last executing test programs: 6.88426623s ago: executing program 1 (id=1951): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x80000000000007d, 0x700000000000000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000440)="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"}) 6.645696874s ago: executing program 0 (id=1954): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000001c0)=0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = fsopen(&(0x7f0000000300)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = open$dir(0x0, 0x32800, 0x6) mkdirat(r5, 0x0, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 6.606823428s ago: executing program 1 (id=1955): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1) 6.458745193s ago: executing program 0 (id=1958): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf25037c000006000780fd2e0000abc9000627af9b988fb4823f447a6c1aa77251f1a869504586978e629b92e62b1e0fb2fe555dc5780051e273af9bdf888b15ab9dfa0b"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x133}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000300)={0xffffffffffffffff, 0x800, 0x80}) 6.442057845s ago: executing program 1 (id=1959): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, &(0x7f00000000c0)) clock_gettime(0x7, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1df) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(0x0, 0x2) write(r3, &(0x7f00000005c0)='0', 0x1) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') execve(0x0, &(0x7f00000004c0)={[&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000740)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84', &(0x7f0000000440)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84']}, &(0x7f00000006c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3141, 0x0) syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xced4386425e525ff}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0010002cbd7000fcdbdf250220000afe0118b2503f5c996baafa221efd0b00240000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x808) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a0000300003000000019078ac1414bbac1e0001861300f52300020d83b0d240dc5fa3f2ae00"], 0x0) 5.442151586s ago: executing program 1 (id=1961): sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000000d000)=""/102368, 0x18fe0) io_submit(0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000500)={0xf, {"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", 0x1000}}, 0x1006) 5.40814811s ago: executing program 0 (id=1963): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$binderfs_log(0xffffff9c, &(0x7f0000000400)='./binderfs/binder_logs/state\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 5.198022631s ago: executing program 0 (id=1966): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000840)=@newtaction={0x338, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x324, 0x1, [@m_xt={0x320, 0x7, 0x0, 0x0, {{0x7}, {0x208, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x2, 'filter\x00', 0x7, 0x1, "307da635f693136f7580e53221c834f1ef17e80295efbff212e2337f2833c74ee218ae44cddfa18eea"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x122, 0x6, {0x6, 'nat\x00', 0x9, 0xffff, "f4d9bd601456e7c844bc4007dd9fe5796d71e664abefbf86046a65fb8d1c52872bb75393dbd51f00415c29518f22794aac68f3d5fce7ca898c117fde2db0c9d6008e643da6df8b4a383cfa3dd0c0ec4c98447143a36acb12fe56824db5abb79cf482cd902e9850f2d18fdf2cdf99162de853f38bff8f9d1a1efb9fe6930656cbe522a498ee077eebfe51d778b7392e2c7ea7612f07d2cb9780c8de573279938c2126b0eeab40a3e3e44cf11fcd9bef9d9a0f2a605174bb1d6abc0ef1978c0b6652a4cc7eb90d4f7b836d34e1cf3583b6b49f4a96029822fc274ed3882177fb2176184c0d3d076deb5b2cea325f07c52cac9cbb6d15950309"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}]}, {0xf1, 0x6, "3f723a9ea127ccea59ae7735997db633bb2ab4631af9ca34b5a8bd2488bfadb111287008d812fecf6ac358d5f534fd7bd1ba78848882e16cdcff63286f39f3afb321fd7dd1bcf01629053e96420b74ba1fbc9d7a8d9184993d2fcd8d9e8f4f769663702da5a99d9d2c4519bd61d23084e4043fe932366b305038bff078e77bfcf5aa29f8caf1e1f63d1823f636b03b0b56a108dcdc744669ab08e1cb538c3c5bbf9a0672bebc58aa6491aba64fdecd1e83c26feeadacdf71574c14b82e36d82889169c7d3fd97cf9abc597ede3631a7a41cc360e6f8fcb4afd5f4c6e71e1c9813399ead72c31d68cf99b1b465d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x39, 0xfff, 0xc84c, 0x40000000000180, 0x100000000, 0x4, 0x8, 0xd, 0x1, 0x0, 0x7, 0x7, 0x712f, 0x470ab5f9, 0x10000, 0x7], 0xeeef0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000060000003600000001000080018200ec64e1fbb8dbb6b9809feebdbbc6f79c7bee8d58636558b3dfbb145366f0fa70ecaf7dcad90d93", @ANYRES32=0x1, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000800"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), 0x0) 4.938940488s ago: executing program 2 (id=1970): sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 4.693764193s ago: executing program 2 (id=1974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000180)="03000000000000000100000002000000000000000100000000000000ffffff") 3.608570372s ago: executing program 2 (id=1975): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xd) r1 = open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201002) 3.219845062s ago: executing program 0 (id=1977): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000000000002f6ffffff09"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0xc00, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000006c0), 0x10) read(r2, &(0x7f0000000700)=""/135, 0x87) sendmsg$can_bcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/disk', 0x0, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r6) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d80)={0x14, r7, 0x422, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24048880}, 0x20000850) sendfile(0xffffffffffffffff, r6, &(0x7f0000000dc0)=0x1, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) pipe2(&(0x7f0000000100), 0x0) 2.811007734s ago: executing program 0 (id=1981): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000100)={0x40, 0x8, 0x8, "003cb3a4aa50323f"}, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000140)={0x20, 0x3, 0x4, "348b8fae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000540)=""/99, 0x63) read$char_usb(r1, 0x0, 0x0) 2.74999384s ago: executing program 4 (id=1983): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, &(0x7f00000000c0)) clock_gettime(0x7, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1df) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) write(r3, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') execve(0x0, &(0x7f00000004c0)={[&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000740)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84', &(0x7f0000000440)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84']}, &(0x7f00000006c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3141, 0x0) syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xced4386425e525ff}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0010002cbd7000fcdbdf250220000afe0118b2503f5c996baafa221efd0b00240000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x808) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a0000300003000000019078ac1414bbac1e0001861300f52300020d83b0d240dc5fa3f2ae00"], 0x0) 2.591590776s ago: executing program 2 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./nfsd\x00', &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000580)='tcp 2', 0x5) 2.436655912s ago: executing program 4 (id=1985): bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000400)=0x36be4, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r2, 0x84, 0x24, &(0x7f0000000180), 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) open(0x0, 0x148640, 0x78e22799f4a46eaf) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 2.391323176s ago: executing program 3 (id=1986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.272165559s ago: executing program 2 (id=1987): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000840)=@newtaction={0x338, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x324, 0x1, [@m_xt={0x320, 0x7, 0x0, 0x0, {{0x7}, {0x208, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x2, 'filter\x00', 0x7, 0x1, "307da635f693136f7580e53221c834f1ef17e80295efbff212e2337f2833c74ee218ae44cddfa18eea"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x122, 0x6, {0x6, 'nat\x00', 0x9, 0xffff, "f4d9bd601456e7c844bc4007dd9fe5796d71e664abefbf86046a65fb8d1c52872bb75393dbd51f00415c29518f22794aac68f3d5fce7ca898c117fde2db0c9d6008e643da6df8b4a383cfa3dd0c0ec4c98447143a36acb12fe56824db5abb79cf482cd902e9850f2d18fdf2cdf99162de853f38bff8f9d1a1efb9fe6930656cbe522a498ee077eebfe51d778b7392e2c7ea7612f07d2cb9780c8de573279938c2126b0eeab40a3e3e44cf11fcd9bef9d9a0f2a605174bb1d6abc0ef1978c0b6652a4cc7eb90d4f7b836d34e1cf3583b6b49f4a96029822fc274ed3882177fb2176184c0d3d076deb5b2cea325f07c52cac9cbb6d15950309"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8}]}, {0xf1, 0x6, "3f723a9ea127ccea59ae7735997db633bb2ab4631af9ca34b5a8bd2488bfadb111287008d812fecf6ac358d5f534fd7bd1ba78848882e16cdcff63286f39f3afb321fd7dd1bcf01629053e96420b74ba1fbc9d7a8d9184993d2fcd8d9e8f4f769663702da5a99d9d2c4519bd61d23084e4043fe932366b305038bff078e77bfcf5aa29f8caf1e1f63d1823f636b03b0b56a108dcdc744669ab08e1cb538c3c5bbf9a0672bebc58aa6491aba64fdecd1e83c26feeadacdf71574c14b82e36d82889169c7d3fd97cf9abc597ede3631a7a41cc360e6f8fcb4afd5f4c6e71e1c9813399ead72c31d68cf99b1b465d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x39, 0xfff, 0xc84c, 0x40000000000180, 0x100000000, 0x4, 0x8, 0xd, 0x1, 0x0, 0x7, 0x7, 0x712f, 0x470ab5f9, 0x10000, 0x7], 0xeeef0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000060000003600000001000080018200ec64e1fbb8dbb6b9809feebdbbc6f79c7bee8d58636558b3dfbb145366f0fa70ecaf7dcad90d93", @ANYRES32=0x1, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000005000000020000000800"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000140)=0x1c, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), 0x0) 1.918080755s ago: executing program 3 (id=1988): mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000015c0)={0x100}, 0x30, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x404, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677200000000000000ddce93d4874d3258b95fad6824525fe5c0566425faef1890a9c8ab6f6f4e217e540d0e0f2dee495bf0638af33e67923254", @ANYRESDEC=0x0, @ANYBLOB="0300"]) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x200000, 0x0) syz_create_resource$futex(&(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getpgrp(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) munlockall() r4 = syz_open_dev$mouse(&(0x7f0000000300), 0x7f, 0x200500) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000004, 0x1000008, 0x13, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) unshare(0x20040600) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='0', 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000001780)={0x100, r2}, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.746386592s ago: executing program 3 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf25037c000006000780fd2e0000abc9000627af9b988fb4823f447a6c1aa77251f1a869504586978e629b92e62b1e0fb2fe555dc5780051e273af9bdf888b15ab9dfa0bd18d2033204351be6c29d26cb5a08006d03e95927795b9a90fa63496cb5d3a2b7b785f23b04057ed22"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x133}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000300)={0xffffffffffffffff, 0x800, 0x80}) 718.621166ms ago: executing program 4 (id=1990): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000440)="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"}) 560.390293ms ago: executing program 4 (id=1991): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000f40)={0x4, 0x0, 0x0, 0x178, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, {0x800, @stats_create={'@stats_create ', '1024+4096', 0x20, '1', ' 1 histogram:10,100,1000'}}}) 386.75718ms ago: executing program 3 (id=1992): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50", 0x2b}], 0x1) 367.637442ms ago: executing program 4 (id=1993): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000000000002f6ffffff09"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0xc00, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000006c0), 0x10) read(r2, &(0x7f0000000700)=""/135, 0x87) sendmsg$can_bcm(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1e"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/disk', 0x0, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r6) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d80)={0x14, r7, 0x422, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x24048880}, 0x20000850) sendfile(0xffffffffffffffff, r6, &(0x7f0000000dc0)=0x1, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) pipe2(&(0x7f0000000100), 0x0) 285.514721ms ago: executing program 1 (id=1994): sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 236.454946ms ago: executing program 3 (id=1995): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x9, 0x0, &(0x7f00000000c0)) clock_gettime(0x7, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x403, 0x1ffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1df) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uac2.0/p_chmask\x00', 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) write(r3, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') execve(0x0, &(0x7f00000004c0)={[&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000740)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84', &(0x7f0000000440)='%]:-%0j\x92\x80\xf0\x91\x87\\\x84']}, &(0x7f00000006c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c3141, 0x0) syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xced4386425e525ff}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001a0010002cbd7000fcdbdf250220000afe0118b2503f5c996baafa221efd0b00240000"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x808) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a0000300003000000019078ac1414bbac1e0001861300f52300020d83b0d240dc5fa3f2ae00"], 0x0) 140.469455ms ago: executing program 2 (id=1996): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000001c0)=0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r4 = fsopen(&(0x7f0000000300)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = open$dir(0x0, 0x32800, 0x6) mkdirat(r5, &(0x7f0000000140)='./file0\x00', 0x80) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 57.458344ms ago: executing program 4 (id=1997): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./nfsd\x00', &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000580)='tcp 2', 0x5) 10.203329ms ago: executing program 1 (id=1998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 0s ago: executing program 3 (id=1999): mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000015c0)={0x100}, 0x30, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x404, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRES64=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c677200000000000000ddce93d4874d3258b95fad6824525fe5c0566425faef1890a9c8ab6f6f4e217e540d0e0f2dee495bf0638af33e67923254", @ANYRESDEC=0x0, @ANYBLOB="0300"]) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', 0x200000, 0x0) syz_create_resource$futex(&(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getpgrp(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) munlockall() r4 = syz_open_dev$mouse(&(0x7f0000000300), 0x7f, 0x200500) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000004, 0x1000008, 0x13, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) unshare(0x20040600) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='0', 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000001780)={0x100, r2}, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): subj=unconfined op=collect_data cause=failed comm="syz.0.1213" name="p_chmask" dev="configfs" ino=53089 res=0 errno=0 [ 288.379276][ T26] audit: type=1800 audit(1794098772.767:167): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1213" name="UDC" dev="configfs" ino=53106 res=0 errno=0 [ 289.065519][ T8507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.071776][ T8507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.077777][ T8507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.084057][ T8507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.091477][ T8507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.374082][ T34] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 289.395511][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 289.540043][ T4332] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 289.604535][ T34] usb 4-1: config 0 has no interfaces? [ 289.625309][ T34] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 289.716341][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.806187][ T34] usb 4-1: Product: syz [ 289.856658][ T34] usb 4-1: Manufacturer: syz [ 289.895590][ T34] usb 4-1: SerialNumber: syz [ 289.989109][ T34] usb 4-1: config 0 descriptor?? [ 290.390063][ T4332] usb 3-1: Using ep0 maxpacket: 16 [ 290.398107][ T4332] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 290.417796][ T4332] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 290.447455][ T4332] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 290.477768][ T4332] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.510508][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.587635][ T4332] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 290.668585][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.754585][ T4332] usb 3-1: Product: Ђ [ 290.797082][ T4332] usb 3-1: Manufacturer: 䐊 [ 290.841764][ T4332] usb 3-1: SerialNumber: ☷ [ 291.150494][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.150492][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.150528][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.168940][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.331419][ T8537] input: syz1 as /devices/virtual/input/input20 [ 291.516092][ T4332] usb 3-1: USB disconnect, device number 12 [ 291.623239][ T26] audit: type=1800 audit(1794098776.017:168): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1228" name="p_chmask" dev="configfs" ino=53605 res=0 errno=0 [ 291.627545][ T8564] ip_tables: iptables: counters copy to user failed while replacing table [ 291.674750][ T26] audit: type=1800 audit(1794098776.017:169): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1228" name="UDC" dev="configfs" ino=53606 res=0 errno=0 [ 291.725773][ T7] usb 4-1: USB disconnect, device number 11 [ 292.609717][ T26] audit: type=1800 audit(1794098776.997:170): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1233" name="p_chmask" dev="configfs" ino=53659 res=0 errno=0 [ 292.694758][ T26] audit: type=1800 audit(1794098777.087:171): pid=8588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1233" name="UDC" dev="configfs" ino=53232 res=0 errno=0 [ 292.701558][ T8588] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 292.727963][ T8588] udc dummy_udc.0: failed to start g1: -19 [ 292.738980][ T8588] UDC core: g1: couldn't find an available UDC or it's busy [ 292.901658][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 292.924751][ T8573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.942768][ T8573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.974035][ T8573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.034416][ T8573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.096028][ T8573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.798799][ T26] audit: type=1800 audit(1794098778.187:172): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1241" name="p_chmask" dev="configfs" ino=53682 res=0 errno=0 [ 293.825950][ T8604] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 293.884821][ T8604] udc dummy_udc.0: failed to start g1: -19 [ 293.886606][ T8610] ip_tables: iptables: counters copy to user failed while replacing table [ 293.906300][ T26] audit: type=1800 audit(1794098778.217:173): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1241" name="UDC" dev="configfs" ino=54302 res=0 errno=0 [ 293.930550][ T8604] UDC core: g1: couldn't find an available UDC or it's busy [ 294.170054][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 294.240611][ T5569] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.359995][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.470151][ T5569] usb 2-1: Using ep0 maxpacket: 16 [ 294.484810][ T5569] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 294.583311][ T5569] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 294.674342][ T5569] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.747666][ T5569] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.812126][ T5569] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 294.826456][ T5569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.970618][ T5569] usb 2-1: Product: Ђ [ 294.982989][ T7] usb 3-1: config 0 has no interfaces? [ 294.985366][ T5569] usb 2-1: Manufacturer: 䐊 [ 294.990163][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.999440][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 295.007829][ T7] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 295.017067][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.025182][ T7] usb 3-1: Product: syz [ 295.029454][ T7] usb 3-1: Manufacturer: syz [ 295.034117][ T7] usb 3-1: SerialNumber: syz [ 295.040639][ T7] usb 3-1: config 0 descriptor?? [ 295.070029][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.124515][ T5569] usb 2-1: SerialNumber: ☷ [ 295.232642][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 295.489076][ T8613] input: syz1 as /devices/virtual/input/input21 [ 295.626901][ T5569] usb 2-1: USB disconnect, device number 16 [ 296.193081][ T26] audit: type=1800 audit(1794098780.587:174): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1250" name="p_chmask" dev="configfs" ino=54367 res=0 errno=0 [ 296.195490][ T8646] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 296.244154][ T26] audit: type=1800 audit(1794098780.587:175): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1250" name="UDC" dev="configfs" ino=54368 res=0 errno=0 [ 296.245158][ T8646] udc dummy_udc.0: failed to start g1: -19 [ 296.303632][ T8646] UDC core: g1: couldn't find an available UDC or it's busy [ 296.517306][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 296.554855][ T26] audit: type=1800 audit(1794098780.947:176): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1254" name="p_chmask" dev="configfs" ino=54383 res=0 errno=0 [ 296.711384][ T26] audit: type=1800 audit(1794098781.097:177): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1254" name="UDC" dev="configfs" ino=54387 res=0 errno=0 [ 296.755130][ T8663] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 296.871922][ T8663] udc dummy_udc.0: failed to start g1: -19 [ 297.172529][ T8663] UDC core: g1: couldn't find an available UDC or it's busy [ 297.310767][ T8656] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 297.341062][ T8665] ip_tables: iptables: counters copy to user failed while replacing table [ 297.358090][ T7] usb 3-1: USB disconnect, device number 13 [ 297.366259][ T8656] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.372693][ T8656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.379835][ T8656] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.386331][ T8656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.590106][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 298.880123][ T4347] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 299.031509][ T26] audit: type=1800 audit(1794098783.427:178): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1263" name="p_chmask" dev="configfs" ino=53923 res=0 errno=0 [ 299.033566][ T8699] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 299.058628][ T26] audit: type=1800 audit(1794098783.427:179): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1263" name="UDC" dev="configfs" ino=53924 res=0 errno=0 [ 299.085035][ T4347] usb 3-1: Using ep0 maxpacket: 16 [ 299.091500][ T8699] udc dummy_udc.0: failed to start g1: -19 [ 299.097751][ T8699] UDC core: g1: couldn't find an available UDC or it's busy [ 299.103468][ T4347] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 299.152568][ T4347] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 299.187028][ T4347] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 299.204760][ T4347] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.246063][ T4347] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 299.268945][ T4347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.281308][ T4347] usb 3-1: Product: Ђ [ 299.285780][ T4347] usb 3-1: Manufacturer: 䐊 [ 299.291423][ T4347] usb 3-1: SerialNumber: ☷ [ 299.390121][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.396231][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.402386][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 299.402408][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.527377][ T8690] input: syz1 as /devices/virtual/input/input22 [ 299.563131][ T4347] usb 3-1: USB disconnect, device number 14 [ 299.710107][ T4332] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 299.835288][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 300.129077][ T4332] usb 2-1: config 0 has no interfaces? [ 300.402311][ T8713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 300.438453][ T8713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 300.512973][ T8713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 300.563346][ T8713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 300.622134][ T8713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.639347][ T4332] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 300.651525][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.659550][ T4332] usb 2-1: Product: syz [ 300.664168][ T4332] usb 2-1: Manufacturer: syz [ 300.669067][ T4332] usb 2-1: SerialNumber: syz [ 300.683360][ T4332] usb 2-1: config 0 descriptor?? [ 300.849113][ T26] audit: type=1800 audit(1794098785.237:180): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1270" name="p_chmask" dev="configfs" ino=54486 res=0 errno=0 [ 300.870442][ T8725] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 300.877360][ T8725] udc dummy_udc.0: failed to start g1: -19 [ 300.892829][ T8725] UDC core: g1: couldn't find an available UDC or it's busy [ 300.904653][ T26] audit: type=1800 audit(1794098785.237:181): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1270" name="UDC" dev="configfs" ino=54487 res=0 errno=0 [ 300.936827][ T8725] ip_tables: iptables: counters copy to user failed while replacing table [ 301.710134][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 302.225031][ T26] audit: type=1800 audit(1794098786.617:182): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1277" name="p_chmask" dev="configfs" ino=54054 res=0 errno=0 [ 302.254068][ T8751] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 302.280287][ T8751] udc dummy_udc.0: failed to start g1: -19 [ 302.302659][ T8751] UDC core: g1: couldn't find an available UDC or it's busy [ 302.304277][ T26] audit: type=1800 audit(1794098786.647:183): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1277" name="UDC" dev="configfs" ino=54055 res=0 errno=0 [ 302.482426][ T7] usb 2-1: USB disconnect, device number 17 [ 302.510462][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 302.590438][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.590486][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.670266][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 302.890125][ T5569] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 302.938492][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 303.080014][ T5569] usb 3-1: Using ep0 maxpacket: 16 [ 303.781246][ T5569] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 303.790024][ T5569] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 303.800590][ T5569] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 303.809584][ T5569] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.832079][ T5569] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 303.860036][ T5569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.868102][ T5569] usb 3-1: Product: Ђ [ 303.872329][ T5569] usb 3-1: Manufacturer: 䐊 [ 303.877092][ T5569] usb 3-1: SerialNumber: ☷ [ 303.960591][ T26] audit: type=1800 audit(1794098788.357:184): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1285" name="p_chmask" dev="configfs" ino=54091 res=0 errno=0 [ 304.016492][ T26] audit: type=1800 audit(1794098788.407:185): pid=8782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1285" name="UDC" dev="configfs" ino=54548 res=0 errno=0 [ 304.017085][ T8782] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 304.070211][ T8782] udc dummy_udc.0: failed to start g1: -19 [ 304.078676][ T8785] ip_tables: iptables: counters copy to user failed while replacing table [ 304.089491][ T8782] UDC core: g1: couldn't find an available UDC or it's busy [ 304.721392][ T8776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.727501][ T8776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.741213][ T8776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.747631][ T8776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.762310][ T8776] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.799420][ T5569] usb 3-1: USB disconnect, device number 15 [ 305.107384][ T26] audit: type=1800 audit(1794098789.497:186): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1290" name="p_chmask" dev="configfs" ino=54130 res=0 errno=0 [ 305.145585][ T8802] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 305.236247][ T8802] udc dummy_udc.0: failed to start g1: -19 [ 305.299048][ T26] audit: type=1800 audit(1794098789.527:187): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1290" name="UDC" dev="configfs" ino=54131 res=0 errno=0 [ 305.390027][ T5569] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 305.407632][ T8802] UDC core: g1: couldn't find an available UDC or it's busy [ 306.030253][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.141553][ T5569] usb 2-1: config 0 has no interfaces? [ 306.149811][ T5569] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 306.188190][ T5569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.203394][ T5569] usb 2-1: Product: syz [ 306.210673][ T5569] usb 2-1: Manufacturer: syz [ 306.217917][ T5569] usb 2-1: SerialNumber: syz [ 306.226913][ T5569] usb 2-1: config 0 descriptor?? [ 306.276333][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 307.084126][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.084730][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 307.090193][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.090219][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.567381][ T26] audit: type=1800 audit(1794098791.957:188): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1299" name="p_chmask" dev="configfs" ino=54211 res=0 errno=0 [ 307.596092][ T8844] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 307.620167][ T26] audit: type=1800 audit(1794098791.987:189): pid=8844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1299" name="UDC" dev="configfs" ino=54212 res=0 errno=0 [ 307.627278][ T8844] udc dummy_udc.0: failed to start g1: -19 [ 307.656324][ T8844] UDC core: g1: couldn't find an available UDC or it's busy [ 307.701521][ T8845] ip_tables: iptables: counters copy to user failed while replacing table [ 308.037804][ T8851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.064031][ T8851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.086578][ T8851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.103061][ T8851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.106555][ T5569] usb 2-1: USB disconnect, device number 18 [ 308.109138][ T8851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.460087][ T4349] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 308.650016][ T4349] usb 1-1: Using ep0 maxpacket: 16 [ 308.658487][ T4349] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 308.667953][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 308.707733][ T4349] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 308.754479][ T4349] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.328241][ T26] audit: type=1800 audit(1794098793.717:190): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1312" name="p_chmask" dev="configfs" ino=55313 res=0 errno=0 [ 309.344537][ T8880] ip_tables: iptables: counters copy to user failed while replacing table [ 309.480386][ T4349] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.498149][ T4349] usb 1-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 309.507320][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.513071][ T26] audit: type=1800 audit(1794098793.717:191): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1312" name="UDC" dev="configfs" ino=55314 res=0 errno=0 [ 309.515711][ T4349] usb 1-1: Product: Ђ [ 309.539784][ T4349] usb 1-1: Manufacturer: 䐊 [ 309.544931][ T4349] usb 1-1: SerialNumber: ☷ [ 310.030128][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.120173][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.126305][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.126328][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.195754][ T8856] input: syz1 as /devices/virtual/input/input23 [ 310.203084][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.616868][ T5569] usb 1-1: USB disconnect, device number 11 [ 310.880177][ T34] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 311.097399][ T34] usb 4-1: config 0 has no interfaces? [ 311.148238][ T34] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 311.168156][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.186490][ T34] usb 4-1: Product: syz [ 311.194577][ T34] usb 4-1: Manufacturer: syz [ 311.199592][ T34] usb 4-1: SerialNumber: syz [ 311.217155][ T34] usb 4-1: config 0 descriptor?? [ 311.286219][ T8913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.370428][ T8913] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.407214][ T8913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.453177][ T26] audit: type=1800 audit(1794098795.847:192): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1323" name="p_chmask" dev="configfs" ino=54962 res=0 errno=0 [ 311.510469][ T8913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.524304][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 311.536324][ T26] audit: type=1800 audit(1794098795.927:193): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1323" name="UDC" dev="configfs" ino=54963 res=0 errno=0 [ 311.559557][ T8925] ip_tables: iptables: counters copy to user failed while replacing table [ 311.567003][ T8913] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 313.310051][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.400245][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 313.470054][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 313.550318][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.598367][ T4398] usb 4-1: USB disconnect, device number 12 [ 313.630009][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 313.755605][ T26] audit: type=1800 audit(1794098798.147:194): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1335" name="p_chmask" dev="configfs" ino=55011 res=0 errno=0 [ 313.780263][ T8957] ip_tables: iptables: counters copy to user failed while replacing table [ 313.814031][ T26] audit: type=1800 audit(1794098798.167:195): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1335" name="UDC" dev="configfs" ino=55012 res=0 errno=0 [ 313.865766][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1336'. [ 313.981400][ T26] audit: type=1800 audit(1794098798.377:196): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1337" name="zoned" dev="configfs" ino=55583 res=0 errno=0 [ 314.080090][ T34] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 314.892544][ T26] audit: type=1800 audit(1794098798.377:197): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1337" name="power" dev="configfs" ino=55584 res=0 errno=0 [ 315.029977][ T34] usb 3-1: Using ep0 maxpacket: 16 [ 315.126962][ T34] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 315.150066][ T34] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 315.172030][ T34] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 315.281510][ T8977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.474122][ T8977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.557080][ T8977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.604741][ T8977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.682909][ T8977] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.697383][ T34] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.716679][ T34] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 315.726138][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.734251][ T34] usb 3-1: Product: Ђ [ 315.738341][ T34] usb 3-1: Manufacturer: 䐊 [ 315.753043][ T34] usb 3-1: SerialNumber: ☷ [ 316.031899][ T8962] input: syz1 as /devices/virtual/input/input24 [ 316.735834][ T4398] usb 3-1: USB disconnect, device number 16 [ 316.994204][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.000611][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.018427][ T9008] ip_tables: iptables: counters copy to user failed while replacing table [ 317.133383][ T7] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 317.342016][ T7] usb 5-1: config 0 has no interfaces? [ 317.349830][ T7] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 317.374587][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 317.378147][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.396958][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.403400][ T7] usb 5-1: Product: syz [ 317.407591][ T7] usb 5-1: Manufacturer: syz [ 317.417136][ T7] usb 5-1: SerialNumber: syz [ 317.432818][ T7] usb 5-1: config 0 descriptor?? [ 317.550105][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.556217][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 317.630172][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.743235][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 318.663815][ T9039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.853970][ T9039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 319.101169][ T9039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.260506][ T9039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.296045][ T9039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.449486][ T9053] ip_tables: iptables: counters copy to user failed while replacing table [ 319.780045][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 319.914541][ T34] usb 5-1: USB disconnect, device number 17 [ 320.182334][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1367'. [ 320.361424][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 320.371745][ T7] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 320.380676][ T7] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 320.403164][ T7] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 320.419718][ T7] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.528662][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 320.574828][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.620017][ T7] usb 3-1: Product: Ђ [ 320.632669][ T7] usb 3-1: Manufacturer: 䐊 [ 320.651409][ T7] usb 3-1: SerialNumber: ☷ [ 320.669996][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.910044][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 321.150031][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 321.310037][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 321.316696][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 321.683660][ T9056] input: syz1 as /devices/virtual/input/input25 [ 321.738350][ T9094] ip_tables: iptables: counters copy to user failed while replacing table [ 321.789691][ T34] usb 3-1: USB disconnect, device number 17 [ 322.012750][ T26] audit: type=1800 audit(1794098806.407:198): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1376" name="p_chmask" dev="configfs" ino=55913 res=0 errno=0 [ 322.080160][ T26] audit: type=1800 audit(1794098806.437:199): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1376" name="UDC" dev="configfs" ino=55914 res=0 errno=0 [ 322.332160][ T9111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.342333][ T9111] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 322.358471][ T9111] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 322.417756][ T9111] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.446920][ T9111] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.755319][ T4347] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 323.151639][ T4347] usb 1-1: config 0 has no interfaces? [ 323.159423][ T4347] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 323.187064][ T4347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.200454][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 323.219268][ T4347] usb 1-1: Product: syz [ 323.225274][ T4347] usb 1-1: Manufacturer: syz [ 323.246029][ T4347] usb 1-1: SerialNumber: syz [ 323.259335][ T4347] usb 1-1: config 0 descriptor?? [ 324.253869][ T9145] ip_tables: iptables: counters copy to user failed while replacing table [ 324.345710][ T26] audit: type=1800 audit(1794098808.737:200): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1388" name="p_chmask" dev="configfs" ino=56437 res=0 errno=0 [ 324.350154][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 324.372555][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 324.378576][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.430140][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 324.440233][ T26] audit: type=1800 audit(1794098808.777:201): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1388" name="UDC" dev="configfs" ino=56438 res=0 errno=0 [ 324.510093][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 324.880100][ T4347] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 325.220793][ T4347] usb 2-1: Using ep0 maxpacket: 16 [ 325.229530][ T4347] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 325.300971][ T4347] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 325.372681][ T4347] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.390072][ T4347] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.481705][ T5569] usb 1-1: USB disconnect, device number 12 [ 325.490682][ T4347] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 325.518631][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.527183][ T4347] usb 2-1: Product: Ђ [ 325.531471][ T4347] usb 2-1: Manufacturer: 䐊 [ 325.536158][ T4347] usb 2-1: SerialNumber: ☷ [ 325.730623][ T9176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.742112][ T9176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.781008][ T9176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.788725][ T9176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.803279][ T9176] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.823863][ T5569] usb 2-1: USB disconnect, device number 19 [ 325.899439][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 326.959871][ T9191] ip_tables: iptables: counters copy to user failed while replacing table [ 327.207202][ T26] audit: type=1800 audit(1794098811.597:202): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1403" name="p_chmask" dev="configfs" ino=56178 res=0 errno=0 [ 327.309073][ T26] audit: type=1800 audit(1794098811.667:203): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1403" name="UDC" dev="configfs" ino=56179 res=0 errno=0 [ 327.800752][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.806849][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.813940][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.820011][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.870017][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 327.900023][ T4347] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 328.139841][ T4347] usb 2-1: config 0 has no interfaces? [ 328.156151][ T4347] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 328.205759][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.224659][ T4347] usb 2-1: Product: syz [ 328.228945][ T4347] usb 2-1: Manufacturer: syz [ 328.235814][ T4347] usb 2-1: SerialNumber: syz [ 328.268532][ T4347] usb 2-1: config 0 descriptor?? [ 328.407428][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 328.570054][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 328.770093][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 328.778021][ T7] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 328.803836][ T7] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 329.360701][ T9236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.387600][ T9236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.412563][ T9236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.436215][ T9236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.461107][ T9236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.693046][ T7] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 329.702870][ T7] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.721731][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 329.730990][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.743253][ T7] usb 3-1: Product: Ђ [ 329.747446][ T7] usb 3-1: Manufacturer: 䐊 [ 329.765440][ T7] usb 3-1: SerialNumber: ☷ [ 329.844367][ T9250] ip_tables: iptables: counters copy to user failed while replacing table [ 329.978753][ T26] audit: type=1800 audit(1794098814.367:204): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1421" name="p_chmask" dev="configfs" ino=56234 res=0 errno=0 [ 330.009506][ T9230] input: syz1 as /devices/virtual/input/input27 [ 330.045330][ T26] audit: type=1800 audit(1794098814.367:205): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1421" name="UDC" dev="configfs" ino=56235 res=0 errno=0 [ 330.235703][ T4349] usb 3-1: USB disconnect, device number 18 [ 330.264979][ T4347] usb 2-1: USB disconnect, device number 20 [ 330.720156][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.984291][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 331.399957][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.470313][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.470314][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.482462][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.936539][ T9276] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.979524][ T9276] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 332.012747][ T9276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.037615][ T9276] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.044382][ T9276] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.057838][ T9294] ip_tables: iptables: counters copy to user failed while replacing table [ 332.305991][ T26] audit: type=1800 audit(1794098816.697:206): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1433" name="p_chmask" dev="configfs" ino=56880 res=0 errno=0 [ 332.397294][ T26] audit: type=1800 audit(1794098816.717:207): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1433" name="UDC" dev="configfs" ino=56881 res=0 errno=0 [ 333.071501][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.380157][ T4349] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 333.393201][ T34] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 333.471529][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 333.571299][ T4349] usb 3-1: config 0 has no interfaces? [ 333.579029][ T4349] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 333.588658][ T4349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.596778][ T4349] usb 3-1: Product: syz [ 333.600050][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 333.601056][ T4349] usb 3-1: Manufacturer: syz [ 333.609143][ T34] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 333.623356][ T4349] usb 3-1: SerialNumber: syz [ 333.623372][ T34] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 333.638801][ T34] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 333.656504][ T34] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.657176][ T4349] usb 3-1: config 0 descriptor?? [ 333.678059][ T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 333.700284][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.708388][ T34] usb 5-1: Product: Ђ [ 333.721909][ T34] usb 5-1: Manufacturer: 䐊 [ 333.726549][ T34] usb 5-1: SerialNumber: ☷ [ 333.884641][ T9340] ip_tables: iptables: counters copy to user failed while replacing table [ 334.040006][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 334.040376][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 334.120086][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 334.126259][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 334.163753][ T9328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.170124][ T9328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.176174][ T9328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.182547][ T9328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.188571][ T9328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.209393][ T4349] usb 5-1: USB disconnect, device number 18 [ 334.416304][ T26] audit: type=1800 audit(1794098818.807:208): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1448" name="zoned" dev="configfs" ino=57416 res=0 errno=0 [ 334.569436][ T26] audit: type=1800 