last executing test programs: 1m3.223963844s ago: executing program 2 (id=1528): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1ef0ff0300000000000000003e2f53", @ANYRES32=0x1, @ANYBLOB="70d9214c00"/20, @ANYRES32=r0, @ANYBLOB="0500000005000000050000000200"/28], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r3], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0xd, 0xc812, 0x5}) io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m0.830714502s ago: executing program 2 (id=1535): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076214d68305f766972745f7769666900"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x80) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r4, 0x186a0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="ff0200090500000000000000000000000300050000a0000002004e23ac1414bb0000000000000000"], 0x28}, 0x1, 0x7}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) 57.858946042s ago: executing program 2 (id=1544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 57.235059795s ago: executing program 2 (id=1548): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0xffffffff}, 0x7, 0x0, 0x0, 0x5, 0x0}}) 54.586350298s ago: executing program 2 (id=1553): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 54.035166029s ago: executing program 2 (id=1557): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x10000a0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents(r1, &(0x7f0000000480)=""/47, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003f0033121abd7000fbdbdf250900"], 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) r6 = socket(0x10, 0x803, 0x0) write(r6, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x8200000, 0xa1, 0xfffffffd, 0x4000007}) sendto(r6, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) 37.327684067s ago: executing program 32 (id=1557): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x10000a0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40880, 0x20) getdents(r1, &(0x7f0000000480)=""/47, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003f0033121abd7000fbdbdf250900"], 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) r6 = socket(0x10, 0x803, 0x0) write(r6, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x8200000, 0xa1, 0xfffffffd, 0x4000007}) sendto(r6, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) 15.422597649s ago: executing program 1 (id=1674): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 7.224874755s ago: executing program 0 (id=1689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='25', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='1\n', 0x2) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000d00)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, 0x0, 0x0) close(r4) 7.159335116s ago: executing program 4 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.893755681s ago: executing program 0 (id=1691): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000080)=0x0) dup2(r1, r2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000c0b01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xe0ff, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) io_submit(r3, 0x0, &(0x7f0000000240)) write(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r6, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r6, &(0x7f0000000140)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) poll(&(0x7f0000000040)=[{r0, 0xc048}, {r0, 0x20}, {r0, 0x1000}, {r0, 0x18}, {r0, 0x1100}], 0x5, 0x7f) 5.694476555s ago: executing program 3 (id=1692): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x67]}}]}) 5.640372166s ago: executing program 4 (id=1693): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="050000000500000005000000020000000000000000"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.383265561s ago: executing program 3 (id=1694): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 4.807688633s ago: executing program 3 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x0, 0x7f, 0x86, 0x6, 0xfd, 0x2, 0x2, 0x4, 0x0, 0x0, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.551192259s ago: executing program 3 (id=1696): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.444021131s ago: executing program 4 (id=1697): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) socket(0x11, 0x5, 0x400101) syz_open_dev$vim2m(0x0, 0x1000001, 0x2) 2.935175451s ago: executing program 3 (id=1698): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x115200, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000040)=0xffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0xc0, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r2, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000540)) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100090a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a0100"/63], 0x50}, 0x1, 0x7}, 0x24000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) 2.934985341s ago: executing program 0 (id=1699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0a", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.48014415s ago: executing program 4 (id=1700): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='25', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='1\n', 0x2) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000d00)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, 0x0, 0x0) close(r4) 2.470765621s ago: executing program 0 (id=1701): rseq(&(0x7f0000000080), 0x3a, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x11, 0xffffffffffffffff, 0xef8eb000) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl724\x00', [0x100, 0xf, 0xcd, 0x6, 0x4, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0xb, 0x1, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) 2.359287843s ago: executing program 1 (id=1702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.070657559s ago: executing program 4 (id=1703): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000080)={0xffffffff, 0xa000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00'}) getpgrp(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.97694335s ago: executing program 1 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r1, 0xb97534d5fe9704cf, 0x70bc2b, 0x25dfdbfd, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 1.777343755s ago: executing program 3 (id=1705): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x400, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 1.196391486s ago: executing program 5 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x11dc}}, 0x0) 1.101901698s ago: executing program 0 (id=1706): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="050000000500000005000000020000000000000000"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000"], 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.076510148s ago: executing program 1 (id=1707): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 495.521771ms ago: executing program 1 (id=1708): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x1, @loopback, 0x5}, @ib={0x1b, 0x1, 0x35, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 294.140355ms ago: executing program 1 (id=1709): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5cec, 0x2, 0x3432564e, 0x7, 0x0, [{0x0, 0xfffffffd}, {0xf, 0xe}, {0x7, 0x6c4}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x6}, {0x282}, {0x2, 0x8cb}], 0x8, 0x8, 0x1, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) 274.496675ms ago: executing program 5 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1000, 0x1, 0x400, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000006b0a", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 179.186147ms ago: executing program 4 (id=1711): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 150.440587ms ago: executing program 0 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='25', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nullb/nullb1/zone_size\x00', 0x2, 0x0) write(r2, &(0x7f0000000900)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='1\n', 0x2) mount(0x0, &(0x7f0000000c00)='./dev\x00', &(0x7f0000000d00)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/nullb1\x00', 0x2, 0x0) write(r4, 0x0, 0x0) close(r4) 0s ago: executing program 5 (id=1713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): a cause=failed comm="syz.3.679" name="power" dev="configfs" ino=40309 res=0 errno=0 [ 251.950424][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.688'. [ 251.990042][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 253.129902][ T26] audit: type=1800 audit(1786072704.471:121): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.691" name="size" dev="configfs" ino=40396 res=0 errno=0 [ 253.185131][ T26] audit: type=1800 audit(1786072704.511:122): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.691" name="zoned" dev="configfs" ino=40399 res=0 errno=0 [ 253.205820][ T26] audit: type=1800 audit(1786072704.511:123): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.691" name="zone_size" dev="configfs" ino=40400 res=0 errno=0 [ 253.226757][ T26] audit: type=1800 audit(1786072704.521:124): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.691" name="power" dev="configfs" ino=40401 res=0 errno=0 [ 253.546338][ T4258] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 253.906700][ T4258] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.026576][ T4258] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.233557][ T4258] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.566536][ T4258] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 254.577385][ T4258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.585631][ T4258] usb 4-1: Product: syz [ 254.628277][ T4258] usb 4-1: Manufacturer: syz [ 254.632943][ T4258] usb 4-1: SerialNumber: syz [ 254.717902][ T4258] hub 4-1:1.0: bad descriptor, ignoring hub [ 254.735240][ T6422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.700'. [ 254.746241][ T4258] hub: probe of 4-1:1.0 failed with error -5 [ 254.746250][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 255.252733][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 255.448735][ T4258] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 255.516966][ T4258] usb 4-1: USB disconnect, device number 5 [ 255.538337][ T4258] usblp0: removed [ 255.741663][ T26] audit: type=1800 audit(1786072707.081:125): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.706" name="size" dev="configfs" ino=40447 res=0 errno=0 [ 255.803675][ T26] audit: type=1800 audit(1786072707.081:126): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.706" name="zoned" dev="configfs" ino=40448 res=0 errno=0 [ 255.859792][ T26] audit: type=1800 audit(1786072707.081:127): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.706" name="zone_size" dev="configfs" ino=40449 res=0 errno=0 [ 255.888005][ T26] audit: type=1800 audit(1786072707.081:128): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.706" name="power" dev="configfs" ino=40450 res=0 errno=0 [ 255.911856][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.918446][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.253491][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.716'. [ 259.306398][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 259.671481][ T26] audit: type=1800 audit(1786072711.011:129): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="size" dev="configfs" ino=39730 res=0 errno=0 [ 259.795779][ T26] audit: type=1800 audit(1786072711.041:130): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="zoned" dev="configfs" ino=39734 res=0 errno=0 [ 259.865016][ T26] audit: type=1800 audit(1786072711.041:131): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="zone_size" dev="configfs" ino=39735 res=0 errno=0 [ 259.906258][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 259.944286][ T26] audit: type=1800 audit(1786072711.041:132): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.717" name="power" dev="configfs" ino=39736 res=0 errno=0 [ 260.047985][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 260.098740][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 260.123519][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 260.143520][ T6492] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 260.156206][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 260.316786][ T23] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 260.341613][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.370932][ T23] usb 5-1: config 0 descriptor?? [ 260.405277][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 260.423306][ T23] gspca_main: sq930x-2.14.0 probing 041e:403c [ 261.794127][ T26] audit: type=1800 audit(1786072713.131:133): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.731" name="size" dev="configfs" ino=40544 res=0 errno=0 [ 262.086295][ T23] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 262.114289][ T26] audit: type=1800 audit(1786072713.441:134): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.731" name="zoned" dev="configfs" ino=39849 res=0 errno=0 [ 262.166964][ T23] sq930x: probe of 5-1:0.0 failed with error -71 [ 262.233985][ T23] usb 5-1: USB disconnect, device number 11 [ 262.398952][ T26] audit: type=1800 audit(1786072713.451:135): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.731" name="zone_size" dev="configfs" ino=39850 res=0 errno=0 [ 262.594330][ T26] audit: type=1800 audit(1786072713.501:136): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.731" name="power" dev="configfs" ino=39851 res=0 errno=0 [ 263.780340][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 264.577271][ T26] audit: type=1800 audit(1786072715.371:137): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.743" name="size" dev="configfs" ino=39892 res=0 errno=0 [ 264.648777][ T26] audit: type=1800 audit(1786072715.961:138): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.743" name="zoned" dev="configfs" ino=40666 res=0 errno=0 [ 264.730456][ T26] audit: type=1800 audit(1786072715.961:139): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.743" name="zone_size" dev="configfs" ino=40667 res=0 errno=0 [ 264.924147][ T4234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 264.979323][ T26] audit: type=1800 audit(1786072715.961:140): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.743" name="power" dev="configfs" ino=40668 res=0 errno=0 [ 266.136569][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 267.156383][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.281450][ T4234] usb 2-1: config 8 has an invalid interface number: 220 but max is 1 [ 267.331759][ T4232] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 267.341828][ T4234] usb 2-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 267.393968][ T4234] usb 2-1: config 8 has no interface number 0 [ 267.403866][ T4234] usb 2-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.428143][ T4234] usb 2-1: config 8 interface 220 has no altsetting 0 [ 267.448584][ T4234] usb 2-1: config 8 interface 1 has no altsetting 0 [ 267.766985][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.045986][ T4232] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 268.090260][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.116311][ T4234] usb 2-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 268.156038][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.166254][ T4232] usb 1-1: Product: syz [ 268.170833][ T4232] usb 1-1: Manufacturer: syz [ 268.175647][ T4232] usb 1-1: SerialNumber: syz [ 268.204031][ T4234] usb 2-1: Product: syz [ 268.244339][ T4234] usb 2-1: Manufacturer: syz [ 268.287943][ T26] audit: type=1800 audit(1786072719.631:141): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.758" name="size" dev="configfs" ino=40738 res=0 errno=0 [ 268.316324][ T4234] usb 2-1: can't set config #8, error -71 [ 268.387552][ T4234] usb 2-1: USB disconnect, device number 7 [ 268.432017][ T26] audit: type=1800 audit(1786072719.661:142): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.758" name="zoned" dev="configfs" ino=40739 res=0 errno=0 [ 268.459877][ T26] audit: type=1800 audit(1786072719.661:143): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.758" name="zone_size" dev="configfs" ino=40740 res=0 errno=0 [ 268.758464][ T23] usb 1-1: USB disconnect, device number 13 [ 268.840762][ T26] audit: type=1800 audit(1786072719.661:144): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.758" name="power" dev="configfs" ino=40741 res=0 errno=0 [ 269.206560][ T4258] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 269.364972][ T6618] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 269.374315][ T6618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 269.383858][ T6618] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 269.396569][ T6618] syz.4.760 (6618) used greatest stack depth: 18352 bytes left [ 269.456449][ T26] audit: type=1800 audit(1786072720.701:145): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.760" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 269.676362][ T4258] usb 3-1: Using ep0 maxpacket: 16 [ 269.796695][ T4258] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.815377][ T4258] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.996566][ T4258] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.010393][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.022579][ T4258] usb 3-1: Product: syz [ 270.030131][ T4258] usb 3-1: Manufacturer: syz [ 270.034901][ T4258] usb 3-1: SerialNumber: syz [ 270.896900][ T4234] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 271.236461][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 271.566329][ T4203] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 271.578286][ T4234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.309835][ T4258] usb 3-1: 0:2 : does not exist [ 274.022722][ T4258] usb 3-1: USB disconnect, device number 9 [ 274.036512][ T4234] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 274.054500][ T4234] usb 4-1: can't read configurations, error -71 [ 276.058225][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.867699][ T4241] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 276.918013][ T4234] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 277.136308][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 277.226318][ T4234] usb 4-1: Using ep0 maxpacket: 32 [ 277.336863][ T4241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.376451][ T4234] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 277.405906][ T4234] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 277.425889][ T4234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 277.438246][ T4241] usb 5-1: config 8 has an invalid interface number: 220 but max is 1 [ 277.447784][ T4241] usb 5-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 277.466225][ T4234] usb 4-1: config 1 has no interface number 0 [ 277.474760][ T4241] usb 5-1: config 8 has no interface number 0 [ 277.482199][ T4234] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.499260][ T4241] usb 5-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.519030][ T4234] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 277.545621][ T4241] usb 5-1: config 8 interface 220 has no altsetting 0 [ 277.555598][ T4241] usb 5-1: config 8 interface 1 has no altsetting 0 [ 277.567816][ T4234] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 277.581568][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.654329][ T4234] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 277.783055][ T4241] usb 5-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 277.795950][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.817422][ T4241] usb 5-1: Product: syz [ 277.821637][ T4241] usb 5-1: Manufacturer: syz [ 277.843242][ T4241] usb 5-1: SerialNumber: syz [ 277.886281][ T4234] snd_usb_pod 4-1:1.1: set_interface failed [ 277.894660][ T4234] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 277.910116][ T4234] snd_usb_pod: probe of 4-1:1.1 failed with error -71 [ 277.936069][ T4234] usb 4-1: USB disconnect, device number 8 [ 278.122762][ T6693] udc-core: couldn't find an available UDC or it's busy [ 278.157390][ T6693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.182612][ T6693] udc-core: couldn't find an available UDC or it's busy [ 278.182651][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 278.204764][ T6693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.243218][ T6693] udc-core: couldn't find an available UDC or it's busy [ 278.259858][ T6693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 278.397597][ T4241] xr_serial 5-1:8.220: xr_serial converter detected [ 278.446370][ T4241] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 278.459989][ T4241] xr_serial: probe of ttyUSB0 failed with error -71 [ 278.567241][ T4241] usb 5-1: USB disconnect, device number 12 [ 278.737347][ T4241] xr_serial 5-1:8.220: device disconnected [ 280.658435][ T6752] netlink: 36 bytes leftover after parsing attributes in process `syz.4.802'. [ 280.701700][ T4241] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 280.946482][ T4241] usb 3-1: Using ep0 maxpacket: 32 [ 281.077011][ T4241] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 281.105735][ T4241] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 281.118141][ T4241] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 281.127692][ T4241] usb 3-1: config 1 has no interface number 0 [ 281.133994][ T4241] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.164986][ T4241] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 281.294665][ T4241] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 281.400598][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.727757][ T4241] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 282.148302][ T4241] snd_usb_pod 3-1:1.1: set_interface failed [ 282.217676][ T4241] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 282.225085][ T4241] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 282.237316][ T4241] usb 3-1: USB disconnect, device number 10 [ 286.446259][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 287.336909][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 287.516608][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.626380][ T23] usb 3-1: config 8 has an invalid interface number: 220 but max is 1 [ 287.636077][ T23] usb 3-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 287.636441][ T6012] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 288.458730][ T23] usb 3-1: config 8 has no interface number 0 [ 288.465375][ T23] usb 3-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.479258][ T23] usb 3-1: config 8 interface 220 has no altsetting 0 [ 288.486719][ T23] usb 3-1: config 8 interface 1 has no altsetting 0 [ 288.656702][ T23] usb 3-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 288.665819][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.686502][ T23] usb 3-1: Product: syz [ 288.690828][ T23] usb 3-1: Manufacturer: syz [ 288.695834][ T23] usb 3-1: SerialNumber: syz [ 288.856475][ T6012] usb 5-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 288.963532][ T6810] udc-core: couldn't find an available UDC or it's busy [ 288.980920][ T6810] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 289.009837][ T6810] udc-core: couldn't find an available UDC or it's busy [ 289.030163][ T6810] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 289.038482][ T6012] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 289.058595][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.088249][ T6012] usb 5-1: Product: syz [ 289.096419][ T6012] usb 5-1: Manufacturer: syz [ 289.113716][ T6012] usb 5-1: SerialNumber: syz [ 289.164308][ T23] xr_serial 3-1:8.220: xr_serial converter detected [ 289.232803][ T23] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 289.242792][ T23] xr_serial: probe of ttyUSB0 failed with error -71 [ 289.325031][ T23] usb 3-1: USB disconnect, device number 11 [ 289.364184][ T23] xr_serial 3-1:8.220: device disconnected [ 289.446477][ T6012] usb 5-1: Cannot retrieve CPort count: -71 [ 289.458176][ T6012] usb 5-1: Cannot retrieve CPort count: -71 [ 289.497093][ T6012] es2_ap_driver: probe of 5-1:246.0 failed with error -71 [ 289.566653][ T6012] usb 5-1: USB disconnect, device number 13 [ 292.476432][ T6012] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 292.786557][ T6012] usb 3-1: Using ep0 maxpacket: 32 [ 292.946656][ T6012] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.047811][ T6012] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 293.092343][ T6012] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 293.206006][ T6012] usb 3-1: config 14 has no interface number 0 [ 293.310613][ T6012] usb 3-1: config 14 has no interface number 1 [ 293.391534][ T6012] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 294.294432][ T6012] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0x1B, skipping [ 294.327102][ T6012] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 294.338289][ T6012] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 294.352902][ T6012] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 294.369408][ T6012] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.384340][ T6012] usb 3-1: config 14 interface 57 has no altsetting 0 [ 294.412045][ T6012] usb 3-1: config 14 interface 228 has no altsetting 0 [ 295.511229][ T6012] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 295.520917][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.606532][ T6012] usb 3-1: can't set config #14, error -71 [ 295.623484][ T6012] usb 3-1: USB disconnect, device number 12 [ 302.722732][ T6978] fuse: Bad value for 'rootmode' [ 310.197446][ T4203] Bluetooth: hci4: ACL packet for unknown connection handle 3439 [ 311.745323][ T26] audit: type=1326 audit(1786072763.081:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 311.818245][ T26] audit: type=1326 audit(1786072763.121:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 311.968712][ T26] audit: type=1326 audit(1786072763.291:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 312.056358][ T26] audit: type=1326 audit(1786072763.291:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 312.086457][ T26] audit: type=1326 audit(1786072763.291:150): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 312.157912][ T26] audit: type=1326 audit(1786072763.291:151): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 312.300489][ T26] audit: type=1326 audit(1786072763.291:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 312.336512][ T26] audit: type=1326 