ T1193] usb 2-1: USB disconnect, device number 55 [ 869.985032][T10521] usb 3-1: USB disconnect, device number 51 [ 870.192942][T12384] Invalid ELF header magic: != ELF [ 872.694161][T12363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.880755][T12378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.690121][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 876.175630][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'. [ 876.212615][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 877.289269][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1513'. [ 878.415327][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 880.077280][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 880.091685][T12447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 880.092586][T12447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 880.093067][T12447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 880.114181][T12447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 880.114324][T12447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 880.175895][T12456] Invalid ELF header magic: != ELF [ 880.848607][T12420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.959991][T12435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.803838][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 882.123342][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 882.123367][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 882.203331][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 882.203373][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 883.805566][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 885.290394][T12454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.633164][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 885.674191][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 886.346254][T12506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12506 comm=syz.0.1527 [ 886.347706][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 886.576770][T12494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.650859][T12514] Invalid ELF header magic: != ELF [ 887.562507][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 887.767588][T11969] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 887.949512][T11969] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 888.014778][T11969] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 888.014863][T11969] usb 1-1: Product: syz [ 888.014898][T11969] usb 1-1: SerialNumber: syz [ 888.179755][T11969] usb 1-1: config 0 descriptor?? [ 888.599078][T11969] usb 1-1: USB disconnect, device number 57 [ 889.435885][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 889.516494][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 891.570798][T12546] Invalid ELF header magic: != ELF [ 892.072453][T12524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.473030][T12529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.743902][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 893.054103][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 895.524829][T12535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.857571][T12560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.001188][T12564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.043445][ T30] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 896.213482][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 896.245859][ T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 896.282415][ T30] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 896.282602][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 896.282630][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 896.282685][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 896.282712][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 896.282739][ T30] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 896.282833][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.385847][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 896.518824][ T30] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 897.285677][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 897.956840][T12594] Invalid ELF header magic: != ELF [ 898.972237][T12601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12601 comm=syz.3.1542 [ 898.995579][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'. [ 899.121319][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 899.199734][ T5689] usb 3-1: USB disconnect, device number 52 [ 899.646324][T12590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.261882][ T5689] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 901.616995][ T5689] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 903.141362][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 903.141394][ T5689] usb 4-1: Product: syz [ 903.152042][ T5689] usb 4-1: config 0 descriptor?? [ 903.161830][ T5689] usb 4-1: can't set config #0, error -71 [ 903.174185][ T5689] usb 4-1: USB disconnect, device number 50 [ 903.203469][T12637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12637 comm=syz.2.1547 [ 903.207873][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 903.297014][T12636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.484281][T12642] Invalid ELF header magic: != ELF [ 903.889976][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 904.183605][ T5703] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 904.306289][T12597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 904.347109][ T5703] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 904.432528][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 904.432563][ T5703] usb 3-1: Product: syz [ 904.432602][ T5703] usb 3-1: SerialNumber: syz [ 904.539988][ T5703] usb 3-1: config 0 descriptor?? [ 905.122608][ T5703] usb 3-1: USB disconnect, device number 53 [ 905.825085][T12662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12662 comm=syz.0.1552 [ 905.892328][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'. [ 906.337658][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 906.446103][ T56] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 906.884244][T12672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.886412][ T5728] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 906.963364][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 906.965653][ T56] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 906.966580][ T56] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 906.966619][ T56] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 906.966640][ T56] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 906.966660][ T56] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 906.966681][ T56] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.966714][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.078030][ T5728] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 907.119312][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 907.119333][ T5728] usb 1-1: Product: syz [ 907.119342][ T5728] usb 1-1: SerialNumber: syz [ 907.141337][ T5728] usb 1-1: config 0 descriptor?? [ 907.257651][ T56] usb 3-1: usb_control_msg returned -32 [ 907.257693][ T56] usbtmc 3-1:16.0: can't read capabilities [ 907.448321][ T5728] usb 1-1: USB disconnect, device number 58 [ 907.488365][T12668] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 907.489665][ T56] usb 3-1: USB disconnect, device number 54 [ 907.836434][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 909.874092][T12695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12695 comm=syz.2.1559 [ 909.876504][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 909.953387][ T5703] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 910.103331][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 910.103827][ T5703] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 910.104609][ T5703] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 910.104634][ T5703] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 910.104647][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 910.104661][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 910.104674][ T5703] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.104696][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.413376][ T5689] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 911.624482][ T5689] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 911.708134][ T5703] usb 1-1: usb_control_msg returned -32 [ 911.708185][ T5703] usbtmc 1-1:16.0: can't read capabilities [ 911.722295][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 911.722328][ T5689] usb 3-1: Product: syz [ 911.722343][ T5689] usb 3-1: SerialNumber: syz [ 911.914800][ T5689] usb 3-1: config 0 descriptor?? [ 912.364396][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 912.627709][T12711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12711 comm=syz.4.1562 [ 913.085910][ T5703] usb 1-1: USB disconnect, device number 59 [ 913.467782][ T5689] usb 3-1: USB disconnect, device number 55 [ 913.637528][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 914.313311][ T9714] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 914.953354][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 