audit(1794098818.807:209): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1448" name="power" dev="configfs" ino=57417 res=0 errno=0 [ 335.080617][ T26] audit: type=1800 audit(1794098819.467:210): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1449" name="p_chmask" dev="configfs" ino=57431 res=0 errno=0 [ 335.267985][ T26] audit: type=1800 audit(1794098819.657:211): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1449" name="UDC" dev="configfs" ino=57432 res=0 errno=0 [ 335.390016][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.055052][ T34] usb 3-1: USB disconnect, device number 19 [ 336.179178][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 336.190179][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.196228][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.209489][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.215769][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.102122][ T9387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 337.108484][ T9387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 337.114949][ T9387] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 337.122029][ T9387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 337.128183][ T9387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 337.132371][ T9383] ip_tables: iptables: counters copy to user failed while replacing table [ 337.629816][ T26] audit: type=1800 audit(1794098822.017:212): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1462" name="p_chmask" dev="configfs" ino=57112 res=0 errno=0 [ 337.685057][ T26] audit: type=1800 audit(1794098822.047:213): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1462" name="UDC" dev="configfs" ino=57114 res=0 errno=0 [ 337.738791][ T26] audit: type=1800 audit(1794098822.067:214): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1464" name="zoned" dev="configfs" ino=57119 res=0 errno=0 [ 337.764629][ T26] audit: type=1800 audit(1794098822.067:215): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1464" name="power" dev="configfs" ino=57120 res=0 errno=0 [ 337.859749][ T4347] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 338.460086][ T4349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 338.666250][ T4349] usb 1-1: config 0 has no interfaces? [ 338.687345][ T4349] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 338.770285][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.807428][ T4347] usb 2-1: Using ep0 maxpacket: 16 [ 338.812690][ T4349] usb 1-1: Product: syz [ 338.812710][ T4349] usb 1-1: Manufacturer: syz [ 338.812722][ T4349] usb 1-1: SerialNumber: syz [ 338.816482][ T4349] usb 1-1: config 0 descriptor?? [ 338.837834][ T4347] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 338.846757][ T4347] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 338.856990][ T4347] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 338.866357][ T4347] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.885298][ T4347] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 338.922209][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.959978][ T4347] usb 2-1: Product: Ђ [ 338.964140][ T4347] usb 2-1: Manufacturer: 䐊 [ 338.968748][ T4347] usb 2-1: SerialNumber: ☷ [ 339.068323][ T26] audit: type=1800 audit(1794098823.457:216): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1471" name="p_chmask" dev="configfs" ino=57165 res=0 errno=0 [ 339.085422][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 339.101693][ T9426] ip_tables: iptables: counters copy to user failed while replacing table [ 339.117810][ T26] audit: type=1800 audit(1794098823.487:217): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1471" name="UDC" dev="configfs" ino=57166 res=0 errno=0 [ 339.150358][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 339.156514][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 339.162618][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.168675][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.168712][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 339.207972][ T9397] input: syz1 as /devices/virtual/input/input28 [ 339.247208][ T4349] usb 2-1: USB disconnect, device number 21 [ 339.377243][ T9434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.387362][ T9434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.413431][ T9434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.448258][ T9434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.504460][ T9434] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.936325][ T26] audit: type=1800 audit(1794098824.327:218): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1477" name="p_chmask" dev="configfs" ino=57252 res=0 errno=0 [ 339.989997][ T26] audit: type=1800 audit(1794098824.347:219): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1477" name="UDC" dev="configfs" ino=57253 res=0 errno=0 [ 340.585685][ T26] audit: type=1800 audit(1794098824.977:220): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1480" name="zoned" dev="configfs" ino=57284 res=0 errno=0 [ 340.780068][ T26] audit: type=1800 audit(1794098825.007:221): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1480" name="power" dev="configfs" ino=57285 res=0 errno=0 [ 341.390342][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.390388][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.470170][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.470217][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.550005][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 341.607487][ T4349] usb 1-1: USB disconnect, device number 13 [ 342.303541][ T9465] ip_tables: iptables: counters copy to user failed while replacing table [ 342.914151][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 344.373539][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 344.373555][ T26] audit: type=1800 audit(1794098828.767:224): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1489" name="p_chmask" dev="configfs" ino=57713 res=0 errno=0 [ 344.471612][ T26] audit: type=1800 audit(1794098828.767:225): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1489" name="UDC" dev="configfs" ino=57714 res=0 errno=0 [ 344.760160][ T4398] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 345.115001][ T4398] usb 4-1: Using ep0 maxpacket: 16 [ 345.135503][ T4398] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 345.146475][ T4398] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 345.164017][ T4398] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 345.173492][ T9505] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.179562][ T9505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.222271][ T4398] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.438681][ T4398] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 345.488494][ T4398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.516873][ T9505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.535307][ T4398] usb 4-1: Product: Ђ [ 345.554530][ T4398] usb 4-1: Manufacturer: 䐊 [ 345.577479][ T4398] usb 4-1: SerialNumber: ☷ [ 345.585805][ T9505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.705206][ T9505] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.831266][ T9487] input: syz1 as /devices/virtual/input/input29 [ 345.890810][ T4347] usb 4-1: USB disconnect, device number 13 [ 346.050006][ T4398] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 346.073473][ T26] audit: type=1800 audit(1794098830.467:226): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1500" name="p_chmask" dev="configfs" ino=57850 res=0 errno=0 [ 346.089441][ T9518] ip_tables: iptables: counters copy to user failed while replacing table [ 346.109643][ T26] audit: type=1800 audit(1794098830.467:227): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1500" name="UDC" dev="configfs" ino=57851 res=0 errno=0 [ 346.138272][ T26] audit: type=1800 audit(1794098830.467:228): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1498" name="UDC" dev="configfs" ino=57853 res=0 errno=0 [ 346.233522][ T4398] usb 3-1: config 0 has no interfaces? [ 346.286126][ T4398] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 346.387977][ T4398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.472613][ T4398] usb 3-1: Product: syz [ 346.527282][ T4398] usb 3-1: Manufacturer: syz [ 346.589869][ T4398] usb 3-1: SerialNumber: syz [ 346.736241][ T4398] usb 3-1: config 0 descriptor?? [ 346.982456][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 347.230144][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 347.236343][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 347.606841][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 347.629987][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 347.820191][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.904378][ T26] audit: type=1800 audit(1794098832.297:229): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1507" name="zoned" dev="configfs" ino=58523 res=0 errno=0 [ 348.007709][ T26] audit: type=1800 audit(1794098832.317:230): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1507" name="power" dev="configfs" ino=58524 res=0 errno=0 [ 348.242628][ T26] audit: type=1800 audit(1794098832.637:231): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1511" name="p_chmask" dev="configfs" ino=58045 res=0 errno=0 [ 348.284084][ T9562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 348.321278][ T26] audit: type=1800 audit(1794098832.687:232): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1511" name="UDC" dev="configfs" ino=58046 res=0 errno=0 [ 348.359533][ T9562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 348.378214][ T9562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 348.417381][ T9562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.440289][ T9562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 348.477780][ T26] audit: type=1800 audit(1794098832.867:233): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1512" name="p_chmask" dev="configfs" ino=58539 res=0 errno=0 [ 348.512449][ T9569] ip_tables: iptables: counters copy to user failed while replacing table [ 348.900170][ T4346] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 349.055890][ T34] usb 3-1: USB disconnect, device number 20 [ 349.849310][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 350.009999][ T4346] usb 5-1: Using ep0 maxpacket: 16 [ 350.341959][ T4346] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 350.360113][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 350.394869][ T4346] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 350.430165][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 350.436313][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 350.442582][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 350.519954][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 351.226825][ T4346] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 351.236606][ T4346] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.261694][ T4346] usb 5-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 351.275298][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.284708][ T4346] usb 5-1: Product: Ђ [ 351.288987][ T4346] usb 5-1: Manufacturer: 䐊 [ 351.295029][ T4346] usb 5-1: SerialNumber: ☷ [ 351.435490][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 351.435593][ T26] audit: type=1800 audit(1794098835.827:235): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1522" name="zoned" dev="configfs" ino=58600 res=0 errno=0 [ 351.492748][ T26] audit: type=1800 audit(1794098835.867:236): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1522" name="power" dev="configfs" ino=58605 res=0 errno=0 [ 351.535205][ T9573] input: syz1 as /devices/virtual/input/input30 [ 351.591331][ T26] audit: type=1800 audit(1794098835.877:237): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1523" name="p_chmask" dev="configfs" ino=58650 res=0 errno=0 [ 351.614865][ T34] usb 5-1: USB disconnect, device number 19 [ 351.622739][ T26] audit: type=1800 audit(1794098835.877:238): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1523" name="UDC" dev="configfs" ino=58656 res=0 errno=0 [ 351.695248][ T9609] ip_tables: iptables: counters copy to user failed while replacing table [ 351.706218][ T26] audit: type=1800 audit(1794098836.067:239): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1524" name="p_chmask" dev="configfs" ino=58685 res=0 errno=0 [ 351.749979][ T26] audit: type=1800 audit(1794098836.067:240): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1524" name="UDC" dev="configfs" ino=58686 res=0 errno=0 [ 351.965336][ T4347] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 352.165508][ T34] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 352.181425][ T4347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.199435][ T4347] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 352.216601][ T4347] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 352.239312][ T4347] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 352.267288][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.386068][ T34] usb 1-1: config 0 has no interfaces? [ 352.400935][ T9625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.709845][ T9625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 352.774248][ T9625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.843945][ T9625] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.901550][ T9625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 352.971269][ T34] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 352.982913][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.991555][ T34] usb 1-1: Product: syz [ 352.995796][ T34] usb 1-1: Manufacturer: syz [ 353.016485][ T34] usb 1-1: SerialNumber: syz [ 353.035917][ T34] usb 1-1: config 0 descriptor?? [ 353.144065][ T4347] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 353.154358][ T4347] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 353.164740][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 353.171487][ T4347] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 353.191561][ T4347] cxacru: probe of 4-1:1.0 failed with error -71 [ 353.233233][ T4347] usb 4-1: USB disconnect, device number 14 [ 354.430006][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 354.576652][ T26] audit: type=1800 audit(1794098838.967:241): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1536" name="p_chmask" dev="configfs" ino=58740 res=0 errno=0 [ 354.653365][ T26] audit: type=1800 audit(1794098838.997:242): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1536" name="UDC" dev="configfs" ino=58742 res=0 errno=0 [ 354.754111][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 354.830018][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 354.910132][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 354.916225][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 355.077369][ T26] audit: type=1800 audit(1794098839.467:243): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1538" name="p_chmask" dev="configfs" ino=58180 res=0 errno=0 [ 355.081287][ T9660] ip_tables: iptables: counters copy to user failed while replacing table [ 355.465562][ T4347] usb 1-1: USB disconnect, device number 14 [ 355.590263][ T4346] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 355.930142][ T4346] usb 5-1: Using ep0 maxpacket: 16 [ 355.939011][ T4346] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 355.984973][ T4346] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 356.048716][ T4346] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 356.091856][ T4346] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.133399][ T9687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.154806][ T9687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.168397][ T9687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.176007][ T4346] usb 5-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 356.177094][ T9687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.192163][ T9687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.208488][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.231051][ T4346] usb 5-1: Product: Ђ [ 356.235173][ T4346] usb 5-1: Manufacturer: 䐊 [ 356.251058][ T4346] usb 5-1: SerialNumber: ☷ [ 356.418129][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 356.485088][ T9668] input: syz1 as /devices/virtual/input/input31 [ 357.379629][ T9534] usb 5-1: USB disconnect, device number 20 [ 358.145192][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 