audit(1786072763.291:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 312.972634][ T26] audit: type=1326 audit(1786072763.291:154): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 313.335091][ T26] audit: type=1326 audit(1786072763.291:155): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=7108 comm="syz.3.916" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9acbd30d9 code=0x7ffc0000 [ 317.409795][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.443703][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.824233][ T7174] vivid-001: ================= START STATUS ================= [ 317.832611][ T7174] vivid-001: Test Pattern: 75% Colorbar [ 317.839900][ T7174] vivid-001: Fill Percentage of Frame: 100 [ 317.845926][ T7174] vivid-001: Horizontal Movement: No Movement [ 317.852570][ T7174] vivid-001: Vertical Movement: No Movement [ 317.859543][ T7174] vivid-001: OSD Text Mode: All [ 317.864636][ T7174] vivid-001: Show Border: false [ 317.954047][ T7174] vivid-001: Show Square: false [ 318.043384][ T7174] vivid-001: Sensor Flipped Horizontally: false [ 318.614836][ T7174] vivid-001: Sensor Flipped Vertically: false [ 318.658592][ T7174] vivid-001: Insert SAV Code in Image: false [ 318.679212][ T7174] vivid-001: Insert EAV Code in Image: false [ 318.685554][ T7174] vivid-001: Reduced Framerate: false [ 318.719759][ T7174] vivid-001: Enable Capture Cropping: true [ 318.808186][ T7174] vivid-001: Enable Capture Composing: true [ 318.936660][ T4234] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 318.956873][ T7174] vivid-001: Enable Capture Scaler: true [ 319.062070][ T7174] vivid-001: Timestamp Source: End of Frame [ 319.147645][ T7174] vivid-001: Colorspace: sRGB [ 319.220150][ T7174] vivid-001: Transfer Function: Default [ 319.300822][ T7174] vivid-001: Y'CbCr Encoding: Default [ 319.347103][ T4234] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 319.395932][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.416977][ T7174] vivid-001: HSV Encoding: Hue 0-179 [ 319.426711][ T7174] vivid-001: Quantization: Default [ 319.431898][ T7174] vivid-001: Apply Alpha To Red Only: false [ 319.438163][ T7174] vivid-001: Standard Aspect Ratio: 4x3 [ 319.692198][ T4234] usb 2-1: config 0 descriptor?? [ 319.699276][ T7174] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 319.707315][ T7174] vivid-001: DV Timings: 640x480p59 inactive [ 319.713345][ T7174] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 319.737634][ T4234] cp210x 2-1:0.0: cp210x converter detected [ 319.751938][ T7174] vivid-001: Maximum EDID Blocks: 2 [ 319.763439][ T7174] vivid-001: Limited RGB Range (16-235): false [ 319.770545][ T7174] vivid-001: Rx RGB Quantization Range: Automatic [ 319.778647][ T7174] vivid-001: Power Present: 0x00000001 [ 319.784624][ T7174] tpg source WxH: 640x360 (Y'CbCr) [ 319.790112][ T7174] tpg field: 1 [ 319.793501][ T7174] tpg crop: 640x360@0x0 [ 319.797898][ T7174] tpg compose: 640x360@0x0 [ 319.802445][ T7174] tpg colorspace: 8 [ 319.806359][ T7174] tpg transfer function: 0/0 [ 319.811108][ T7174] tpg Y'CbCr encoding: 0/0 [ 319.816416][ T7174] tpg quantization: 0/0 [ 319.820692][ T7174] tpg RGB range: 0/2 [ 319.825374][ T7174] vivid-001: ================== END STATUS ================== [ 319.926540][ T6012] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 320.051569][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 320.346613][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 320.507688][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 320.557017][ T6012] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 320.595819][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.674117][ T6012] usb 5-1: Product: syz [ 320.746481][ T21] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.756241][ T6012] usb 5-1: Manufacturer: syz [ 320.760857][ T6012] usb 5-1: SerialNumber: syz [ 320.776867][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.818087][ T21] usb 3-1: Product: syz [ 320.822309][ T21] usb 3-1: Manufacturer: syz [ 320.837424][ T6012] usb 5-1: config 0 descriptor?? [ 320.873553][ T21] usb 3-1: SerialNumber: syz [ 320.890300][ T4234] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 320.899756][ T4234] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 320.911655][ T4234] usb 2-1: cp210x converter now attached to ttyUSB0 [ 320.919987][ T4234] usb 2-1: USB disconnect, device number 8 [ 320.928902][ T21] usb 3-1: config 0 descriptor?? [ 320.980966][ T21] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 321.016903][ T21] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 321.097769][ T4234] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 321.106147][ T4234] cp210x 2-1:0.0: device disconnected [ 321.376695][ T6012] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 321.385429][ T6012] usb 5-1: Firmware version (0.0) predates our first public release. [ 321.400803][ T6012] usb 5-1: Please update to version 0.2 or newer [ 321.717298][ T6012] usb 5-1: Firmware: build Ôb [ 321.722716][ T21] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 321.745568][ T6012] usb 5-1: atusb_probe: initialization failed, error = -32 [ 321.847184][ T6012] atusb: probe of 5-1:0.0 failed with error -32 [ 322.340124][ T4234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 322.707423][ T4234] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.916726][ T4234] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 322.954962][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.061193][ T4234] usb 2-1: Product: syz [ 323.119429][ T4234] usb 2-1: Manufacturer: syz [ 323.223328][ T21] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 323.233208][ T21] em28xx 3-1:0.0: board has no eeprom [ 323.236501][ T4234] usb 2-1: SerialNumber: syz [ 323.264992][ T4241] usb 5-1: USB disconnect, device number 14 [ 323.308686][ T4234] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 323.516890][ T21] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 323.564255][ T21] em28xx 3-1:0.0: dvb set to bulk mode. [ 323.644681][ T21] em28xx 3-1:0.0: Binding DVB extension [ 324.666272][ T4234] gspca_mr97310a: reg write [19] error -110 [ 324.672561][ T4234] mr97310a: probe of 2-1:1.0 failed with error -110 [ 324.895918][ T4231] usb 3-1: USB disconnect, device number 13 [ 324.903254][ T7240] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 324.944112][ T21] em28xx 3-1:0.0: Registering input extension [ 324.992549][ T4231] em28xx 3-1:0.0: Disconnecting em28xx [ 325.011919][ T4231] em28xx 3-1:0.0: Closing input extension [ 325.142489][ T4231] em28xx 3-1:0.0: Freeing device [ 325.566216][ T4234] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 326.627531][ T4241] usb 2-1: USB disconnect, device number 9 [ 326.676282][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 326.800486][ T4234] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.839972][ T4234] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.897067][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 326.970330][ T4234] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 327.007286][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.045784][ T4234] usb 5-1: config 0 descriptor?? [ 327.516539][ T4264] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 327.552843][ T4234] hid-generic 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 327.742359][ T4234] usb 5-1: USB disconnect, device number 15 [ 328.677879][ T7296] fido_id[7296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 328.736526][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.768382][ T4264] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 329.756745][ T4264] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 329.766546][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.476470][ T4264] gud 1-1:1.0: Failed to get properties (error=-5) [ 330.486370][ T4264] gud: probe of 1-1:1.0 failed with error -5 [ 330.762713][ T4241] usb 1-1: USB disconnect, device number 14 [ 332.373411][ T4234] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 332.907597][ T4234] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 332.961708][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.058624][ T4234] usb 1-1: Product: syz [ 333.078091][ T4234] usb 1-1: Manufacturer: syz [ 333.099760][ T4234] usb 1-1: SerialNumber: syz [ 333.150548][ T4234] usb 1-1: config 0 descriptor?? [ 333.224383][ T4234] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 015 [ 334.423263][ T4234] i2c i2c-1: failure reading functionality [ 334.457676][ T4234] i2c i2c-1: connected i2c-tiny-usb device [ 334.475659][ T4234] usb 1-1: USB disconnect, device number 15 [ 334.553444][ T7377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1006'. [ 342.578935][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 342.701548][ T7475] netlink: 'syz.0.1040': attribute type 16 has an invalid length. [ 