915.055058][ T9714] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 915.060131][ T9714] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 915.060149][ T9714] usb 5-1: Product: syz [ 915.060158][ T9714] usb 5-1: SerialNumber: syz [ 915.111599][ T9714] usb 5-1: config 0 descriptor?? [ 915.169665][T12700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.336759][T12723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12723 comm=syz.2.1564 [ 915.489839][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 915.640003][ T9714] usb 5-1: USB disconnect, device number 38 [ 916.632648][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 917.023399][ T56] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 917.515998][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 917.687298][ T56] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 917.954274][ T56] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 917.954304][ T56] usb 3-1: Product: syz [ 917.954319][ T56] usb 3-1: SerialNumber: syz [ 918.487945][ T56] usb 3-1: config 0 descriptor?? [ 918.703278][T11969] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 918.995842][T11969] usb 1-1: Using ep0 maxpacket: 8 [ 919.378826][ T56] usb 3-1: can't set config #0, error -71 [ 919.536112][ T56] usb 3-1: USB disconnect, device number 56 [ 919.638949][T11969] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 919.691712][T12694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.713758][T11969] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 919.713812][T11969] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 919.713836][T11969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 919.713858][T11969] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 919.713880][T11969] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.713913][T11969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.247043][T11969] usb 1-1: usb_control_msg returned -32 [ 920.247084][T11969] usbtmc 1-1:16.0: can't read capabilities [ 920.607904][T11969] usb 1-1: USB disconnect, device number 60 [ 921.338679][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.552090][T12758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 921.580658][T12758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 921.581244][T12758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 921.581960][T12758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 921.582727][T12758] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 921.716693][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 922.505526][T12750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 923.367957][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 923.663758][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 923.663801][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 923.663826][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 923.918919][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 924.177352][T12793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12793 comm=syz.3.1578 [ 924.181175][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 924.330719][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 924.863422][ T56] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 925.035354][ T56] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 925.087719][ T56] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 925.087790][ T56] usb 4-1: Product: syz [ 925.087835][ T56] usb 4-1: SerialNumber: syz [ 925.198519][ T56] usb 4-1: config 0 descriptor?? [ 925.758537][ T56] usb 4-1: USB disconnect, device number 51 [ 925.964637][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.964698][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.801608][T12765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.661154][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 928.425444][T12805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.475553][T12796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.006543][T12837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12837 comm=syz.3.1587 [ 930.008354][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 931.070286][ T56] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 931.255127][ T56] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 931.365820][ T56] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 931.365854][ T56] usb 4-1: Product: syz [ 931.365931][ T56] usb 4-1: SerialNumber: syz [ 931.478988][ T56] usb 4-1: config 0 descriptor?? [ 931.863196][ T56] usb 4-1: USB disconnect, device number 52 [ 933.293115][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 934.397031][T12858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.085706][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 935.843328][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 935.844305][T12854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.429692][T12881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.046012][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 938.863178][T12893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12893 comm=syz.0.1599 [ 939.364054][T12898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12898 comm=syz.1.1595 [ 939.431226][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 939.432655][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 939.795941][T12873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.269763][ T5689] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 940.751647][ T5689] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 941.225683][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 941.225710][ T5689] usb 1-1: Product: syz [ 941.225724][ T5689] usb 1-1: SerialNumber: syz [ 941.231476][T12918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12918 comm=syz.4.1598 [ 941.276468][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 941.711690][ T5689] usb 1-1: config 0 descriptor?? [ 942.077885][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 942.327119][ T5689] usb 1-1: can't set config #0, error -71 [ 942.333348][ T5689] usb 1-1: USB disconnect, device number 61 [ 942.768169][T12920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.973381][ T9714] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 943.126509][ T9714] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 943.184495][ T9714] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 943.184563][ T9714] usb 5-1: Product: syz [ 943.184601][ T9714] usb 5-1: SerialNumber: syz [ 943.264408][ T9714] usb 5-1: config 0 descriptor?? [ 944.068808][ T9714] usb 5-1: USB disconnect, device number 39 [ 944.989645][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.496942][T12934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.546187][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 948.030116][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 950.363730][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 953.024730][T12980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.087818][T12976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.538031][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 957.812144][T12961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.882980][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 958.381764][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 959.474507][T12992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.583494][T12987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.199380][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 961.365707][T13010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.275214][T13007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.507553][T13026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.656758][T13054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13054 comm=syz.2.1627 [ 964.659296][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 971.587406][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 973.345841][T13070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 973.900006][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 974.105299][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 974.124934][T13097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.158073][T13073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.644807][T13119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13119 comm=syz.1.1639 [ 974.647580][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 975.288595][T13068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.400805][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.237990][T13132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13132 comm=syz.2.1643 [ 977.241811][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 977.273357][T11969] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 977.570128][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 978.026461][T11969] usb 2-1: device descriptor read/all, error -71 [ 978.103597][T13142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13142 comm=syz.4.1645 [ 978.105089][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 978.313318][ T5689] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 