358.145234][ T26] audit: type=1800 audit(1794098842.537:249): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1552" name="p_chmask" dev="configfs" ino=58287 res=0 errno=0 [ 358.200035][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.206236][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.212389][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.212406][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.270022][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 358.369665][ T9718] ip_tables: iptables: counters copy to user failed while replacing table [ 358.406249][ T26] audit: type=1800 audit(1794098842.677:250): pid=9718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1552" name="UDC" dev="configfs" ino=58288 res=0 errno=0 [ 358.706213][ T26] audit: type=1800 audit(1794098843.097:251): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1558" name="p_chmask" dev="configfs" ino=58319 res=0 errno=0 [ 358.757275][ T26] audit: type=1800 audit(1794098843.097:252): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1560" name="zoned" dev="configfs" ino=58858 res=0 errno=0 [ 359.000013][ T26] audit: type=1800 audit(1794098843.097:253): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1560" name="power" dev="configfs" ino=58859 res=0 errno=0 [ 359.040009][ T26] audit: type=1800 audit(1794098843.127:254): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1558" name="UDC" dev="configfs" ino=58321 res=0 errno=0 [ 359.312966][ T4347] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 359.420319][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 359.521616][ T4347] usb 4-1: config 0 has no interfaces? [ 359.529540][ T4347] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 359.549120][ T4347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.569385][ T4347] usb 4-1: Product: syz [ 359.574044][ T4347] usb 4-1: Manufacturer: syz [ 359.579540][ T4347] usb 4-1: SerialNumber: syz [ 359.602638][ T4347] usb 4-1: config 0 descriptor?? [ 359.710279][ T9534] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 359.890089][ T9534] usb 1-1: Using ep0 maxpacket: 16 [ 359.902771][ T9534] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 359.919978][ T9534] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 359.944263][ T9534] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 359.968674][ T9534] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.005808][ T9534] usb 1-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 360.338796][ T9754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.367748][ T9754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.393683][ T9754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.422095][ T9754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.484199][ T9754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 360.889745][ T9534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.897892][ T9534] usb 1-1: Product: Ђ [ 360.902059][ T9534] usb 1-1: Manufacturer: 䐊 [ 360.906672][ T9534] usb 1-1: SerialNumber: ☷ [ 360.995252][ T26] audit: type=1800 audit(1794098845.387:255): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1569" name="p_chmask" dev="configfs" ino=59393 res=0 errno=0 [ 361.090665][ T26] audit: type=1800 audit(1794098845.487:256): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1569" name="UDC" dev="configfs" ino=59396 res=0 errno=0 [ 361.098841][ T9772] ip_tables: iptables: counters copy to user failed while replacing table [ 361.143066][ T9750] input: syz1 as /devices/virtual/input/input32 [ 361.222579][ T9534] usb 1-1: USB disconnect, device number 15 [ 361.382019][ T26] audit: type=1800 audit(1794098845.777:257): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1572" name="zoned" dev="configfs" ino=58933 res=0 errno=0 [ 361.468955][ T26] audit: type=1800 audit(1794098845.807:258): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1572" name="power" dev="configfs" ino=58936 res=0 errno=0 [ 361.630014][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.798093][ T4347] usb 4-1: USB disconnect, device number 15 [ 362.167421][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 362.430066][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.437172][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.437285][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.510085][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 363.067953][ T9804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.139652][ T9804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.210091][ T9804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 363.263302][ T9804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 363.325561][ T9804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.461076][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 363.461090][ T26] audit: type=1800 audit(1794098847.857:261): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1583" name="p_chmask" dev="configfs" ino=59040 res=0 errno=0 [ 363.506249][ T9823] ip_tables: iptables: counters copy to user failed while replacing table [ 363.536794][ T26] audit: type=1800 audit(1794098847.887:262): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1583" name="UDC" dev="configfs" ino=59041 res=0 errno=0 [ 363.624466][ T26] audit: type=1800 audit(1794098848.017:263): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1585" name="zoned" dev="configfs" ino=59498 res=0 errno=0 [ 363.663733][ T26] audit: type=1800 audit(1794098848.037:264): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1585" name="power" dev="configfs" ino=59499 res=0 errno=0 [ 363.849152][ T26] audit: type=1800 audit(1794098848.237:265): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1586" name="p_chmask" dev="configfs" ino=59057 res=0 errno=0 [ 363.926822][ T26] audit: type=1800 audit(1794098848.267:266): pid=9833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1586" name="UDC" dev="configfs" ino=59058 res=0 errno=0 [ 364.330078][ T4347] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 364.350148][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.519956][ T4346] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 364.550181][ T4347] usb 4-1: Using ep0 maxpacket: 16 [ 364.560783][ T4347] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 364.583120][ T4347] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 364.595671][ T4347] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 364.605427][ T4347] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.631082][ T4347] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 364.648058][ T4347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.656110][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 364.675181][ T4347] usb 4-1: Product: Ђ [ 364.679712][ T4347] usb 4-1: Manufacturer: 䐊 [ 364.708893][ T4347] usb 4-1: SerialNumber: ☷ [ 364.851957][ T4346] usb 3-1: config 0 has no interfaces? [ 365.160095][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.192754][ T9838] input: syz1 as /devices/virtual/input/input33 [ 365.230232][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 365.310051][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.390370][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 365.403539][ T4346] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 365.474907][ T4347] usb 4-1: USB disconnect, device number 16 [ 365.489110][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.497272][ T4346] usb 3-1: Product: syz [ 365.501526][ T4346] usb 3-1: Manufacturer: syz [ 365.506861][ T4346] usb 3-1: SerialNumber: syz [ 365.513294][ T4346] usb 3-1: config 0 descriptor?? [ 366.403264][ T9860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.436709][ T9860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.497826][ T9860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.547509][ T9860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.609721][ T9860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.095210][ T26] audit: type=1800 audit(1794098851.477:267): pid=9876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1598" name="p_chmask" dev="configfs" ino=59110 res=0 errno=0 [ 367.294312][ T26] audit: type=1800 audit(1794098851.557:268): pid=9876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1598" name="UDC" dev="configfs" ino=59111 res=0 errno=0 [ 367.326093][ T9876] ip_tables: iptables: counters copy to user failed while replacing table [ 367.630128][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.883472][ T9534] usb 3-1: USB disconnect, device number 21 [ 368.520322][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.520370][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.600052][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.670279][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 368.970858][ T26] audit: type=1800 audit(1794098853.367:269): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1601" name="p_chmask" dev="configfs" ino=59161 res=0 errno=0 [ 369.121736][ T26] audit: type=1800 audit(1794098853.517:270): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1601" name="UDC" dev="configfs" ino=59625 res=0 errno=0 [ 369.142156][ T26] audit: type=1800 audit(1794098853.527:271): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1603" name="zoned" dev="configfs" ino=59626 res=0 errno=0 [ 369.242926][ T26] audit: type=1800 audit(1794098853.527:272): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1603" name="power" dev="configfs" ino=59627 res=0 errno=0 [ 369.907449][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 370.410123][ T4366] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 370.630165][ T4366] usb 2-1: Using ep0 maxpacket: 16 [ 370.650332][ T4366] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 370.708174][ T4366] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 370.769926][ T4366] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 370.815439][ T4366] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.872330][ T4366] usb 2-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 370.899227][ T4366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.935937][ T4366] usb 2-1: Product: Ђ [ 370.940350][ T4366] usb 2-1: Manufacturer: 䐊 [ 370.944968][ T4366] usb 2-1: SerialNumber: ☷ [ 370.967628][ T26] audit: type=1800 audit(1794098855.357:273): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1613" name="p_chmask" dev="configfs" ino=59657 res=0 errno=0 [ 371.022643][ T26] audit: type=1800 audit(1794098855.417:274): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1613" name="UDC" dev="configfs" ino=59215 res=0 errno=0 [ 371.044569][ T9924] ip_tables: iptables: counters copy to user failed while replacing table [ 371.080085][ T4347] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 371.271301][ T4347] usb 5-1: config 0 has no interfaces? [ 371.278744][ T4347] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 371.288067][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.296216][ T4347] usb 5-1: Product: syz [ 371.303636][ T4347] usb 5-1: Manufacturer: syz [ 371.308252][ T4347] usb 5-1: SerialNumber: syz [ 371.320594][ T4347] usb 5-1: config 0 descriptor?? [ 371.773531][ T9920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.779668][ T9920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 371.786119][ T9920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.792475][ T9920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.798569][ T9920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.821628][ T4366] usb 2-1: USB disconnect, device number 22 [ 373.043873][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 373.070085][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.790123][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 373.796250][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.870681][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.876767][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 373.891794][ T4347] usb 5-1: USB disconnect, device number 21 [ 373.935791][ T26] audit: type=1800 audit(1794098858.327:275): pid=9970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1625" name="p_chmask" dev="configfs" ino=59709 res=0 errno=0 [ 373.972424][ T9970] ip_tables: iptables: counters copy to user failed while replacing table [ 374.000961][ T26] audit: type=1800 audit(1794098858.357:276): pid=9970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1625" name="UDC" dev="configfs" ino=59710 res=0 errno=0 [ 374.873060][ T9973] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.886945][ T9973] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.915322][ T9973] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.930147][ T9973] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 374.945268][ T9973] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.250053][ T4366] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 376.119978][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 376.919993][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.999983][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 377.006185][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.010067][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 377.449983][ T4366] usb 3-1: Using ep0 maxpacket: 16 [ 378.432849][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.439307][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.833514][ T4366] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.846506][ T4366] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 378.854364][ T4366] usb 3-1: can't read configurations, error -71 [ 378.960390][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 379.270143][ T4347] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 379.352805][ T26] audit: type=1800 audit(1794098863.747:277): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1638" name="p_chmask" dev="configfs" ino=59780 res=0 errno=0 [ 379.474274][ T4347] usb 5-1: config 0 has no interfaces? [ 379.487692][T10027] ip_tables: iptables: counters copy to user failed while replacing table [ 379.504943][ T4347] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 379.531461][ T26] audit: type=1800 audit(1794098863.807:278): pid=10027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1638" name="UDC" dev="configfs" ino=59781 res=0 errno=0 [ 379.597771][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.676731][ T4347] usb 5-1: Product: syz [ 379.715677][ T4347] usb 5-1: Manufacturer: syz [ 379.770378][ T4347] usb 5-1: SerialNumber: syz [ 379.825385][ T4347] usb 5-1: config 0 descriptor?? [ 380.830128][T10041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.836622][T10041] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.843710][T10041] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.850473][T10041] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.856577][T10041] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 381.094313][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 381.107898][ T26] audit: type=1800 audit(1794098865.497:279): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1651" name="p_chmask" dev="configfs" ino=60500 res=0 errno=0 [ 381.112407][T10076] ip_tables: iptables: counters copy to user failed while replacing table [ 381.149801][ T26] audit: type=1800 audit(1794098865.497:280): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1651" name="UDC" dev="configfs" ino=60501 res=0 errno=0 [ 381.999607][ T9534] usb 5-1: USB disconnect, device number 22 [ 382.052938][T10086] overlayfs: invalid redirect ((null)) [ 382.670067][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.911067][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.911126][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.917143][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.923335][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 384.161459][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1666'. [ 385.351630][T10150] 9pnet_virtio: no channels available for device syz [ 386.725265][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'. [ 387.756952][T10203] FAULT_INJECTION: forcing a failure. [ 387.756952][T10203] name failslab, interval 1, probability 0, space 0, times 6 [ 387.874438][T10203] CPU: 1 PID: 10203 Comm: syz.1.1691 Not tainted syzkaller #0 [ 387.881963][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 387.892037][T10203] Call Trace: [ 387.895410][T10203] [ 387.898436][T10203] dump_stack_lvl+0x188/0x24e [ 387.903294][T10203] ? show_regs_print_info+0x12/0x12 [ 387.908570][T10203] ? load_image+0x410/0x410 [ 387.913112][T10203] ? __might_sleep+0xd0/0xd0 [ 387.917772][T10203] ? __lock_acquire+0x7ea0/0x7ea0 [ 387.922846][T10203] ? node_tag_clear+0x1ec/0x310 [ 387.927744][T10203] should_fail_ex+0x390/0x4c0 [ 387.932519][T10203] should_failslab+0x5/0x20 [ 387.937092][T10203] slab_pre_alloc_hook+0x59/0x300 [ 387.942209][T10203] ? __kernfs_new_node+0xa6/0x7f0 [ 387.947373][T10203] __kmem_cache_alloc_node+0x4f/0x270 [ 387.952784][T10203] ? __kernfs_new_node+0xa6/0x7f0 [ 387.957832][T10203] __kmalloc_node_track_caller+0xa0/0x240 [ 387.963584][T10203] kstrdup_const+0x56/0x90 [ 387.968129][T10203] __kernfs_new_node+0xa6/0x7f0 [ 387.973012][T10203] ? __lock_acquire+0x7ea0/0x7ea0 [ 387.978067][T10203] ? kernfs_new_node+0x250/0x250 [ 387.983039][T10203] ? rwsem_write_trylock+0x135/0x1c0 [ 387.988358][T10203] ? clear_nonspinnable+0x60/0x60 [ 387.993507][T10203] ? up_write+0x1b6/0x410 [ 387.997868][T10203] kernfs_new_node+0x148/0x250 [ 388.002662][T10203] __kernfs_create_file+0x47/0x2e0 [ 388.007800][T10203] cgroup_addrm_files+0x80c/0xd50 [ 388.013048][T10203] ? trace_raw_output_cgroup_event+0x1e0/0x1e0 [ 388.019227][T10203] ? mark_lock+0x94/0x320 [ 388.023603][T10203] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 388.029671][T10203] ? css_next_descendant_pre+0x179/0x250 [ 388.035414][T10203] css_populate_dir+0x1da/0x3b0 [ 388.040290][T10203] cgroup_mkdir+0xc61/0xe70 [ 388.044820][T10203] ? css_task_iter_end+0x280/0x280 [ 388.049958][T10203] ? kernfs_iop_permission+0x26d/0x350 [ 388.055439][T10203] ? css_task_iter_end+0x280/0x280 [ 388.060572][T10203] kernfs_iop_mkdir+0x23d/0x3d0 [ 388.065445][T10203] vfs_mkdir+0x386/0x570 [ 388.069806][T10203] do_mkdirat+0x1d8/0x440 [ 388.074175][T10203] ? vfs_mkdir+0x570/0x570 [ 388.078623][T10203] __x64_sys_mkdirat+0x85/0x90 [ 388.083407][T10203] do_syscall_64+0x4c/0xa0 [ 388.087850][T10203] ? clear_bhb_loop+0x60/0xb0 [ 388.092736][T10203] ? clear_bhb_loop+0x60/0xb0 [ 388.097444][T10203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.103369][T10203] RIP: 0033:0x7fe02379fb19 [ 388.107879][T10203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.127556][T10203] RSP: 002b:00007fe024665028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 388.136065][T10203] RAX: ffffffffffffffda RBX: 00007fe023a26090 RCX: 00007fe02379fb19 [ 388.144059][T10203] RDX: 00000000000001ff RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 388.152046][T10203] RBP: 00007fe023837b70 R08: 0000000000000000 R09: 0000000000000000 [ 388.160030][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.168014][T10203] R13: 00007fe023a26128 R14: 00007fe023a26090 R15: 00007ffe29b9ea88 [ 388.176033][T10203] [ 389.311184][T10201] Set syz1 is full, maxelem 6117 reached [ 389.410067][T10203] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 389.683379][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 393.282103][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 395.359181][T10320] 9pnet_virtio: no channels available for device syz [ 395.511283][T10326] jffs2: notice: (10326) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 400.253591][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 400.515983][T10373] jffs2: notice: (10373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 400.831173][T10385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 400.849680][T10386] FAULT_INJECTION: forcing a failure. [ 400.849680][T10386] name failslab, interval 1, probability 0, space 0, times 5 [ 400.851835][T10385] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 400.880289][T10386] CPU: 1 PID: 10386 Comm: syz.2.1743 Not tainted syzkaller #0 [ 400.887885][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 400.898048][T10386] Call Trace: [ 400.898247][T10385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 400.901365][T10386] [ 400.901409][T10386] dump_stack_lvl+0x188/0x24e [ 400.901448][T10386] ? show_regs_print_info+0x12/0x12 [ 400.901472][T10386] ? load_image+0x410/0x410 [ 400.901497][T10386] ? __might_sleep+0xd0/0xd0 [ 400.901514][T10386] ? __lock_acquire+0x7ea0/0x7ea0 [ 400.934352][T10386] should_fail_ex+0x390/0x4c0 [ 400.939059][T10386] should_failslab+0x5/0x20 [ 400.943591][T10386] slab_pre_alloc_hook+0x59/0x300 [ 400.948631][T10386] kmem_cache_alloc_lru+0x49/0x2e0 [ 400.953743][T10386] ? __d_alloc+0x2e/0x6e0 [ 400.958102][T10386] __d_alloc+0x2e/0x6e0 [ 400.962279][T10386] d_alloc_parallel+0xdc/0x1590 [ 400.967156][T10386] ? __lock_acquire+0x7ea0/0x7ea0 [ 400.972191][T10386] ? lock_chain_count+0x20/0x20 [ 400.977043][T10386] ? lockdep_softirqs_off+0x430/0x430 [ 400.982417][T10386] ? lockdep_softirqs_off+0x430/0x430 [ 400.987800][T10386] ? d_hash_and_lookup+0x1b0/0x1b0 [ 400.992924][T10386] ? format_decode+0xb38/0x1330 [ 400.997956][T10386] ? __init_waitqueue_head+0xa4/0x140 [ 401.003428][T10386] proc_fill_cache+0x155/0x420 [ 401.008211][T10386] ? proc_lookupfd_common+0x1e0/0x1e0 [ 401.013766][T10386] ? pid_revalidate+0x250/0x250 [ 401.018617][T10386] ? snprintf+0xe5/0x140 [ 401.022870][T10386] ? proc_readfd_common+0x326/0x870 [ 401.028076][T10386] ? _raw_spin_unlock+0x24/0x40 [ 401.032926][T10386] ? task_lookup_next_fd_rcu+0x333/0x390 [ 401.038659][T10386] ? proc_readfd_common+0x326/0x870 [ 401.043878][T10386] ? proc_readfd_common+0x326/0x870 [ 401.049081][T10386] proc_readfd_common+0x56d/0x870 [ 401.054129][T10386] ? proc_readfd_common+0x326/0x870 [ 401.059354][T10386] ? proc_lookupfd_common+0x1e0/0x1e0 [ 401.064750][T10386] ? proc_readfdinfo+0x20/0x20 [ 401.069533][T10386] ? end_current_label_crit_section+0x14b/0x170 [ 401.075836][T10386] ? iterate_dir+0x10d/0x550 [ 401.080432][T10386] ? down_read_killable+0x1cc/0x340 [ 401.085640][T10386] ? fsnotify_perm+0x248/0x550 [ 401.090504][T10386] iterate_dir+0x213/0x550 [ 401.094921][T10386] ? proc_fdinfo_permission+0x120/0x120 [ 401.100477][T10386] __se_sys_getdents64+0xf2/0x270 [ 401.105598][T10386] ? __x64_sys_getdents64+0x80/0x80 [ 401.110793][T10386] ? filldir+0x750/0x750 [ 401.115038][T10386] ? lockdep_hardirqs_on+0x94/0x140 [ 401.120232][T10386] do_syscall_64+0x4c/0xa0 [ 401.124643][T10386] ? clear_bhb_loop+0x60/0xb0 [ 401.129316][T10386] ? clear_bhb_loop+0x60/0xb0 [ 401.133992][T10386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.139885][T10386] RIP: 0033:0x7f2e3339fb19 [ 401.144294][T10386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.163911][T10386] RSP: 002b:00007f2e3432d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 401.172331][T10386] RAX: ffffffffffffffda RBX: 00007f2e33625fa0 RCX: 00007f2e3339fb19 [ 401.180311][T10386] RDX: 0000000000000ff9 RSI: 0000200000001180 RDI: 0000000000000008 [ 401.188294][T10386] RBP: 00007f2e33437b70 R08: 0000000000000000 R09: 0000000000000000 [ 401.196260][T10386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.204226][T10386] R13: 00007f2e33626038 R14: 00007f2e33625fa0 R15: 00007ffd58c68698 [ 401.212216][T10386] [ 401.219746][T10398] jffs2: notice: (10398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.227860][T10385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.245872][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1747'. [ 401.275461][T10396] device bridge_slave_1 left promiscuous mode [ 401.291971][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.319615][T10385] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.333443][T10396] device bridge_slave_0 left promiscuous mode [ 401.352485][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.986811][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 402.830454][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 402.909993][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.229965][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.241452][ T4283] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 403.309965][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.390444][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.509170][T10428] jffs2: notice: (10428) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 403.782483][ T26] audit: type=1800 audit(1794098888.177:281): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1758" name="zoned" dev="configfs" ino=61189 res=0 errno=0 [ 403.824678][ T26] audit: type=1800 audit(1794098888.177:282): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1758" name="power" dev="configfs" ino=61190 res=0 errno=0 [ 403.859943][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 403.928199][T10444] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.963127][ T26] audit: type=1804 audit(1794098888.357:283): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1761" name="/newroot/361/bus/file0" dev="overlay" ino=2048 res=1 errno=0 [ 404.117476][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 405.045529][T10470] jffs2: notice: (10470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 405.399990][T10459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.406613][T10459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.413248][T10459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.419402][T10459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.425643][T10459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.990490][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.470093][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 407.470193][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.476273][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 407.482918][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.509631][ T26] audit: type=1800 audit(1794098891.897:284): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1771" name="zoned" dev="configfs" ino=61708 res=0 errno=0 [ 407.615410][ T26] audit: type=1800 audit(1794098891.937:285): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1771" name="power" dev="configfs" ino=61709 res=0 errno=0 [ 407.988912][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1777'. [ 408.229998][ T4347] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 409.001897][ T4347] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.019545][ T4347] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 409.031228][ T4347] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 409.042214][ T4347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.055759][T10522] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.069079][ T4347] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 409.088029][T10507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 409.107698][T10507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 409.165631][T10507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 409.192517][T10507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 409.198889][T10507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 409.330514][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 409.349379][T10527] device bridge_slave_1 left promiscuous mode [ 409.359111][T10527] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.384601][ T26] audit: type=1800 audit(1794098893.777:286): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1786" name="zoned" dev="configfs" ino=61769 res=0 errno=0 [ 409.385171][T10527] device bridge_slave_0 left promiscuous mode [ 409.405105][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.459804][ T26] audit: type=1800 audit(1794098893.807:287): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1786" name="power" dev="configfs" ino=61347 res=0 errno=0 [ 409.480583][T10527] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.504689][ T26] audit: type=1800 audit(1794098893.877:288): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1787" name="p_chmask" dev="configfs" ino=61774 res=0 errno=0 [ 409.522312][T10533] ip_tables: iptables: counters copy to user failed while replacing table [ 409.532806][ T26] audit: type=1800 audit(1794098893.897:289): pid=10533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1787" name="UDC" dev="configfs" ino=61775 res=0 errno=0 [ 409.757048][T10540] 0x0000000000ec-0x0000000000f2 : "" [ 409.837989][T10540] ftl_cs: FTL header corrupt! [ 409.876150][ T4346] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 410.094725][ T4346] usb 4-1: config 0 has no interfaces? [ 410.102330][ T4346] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 410.137610][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.157020][ T4346] usb 4-1: Product: syz [ 410.161698][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 410.172800][ T4346] usb 4-1: Manufacturer: syz [ 410.189246][ T4346] usb 4-1: SerialNumber: syz [ 410.214733][ T4346] usb 4-1: config 0 descriptor?? [ 410.289626][ T4346] usb 3-1: USB disconnect, device number 24 [ 410.464269][ T4346] idmouse 3-1:1.0: disconnected [ 410.910043][ T4283] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.933967][ T4346] usb 4-1: USB disconnect, device number 17 [ 411.095436][T10553] FAULT_INJECTION: forcing a failure. [ 411.095436][T10553] name failslab, interval 1, probability 0, space 0, times 4 [ 411.142692][T10553] CPU: 0 PID: 10553 Comm: syz.1.1794 Not tainted syzkaller #0 [ 411.150200][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 411.150360][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 411.160246][T10553] Call Trace: [ 411.160255][T10553] [ 411.160264][T10553] dump_stack_lvl+0x188/0x24e [ 411.160296][T10553] ? show_regs_print_info+0x12/0x12 [ 411.160321][T10553] ? load_image+0x410/0x410 [ 411.187101][T10553] ? __lock_acquire+0x7ea0/0x7ea0 [ 411.192130][T10553] should_fail_ex+0x390/0x4c0 [ 411.196820][T10553] should_failslab+0x5/0x20 [ 411.201419][T10553] slab_pre_alloc_hook+0x59/0x300 [ 411.206451][T10553] kmem_cache_alloc_lru+0x49/0x2e0 [ 411.211543][T10553] ? proc_alloc_inode+0x26/0xb0 [ 411.216380][T10553] proc_alloc_inode+0x26/0xb0 [ 411.221041][T10553] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 411.227352][T10553] new_inode_pseudo+0x5f/0x1c0 [ 411.230114][ T4283] Bluetooth: hci4: command 0x0c1a tx timeout [ 411.232101][T10553] new_inode+0x25/0x1d0 [ 411.238126][ T4283] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.242326][T10553] ? format_decode+0xb38/0x1330 [ 411.242352][T10553] proc_pid_make_inode+0x20/0x1a0 [ 411.242375][T10553] proc_fdinfo_instantiate+0x4f/0x200 [ 411.242399][T10553] proc_fill_cache+0x1e8/0x420 [ 411.242416][T10553] ? proc_lookupfd_common+0x1e0/0x1e0 [ 411.242438][T10553] ? pid_revalidate+0x250/0x250 [ 411.242454][T10553] ? snprintf+0xe5/0x140 [ 411.242471][T10553] ? proc_readfd_common+0x326/0x870 [ 411.242502][T10553] ? _raw_spin_unlock+0x24/0x40 [ 411.249429][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 411.253294][T10553] ? task_lookup_next_fd_rcu+0x333/0x390 [ 411.253324][T10553] ? proc_readfd_common+0x326/0x870 [ 411.253344][T10553] ? proc_readfd_common+0x326/0x870 [ 411.253368][T10553] proc_readfd_common+0x56d/0x870 [ 411.319801][T10553] ? proc_readfd_common+0x326/0x870 [ 411.325016][T10553] ? proc_lookupfd_common+0x1e0/0x1e0 [ 411.330432][T10553] ? proc_readfdinfo+0x20/0x20 [ 411.335196][T10553] ? end_current_label_crit_section+0x14b/0x170 [ 411.341441][T10553] ? iterate_dir+0x10d/0x550 [ 411.346019][T10553] ? down_read_killable+0x1cc/0x340 [ 411.351213][T10553] ? fsnotify_perm+0x248/0x550 [ 411.356062][T10553] iterate_dir+0x213/0x550 [ 411.360467][T10553] ? proc_fdinfo_permission+0x120/0x120 [ 411.366013][T10553] __se_sys_getdents64+0xf2/0x270 [ 411.371027][T10553] ? __x64_sys_getdents64+0x80/0x80 [ 411.376214][T10553] ? filldir+0x750/0x750 [ 411.380582][T10553] ? lockdep_hardirqs_on+0x94/0x140 [ 411.385783][T10553] do_syscall_64+0x4c/0xa0 [ 411.390198][T10553] ? clear_bhb_loop+0x60/0xb0 [ 411.394862][T10553] ? clear_bhb_loop+0x60/0xb0 [ 411.399527][T10553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.405425][T10553] RIP: 0033:0x7fe02379fb19 [ 411.409837][T10553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.429443][T10553] RSP: 002b:00007fe024686028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 411.437848][T10553] RAX: ffffffffffffffda RBX: 00007fe023a25fa0 RCX: 00007fe02379fb19 [ 411.445809][T10553] RDX: 0000000000000ff9 RSI: 0000200000001180 RDI: 0000000000000008 [ 411.453774][T10553] RBP: 00007fe023837b70 R08: 0000000000000000 R09: 0000000000000000 [ 411.461750][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.469715][T10553] R13: 00007fe023a26038 R14: 00007fe023a25fa0 R15: 00007ffe29b9ea88 [ 411.477698][T10553] [ 411.675607][ T26] audit: type=1800 audit(1794098896.067:290): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1799" name="zoned" dev="configfs" ino=61883 