342.779993][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 344.166209][ T7492] input: syz0 as /devices/virtual/input/input6 [ 346.578566][ T7543] ALSA: mixer_oss: invalid OSS volume 'user' [ 346.584622][ T7543] ALSA: mixer_oss: invalid OSS volume '(GÙ®' [ 346.610097][ T7543] ALSA: mixer_oss: invalid OSS volume '¦E<¼¨^0 -¸ô‹ž±&ÐN—l„O¸²ûpì‚' [ 346.623194][ T7543] ALSA: mixer_oss: invalid OSS volume 'o3¡ÃS‹Ì)Ñk°•p&:ñ[Ò®_' [ 346.666413][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 346.666431][ T26] audit: type=1800 audit(1786072797.981:160): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1066" name="size" dev="configfs" ino=43664 res=0 errno=0 [ 347.943198][ T26] audit: type=1800 audit(1786072798.001:161): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1066" name="zoned" dev="configfs" ino=43666 res=0 errno=0 [ 348.798437][ T26] audit: type=1800 audit(1786072798.001:162): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1066" name="zone_size" dev="configfs" ino=43667 res=0 errno=0 [ 348.821867][ T26] audit: type=1800 audit(1786072798.001:163): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1066" name="power" dev="configfs" ino=43668 res=0 errno=0 [ 349.018362][ T7563] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 349.829233][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 350.066633][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 350.075785][ T7589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.589043][ T7592] hpfs: Bad magic ... probably not HPFS [ 350.612996][ T7592] hpfs: Bad magic ... probably not HPFS [ 350.949979][ T26] audit: type=1800 audit(1786072802.291:164): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1080" name="size" dev="configfs" ino=44438 res=0 errno=0 [ 350.994925][ T7589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.024432][ T26] audit: type=1800 audit(1786072802.331:165): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1080" name="zoned" dev="configfs" ino=44439 res=0 errno=0 [ 351.115302][ T7598] binder: 7593:7598 ioctl c0306201 0 returned -14 [ 351.752264][ T26] audit: type=1800 audit(1786072802.331:166): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1080" name="zone_size" dev="configfs" ino=44440 res=0 errno=0 [ 351.828997][ T26] audit: type=1800 audit(1786072802.331:167): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1080" name="power" dev="configfs" ino=44441 res=0 errno=0 [ 352.046268][ T4234] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 353.746493][ T4234] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 353.842411][ T26] audit: type=1800 audit(1786072805.181:168): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1094" name="size" dev="configfs" ino=44516 res=0 errno=0 [ 353.876904][ T4234] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 353.891436][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.902058][ T26] audit: type=1800 audit(1786072805.211:169): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1094" name="zoned" dev="configfs" ino=44517 res=0 errno=0 [ 354.585459][ T7635] netlink: 'syz.2.1093': attribute type 12 has an invalid length. [ 354.594313][ T7635] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 355.190713][ T4234] usb 4-1: config 0 has no interfaces? [ 355.199509][ T26] audit: type=1800 audit(1786072805.211:170): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1094" name="zone_size" dev="configfs" ino=44518 res=0 errno=0 [ 355.232328][ T26] audit: type=1800 audit(1786072805.211:171): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1094" name="power" dev="configfs" ino=44519 res=0 errno=0 [ 355.296296][ T4234] usb 4-1: unable to read config index 1 descriptor/start: -71 [ 355.322321][ T4234] usb 4-1: can't read configurations, error -71 [ 357.977955][ T4203] Bluetooth: hci0: ACL packet for unknown connection handle 3439 [ 358.592706][ T7691] block nbd2: NBD_DISCONNECT [ 359.674695][ T26] audit: type=1800 audit(1786072811.011:172): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="size" dev="configfs" ino=44668 res=0 errno=0 [ 359.733682][ T26] audit: type=1800 audit(1786072811.041:173): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="zoned" dev="configfs" ino=44671 res=0 errno=0 [ 359.789440][ T26] audit: type=1800 audit(1786072811.041:174): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="zone_size" dev="configfs" ino=44672 res=0 errno=0 [ 359.819020][ T26] audit: type=1800 audit(1786072811.041:175): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1115" name="power" dev="configfs" ino=44673 res=0 errno=0 [ 360.069890][ T21] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 360.542589][ T7719] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 360.552257][ T7719] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 360.559787][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 360.816299][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 360.836384][ T23] usb 2-1: device descriptor read/64, error -71 [ 360.860905][ T26] audit: type=1326 audit(1786072812.201:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.4.1128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251c6b0d9 code=0x7ffc0000 [ 360.893173][ T26] audit: type=1326 audit(1786072812.231:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.4.1128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251c6b0d9 code=0x7ffc0000 [ 360.986985][ T21] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 361.029122][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.106702][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 361.143144][ T21] usb 3-1: config 0 has no interface number 0 [ 361.155963][ T26] audit: type=1326 audit(1786072812.291:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.4.1128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f0251c6b0d9 code=0x7ffc0000 [ 361.228726][ T21] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0x1C, skipping [ 361.326364][ T23] usb 2-1: device descriptor read/64, error -71 [ 361.340351][ T21] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 361.449867][ T26] audit: type=1326 audit(1786072812.291:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7734 comm="syz.4.1128" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0251c6b0d9 code=0x7ffc0000 [ 361.476491][ T23] usb usb2-port1: attempt power cycle [ 361.521719][ T21] usb 3-1: config 0 interface 146 altsetting 0 has an invalid endpoint with address 0xF2, skipping [ 361.626032][ T4203] Bluetooth: hci1: ACL packet for unknown connection handle 3439 [ 361.946611][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 361.955295][ T21] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 361.989656][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.066415][ T21] usb 3-1: Product: syz [ 362.086645][ T23] usb 2-1: device descriptor read/8, error -71 [ 362.214018][ T21] usb 3-1: Manufacturer: syz [ 362.274859][ T21] usb 3-1: SerialNumber: syz [ 362.366356][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 362.411279][ T21] usb 3-1: config 0 descriptor?? [ 362.462066][ T26] audit: type=1800 audit(1786072813.801:180): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1131" name="size" dev="configfs" ino=44733 res=0 errno=0 [ 362.484321][ T7709] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 362.518548][ T26] audit: type=1800 audit(1786072813.801:181): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1131" name="zoned" dev="configfs" ino=44734 res=0 errno=0 [ 362.547642][ T21] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 362.566729][ T23] usb 2-1: device descriptor read/8, error -71 [ 362.661077][ T4232] usb 3-1: USB disconnect, device number 14 [ 362.706625][ T23] usb usb2-port1: unable to enumerate USB device [ 365.546402][ T21] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 365.772871][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 365.772982][ T26] audit: type=1800 audit(1786072817.111:188): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1157" name="size" dev="configfs" ino=45060 res=0 errno=0 [ 365.846454][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 365.987725][ T21] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 366.006525][ T26] audit: type=1800 audit(1786072817.171:189): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1157" name="zoned" dev="configfs" ino=45061 res=0 errno=0 [ 366.029146][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.095944][ T21] usb 5-1: config 0 descriptor?? [ 366.103811][ T26] audit: type=1800 audit(1786072817.211:190): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1157" name="zone_size" dev="configfs" ino=45063 res=0 errno=0 [ 366.177902][ T26] audit: type=1800 audit(1786072817.231:191): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1157" name="power" dev="configfs" ino=45064 res=0 errno=0 [ 367.437729][ T21] gspca_main: sq930x-2.14.0 probing 