979.429366][ T5689] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 979.454946][ T5689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.454971][ T5689] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 979.457211][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 979.457226][ T5689] usb 3-1: Product: syz [ 979.457235][ T5689] usb 3-1: SerialNumber: syz [ 979.458706][ T5689] usb 3-1: config 0 descriptor?? [ 979.722855][ T5689] usb 3-1: USB disconnect, device number 57 [ 979.734808][T13121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.523335][ T5689] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 980.523841][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 980.656427][ T5689] usb 5-1: device descriptor read/64, error -32 [ 980.895320][ T5689] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 980.897131][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 981.023285][ T5689] usb 5-1: device descriptor read/64, error -32 [ 981.029043][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 981.133970][ T5689] usb usb5-port1: attempt power cycle [ 981.475594][ T5689] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 981.494773][ C0] raw-gadget.0 gadget.4: failed to queue control event [ 981.495297][ T5689] usb 5-1: device descriptor read/8, error -32 [ 981.603594][ T5689] raw-gadget.0 gadget.4: failed to queue suspend event [ 981.604432][ T5689] raw-gadget.0 gadget.4: failed to queue reset event [ 981.693614][ T5689] raw-gadget.0 gadget.4: failed to queue resume event [ 981.757977][ T5689] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 981.789136][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 981.795747][ T5689] usb 5-1: device descriptor read/8, error -32 [ 981.925986][ T5689] raw-gadget.0 gadget.4: failed to queue suspend event [ 981.926367][ T5689] usb usb5-port1: unable to enumerate USB device [ 981.999916][T13142] raw-gadget.0 gadget.4: failed to queue disconnect event [ 982.322204][T13178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13178 comm=syz.2.1654 [ 982.416596][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 982.581472][T13183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13183 comm=syz.3.1655 [ 982.581820][T13183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 982.793975][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 983.803306][ T9714] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 983.823471][ T5716] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 983.974212][ T5716] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 983.977655][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 983.977688][ T5716] usb 4-1: Product: syz [ 983.977729][ T5716] usb 4-1: SerialNumber: syz [ 984.036411][ T5716] usb 4-1: config 0 descriptor?? [ 984.061169][ T5716] hso 4-1:0.0: Not our interface [ 984.743500][ T9714] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 984.745628][ T5716] usb 4-1: USB disconnect, device number 53 [ 984.927353][ T9714] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 984.927381][ T9714] usb 3-1: Product: syz [ 984.927394][ T9714] usb 3-1: SerialNumber: syz [ 985.185793][ T9714] usb 3-1: config 0 descriptor?? [ 985.563397][ T9714] usb 3-1: can't set config #0, error -71 [ 985.564702][ T9714] usb 3-1: USB disconnect, device number 58 [ 985.594522][T13170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 986.440541][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 986.534931][T13198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 987.096426][T13220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13220 comm=syz.1.1661 [ 987.146751][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 987.396123][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.396180][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.463286][T13229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13229 comm=syz.0.1662 [ 988.555442][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1662'. [ 988.626411][ T5728] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 988.813984][ T5728] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 988.818830][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 988.818856][ T5728] usb 2-1: Product: syz [ 988.818866][ T5728] usb 2-1: SerialNumber: syz [ 988.823886][ T5728] usb 2-1: config 0 descriptor?? [ 988.867179][ T5728] hso 2-1:0.0: Not our interface [ 989.023323][ T56] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 989.150853][ T5728] usb 2-1: USB disconnect, device number 58 [ 989.189970][ T56] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 989.230305][ T56] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 989.230324][ T56] usb 1-1: Product: syz [ 989.230332][ T56] usb 1-1: SerialNumber: syz [ 989.231724][ T56] usb 1-1: config 0 descriptor?? [ 989.300968][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 989.725984][ T56] usb 1-1: USB disconnect, device number 62 [ 989.975562][T13222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.043446][T13214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.290694][T13252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13252 comm=syz.4.1668 [ 991.348155][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 991.680694][T13219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.537217][T13258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13258 comm=syz.3.1667 [ 993.054731][ T5726] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 993.230096][ T5726] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 993.247841][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 993.247875][ T5726] usb 5-1: Product: syz [ 993.247916][ T5726] usb 5-1: SerialNumber: syz [ 993.318927][ T5726] usb 5-1: config 0 descriptor?? [ 993.370119][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 993.389970][ T5726] hso 5-1:0.0: Not our interface [ 994.216444][ T5689] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 995.163331][ T5689] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 995.189319][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 995.189336][ T5689] usb 4-1: Product: syz [ 995.189345][ T5689] usb 4-1: SerialNumber: syz [ 995.190966][ T5689] usb 4-1: config 0 descriptor?? [ 995.216921][ T5689] hso 4-1:0.0: Not our interface [ 995.246863][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 995.330983][ T5689] usb 5-1: USB disconnect, device number 44 [ 995.648883][T13250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.711472][ T5728] usb 4-1: USB disconnect, device number 54 [ 995.934919][T13247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.497800][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 997.485208][T13279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13279 comm=syz.2.1672 [ 997.627446][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 997.785490][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 997.814457][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 997.868286][T13268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.963291][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 997.963813][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 997.964624][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 997.964647][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.964660][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.964673][ T10] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 997.964685][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.964705][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.969816][ T10] usbtmc 4-1:16.0: bulk endpoints not found [ 998.193919][ T5728] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 998.356984][ T5728] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 998.361323][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 998.361348][ T5728] usb 3-1: Product: syz [ 998.361357][ T5728] usb 3-1: SerialNumber: syz [ 998.362754][ T5728] usb 3-1: config 0 descriptor?? [ 998.543968][ T5726] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 998.564448][T13273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 998.665413][ T5728] usb 3-1: USB disconnect, device number 59 [ 998.694068][ T5726] usb 1-1: Using ep0 maxpacket: 8 [ 998.694579][ T5726] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 998.696065][ T5726] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 998.696106][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 998.696128][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 998.696151][ T5726] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 998.696177][ T5726] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 998.696198][ T5726] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 998.696234][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.743907][ T5726] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 1000.422037][ T5726] usb 4-1: USB disconnect, device number 55 [ 1000.748206][T13307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13307 comm=syz.3.1677 [ 1000.781029][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 1001.296891][ T5728] usb 1-1: USB disconnect, device number 63 [ 1001.333762][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 