res=0 errno=0 [ 411.741719][ T26] audit: type=1800 audit(1794098896.067:291): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1799" name="power" dev="configfs" ino=61884 res=0 errno=0 [ 411.802804][ T26] audit: type=1800 audit(1794098896.197:292): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1801" name="p_chmask" dev="configfs" ino=61897 res=0 errno=0 [ 411.823232][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.886076][ T26] audit: type=1800 audit(1794098896.277:293): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1801" name="UDC" dev="configfs" ino=61898 res=0 errno=0 [ 411.906079][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.925849][T10580] ip_tables: iptables: counters copy to user failed while replacing table [ 411.951611][T10568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 411.959054][ T4281] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 411.973266][T10568] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 411.990011][T10568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 412.000546][T10568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.009793][T10568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 412.051477][T10585] rxe_eth0 speed is unknown, defaulting to 1000 [ 412.550090][ T4346] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 412.588028][T10601] 9pnet_virtio: no channels available for device syz [ 412.766465][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.795536][ T4346] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 412.813553][ T26] audit: type=1800 audit(1794098897.207:294): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1811" name="zoned" dev="configfs" ino=61944 res=0 errno=0 [ 412.846194][ T4346] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 412.890995][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.894912][ T26] audit: type=1800 audit(1794098897.227:295): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1811" name="power" dev="configfs" ino=61945 res=0 errno=0 [ 412.966794][ T4346] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 413.021502][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 413.560052][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 413.875814][T10616] fuse: Bad value for 'fd' [ 414.040310][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 414.046402][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 414.052732][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 414.052751][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 414.306947][T10621] ip_tables: iptables: counters copy to user failed while replacing table [ 414.920556][ T34] usb 1-1: USB disconnect, device number 16 [ 414.942054][ T34] idmouse 1-1:1.0: disconnected [ 415.246952][T10624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 415.253217][T10624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 415.259286][T10624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.265766][T10624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 415.271916][T10624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.440941][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 415.440954][ T26] audit: type=1800 audit(1794098899.837:298): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1824" name="zoned" dev="configfs" ino=61997 res=0 errno=0 [ 415.528555][ T26] audit: type=1800 audit(1794098899.867:299): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1824" name="power" dev="configfs" ino=62002 res=0 errno=0 [ 415.635691][ T26] audit: type=1800 audit(1794098900.027:300): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1827" name="p_chmask" dev="configfs" ino=62023 res=0 errno=0 [ 415.647028][T10659] batman_adv: batadv0: Adding interface: veth0 [ 415.671017][T10654] ip_tables: iptables: counters copy to user failed while replacing table [ 415.689124][T10659] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.709699][ T26] audit: type=1800 audit(1794098900.027:301): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1827" name="UDC" dev="configfs" ino=62024 res=0 errno=0 [ 415.724642][T10659] batman_adv: batadv0: Interface activated: veth0 [ 415.747183][ T34] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 415.786920][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 415.801254][T10663] batman_adv: batadv0: Interface deactivated: veth0 [ 415.871976][ T26] audit: type=1800 audit(1794098900.267:302): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1830" name="p_chmask" dev="configfs" ino=62776 res=0 errno=0 [ 415.963551][T10663] batman_adv: batadv0: Removing interface: veth0 [ 416.082272][ T26] audit: type=1800 audit(1794098900.367:303): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1830" name="UDC" dev="configfs" ino=62777 res=0 errno=0 [ 416.189072][T10663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.277426][T10663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.388497][T10663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.470012][T10663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.510076][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 416.633424][ T34] usb 3-1: config 0 has no interfaces? [ 416.650842][ T34] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 416.791475][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.892174][ T34] usb 3-1: Product: syz [ 416.935919][ T34] usb 3-1: Manufacturer: syz [ 416.971200][ T34] usb 3-1: SerialNumber: syz [ 417.055621][ T34] usb 3-1: config 0 descriptor?? [ 417.320186][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 417.326678][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 417.326723][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 417.338777][ T4293] Bluetooth: hci3: command 0x0c1a tx timeout [ 418.310661][T10681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.316834][T10681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.323004][T10681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.329228][T10681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.335472][T10681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 418.444241][ T26] audit: type=1800 audit(1794098902.837:304): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1839" name="zoned" dev="configfs" ino=62810 res=0 errno=0 [ 418.445246][ T26] audit: type=1800 audit(1794098902.837:305): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1839" name="power" dev="configfs" ino=62811 res=0 errno=0 [ 418.609357][ T26] audit: type=1800 audit(1794098902.997:306): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1842" name="p_chmask" dev="configfs" ino=62826 res=0 errno=0 [ 418.635263][ T4346] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 418.648481][T10701] ip_tables: iptables: counters copy to user failed while replacing table [ 418.656355][ T26] audit: type=1800 audit(1794098903.037:307): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1842" name="UDC" dev="configfs" ino=62827 res=0 errno=0 [ 418.824490][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 418.847179][ T4346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.868685][ T4346] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 418.891567][ T4346] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 418.965631][ T5582] usb 3-1: USB disconnect, device number 25 [ 419.550100][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 419.637275][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.662305][ T4346] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 419.915136][T10733] rxe_eth0 speed is unknown, defaulting to 1000 [ 420.350081][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 420.356245][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 420.360150][ T4283] Bluetooth: hci2: command 0x0c1a tx timeout [ 420.362970][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.461190][ T26] audit: type=1800 audit(1794098904.857:308): pid=10746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1854" name="UDC" dev="configfs" ino=62913 res=0 errno=0 [ 420.464297][T10746] ip_tables: iptables: counters copy to user failed while replacing table [ 420.648136][T10728] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 420.654749][T10728] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.669096][T10728] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.682008][T10728] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.688093][T10728] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 420.806460][ T26] audit: type=1800 audit(1794098905.197:309): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1855" name="p_chmask" dev="configfs" ino=62929 res=0 errno=0 [ 420.828887][ T26] audit: type=1800 audit(1794098905.197:310): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1855" name="UDC" dev="configfs" ino=62932 res=0 errno=0 [ 420.939250][ T5582] usb 4-1: USB disconnect, device number 18 [ 420.957705][ T5582] idmouse 4-1:1.0: disconnected [ 420.970594][ T4346] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 421.074373][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 421.200715][ T4346] usb 2-1: Using ep0 maxpacket: 8 [ 421.213646][ T4346] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 421.296605][ T4346] usb 2-1: config 0 has no interface number 0 [ 421.351663][ T4346] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 421.441922][ T4346] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 421.523903][ T4346] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 421.627207][ T4346] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 421.704297][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.864606][ T4346] usb 2-1: config 0 descriptor?? [ 421.870028][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 421.932321][ T4346] ldusb 2-1:0.55: Interrupt in endpoint not found [ 422.670173][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 422.670219][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 422.749952][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 422.756068][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 423.844905][ T4347] usb 2-1: USB disconnect, device number 23 [ 424.759423][ T26] audit: type=1800 audit(1794098909.147:311): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1865" name="UDC" dev="configfs" ino=63028 res=0 errno=0 [ 424.760745][T10792] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 424.860255][T10792] udc dummy_udc.0: failed to start g1: -19 [ 424.876123][T10792] UDC core: g1: couldn't find an available UDC or it's busy [ 424.936164][ T26] audit: type=1800 audit(1794098909.327:312): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1867" name="p_chmask" dev="configfs" ino=62404 res=0 errno=0 [ 424.970141][T10794] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 424.976650][T10792] ip_tables: iptables: counters copy to user failed while replacing table [ 424.983825][T10794] udc dummy_udc.0: failed to start g1: -19 [ 424.998575][T10794] UDC core: g1: couldn't find an available UDC or it's busy [ 425.211946][T10804] FAULT_INJECTION: forcing a failure. [ 425.211946][T10804] name failslab, interval 1, probability 0, space 0, times 3 [ 425.225046][T10804] CPU: 0 PID: 10804 Comm: syz.1.1870 Not tainted syzkaller #0 [ 425.225069][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 425.225081][T10804] Call Trace: [ 425.225089][T10804] [ 425.225096][T10804] dump_stack_lvl+0x188/0x24e [ 425.225130][T10804] ? show_regs_print_info+0x12/0x12 [ 425.225154][T10804] ? load_image+0x410/0x410 [ 425.225175][T10804] ? __might_sleep+0xd0/0xd0 [ 425.225192][T10804] ? __lock_acquire+0x7ea0/0x7ea0 [ 425.225220][T10804] should_fail_ex+0x390/0x4c0 [ 425.225244][T10804] should_failslab+0x5/0x20 [ 425.225260][T10804] slab_pre_alloc_hook+0x59/0x300 [ 425.225281][T10804] ? __kernfs_new_node+0xa6/0x7f0 [ 425.225302][T10804] __kmem_cache_alloc_node+0x4f/0x270 [ 425.225323][T10804] ? __kernfs_new_node+0xa6/0x7f0 [ 425.225339][T10804] __kmalloc_node_track_caller+0xa0/0x240 [ 425.225360][T10804] kstrdup_const+0x56/0x90 [ 425.225385][T10804] __kernfs_new_node+0xa6/0x7f0 [ 425.225410][T10804] ? kernfs_new_node+0x250/0x250 [ 425.225439][T10804] ? make_kgid+0x1c4/0x650 [ 425.225464][T10804] ? from_kuid_munged+0x6e0/0x6e0 [ 425.225488][T10804] kernfs_new_node+0x148/0x250 [ 425.225509][T10804] kernfs_create_dir_ns+0x40/0x120 [ 425.225528][T10804] sysfs_create_dir_ns+0x12c/0x290 [ 425.225551][T10804] ? __lock_acquire+0x7ea0/0x7ea0 [ 425.225589][T10804] ? sysfs_warn_dup+0xa0/0xa0 [ 425.225617][T10804] ? do_raw_spin_unlock+0x11d/0x230 [ 425.225643][T10804] kobject_add_internal+0x617/0xca0 [ 425.225669][T10804] kobject_add+0x160/0x230 [ 425.225693][T10804] ? kobject_init+0x1c0/0x1c0 [ 425.225719][T10804] ? get_device_parent+0x288/0x3e0 [ 425.225812][T10804] device_add+0x470/0x1050 [ 425.225837][T10804] netdev_register_kobject+0x184/0x320 [ 425.225906][T10804] register_netdevice+0x133a/0x1b80 [ 425.225968][T10804] ? netif_stacked_transfer_operstate+0x200/0x200 [ 425.225992][T10804] ? alloc_netdev_mqs+0xb92/0xf50 [ 425.226013][T10804] ? validate_linkmsg+0x3db/0x4c0 [ 425.226064][T10804] ? rtnl_create_link+0x905/0xb90 [ 425.226087][T10804] ? batadv_softif_validate+0x70/0x70 [ 425.226175][T10804] rtnl_newlink+0x14b3/0x1f90 [ 425.226228][T10804] ? rtnl_setlink+0x510/0x510 [ 425.226250][T10804] ? trace_raw_output_contention_end+0xd0/0xd0 [ 425.226273][T10804] ? __lock_acquire+0x142d/0x7ea0 [ 425.226297][T10804] ? rcu_is_watching+0x11/0xa0 [ 425.226391][T10804] ? trace_contention_end+0x5f/0x170 [ 425.226416][T10804] ? __mutex_lock+0x1ab/0xb40 [ 425.226446][T10804] ? rcu_read_unlock+0x8c/0xa0 [ 425.226488][T10804] ? rtnl_setlink+0x510/0x510 [ 425.226509][T10804] rtnetlink_rcv_msg+0x863/0xfb0 [ 425.226536][T10804] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 425.226574][T10804] ? rtnetlink_bind+0x80/0x80 [ 425.226596][T10804] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 425.226621][T10804] ? __lock_acquire+0x7ea0/0x7ea0 [ 425.226642][T10804] ? lock_chain_count+0x20/0x20 [ 425.226666][T10804] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 425.226689][T10804] ? lockdep_hardirqs_on+0x94/0x140 [ 425.226710][T10804] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 425.226731][T10804] ? _raw_spin_unlock+0x40/0x40 [ 425.226750][T10804] ? __dev_queue_xmit+0x1496/0x3a70 [ 425.226777][T10804] ? rcu_preempt_deferred_qs_irqrestore+0x837/0xc30 [ 425.226851][T10804] ? rcu_read_unlock_special+0x640/0x640 [ 425.226870][T10804] ? memcpy+0x3c/0x60 [ 425.226903][T10804] netlink_rcv_skb+0x1ef/0x440 [ 425.226956][T10804] ? rtnetlink_bind+0x80/0x80 [ 425.226977][T10804] ? netlink_ack+0x1160/0x1160 [ 425.227006][T10804] ? __rcu_read_unlock+0x78/0xd0 [ 425.227022][T10804] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.227048][T10804] netlink_unicast+0x7ad/0x920 [ 425.227086][T10804] netlink_sendmsg+0x8ad/0xbd0 [ 425.227121][T10804] ? netlink_getsockopt+0x550/0x550 [ 425.227145][T10804] ? apparmor_socket_sendmsg+0x16c/0x330 [ 425.227169][T10804] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 425.227224][T10804] ? security_socket_sendmsg+0x7c/0xa0 [ 425.227243][T10804] ? netlink_getsockopt+0x550/0x550 [ 425.227267][T10804] ____sys_sendmsg+0x5ed/0x9a0 [ 425.227333][T10804] ? __sys_sendmsg_sock+0x30/0x30 [ 425.227353][T10804] ? __import_iovec+0x306/0x510 [ 425.227395][T10804] ? import_iovec+0x6f/0xa0 [ 425.227418][T10804] ___sys_sendmsg+0x2a2/0x360 [ 425.227445][T10804] ? __sys_sendmsg+0x2a0/0x2a0 [ 425.227507][T10804] __se_sys_sendmsg+0x1c3/0x2b0 [ 425.227530][T10804] ? __x64_sys_sendmsg+0x80/0x80 [ 425.227629][T10804] ? lockdep_hardirqs_on+0x94/0x140 [ 425.227654][T10804] do_syscall_64+0x4c/0xa0 [ 425.227678][T10804] ? clear_bhb_loop+0x60/0xb0 [ 425.227698][T10804] ? clear_bhb_loop+0x60/0xb0 [ 425.227721][T10804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.227742][T10804] RIP: 0033:0x7fe02379fb19 [ 425.227759][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.227775][T10804] RSP: 002b:00007fe024686028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.227798][T10804] RAX: ffffffffffffffda RBX: 00007fe023a25fa0 RCX: 00007fe02379fb19 [ 425.227848][T10804] RDX: 0000000020000840 RSI: 0000200000000300 RDI: 0000000000000006 [ 425.227902][T10804] RBP: 00007fe023837b70 R08: 0000000000000000 R09: 0000000000000000 [ 425.227912][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.227923][T10804] R13: 00007fe023a26038 R14: 00007fe023a25fa0 R15: 00007ffe29b9ea88 [ 425.227948][T10804] [ 425.229513][T10804] kobject_add_internal failed for batadv1 (error: -12 parent: net) [ 