041e:403c [ 367.735850][ T26] audit: type=1800 audit(1786072819.071:192): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1168" name="size" dev="configfs" ino=44927 res=0 errno=0 [ 367.793367][ T26] audit: type=1800 audit(1786072819.071:193): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1168" name="zoned" dev="configfs" ino=44928 res=0 errno=0 [ 367.818276][ T4232] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 367.844453][ T26] audit: type=1800 audit(1786072819.101:194): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1168" name="zone_size" dev="configfs" ino=44929 res=0 errno=0 [ 367.871884][ T26] audit: type=1800 audit(1786072819.101:195): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1168" name="power" dev="configfs" ino=44930 res=0 errno=0 [ 368.066241][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 368.211095][ T4232] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 368.386570][ T4232] usb 3-1: config 0 has no interface number 0 [ 368.396000][ T4232] usb 3-1: config 0 interface 153 has no altsetting 0 [ 368.547531][ T21] gspca_sq930x: ucbus_write failed -71 [ 368.562736][ T21] sq930x: probe of 5-1:0.0 failed with error -71 [ 368.687864][ T21] usb 5-1: USB disconnect, device number 16 [ 369.236499][ T4232] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 369.259418][ T4232] usb 3-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 369.433516][ T4232] usb 3-1: Product: syz [ 369.438523][ T4232] usb 3-1: Manufacturer: syz [ 369.443229][ T4232] usb 3-1: SerialNumber: syz [ 369.452265][ T4232] usb 3-1: config 0 descriptor?? [ 369.638523][ T7876] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4196] was attempted by ""[7876] [ 369.886319][ T26] audit: type=1800 audit(1786072821.201:196): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1181" name="size" dev="configfs" ino=45194 res=0 errno=0 [ 369.967776][ T26] audit: type=1800 audit(1786072821.201:197): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1181" name="zoned" dev="configfs" ino=45195 res=0 errno=0 [ 370.006863][ T4232] hub 3-1:0.153: bad descriptor, ignoring hub [ 370.019444][ T4232] hub: probe of 3-1:0.153 failed with error -5 [ 370.032788][ T4232] sierra 3-1:0.153: Sierra USB modem converter detected [ 370.093260][ T4232] usb 3-1: USB disconnect, device number 15 [ 370.125258][ T4232] sierra 3-1:0.153: device disconnected [ 374.816727][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 374.816747][ T26] audit: type=1800 audit(1786072826.081:200): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1209" name="size" dev="configfs" ino=45338 res=0 errno=0 [ 375.183825][ T26] audit: type=1800 audit(1786072826.081:201): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1209" name="zoned" dev="configfs" ino=45339 res=0 errno=0 [ 375.218291][ T26] audit: type=1800 audit(1786072826.091:202): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1209" name="zone_size" dev="configfs" ino=45340 res=0 errno=0 [ 375.302207][ T7971] binder: 7942:7971 ioctl c0306201 0 returned -14 [ 375.314315][ T26] audit: type=1800 audit(1786072826.091:203): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1209" name="power" dev="configfs" ino=45341 res=0 errno=0 [ 375.788920][ T7981] tipc: Started in network mode [ 375.794548][ T7981] tipc: Node identity 7f000001, cluster identity 4711 [ 375.958371][ T7981] lo: MTU too low for tipc bearer [ 375.963596][ T7981] tipc: Enabling of bearer rejected, failed to enable media [ 376.900990][ T26] audit: type=1800 audit(1786072828.241:204): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1223" name="size" dev="configfs" ino=46228 res=0 errno=0 [ 377.129233][ T26] audit: type=1800 audit(1786072828.281:205): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1223" name="zoned" dev="configfs" ino=46229 res=0 errno=0 [ 377.175003][ T26] audit: type=1800 audit(1786072828.281:206): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1223" name="zone_size" dev="configfs" ino=46231 res=0 errno=0 [ 377.208745][ T26] audit: type=1800 audit(1786072828.281:207): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1223" name="power" dev="configfs" ino=46232 res=0 errno=0 [ 377.406258][ T4264] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 377.419210][ T8017] CacheFiles: Failed to register: -95 [ 377.682735][ T4264] usb 3-1: Using ep0 maxpacket: 32 [ 377.806628][ T4264] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.902239][ T4264] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.066314][ T4264] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 378.206207][ T4264] usb 3-1: config 0 interface 0 has no altsetting 0 [ 378.228337][ T4264] usb 3-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 378.274573][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.507952][ T8027] ODEBUG: Out of memory. ODEBUG disabled [ 379.241789][ T1325] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 379.263335][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.271382][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.289121][ T4264] usb 3-1: config 0 descriptor?? [ 379.314802][ T1325] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 379.432206][ T8035] X25: received unknown 00 with LCI 000 [ 379.502940][ T1325] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 380.002158][ T4264] ntrig 0003:1B96:0012.0008: hidraw0: USB HID v0.01 Device [HID 1b96:0012] on usb-dummy_hcd.2-1/input0 [ 380.293298][ T4264] ntrig 0003:1B96:0012.0008: Firmware version: 1.15.25.63.3 (ff43 fb27) [ 380.521647][ T8043] fido_id[8043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 380.852547][ T1325] usb 3-1: USB disconnect, device number 16 [ 381.370194][ T8058] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 382.463123][ T8055] fido_id[8055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 382.588043][ T8067] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 382.858380][ T26] audit: type=1800 audit(1786072834.201:208): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1251" name="size" dev="configfs" ino=45619 res=0 errno=0 [ 382.916731][ T26] audit: type=1800 audit(1786072834.251:209): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1251" name="zone_size" dev="configfs" ino=46373 res=0 errno=0 [ 383.945381][ T26] audit: type=1800 audit(1786072834.251:210): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1251" name="power" dev="configfs" ino=46374 res=0 errno=0 [ 384.006377][ T1325] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 384.464841][ T8093] fuse: Invalid rootmode [ 384.876536][ T1325] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 385.505018][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.527567][ T1325] usb 5-1: Product: syz [ 385.645160][ T1325] usb 5-1: Manufacturer: syz [ 385.697640][ T1325] usb 5-1: SerialNumber: syz [ 385.719088][ T1325] usb 5-1: config 0 descriptor?? [ 385.819638][ T8122] udc-core: couldn't find an available UDC or it's busy [ 385.848142][ T8122] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 385.879003][ T1325] usb 5-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 385.897712][ T1325] usb 5-1: Firmware version (0.0) predates our first public release. [ 385.905962][ T26] audit: type=1800 audit(1786072837.241:211): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1265" name="size" dev="configfs" ino=46478 res=0 errno=0 [ 385.943471][ T1325] usb 5-1: Please update to version 0.2 or newer [ 385.986263][ T1325] usb 5-1: atusb_probe: initialization failed, error = -71 [ 385.992202][ T26] audit: type=1800 audit(1786072837.261:212): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1265" name="zone_size" dev="configfs" ino=46479 res=0 errno=0 [ 385.993629][ T1325] atusb: probe of 5-1:0.0 failed with error -71 [ 386.021143][ T4231] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 386.075144][ T1325] usb 5-1: USB disconnect, device number 17 [ 386.164079][ T26] audit: type=1800 audit(1786072837.261:213): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1265" name="power" dev="configfs" ino=46480 res=0 errno=0 [ 386.306629][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 386.516376][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 386.626850][ T4231] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 386.649385][ T4231] usb 4-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 386.718963][ T4231] usb 4-1: config 8 has no interface number 0 [ 386.760218][ T4231] usb 4-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.844374][ T4231] usb 4-1: config 8 interface 220 has no altsetting 0 [ 386.906671][ T4231] usb 4-1: config 8 interface 1 has no altsetting 0 [ 387.096304][ T4231] usb 4-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 387.186241][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.216217][ T4231] usb 4-1: Product: syz [ 387.220649][ T4231] usb 4-1: Manufacturer: syz [ 