1001.851465][T13310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13310 comm=syz.2.1676 [ 1002.202273][T13322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13322 comm=syz.0.1678 [ 1002.768405][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'. [ 1002.850469][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 1002.943293][ T5716] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1003.095970][ T5716] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1003.112803][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1003.112827][ T5716] usb 4-1: Product: syz [ 1003.112840][ T5716] usb 4-1: SerialNumber: syz [ 1003.135703][ T5716] usb 4-1: config 0 descriptor?? [ 1003.213355][ T5728] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1003.404817][ T5728] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1003.436108][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1003.436136][ T5728] usb 1-1: Product: syz [ 1003.436145][ T5728] usb 1-1: SerialNumber: syz [ 1003.439433][ T5728] usb 1-1: config 0 descriptor?? [ 1003.523306][ T56] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1003.584644][ T5716] usb 4-1: USB disconnect, device number 56 [ 1003.668343][ T5728] usb 1-1: USB disconnect, device number 64 [ 1003.714810][ T56] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1003.754909][T13298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1003.776078][ T56] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1003.776111][ T56] usb 3-1: Product: syz [ 1003.776121][ T56] usb 3-1: SerialNumber: syz [ 1003.777641][ T56] usb 3-1: config 0 descriptor?? [ 1004.106184][ T56] usb 3-1: USB disconnect, device number 60 [ 1004.808306][T13291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.725709][T13342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1007.522356][T13339] Cannot find add_set index 2 as target [ 1007.537269][ T31] audit: type=1400 audit(1789725481.091:298): avc: denied { setopt } for pid=13337 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1007.537318][ T31] audit: type=1400 audit(1789725481.091:299): avc: denied { create } for pid=13337 comm="syz.1.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1007.537354][ T31] audit: type=1400 audit(1789725481.091:300): avc: denied { write } for pid=13337 comm="syz.1.1682" path="socket:[37166]" dev="sockfs" ino=37166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1008.619394][T13351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.765186][ T31] audit: type=1400 audit(1789725482.331:301): avc: denied { mount } for pid=13355 comm="syz.3.1684" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1008.804153][T13357] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 1008.804181][T13357] bond0: option arp_ip_target: invalid value (-192.168.1.1}鳍򑯁 [ 1012.567885][T13396] dump_stack_lvl+0x100/0x190 [ 1012.567910][T13396] should_fail_ex.cold+0x5/0xa [ 1012.567930][T13396] _copy_to_user+0x32/0xd0 [ 1012.567947][T13396] simple_read_from_buffer+0xcb/0x170 [ 1012.567967][T13396] proc_fail_nth_read+0x1af/0x230 [ 1012.567985][T13396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.568004][T13396] ? rw_verify_area+0xce/0x6d0 [ 1012.568026][T13396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.568048][T13396] vfs_read+0x1e4/0xb40 [ 1012.568063][T13396] ? lock_acquire+0x1d1/0x380 [ 1012.568077][T13396] ? __fget_files+0x34/0x3d0 [ 1012.568094][T13396] ? __pfx_vfs_read+0x10/0x10 [ 1012.568107][T13396] ? find_held_lock+0x2b/0x80 [ 1012.568126][T13396] ? __fget_files+0x215/0x3d0 [ 1012.568146][T13396] ? __fget_files+0x21f/0x3d0 [ 1012.568168][T13396] ksys_read+0x12a/0x250 [ 1012.568182][T13396] ? __pfx_ksys_read+0x10/0x10 [ 1012.568200][T13396] do_syscall_64+0x123/0x790 [ 1012.568222][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.568237][T13396] RIP: 0033:0x7fb08d35e98e [ 1012.568250][T13396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1012.568263][T13396] RSP: 002b:00007fb08e26dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1012.568278][T13396] RAX: ffffffffffffffda RBX: 00007fb08e26e6c0 RCX: 00007fb08d35e98e [ 1012.568287][T13396] RDX: 000000000000000f RSI: 00007fb08e26e0a0 RDI: 0000000000000004 [ 1012.568295][T13396] RBP: 00007fb08e26e090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.568303][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.568311][T13396] R13: 00007fb08d626038 R14: 00007fb08d625fa0 R15: 00007fff51ac8708 [ 1012.568329][T13396] [ 1012.833756][ T5716] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1012.946604][ T31] audit: type=1326 audit(1789725486.511:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.948261][ T31] audit: type=1326 audit(1789725486.511:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.948307][ T31] audit: type=1326 audit(1789725486.511:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.948348][ T31] audit: type=1326 audit(1789725486.511:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.948387][ T31] audit: type=1326 audit(1789725486.511:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.949075][ T31] audit: type=1326 audit(1789725486.511:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.949115][ T31] audit: type=1326 audit(1789725486.511:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.949154][ T31] audit: type=1326 audit(1789725486.511:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08d39e159 code=0x7ffc0000 [ 1012.949192][ T31] audit: type=1326 audit(1789725486.511:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb08d39dec2 code=0x7ffc0000 [ 1012.949228][ T31] audit: type=1326 audit(1789725486.511:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13397 comm="syz.4.1693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb08d39df57 code=0x7ffc0000 [ 1013.202808][ T5716] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1013.399642][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1013.399670][ T5716] usb 1-1: Product: syz [ 1013.399684][ T5716] usb 1-1: SerialNumber: syz [ 1013.442360][ T5716] usb 1-1: config 0 descriptor?? [ 1013.721801][ T5716] usb 1-1: USB disconnect, device number 65 [ 1013.872155][T13379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.595621][T13408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1017.714481][T13435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13435 comm=syz.4.1700 [ 1017.771161][T13434] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 1018.848966][ T31] kauditd_printk_skb: 97 callbacks suppressed [ 1018.848982][ T31] audit: type=1400 audit(1789725492.411:410): avc: denied { name_bind } for pid=13441 comm="syz.0.1702" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1018.849224][ T31] audit: type=1400 audit(1789725492.411:411): avc: denied { node_bind } for pid=13441 comm="syz.0.1702" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1019.106257][ T31] audit: type=1400 audit(1789725492.671:412): avc: denied { prog_load } for pid=13441 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.163325][ T31] audit: type=1400 audit(1789725492.721:413): avc: denied { prog_run } for pid=13441 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.357470][ T31] audit: type=1400 audit(1789725492.921:414): avc: denied { map_create } for pid=13454 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.359297][ T31] audit: type=1400 audit(1789725492.921:415): avc: denied { map_read map_write } for pid=13454 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.406838][T13455] FAULT_INJECTION: forcing a failure. [ 1019.406838][T13455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.406871][T13455] CPU: 1 UID: 0 PID: 13455 Comm: syz.2.1705 Not tainted syzkaller #0 PREEMPT(full) [ 1019.406902][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1019.406914][T13455] Call Trace: [ 1019.406922][T13455] [ 1019.406930][T13455] dump_stack_lvl+0x100/0x190 [ 1019.406965][T13455] should_fail_ex.cold+0x5/0xa [ 1019.406994][T13455] _copy_from_user+0x2e/0xd0 [ 1019.407018][T13455] copy_msghdr_from_user+0x9f/0x4c0 [ 1019.407051][T13455] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1019.407089][T13455] ? lock_acquire+0x1d1/0x380 [ 1019.407111][T13455] ? get_pid_task+0x2a/0x250 [ 1019.407141][T13455] ___sys_sendmsg+0x106/0x1e0 [ 1019.407176][T13455] ? __pfx____sys_sendmsg+0x10/0x10 [ 1019.407207][T13455] ? get_pid_task+0x106/0x250 [ 1019.407245][T13455] ? find_held_lock+0x2b/0x80 [ 1019.407287][T13455] __sys_sendmsg+0x160/0x210 [ 1019.407312][T13455] ? __pfx___sys_sendmsg+0x10/0x10 [ 1019.407352][T13455] do_syscall_64+0x123/0x790 [ 1019.407384][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.407404][T13455] RIP: 0033:0x7fc49339e159 [ 1019.407422][T13455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.407441][T13455] RSP: 002b:00007fc4941c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.407461][T13455] RAX: ffffffffffffffda RBX: 00007fc493625fa0 RCX: 00007fc49339e159 [ 1019.407475][T13455] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1019.407488][T13455] RBP: 00007fc4941c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.407500][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.407512][T13455] R13: 00007fc493626038 R14: 00007fc493625fa0 R15: 00007ffc23b30838 [ 1019.407539][T13455] [ 1019.438176][T13424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1019.555062][ T5716] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1019.729821][ T5716] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1019.732598][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.732643][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.799270][ T5716] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 1019.799379][ T5716] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 1019.799410][ T5716] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 1019.877624][ T5716] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 1019.877695][ T5716] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 1019.879676][ T5716] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1019.909159][ T5716] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 1019.909230][ T5716] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 1019.929853][ T5716] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1019.981080][T13464] FAULT_INJECTION: forcing a failure. [ 1019.981080][T13464] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.981108][T13464] CPU: 1 UID: 0 PID: 13464 Comm: syz.3.1709 Not tainted syzkaller #0 PREEMPT(full) [ 1019.981129][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1019.981139][T13464] Call Trace: [ 1019.981145][T13464] [ 1019.981152][T13464] dump_stack_lvl+0x100/0x190 [ 1019.981183][T13464] should_fail_ex.cold+0x5/0xa [ 1019.981208][T13464] should_failslab+0xc2/0x120 [ 1019.981230][T13464] __kmalloc_noprof+0xfc/0x840 [ 1019.981248][T13464] ? rcu_is_watching+0x13/0xc0 [ 1019.981272][T13464] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1019.981300][T13464] tomoyo_realpath_from_path+0xb6/0x690 [ 1019.981329][T13464] tomoyo_path_number_perm+0x23c/0x580 [ 1019.981346][T13464] ? tomoyo_path_number_perm+0x22e/0x580 [ 1019.981366][T13464] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1019.981393][T13464] ? __lock_acquire+0x5c0/0x1f40 [ 1019.981424][T13464] ? __fget_files+0x34/0x3d0 [ 1019.981445][T13464] ? find_held_lock+0x2b/0x80 [ 1019.981476][T13464] ? hook_file_ioctl_common+0x140/0x440 [ 1019.981499][ T31] audit: type=1400 audit(1789725493.541:416): avc: denied { ioctl } for pid=13462 comm="syz.3.1709" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=38205 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1019.981504][T13464] ? __fget_files+0x21f/0x3d0 [ 1019.981530][T13464] security_file_ioctl+0xd3/0x230 [ 1019.981550][T13464] __x64_sys_ioctl+0xb7/0x210 [ 1019.981569][T13464] do_syscall_64+0x123/0x790 [ 1019.981596][T13464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.981614][T13464] RIP: 0033:0x7f2b6199e159 [ 1019.981629][T13464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.981645][T13464] RSP: 002b:00007f2b627bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1019.981663][T13464] RAX: ffffffffffffffda RBX: 00007f2b61c25fa0 RCX: 00007f2b6199e159 [ 1019.981675][T13464] RDX: 0000200000000040 RSI: 00000000c018aa09 RDI: 0000000000000003 [ 1019.981686][T13464] RBP: 00007f2b627bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.981696][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.981707][T13464] R13: 00007f2b61c26038 R14: 00007f2b61c25fa0 R15: 00007fff5cf8b708 [ 1019.981731][T13464] [ 1019.995938][T13464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1020.032229][ T56] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1020.195998][ T56] usb 3-1: device descriptor read/64, error -71 [ 1020.307865][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.308303][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.433602][ T56] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1020.454831][ T5689] usb 5-1: USB disconnect, device number 45 [ 1020.478163][ T5689] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1020.509247][ T5689] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1020.509557][ T5689] keyspan 5-1:1.0: device disconnected [ 1020.583298][ T56] usb 3-1: device descriptor read/64, error -71 [ 1020.695320][ T56] usb usb3-port1: attempt power cycle [ 1020.742487][ T31] audit: type=1400 audit(1789725494.301:417): avc: denied { write } for pid=13477 comm="syz.1.1717" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1021.035937][ T56] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1021.061458][ T56] usb 3-1: device descriptor read/8, error -71 [ 1021.176853][T13487] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 1021.176895][T13487] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1720'. [ 1021.207530][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.207713][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.254295][T13487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.254583][T13487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.255486][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.255570][T13487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.293951][ T56] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1021.303882][T13487] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1021.315886][ T56] usb 3-1: device descriptor read/8, error -71 [ 1021.387330][ T31] audit: type=1400 audit(1789725494.951:418): avc: denied { create } for pid=13492 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1021.392043][ T31] audit: type=1400 audit(1789725494.951:419): avc: denied { setopt } for pid=13492 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1021.436361][ T56] usb usb3-port1: unable to enumerate USB device [ 1021.457278][T13406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1022.302883][T13523] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1737'. [ 1022.340082][T13528] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1736'. [ 1022.340707][T13520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1736'. [ 1022.342701][T13522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1736'. [ 1022.538194][T13541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31768 sclass=netlink_route_socket pid=13541 comm=syz.0.1743 [ 1022.717656][T13549] netlink: 'syz.1.1746': attribute type 33 has an invalid length. [ 1022.717678][T13549] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1746'. [ 1023.030963][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 1023.569583][T13568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.973654][T13574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13574 comm=syz.3.1755 [ 1024.012179][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 1024.155934][T13579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13579 comm=syz.4.1756 [ 1024.157856][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 1024.819837][ T5728] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1024.849426][ T5689] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1024.994235][ T5728] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1025.029108][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1025.029136][ T5728] usb 5-1: Product: syz [ 1025.029150][ T5728] usb 5-1: SerialNumber: syz [ 1025.057370][ T5728] usb 5-1: config 0 descriptor?? [ 1025.125050][ T5689] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1025.129350][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1025.129376][ T5689] usb 4-1: Product: syz [ 1025.129385][ T5689] usb 4-1: SerialNumber: syz [ 1025.231784][ T5609] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 1025.343712][ T5728] usb 5-1: USB disconnect, device number 46 [ 1026.771840][ T5689] usb 4-1: config 0 descriptor?? [ 1027.199049][ T5689] usb 4-1: USB disconnect, device number 57 [ 1028.593420][T13585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.800362][T13594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.128223][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 1031.002832][ T5609] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 1032.133490][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1032.133511][ T31] audit: type=1400 audit(1789725505.571:422): avc: denied { read } for pid=13629 comm="syz.4.1764" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1032.136891][ T31] audit: type=1400 audit(1789725505.701:423): avc: denied { open } for pid=13629 comm="syz.4.1764" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1032.253476][ T31] audit: type=1400 audit(1789725505.821:424): avc: denied { ioctl } for pid=13629 comm="syz.4.1764" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x5409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1032.394380][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.254168][T13623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.488935][T13651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1768'. [ 1033.567044][T13627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.771625][T13663] FAULT_INJECTION: forcing a failure. [ 1033.771625][T13663] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.771651][T13663] CPU: 0 UID: 0 PID: 13663 Comm: syz.4.1771 Not tainted syzkaller #0 PREEMPT(full) [ 1033.771665][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1033.771673][T13663] Call Trace: [ 1033.771677][T13663] [ 1033.771683][T13663] dump_stack_lvl+0x100/0x190 [ 1033.771706][T13663] should_fail_ex.cold+0x5/0xa [ 1033.771724][T13663] should_failslab+0xc2/0x120 [ 