425.558282][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 428.475853][ T26] audit: type=1800 audit(1794098912.867:313): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1880" name="p_chmask" dev="configfs" ino=63123 res=0 errno=0 [ 428.477724][ T26] audit: type=1800 audit(1794098912.867:314): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1880" name="UDC" dev="configfs" ino=63124 res=0 errno=0 [ 428.478506][T10845] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 428.478701][T10845] udc dummy_udc.0: failed to start g1: -19 [ 428.481738][T10845] UDC core: g1: couldn't find an available UDC or it's busy [ 428.664828][ T26] audit: type=1800 audit(1794098913.057:315): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1881" name="UDC" dev="configfs" ino=63613 res=0 errno=0 [ 428.665332][T10847] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 428.666228][T10847] udc dummy_udc.0: failed to start g1: -19 [ 428.666628][T10847] UDC core: g1: couldn't find an available UDC or it's busy [ 428.676932][T10847] ip_tables: iptables: counters copy to user failed while replacing table [ 428.761068][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.146376][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 430.833638][ T26] audit: type=1800 audit(1794098915.227:316): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1891" name="p_chmask" dev="configfs" ino=63228 res=0 errno=0 [ 430.878224][T10882] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 430.916071][T10882] udc dummy_udc.0: failed to start g1: -19 [ 430.932498][ T26] audit: type=1800 audit(1794098915.257:317): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1891" name="UDC" dev="configfs" ino=63229 res=0 errno=0 [ 430.980699][T10882] UDC core: g1: couldn't find an available UDC or it's busy [ 432.045145][ T26] audit: type=1800 audit(1794098916.437:318): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1897" name="p_chmask" dev="configfs" ino=63715 res=0 errno=0 [ 432.078225][T10901] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 432.130675][T10901] udc dummy_udc.0: failed to start g1: -19 [ 432.150488][ T26] audit: type=1800 audit(1794098916.467:319): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1897" name="UDC" dev="configfs" ino=63716 res=0 errno=0 [ 432.165474][T10901] UDC core: g1: couldn't find an available UDC or it's busy [ 432.193839][T10910] ip_tables: iptables: counters copy to user failed while replacing table [ 432.360304][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 433.318544][ T26] audit: type=1800 audit(1794098917.707:320): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1906" name="p_chmask" dev="configfs" ino=63292 res=0 errno=0 [ 433.346274][T10933] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 433.360104][T10933] udc dummy_udc.0: failed to start g1: -19 [ 433.368984][ T26] audit: type=1800 audit(1794098917.737:321): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1906" name="UDC" dev="configfs" ino=63874 res=0 errno=0 [ 433.390435][T10933] UDC core: g1: couldn't find an available UDC or it's busy [ 434.469016][T10951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 435.338172][T10951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 435.363947][T10951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 435.370674][T10951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 435.377091][T10951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 435.464971][ T26] audit: type=1800 audit(1794098919.857:322): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1914" name="p_chmask" dev="configfs" ino=63344 res=0 errno=0 [ 435.492463][T10962] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error! [ 435.499374][T10962] udc dummy_udc.0: failed to start g1: -19 [ 435.509268][ T26] audit: type=1800 audit(1794098919.887:323): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1914" name="UDC" dev="configfs" ino=63345 res=0 errno=0 [ 435.536597][T10962] UDC core: g1: couldn't find an available UDC or it's busy [ 435.549533][T10962] ip_tables: iptables: counters copy to user failed while replacing table [ 435.817253][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 436.429965][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 437.390066][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 437.390183][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 437.396178][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 437.402229][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.918744][ T26] audit: type=1800 audit(1794098922.307:324): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1928" name="p_chmask" dev="configfs" ino=64033 res=0 errno=0 [ 437.961225][ T26] audit: type=1800 audit(1794098922.357:325): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1928" name="UDC" dev="configfs" ino=64039 res=0 errno=0 [ 437.979574][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 438.155673][T11019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 438.182390][T11019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 438.207523][T11019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 438.246427][T11019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 438.271590][T11019] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 438.690287][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 439.872266][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.878740][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.190015][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.196299][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 440.270388][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 440.276911][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 440.350146][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 440.941086][ T26] audit: type=1800 audit(1794098926.332:326): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1942" name="p_chmask" dev="configfs" ino=64636 res=0 errno=0 [ 440.972042][T11065] ip_tables: iptables: counters copy to user failed while replacing table [ 440.981430][ T26] audit: type=1800 audit(1794098926.352:327): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1942" name="UDC" dev="configfs" ino=64639 res=0 errno=0 [ 441.266652][T11079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 441.288380][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1950'. [ 441.330363][T11079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 441.380041][ T5569] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 441.499072][T11079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 441.667563][T11079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.843952][T11079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 442.251557][ T5569] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.262038][ T5569] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 442.273404][ T5569] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 442.287298][ T5569] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 442.305329][ T5569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.704426][ T26] audit: type=1800 audit(1794098928.092:328): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1959" name="p_chmask" dev="configfs" ino=64274 res=0 errno=0 [ 442.734468][T11110] ip_tables: iptables: counters copy to user failed while replacing table [ 442.747326][ T5569] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 442.761560][ T5569] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 442.776797][ T5569] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 442.890507][ T26] audit: type=1800 audit(1794098928.122:329): pid=11110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1959" name="UDC" dev="configfs" ino=64277 res=0 errno=0 [ 442.947576][ T5569] cxacru: probe of 4-1:1.0 failed with error -71 [ 443.111401][ T5569] usb 4-1: USB disconnect, device number 19 [ 443.309964][ T4294] Bluetooth: hci1: command 0x0c1a tx timeout [ 443.389922][ T4294] Bluetooth: hci0: command 0x0c1a tx timeout [ 443.549966][ T4293] Bluetooth: hci2: command 0x0c1a tx timeout [ 443.710123][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.870114][ T4294] Bluetooth: hci4: command 0x0c1a tx timeout [ 444.221235][ T26] audit: type=1800 audit(1794098929.612:330): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1971" name="p_chmask" dev="configfs" ino=64826 res=0 errno=0 [ 444.236169][T11145] ip_tables: iptables: counters copy to user failed while replacing table [ 444.333486][ T26] audit: type=1800 audit(1794098929.612:331): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1971" name="UDC" dev="configfs" ino=64827 res=0 errno=0 [ 446.512841][ T26] audit: type=1800 audit(1794098931.902:332): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1983" name="p_chmask" dev="configfs" ino=64388 res=0 errno=0 [ 446.544639][T11181] ip_tables: iptables: counters copy to user failed while replacing table [ 446.571925][ T26] audit: type=1800 audit(1794098931.902:333): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1983" name="UDC" dev="configfs" ino=64389 res=0 errno=0 [ 446.609949][ T9534] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 446.713124][T11188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 446.735126][T11188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 446.777628][T11188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 446.802164][ T9534] usb 1-1: Using ep0 maxpacket: 32 [ 446.809347][ T9534] usb 1-1: unable to get BOS descriptor or descriptor too short [ 446.822274][T11188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 446.836771][ T9534] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 446.864080][ T9534] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 446.887584][ T9534] usb 1-1: config 14 has no interface number 0 [ 446.908262][ T9534] usb 1-1: config 14 has no interface number 1 [ 446.928441][ T9534] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 446.964717][ T9534] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 446.990177][T11188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.002017][ T9534] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 447.046688][ T9534] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.089104][ T9534] usb 1-1: config 14 interface 57 has no altsetting 0 [ 447.110537][ T9534] usb 1-1: config 14 interface 228 has no altsetting 0 [ 447.119529][ T9534] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 447.147344][ T9534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.173851][ T9534] usb 1-1: Product: syz [ 447.174714][T11198] fuse: Bad value for 'fd' [ 447.184530][ T9534] usb 1-1: Manufacturer: syz [ 447.203981][ T9534] usb 1-1: SerialNumber: syz [ 447.662596][ T9534] legousbtower 1-1:14.57: interrupt endpoints not found [ 447.881030][ T9534] legousbtower 1-1:14.228: interrupt endpoints not found [ 448.750003][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 448.756069][ T4293] Bluetooth: hci1: command 0x0c1a tx timeout [ 448.830215][ T4294] Bluetooth: hci3: command 0x0c1a tx timeout [ 448.836302][ T4294] Bluetooth: hci2: command 0x0c1a tx timeout [ 448.935375][ T26] audit: type=1800 audit(1794098934.322:334): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1995" name="p_chmask" dev="configfs" ino=65080 res=0 errno=0 [ 448.968692][T11224] ip_tables: iptables: counters copy to user failed while replacing table [ 448.992116][ T26] audit: type=1800 audit(1794098934.352:335): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1995" name="UDC" dev="configfs" ino=65081 res=0 errno=0 [ 449.069986][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 449.112543][T11236] fuse: Bad value for 'fd' [ 449.113392][T11232] ------------[ cut here ]------------ [ 449.122988][T11232] kernel BUG at net/sunrpc/svc.c:605! [ 449.132529][T11232] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 449.138766][T11232] CPU: 1 PID: 11232 Comm: syz.4.1997 Not tainted syzkaller #0 [ 449.146217][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 449.156270][T11232] RIP: 0010:svc_destroy+0x184/0x190 [ 449.161536][T11232] Code: 5f 5d e9 7f dd 5e f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 74 77 f8 e9 17 ff ff ff e8 9c 10 26 f8 <0f> 0b e8 95 10 26 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 449.181139][T11232] RSP: 0018:ffffc90004eefb10 EFLAGS: 00010283 [ 449.187211][T11232] RAX: ffffffff895c5804 RBX: ffff88802fac3450 RCX: 0000000000080000 [ 449.195179][T11232] RDX: ffffc9000ea81000 RSI: 0000000000005f5a RDI: 0000000000005f5b [ 449.203145][T11232] RBP: ffffc90004eefcb8 R08: ffffffff91b623bf R09: 1ffffffff236c477 [ 449.211106][T11232] R10: dffffc0000000000 R11: fffffbfff236c478 R12: dffffc0000000000 [ 449.219088][T11232] R13: dffffc0000000000 R14: ffff88802fac3468 R15: 0000000000000001 [ 449.227052][T11232] FS: 00007ff5a81056c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 449.235989][T11232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.242587][T11232] CR2: 00007f2e3430bff8 CR3: 000000002a57d000 CR4: 00000000003506e0 [ 449.250550][T11232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.258514][T11232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.266512][T11232] Call Trace: [ 449.269784][T11232] [ 449.272705][T11232] write_ports+0xa26/0xb80 [ 449.277232][T11232] ? write_versions+0xbb0/0xbb0 [ 449.282075][T11232] ? __lock_acquire+0x7ea0/0x7ea0 [ 449.287098][T11232] ? __virt_addr_valid+0x188/0x540 [ 449.292269][T11232] ? __might_fault+0xc2/0x120 [ 449.296986][T11232] ? __might_fault+0xa6/0x120 [ 449.301655][T11232] ? _copy_from_user+0x10b/0x170 [ 449.306641][T11232] ? simple_transaction_get+0x119/0x140 [ 449.312225][T11232] nfsctl_transaction_write+0x105/0x150 [ 449.317764][T11232] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 449.323405][T11232] vfs_write+0x2dc/0x9a0 [ 449.327671][T11232] ? file_end_write+0x250/0x250 [ 449.332521][T11232] ? __fget_files+0x28/0x460 [ 449.337109][T11232] ? __fget_files+0x3fc/0x460 [ 449.341797][T11232] ? __fdget_pos+0x2ae/0x360 [ 449.346412][T11232] ? ksys_write+0x70/0x260 [ 449.350818][T11232] ksys_write+0x14d/0x260 [ 449.355138][T11232] ? __ia32_sys_read+0x80/0x80 [ 449.359890][T11232] ? lockdep_hardirqs_on+0x94/0x140 [ 449.365075][T11232] do_syscall_64+0x4c/0xa0 [ 449.369506][T11232] ? clear_bhb_loop+0x60/0xb0 [ 449.374172][T11232] ? clear_bhb_loop+0x60/0xb0 [ 449.378840][T11232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.384747][T11232] RIP: 0033:0x7ff5a719fb19 [ 449.389158][T11232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.408860][T11232] RSP: 002b:00007ff5a8105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.417271][T11232] RAX: ffffffffffffffda RBX: 00007ff5a7425fa0 RCX: 00007ff5a719fb19 [ 449.425245][T11232] RDX: 0000000000000005 RSI: 0000200000000580 RDI: 0000000000000003 [ 449.433203][T11232] RBP: 00007ff5a7237b70 R08: 0000000000000000 R09: 0000000000000000 [ 449.441176][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.449134][T11232] R13: 00007ff5a7426038 R14: 00007ff5a7425fa0 R15: 00007ffcb7a91268 [ 449.457104][T11232] [ 449.460122][T11232] Modules linked in: [ 449.464047][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.496790][T11232] ---[ end trace 0000000000000000 ]--- [ 449.502468][T11232] RIP: 0010:svc_destroy+0x184/0x190 [ 449.507920][T11232] Code: 5f 5d e9 7f dd 5e f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 74 77 f8 e9 17 ff ff ff e8 9c 10 26 f8 <0f> 0b e8 95 10 26 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 449.528129][T11232] RSP: 0018:ffffc90004eefb10 EFLAGS: 00010283 [ 449.542428][T11232] RAX: ffffffff895c5804 RBX: ffff88802fac3450 RCX: 0000000000080000 [ 449.552003][T11232] RDX: ffffc9000ea81000 RSI: 0000000000005f5a RDI: 0000000000005f5b [ 449.560196][T11232] RBP: ffffc90004eefcb8 R08: ffffffff91b623bf R09: 1ffffffff236c477 [ 449.568435][T11232] R10: dffffc0000000000 R11: fffffbfff236c478 R12: dffffc0000000000 [ 449.576640][T11232] R13: dffffc0000000000 R14: ffff88802fac3468 R15: 0000000000000001 [ 449.585254][T11232] FS: 00007ff5a81056c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 449.594302][T11232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.601329][T11232] CR2: 000000110c4424fc CR3: 000000002a57d000 CR4: 00000000003506e0 [ 449.609375][T11232] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.617428][T11232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.625572][T11232] Kernel panic - not syncing: Fatal exception [ 449.631901][T11232] Kernel Offset: disabled [ 449.636323][T11232] Rebooting in 86400 seconds..