1033.771741][T13663] __kmalloc_cache_node_noprof+0x94/0x720 [ 1033.771758][T13663] ? __get_vm_area_node+0x124/0x350 [ 1033.771792][T13663] __get_vm_area_node+0x124/0x350 [ 1033.771811][T13663] __vmalloc_node_range_noprof+0x268/0x1420 [ 1033.771829][T13663] ? xstateregs_set+0x15b/0x260 [ 1033.771849][T13663] ? lock_acquire+0x1d1/0x380 [ 1033.771863][T13663] ? __might_fault+0xc5/0x140 [ 1033.771884][T13663] ? xstateregs_set+0x15b/0x260 [ 1033.771905][T13663] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1033.771923][T13663] ? __lock_acquire+0x5c0/0x1f40 [ 1033.771938][T13663] ? __lock_acquire+0x5c0/0x1f40 [ 1033.771951][T13663] ? xstateregs_set+0x15b/0x260 [ 1033.771969][T13663] __vmalloc_node_noprof+0xad/0xf0 [ 1033.771986][T13663] ? xstateregs_set+0x15b/0x260 [ 1033.772006][T13663] xstateregs_set+0x15b/0x260 [ 1033.772025][T13663] ? __pfx_xstateregs_set+0x10/0x10 [ 1033.772044][T13663] ptrace_regset+0x2cd/0x380 [ 1033.772061][T13663] ptrace_request+0x780/0x1290 [ 1033.772076][T13663] ? __pfx_ptrace_request+0x10/0x10 [ 1033.772093][T13663] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1033.772110][T13663] ? lockdep_hardirqs_on+0x7d/0x110 [ 1033.772129][T13663] ? wait_task_inactive+0x474/0x920 [ 1033.772150][T13663] ? __pfx_wait_task_inactive+0x10/0x10 [ 1033.772170][T13663] ? mark_held_locks+0x40/0x70 [ 1033.772185][T13663] arch_ptrace+0x3c6/0x6a0 [ 1033.772201][T13663] __x64_sys_ptrace+0x181/0x2a0 [ 1033.772217][T13663] do_syscall_64+0x123/0x790 [ 1033.772237][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.772250][T13663] RIP: 0033:0x7fb08d39e159 [ 1033.772261][T13663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.772274][T13663] RSP: 002b:00007fb08e26e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1033.772289][T13663] RAX: ffffffffffffffda RBX: 00007fb08d625fa0 RCX: 00007fb08d39e159 [ 1033.772297][T13663] RDX: 0000000000000202 RSI: 00000000000005e2 RDI: 0000000000004205 [ 1033.772304][T13663] RBP: 00007fb08e26e090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.772312][T13663] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1033.772320][T13663] R13: 00007fb08d626038 R14: 00007fb08d625fa0 R15: 00007fff51ac8708 [ 1033.772336][T13663] [ 1033.772462][T13663] syz.4.1771: vmalloc error: size 2688, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1033.774431][T13663] CPU: 0 UID: 0 PID: 13663 Comm: syz.4.1771 Not tainted syzkaller #0 PREEMPT(full) [ 1033.774452][T13663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1033.774462][T13663] Call Trace: [ 1033.774469][T13663] [ 1033.774477][T13663] dump_stack_lvl+0x100/0x190 [ 1033.774515][T13663] warn_alloc.cold+0x9e/0xb2 [ 1033.774537][T13663] ? __pfx_warn_alloc+0x10/0x10 [ 1033.774565][T13663] ? __kasan_kmalloc+0x8a/0xb0 [ 1033.774596][T13663] ? __get_vm_area_node+0x22b/0x350 [ 1033.774625][T13663] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1033.774653][T13663] ? lock_acquire+0x1d1/0x380 [ 1033.774672][T13663] ? __might_fault+0xc5/0x140 [ 1033.774704][T13663] ? xstateregs_set+0x15b/0x260 [ 1033.774737][T13663] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1033.774763][T13663] ? __lock_acquire+0x5c0/0x1f40 [ 1033.774792][T13663] ? __lock_acquire+0x5c0/0x1f40 [ 1033.774813][T13663] ? xstateregs_set+0x15b/0x260 [ 1033.774839][T13663] __vmalloc_node_noprof+0xad/0xf0 [ 1033.774864][T13663] ? xstateregs_set+0x15b/0x260 [ 1033.774893][T13663] xstateregs_set+0x15b/0x260 [ 1033.774920][T13663] ? __pfx_xstateregs_set+0x10/0x10 [ 1033.774947][T13663] ptrace_regset+0x2cd/0x380 [ 1033.774972][T13663] ptrace_request+0x780/0x1290 [ 1033.774996][T13663] ? __pfx_ptrace_request+0x10/0x10 [ 1033.775021][T13663] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1033.775045][T13663] ? lockdep_hardirqs_on+0x7d/0x110 [ 1033.775073][T13663] ? wait_task_inactive+0x474/0x920 [ 1033.775105][T13663] ? __pfx_wait_task_inactive+0x10/0x10 [ 1033.775135][T13663] ? mark_held_locks+0x40/0x70 [ 1033.775159][T13663] arch_ptrace+0x3c6/0x6a0 [ 1033.775182][T13663] __x64_sys_ptrace+0x181/0x2a0 [ 1033.775207][T13663] do_syscall_64+0x123/0x790 [ 1033.775236][T13663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.775256][T13663] RIP: 0033:0x7fb08d39e159 [ 1033.775272][T13663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.775290][T13663] RSP: 002b:00007fb08e26e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 1033.775306][T13663] RAX: ffffffffffffffda RBX: 00007fb08d625fa0 RCX: 00007fb08d39e159 [ 1033.775318][T13663] RDX: 0000000000000202 RSI: 00000000000005e2 RDI: 0000000000004205 [ 1033.775328][T13663] RBP: 00007fb08e26e090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.775339][T13663] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1033.775350][T13663] R13: 00007fb08d626038 R14: 00007fb08d625fa0 R15: 00007fff51ac8708 [ 1033.775373][T13663] [ 1033.798266][T13663] Mem-Info: [ 1033.798281][T13663] active_anon:27365 inactive_anon:0 isolated_anon:0 [ 1033.798281][T13663] active_file:0 inactive_file:62484 isolated_file:0 [ 1033.798281][T13663] unevictable:0 dirty:568 writeback:0 [ 1033.798281][T13663] slab_reclaimable:11810 slab_unreclaimable:101002 [ 1033.798281][T13663] mapped:40478 shmem:19313 pagetables:1287 [ 1033.798281][T13663] sec_pagetables:0 bounce:0 [ 1033.798281][T13663] kernel_misc_reclaimable:0 [ 1033.798281][T13663] free:1280269 free_pcp:9996 free_cma:0 [ 1033.798325][T13663] Node 0 active_anon:109460kB inactive_anon:0kB active_file:0kB inactive_file:249732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161912kB dirty:2272kB writeback:0kB shmem:77252kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12100kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1033.798372][T13663] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1033.798415][T13663] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.798463][T13663] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1033.798494][T13663] Node 0 DMA32 free:1169720kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:109460kB inactive_anon:0kB active_file:0kB inactive_file:249732kB unevictable:0kB writepending:2272kB zspages:0kB present:3129332kB managed:2530508kB mlocked:0kB bounce:0kB free_pcp:39984kB local_pcp:12748kB free_cma:0kB [ 1033.798543][T13663] lowmem_reserve[]: 0 0 0 0 0 [ 1033.798571][T13663] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.798616][T13663] lowmem_reserve[]: 0 0 0 0 0 [ 1033.798645][T13663] Node 1 Normal free:3935996kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1033.798695][T13663] lowmem_reserve[]: 0 0 0 0 0 [ 1033.798723][T13663] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1033.798822][T13663] Node 0 DMA32: 876*4kB (UME) 2103*8kB (UME) 1243*16kB (UME) 1245*32kB (UME) 1088*64kB (UME) 475*128kB (UME) 113*256kB (UM) 43*512kB (UME) 51*1024kB (UM) 8*2048kB (UME) 205*4096kB (UM) = 1169720kB [ 1033.798959][T13663] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1033.799041][T13663] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 8*16kB (UM) 7*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3935996kB [ 1033.799172][T13663] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.799186][T13663] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1033.799200][T13663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1033.799213][T13663] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1033.799225][T13663] 81818 total pagecache pages [ 1033.799232][T13663] 0 pages in swap cache [ 1033.799237][T13663] Free swap = 124996kB [ 1033.799243][T13663] Total swap = 124996kB [ 1033.799250][T13663] 2097051 pages RAM [ 1033.799256][T13663] 0 pages HighMem/MovableOnly [ 1033.799267][T13663] 432790 pages reserved [ 1033.799273][T13663] 0 pages cma reserved [ 1034.565877][T13657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1034.566031][T13657] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1034.566134][T13657] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1034.566237][T13657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1034.566366][T13657] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1034.785520][T13653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1035.353258][ T31] audit: type=1400 audit(1789725508.911:425): avc: denied { setopt } for pid=13678 comm="syz.4.1776" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1035.733307][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1036.105367][T13689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8448 sclass=netlink_route_socket pid=13689 comm=syz.3.1779 [ 1036.235788][ T31] audit: type=1400 audit(1789725509.801:426): avc: denied { create } for pid=13688 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1036.239191][ T31] audit: type=1400 audit(1789725509.801:427): avc: denied { listen } for pid=13688 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1036.240912][T13692] netlink: 'syz.3.1779': attribute type 2 has an invalid length. [ 1036.242133][ T31] audit: type=1400 audit(1789725509.801:428): avc: denied { connect } for pid=13688 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1036.327541][ T31] audit: type=1400 audit(1789725509.891:429): avc: denied { write } for pid=13688 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1036.394490][ T31] audit: type=1400 audit(1789725509.961:430): avc: denied { accept } for pid=13688 comm="syz.3.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1036.597035][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1036.597078][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1036.597078][T11575] Bluetooth: hci2: command 0x0c1a tx timeout [ 1036.597103][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1037.149176][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 1039.572823][ T31] audit: type=1400 audit(1789725513.081:431): avc: denied { create } for pid=13734 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.581598][ T31] audit: type=1400 audit(1789725513.141:432): avc: denied { getopt } for pid=13734 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.756949][ T31] audit: type=1400 audit(1789725513.311:433): avc: denied { ioctl } for pid=13734 comm="syz.1.1791" path="socket:[39142]" dev="sockfs" ino=39142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.890299][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1791'. [ 1040.015807][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 1040.037786][ T31] audit: type=1400 audit(1789725513.601:434): avc: denied { create } for pid=13734 comm="syz.1.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1040.074973][T13745] FAULT_INJECTION: forcing a failure. [ 1040.074973][T13745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.075008][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.2.1792 Not tainted syzkaller #0 PREEMPT(full) [ 1040.075029][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1040.075040][T13745] Call Trace: [ 1040.075047][T13745] [ 1040.075055][T13745] dump_stack_lvl+0x100/0x190 [ 1040.075088][T13745] should_fail_ex.cold+0x5/0xa [ 1040.075116][T13745] _copy_to_user+0x32/0xd0 [ 1040.075142][T13745] simple_read_from_buffer+0xcb/0x170 [ 1040.075169][T13745] proc_fail_nth_read+0x1af/0x230 [ 1040.075193][T13745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1040.075218][T13745] ? rw_verify_area+0xce/0x6d0 [ 1040.075246][T13745] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1040.075268][T13745] vfs_read+0x1e4/0xb40 [ 1040.075287][T13745] ? lock_acquire+0x1d1/0x380 [ 1040.075306][T13745] ? __fget_files+0x34/0x3d0 [ 1040.075328][T13745] ? __pfx_vfs_read+0x10/0x10 [ 1040.075350][T13745] ? find_held_lock+0x2b/0x80 [ 1040.075376][T13745] ? __fget_files+0x215/0x3d0 [ 1040.075402][T13745] ? __fget_files+0x21f/0x3d0 [ 1040.075432][T13745] ksys_read+0x12a/0x250 [ 1040.075451][T13745] ? __pfx_ksys_read+0x10/0x10 [ 1040.075469][T13745] ? trace_hardirqs_off+0x70/0x170 [ 1040.075501][T13745] do_syscall_64+0x123/0x790 [ 1040.075532][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.075551][T13745] RIP: 0033:0x7fc49335e98e [ 1040.075566][T13745] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1040.075584][T13745] RSP: 002b:00007fc4941a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1040.075603][T13745] RAX: ffffffffffffffda RBX: 00007fc4941a36c0 RCX: 00007fc49335e98e [ 1040.075615][T13745] RDX: 000000000000000f RSI: 00007fc4941a30a0 RDI: 0000000000000006 [ 1040.075626][T13745] RBP: 00007fc4941a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.075637][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.075647][T13745] R13: 00007fc493626128 R14: 00007fc493626090 R15: 00007ffc23b30838 [ 1040.075673][T13745] [ 1040.782071][T13748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13748 comm=syz.3.1793 [ 1040.820763][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 1040.927976][T13753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13753 comm=syz.2.1795 [ 1040.931490][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 1041.383308][ T5728] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1041.573689][ T30] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1041.626127][ T5728] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1042.038245][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1042.038265][ T5728] usb 4-1: Product: syz [ 1042.038274][ T5728] usb 4-1: SerialNumber: syz [ 1042.041109][ T5728] usb 4-1: config 0 descriptor?? [ 1042.118039][ T30] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1042.141236][ T30] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1042.141258][ T30] usb 3-1: Product: syz [ 1042.141267][ T30] usb 3-1: SerialNumber: syz [ 1042.158119][ T30] usb 3-1: config 0 descriptor?? [ 1042.419109][ T5728] usb 4-1: USB disconnect, device number 58 [ 1042.462350][T13770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13770 comm=syz.1.1800 [ 1042.480866][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'. [ 1042.512879][ T30] usb 3-1: USB disconnect, device number 65 [ 1043.044279][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 1043.148532][ T5689] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1043.197118][T13771] Invalid ELF header magic: != ELF [ 1043.294341][ T5689] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1043.349551][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1043.349584][ T5689] usb 2-1: Product: syz [ 1043.349624][ T5689] usb 2-1: SerialNumber: syz [ 1043.462587][ T5689] usb 2-1: config 0 descriptor?? [ 1043.852689][ T5689] usb 2-1: USB disconnect, device number 59 [ 1044.266841][T13710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1046.664335][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 1046.965650][ T31] audit: type=1400 audit(1789725520.531:435): avc: denied { bind } for pid=13809 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1047.002325][ T31] audit: type=1400 audit(1789725520.561:436): avc: denied { write } for pid=13809 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1047.075208][ T31] audit: type=1400 audit(1789725520.641:437): avc: denied { read } for pid=13809 comm="syz.0.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1047.401942][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1812'. [ 1048.068308][ T31] audit: type=1400 audit(1789725521.631:438): avc: denied { write } for pid=13821 comm="syz.1.1814" name="buffer_subbuf_size_kb" dev="tracefs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1048.565884][ T31] audit: type=1400 audit(1789725522.131:439): avc: denied { bind } for pid=13827 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1048.566873][ T31] audit: type=1400 audit(1789725522.131:440): avc: denied { setopt } for pid=13827 comm="syz.2.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1048.635061][ T31] audit: type=1400 audit(1789725522.201:441): avc: denied { read write } for pid=13826 comm="syz.4.1815" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1048.635276][ T31] audit: type=1400 audit(1789725522.201:442): avc: denied { open } for pid=13826 comm="syz.4.1815" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1048.669109][ T31] audit: type=1400 audit(1789725522.231:443): avc: denied { ioctl } for pid=13826 comm="syz.4.1815" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1048.854310][ T30] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1048.854671][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1048.854717][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.003933][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1049.007991][ T30] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 1049.008010][ T30] usb 3-1: config 0 has no interface number 0 [ 1049.008030][ T30] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1049.008045][ T30] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1049.008058][ T30] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1049.008072][ T30] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1049.012733][ T30] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1049.012765][ T30] usb 3-1: Product: syz [ 1049.012778][ T30] usb 3-1: Manufacturer: syz [ 1049.012791][ T30] usb 3-1: SerialNumber: syz [ 1049.102925][ T30] usb 3-1: config 0 descriptor?? [ 1049.143671][ T30] xpad 3-1:0.237: probe with driver xpad failed with error -5 [ 1049.471562][T13840] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1049.471729][T13840] CIFS: Attempting to mount //127.0.0.1/share [ 1049.623140][ T31] audit: type=1400 audit(1789725523.181:444): avc: denied { read write } for pid=13846 comm="syz.1.1821" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1049.720310][ T5609] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 1050.277746][T13848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.346169][T13840] CIFS: VFS: \\127.0.0.1 Er ** replaying previous printk message ** [ 1050.346169][T13840] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 1050.357391][T13840] ------------[ cut here ]------------ [ 1050.357406][T13840] server->in_flight == 0 [ 1050.357414][T13840] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#1: syz.0.1820/13840 [ 1050.390016][T13840] Modules linked in: [ 1050.394045][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.0.1820 Not tainted syzkaller #0 PREEMPT(full) [ 1050.403475][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1050.413607][T13840] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1050.419418][T13840] Code: c6 e8 01 6d b0 fe 84 db 0f 85 0a fb ff ff e8 e4 72 b0 fe 48 8d 3d dd d9 f0 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 ce 72 b0 fe 90 <0f> 0b 90 0f b6 05 87 53 d1 0d 31 ff 89 c6 88 44 24 28 e8 c6 6c b0 [ 1050.439313][T13840] RSP: 0000:ffffc9001aeb7208 EFLAGS: 00010287 [ 1050.446744][T13840] RAX: 00000000000041b2 RBX: ffff88807f1d8300 RCX: ffffc90006101000 [ 1050.455330][T13840] RDX: 0000000000080000 RSI: ffffffff835bace2 RDI: ffff88801f6f2580 [ 1050.463388][T13840] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1050.471371][T13840] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9001aeb7448 [ 1050.479396][T13840] R13: 0000000000000200 R14: 0000000000000001 R15: ffff88807f1d8000 [ 1050.487390][T13840] FS: 00007f64b2fa96c0(0000) GS:ffff888123c58000(0000) knlGS:0000000000000000 [ 1050.496344][T13840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1050.502927][T13840] CR2: 00007fb4c749fc10 CR3: 00000000755fe000 CR4: 00000000003526f0 [ 1050.512144][T13840] Call Trace: [ 1050.515804][T13840] [ 1050.518759][T13840] ? compound_send_recv+0xe70/0x2a10 [ 1050.524808][T13840] compound_send_recv+0x1030/0x2a10 [ 1050.530068][T13840] ? __pfx_compound_send_recv+0x10/0x10 [ 1050.535751][T13840] ? add_lock_to_list+0x9d/0x1d0 [ 1050.540715][T13840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1050.547310][T13840] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1050.552941][T13840] ? cifs_strtoUTF16+0x283/0x3e0 [ 1050.558237][T13840] ? find_held_lock+0x2b/0x80 [ 1050.562904][T13840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1050.568920][T13840] cifs_send_recv+0x43/0x60 [ 1050.573442][T13840] SMB2_negotiate+0x15c4/0x5380 [ 1050.578285][T13840] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1050.583513][T13840] ? preempt_schedule_thunk+0x16/0x40 [ 1050.588874][T13840] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1050.594645][T13840] cifs_negotiate_protocol+0x268/0x4c0 [ 1050.600125][T13840] cifs_get_smb_ses+0xfc9/0x2170 [ 1050.605139][T13840] cifs_mount_get_session+0xf8/0x460 [ 1050.610456][T13840] dfs_mount_share+0x200/0x1e20 [ 1050.615368][T13840] ? add_lock_to_list+0x9d/0x1d0 [ 1050.620303][T13840] ? check_prev_add+0x354/0xe60 [ 1050.625277][T13840] ? __pfx_dfs_mount_share+0x10/0x10 [ 1050.630559][T13840] ? __lock_acquire+0xe8b/0x1f40 [ 1050.635499][T13840] ? __debug_object_init+0x2de/0x3d0 [ 1050.640771][T13840] cifs_mount+0xc4/0xdb0 [ 1050.645034][T13840] ? find_held_lock+0x2b/0x80 [ 1050.650567][T13840] ? find_nls+0x125/0x170 [ 1050.655236][T13840] ? find_nls+0x125/0x170 [ 1050.659560][T13840] ? __pfx_cifs_mount+0x10/0x10 [ 1050.664438][T13840] ? do_raw_spin_unlock+0x145/0x1e0 [ 1050.669639][T13840] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1050.674835][T13840] cifs_smb3_do_mount+0x2c0/0x1b10 [ 1050.679930][T13840] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1050.686271][T13840] smb3_get_tree+0x1fd/0x440 [ 1050.690862][T13840] vfs_get_tree+0x92/0x320 [ 1050.695323][T13840] path_mount+0x7d0/0x24c0 [ 1050.699924][T13840] ? __pfx_path_mount+0x10/0x10 [ 1050.705128][T13840] ? lockdep_hardirqs_on+0x7d/0x110 [ 1050.710362][T13840] ? putname+0xb1/0x110 [ 1050.714692][T13840] ? kmem_cache_free+0x127/0x6c0 [ 1050.719629][T13840] ? __x64_sys_mount+0x293/0x310 [ 1050.724711][T13840] __x64_sys_mount+0x293/0x310 [ 1050.729464][T13840] ? __pfx___x64_sys_mount+0x10/0x10 [ 1050.734778][T13840] do_syscall_64+0x123/0x790 [ 1050.739369][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.745282][T13840] RIP: 0033:0x7f64b219e159 [ 1050.750746][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.770706][T13840] RSP: 002b:00007f64b2fa9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1050.779132][T13840] RAX: ffffffffffffffda RBX: 00007f64b2425fa0 RCX: 00007f64b219e159 [ 1050.787100][T13840] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 1050.795081][T13840] RBP: 00007f64b223506b R08: 0000000000000000 R09: 0000000000000000 [ 1050.803039][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1050.811024][T13840] R13: 00007f64b2426038 R14: 00007f64b2425fa0 R15: 00007ffddab9f6c8 [ 1050.819000][T13840] [ 1050.822010][T13840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1050.829323][T13840] CPU: 1 UID: 0 PID: 13840 Comm: syz.0.1820 Not tainted syzkaller #0 PREEMPT(full) [ 1050.838697][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1050.848764][T13840] Call Trace: [ 1050.852046][T13840] [ 1050.854985][T13840] dump_stack_lvl+0x100/0x190 [ 1050.859649][T13840] vpanic+0x553/0x970 [ 1050.863621][T13840] ? __pfx_vpanic+0x10/0x10 [ 1050.868109][T13840] panic+0xd1/0xe0 [ 1050.871821][T13840] ? __pfx_panic+0x10/0x10 [ 1050.876217][T13840] check_panic_on_warn.cold+0x19/0x34 [ 1050.881565][T13840] ? smb2_add_credits+0x1213/0x1790 [ 1050.886744][T13840] __warn.cold+0x191/0x318 [ 1050.891146][T13840] __report_bug+0x30f/0x440 [ 1050.897378][T13840] ? smb2_add_credits+0x1213/0x1790 [ 1050.902582][T13840] ? __pfx___report_bug+0x10/0x10 [ 1050.907601][T13840] ? __lock_acquire+0x5c0/0x1f40 [ 1050.912616][T13840] ? smb2_add_credits+0x1213/0x1790 [ 1050.917810][T13840] report_bug+0xb3/0x220 [ 1050.922051][T13840] ? smb2_add_credits+0x1213/0x1790 [ 1050.927232][T13840] handle_bug+0x16a/0x2a0 [ 1050.931537][T13840] exc_invalid_op+0x17/0x50 [ 1050.936026][T13840] asm_exc_invalid_op+0x1a/0x20 [ 1050.940864][T13840] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1050.946672][T13840] Code: c6 e8 01 6d b0 fe 84 db 0f 85 0a fb ff ff e8 e4 72 b0 fe 48 8d 3d dd d9 f0 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 ce 72 b0 fe 90 <0f> 0b 90 0f b6 05 87 53 d1 0d 31 ff 89 c6 88 44 24 28 e8 c6 6c b0 [ 1050.966266][T13840] RSP: 0000:ffffc9001aeb7208 EFLAGS: 00010287 [ 1050.972331][T13840] RAX: 00000000000041b2 RBX: ffff88807f1d8300 RCX: ffffc90006101000 [ 1050.980318][T13840] RDX: 0000000000080000 RSI: ffffffff835bace2 RDI: ffff88801f6f2580 [ 1050.988380][T13840] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1050.996341][T13840] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9001aeb7448 [ 1051.004292][T13840] R13: 0000000000000200 R14: 0000000000000001 R15: ffff88807f1d8000 [ 1051.012267][T13840] ? smb2_add_credits+0x1212/0x1790 [ 1051.017477][T13840] ? smb2_add_credits+0x1212/0x1790 [ 1051.022684][T13840] ? compound_send_recv+0xe70/0x2a10 [ 1051.027986][T13840] compound_send_recv+0x1030/0x2a10 [ 1051.033188][T13840] ? __pfx_compound_send_recv+0x10/0x10 [ 1051.038745][T13840] ? add_lock_to_list+0x9d/0x1d0 [ 1051.043675][T13840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1051.049553][T13840] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1051.055169][T13840] ? cifs_strtoUTF16+0x283/0x3e0 [ 1051.060089][T13840] ? find_held_lock+0x2b/0x80 [ 1051.064761][T13840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1051.070731][T13840] cifs_send_recv+0x43/0x60 [ 1051.075230][T13840] SMB2_negotiate+0x15c4/0x5380 [ 1051.080072][T13840] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1051.085255][T13840] ? preempt_schedule_thunk+0x16/0x40 [ 1051.090609][T13840] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1051.096226][T13840] cifs_negotiate_protocol+0x268/0x4c0 [ 1051.101681][T13840] cifs_get_smb_ses+0xfc9/0x2170 [ 1051.106916][T13840] cifs_mount_get_session+0xf8/0x460 [ 1051.112216][T13840] dfs_mount_share+0x200/0x1e20 [ 1051.117071][T13840] ? add_lock_to_list+0x9d/0x1d0 [ 1051.121990][T13840] ? check_prev_add+0x354/0xe60 [ 1051.126830][T13840] ? __pfx_dfs_mount_share+0x10/0x10 [ 1051.132144][T13840] ? __lock_acquire+0xe8b/0x1f40 [ 1051.137072][T13840] ? __debug_object_init+0x2de/0x3d0 [ 1051.142342][T13840] cifs_mount+0xc4/0xdb0 [ 1051.146567][T13840] ? find_held_lock+0x2b/0x80 [ 1051.151223][T13840] ? find_nls+0x125/0x170 [ 1051.155531][T13840] ? find_nls+0x125/0x170 [ 1051.159841][T13840] ? __pfx_cifs_mount+0x10/0x10 [ 1051.164676][T13840] ? do_raw_spin_unlock+0x145/0x1e0 [ 1051.169853][T13840] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1051.175050][T13840] cifs_smb3_do_mount+0x2c0/0x1b10 [ 1051.180139][T13840] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1051.185661][T13840] smb3_get_tree+0x1fd/0x440 [ 1051.190235][T13840] vfs_get_tree+0x92/0x320 [ 1051.194631][T13840] path_mount+0x7d0/0x24c0 [ 1051.199039][T13840] ? __pfx_path_mount+0x10/0x10 [ 1051.203870][T13840] ? lockdep_hardirqs_on+0x7d/0x110 [ 1051.209056][T13840] ? putname+0xb1/0x110 [ 1051.213192][T13840] ? kmem_cache_free+0x127/0x6c0 [ 1051.218124][T13840] ? __x64_sys_mount+0x293/0x310 [ 1051.223051][T13840] __x64_sys_mount+0x293/0x310 [ 1051.227794][T13840] ? __pfx___x64_sys_mount+0x10/0x10 [ 1051.233060][T13840] do_syscall_64+0x123/0x790 [ 1051.237630][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.243499][T13840] RIP: 0033:0x7f64b219e159 [ 1051.247888][T13840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.267475][T13840] RSP: 002b:00007f64b2fa9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1051.276058][T13840] RAX: ffffffffffffffda RBX: 00007f64b2425fa0 RCX: 00007f64b219e159 [ 1051.284459][T13840] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 1051.292412][T13840] RBP: 00007f64b223506b R08: 0000000000000000 R09: 0000000000000000 [ 1051.300361][T13840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.308307][T13840] R13: 00007f64b2426038 R14: 00007f64b2425fa0 R15: 00007ffddab9f6c8 [ 1051.316271][T13840] [ 1051.319480][T13840] Kernel Offset: disabled [ 1051.323795][T13840] Rebooting in 86400 seconds..