387.225634][ T4231] usb 4-1: SerialNumber: syz [ 387.828097][ T4231] xr_serial 4-1:8.220: xr_serial converter detected [ 387.846385][ T1325] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 387.886319][ T4231] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 388.106490][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 388.714169][ T4231] xr_serial: probe of ttyUSB0 failed with error -71 [ 388.756988][ T1325] usb 5-1: no configurations [ 388.761728][ T1325] usb 5-1: can't read configurations, error -22 [ 388.787617][ T4231] usb 4-1: USB disconnect, device number 11 [ 388.800019][ T4231] xr_serial 4-1:8.220: device disconnected [ 388.916142][ T1325] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 389.546225][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 389.956484][ T1325] usb 5-1: no configurations [ 389.968877][ T1325] usb 5-1: can't read configurations, error -22 [ 390.003054][ T1325] usb usb5-port1: attempt power cycle [ 390.213731][ T26] audit: type=1800 audit(1786072841.551:214): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1276" name="size" dev="configfs" ino=46544 res=0 errno=0 [ 390.496730][ T26] audit: type=1800 audit(1786072841.581:215): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1276" name="zoned" dev="configfs" ino=46545 res=0 errno=0 [ 390.671062][ T26] audit: type=1800 audit(1786072841.581:216): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1276" name="zone_size" dev="configfs" ino=46546 res=0 errno=0 [ 391.172695][ T26] audit: type=1800 audit(1786072841.591:217): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1276" name="power" dev="configfs" ino=46547 res=0 errno=0 [ 391.655090][ T8182] CIFS: Attempting to mount \\127.0.0.1\share [ 391.661886][ T8182] CIFS: VFS: No username specified [ 392.173468][ T8183] nvme_fcloop: unknown parameter or missing value 'w' [ 392.965320][ T26] audit: type=1800 audit(1786072844.301:218): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1291" name="size" dev="configfs" ino=45810 res=0 errno=0 [ 393.027395][ T26] audit: type=1800 audit(1786072844.331:219): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1291" name="zoned" dev="configfs" ino=45811 res=0 errno=0 [ 393.123432][ T26] audit: type=1800 audit(1786072844.331:220): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1291" name="zone_size" dev="configfs" ino=45812 res=0 errno=0 [ 393.179653][ T4264] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 393.217798][ T26] audit: type=1800 audit(1786072844.331:221): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1291" name="power" dev="configfs" ino=45813 res=0 errno=0 [ 393.608752][ T4264] usb 5-1: unable to get BOS descriptor or descriptor too short [ 393.716717][ T4264] usb 5-1: config 0 has no interfaces? [ 393.966229][ T4264] usb 5-1: string descriptor 0 read error: -22 [ 394.028821][ T4264] usb 5-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 394.076520][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.107364][ T4264] usb 5-1: config 0 descriptor?? [ 394.248654][ T1325] usb 5-1: USB disconnect, device number 21 [ 395.191018][ T26] audit: type=1800 audit(1786072846.531:222): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1304" name="size" dev="configfs" ino=46656 res=0 errno=0 [ 395.256828][ T26] audit: type=1800 audit(1786072846.561:223): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1304" name="zoned" dev="configfs" ino=46657 res=0 errno=0 [ 395.641176][ T4241] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 395.729765][ T26] audit: type=1800 audit(1786072846.561:224): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1304" name="zone_size" dev="configfs" ino=46658 res=0 errno=0 [ 395.805331][ T26] audit: type=1800 audit(1786072846.561:225): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1304" name="power" dev="configfs" ino=46659 res=0 errno=0 [ 395.886294][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 395.920071][ T26] audit: type=1326 audit(1786072847.071:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.0.1306" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ab88e30d9 code=0x0 [ 396.086011][ T4241] usb 2-1: unable to get BOS descriptor or descriptor too short [ 396.196341][ T4241] usb 2-1: config 8 has an invalid interface number: 220 but max is 1 [ 396.367818][ T4241] usb 2-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 396.401968][ T8251] binder: BINDER_SET_CONTEXT_MGR already set [ 396.406314][ T26] audit: type=1800 audit(1786072847.741:227): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1308" name="size" dev="configfs" ino=45875 res=0 errno=0 [ 396.442368][ T26] audit: type=1800 audit(1786072847.741:228): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1308" name="zoned" dev="configfs" ino=45876 res=0 errno=0 [ 396.453695][ T4241] usb 2-1: config 8 has no interface number 0 [ 396.468832][ T8251] binder: 8250:8251 ioctl 4018620d 200000004a80 returned -16 [ 396.477650][ T8253] binder: 8250:8253 ioctl 8010661b 0 returned -22 [ 396.484586][ T4241] usb 2-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.497710][ T26] audit: type=1800 audit(1786072847.741:229): pid=8249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1308" name="power" dev="configfs" ino=45877 res=0 errno=0 [ 396.517294][ T4241] usb 2-1: config 8 interface 220 has no altsetting 0 [ 396.555218][ T4241] usb 2-1: config 8 interface 1 has no altsetting 0 [ 396.686520][ T4203] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 397.677254][ T8260] 9pnet: Insufficient options for proto=fd [ 397.698441][ T4241] usb 2-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 397.708610][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.726252][ T4241] usb 2-1: Product: syz [ 397.730508][ T4241] usb 2-1: Manufacturer: syz [ 397.735862][ T4241] usb 2-1: SerialNumber: syz [ 397.783969][ T8270] udc-core: couldn't find an available UDC or it's busy [ 397.794017][ T8270] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 398.004199][ T8280] mmap: syz.2.1317 (8280) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 399.104877][ T26] audit: type=1800 audit(1786072850.441:230): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1320" name="size" dev="configfs" ino=45950 res=0 errno=0 [ 399.117439][ T4241] xr_serial 2-1:8.220: xr_serial converter detected [ 399.436557][ T26] audit: type=1800 audit(1786072850.461:231): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1320" name="zoned" dev="configfs" ino=45953 res=0 errno=0 [ 399.472232][ T26] audit: type=1800 audit(1786072850.461:232): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1320" name="power" dev="configfs" ino=45954 res=0 errno=0 [ 399.485899][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1322'. [ 399.606270][ T4241] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 399.636467][ T4241] xr_serial: probe of ttyUSB0 failed with error -71 [ 399.710006][ T4241] usb 2-1: USB disconnect, device number 14 [ 399.727306][ T4241] xr_serial 2-1:8.220: device disconnected [ 400.032193][ T4203] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 402.046233][ T4241] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 402.306264][ T4241] usb 5-1: Using ep0 maxpacket: 32 [ 402.469208][ T4241] usb 5-1: unable to get BOS descriptor or descriptor too short [ 403.006400][ T4241] usb 5-1: config 8 has an invalid interface number: 220 but max is 1 [ 403.014351][ T26] audit: type=1800 audit(1786072854.351:233): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1333" name="size" dev="configfs" ino=46061 res=0 errno=0 [ 403.045433][ T4241] usb 5-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 403.067619][ T26] audit: type=1800 audit(1786072854.401:234): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1333" name="zoned" dev="configfs" ino=46064 res=0 errno=0 [ 403.076839][ T4241] usb 5-1: config 8 has no interface number 0 [ 403.215395][ T4241] usb 5-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 403.215721][ T4241] usb 5-1: config 8 interface 220 has no altsetting 0 [ 403.215983][ T4241] usb 5-1: config 8 interface 1 has no altsetting 0 [ 403.331791][ T26] audit: type=1800 audit(1786072854.401:235): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1333" name="power" dev="configfs" ino=46065 res=0 errno=0 [ 403.396855][ T4241] usb 5-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 403.397019][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.397148][ T4241] usb 5-1: Product: syz [ 403.397166][ T4241] usb 5-1: Manufacturer: syz [ 403.397281][ T4241] usb 5-1: SerialNumber: syz [ 403.937660][ T8321] udc-core: couldn't find an available UDC or it's busy [ 404.055031][ T8321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 405.052430][ T4241] xr_serial 5-1:8.220: xr_serial converter detected [ 405.184338][ T8343] syz.2.1335 (8343) used greatest stack depth: 18032 bytes left [ 405.252791][ T4241] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 405.318725][ T4241] xr_serial: probe of ttyUSB0 failed with error -71 [ 405.557726][ T4241] usb 5-1: USB disconnect, device number 22 [ 405.574045][ T4241] xr_serial 5-1:8.220: device disconnected [ 406.162878][ T8366] syz.0.1346 sent an empty control message without MSG_MORE. [ 406.856859][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 406.871382][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 406.885227][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 406.894064][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 406.903913][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 406.912347][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 406.921695][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 406.929699][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 406.938810][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 406.947920][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 406.960079][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 406.968304][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 406.978270][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 406.986520][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 407.032420][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.040167][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 407.527930][ T8375] sctp: failed to load transform for md5: -2 [ 408.349821][ T8378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.609890][ T8431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1362'. [ 410.620462][ T8431] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 410.633960][ T8431] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1362'. [ 410.647964][ T8431] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 410.997967][ T6012] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 411.360681][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1368'. [ 411.360757][ T8440] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 412.307724][ T8452] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 412.874532][ T26] audit: type=1800 audit(1786072864.211:236): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1374" name="size" dev="configfs" ino=48130 res=0 errno=0 [ 412.907121][ T26] audit: type=1800 audit(1786072864.241:237): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1374" name="zoned" dev="configfs" ino=48131 res=0 errno=0 [ 412.929472][ T26] audit: type=1800 audit(1786072864.261:238): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1374" name="zone_size" dev="configfs" ino=48132 res=0 errno=0 [ 412.959319][ T26] audit: type=1800 audit(1786072864.271:239): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1374" name="power" dev="configfs" ino=48137 res=0 errno=0 [ 413.014493][ T6012] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.059309][ T6012] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.077418][ T8470] MTRR 1 not used [ 413.996259][ T6012] usb 2-1: string descriptor 0 read error: -71 [ 414.002712][ T6012] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 414.012520][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.046463][ T6012] usb 2-1: can't set config #1, error -71 [ 414.056468][ T6012] usb 2-1: USB disconnect, device number 15 [ 414.063744][ T8487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1380'. [ 415.892823][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 416.067659][ T26] audit: type=1800 audit(1786072867.411:240): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1387" name="size" dev="configfs" ino=47338 res=0 errno=0 [ 416.159770][ T26] audit: type=1800 audit(1786072867.431:241): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1387" name="zoned" dev="configfs" ino=47339 res=0 errno=0 [ 416.240945][ T26] audit: type=1800 audit(1786072867.431:242): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1387" name="zone_size" dev="configfs" ino=47340 res=0 errno=0 [ 416.321043][ T26] audit: type=1800 audit(1786072867.431:243): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1387" name="power" dev="configfs" ino=47341 res=0 errno=0 [ 416.387632][ T8514] CacheFiles: No cache directory specified [ 417.116318][ T2287] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 417.622465][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 417.888952][ T26] audit: type=1800 audit(1786072869.231:244): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1398" name="size" dev="configfs" ino=47437 res=0 errno=0 [ 417.970209][ T26] audit: type=1800 audit(1786072869.261:245): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1398" name="zoned" dev="configfs" ino=47438 res=0 errno=0 [ 418.036140][ T2287] usb 3-1: device descriptor read/64, error -71 [ 418.077431][ T26] audit: type=1800 audit(1786072869.271:246): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1398" name="zone_size" dev="configfs" ino=47439 res=0 errno=0 [ 418.119802][ T26] audit: type=1800 audit(1786072869.271:247): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1398" name="power" dev="configfs" ino=47440 res=0 errno=0 [ 418.163551][ T26] audit: type=1800 audit(1786072869.451:248): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1399" name="size" dev="configfs" ino=48208 res=0 errno=0 [ 418.223744][ T8539] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 418.225076][ T26] audit: type=1800 audit(1786072869.451:249): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1399" name="zoned" dev="configfs" ino=48209 res=0 errno=0 [ 418.267947][ T26] audit: type=1800 audit(1786072869.451:250): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1399" name="zone_size" dev="configfs" ino=48210 res=0 errno=0 [ 418.275139][ T8539] kvm: pic: level sensitive irq not supported [ 418.297799][ T26] audit: type=1800 audit(1786072869.451:251): pid=8537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1399" name="power" dev="configfs" ino=48211 res=0 errno=0 [ 418.324882][ T8539] kvm: pic: non byte read [ 418.325145][ T8539] kvm: pic: level sensitive irq not supported [ 418.336116][ T2287] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 418.339984][ T8539] kvm: pic: non byte read [ 418.384635][ T8539] kvm: pic: level sensitive irq not supported [ 418.384714][ T8539] kvm: pic: non byte read [ 418.424707][ T8539] kvm: pic: level sensitive irq not supported [ 418.424877][ T8539] kvm: pic: non byte read [ 418.526159][ T2287] usb 3-1: device descriptor read/64, error -71 [ 418.646368][ T2287] usb usb3-port1: attempt power cycle [ 418.705591][ T8562] xt_connbytes: Forcing CT accounting to be enabled [ 418.714237][ T8562] Cannot find set identified by id 0 to match [ 418.760058][ T26] audit: type=1800 audit(1786072870.101:252): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1410" name="size" dev="configfs" ino=47565 res=0 errno=0 [ 418.785613][ T26] audit: type=1800 audit(1786072870.101:253): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1410" name="zoned" dev="configfs" ino=47566 res=0 errno=0 [ 418.886154][ T4264] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 419.066285][ T2287] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 419.176384][ T2287] usb 3-1: device descriptor read/8, error -71 [ 419.266243][ T4264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.305974][ T4264] usb 4-1: config 0 has no interfaces? [ 419.323146][ T4264] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 419.335384][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.988626][ T4264] usb 4-1: config 0 descriptor?? [ 420.037260][ T2287] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 420.221508][ T8599] jffs2: notice: (8599) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 420.238859][ T4241] usb 4-1: USB disconnect, device number 12 [ 420.321294][ T2287] usb 3-1: device not accepting address 20, error -71 [ 420.333090][ T2287] usb usb3-port1: unable to enumerate USB device [ 420.468142][ T21] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 421.175861][ T8597] udc-core: couldn't find an available UDC or it's busy [ 421.697221][ T8597] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 421.954201][ T8611] ima: policy update completed [ 421.996209][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.148287][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 422.165458][ T21] usb 5-1: can't read configurations, error -71 [ 422.369912][ T4264] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 422.397412][ T8627] smpboot: CPU 1 is now offline [ 422.617002][ T4264] usb 4-1: device descriptor read/64, error -71 [ 422.808357][ T8637] fuse: Unknown parameter 'user_i00000000000000000000' [ 422.889405][ T4264] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 423.007418][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 423.007430][ T26] audit: type=1800 audit(1786072874.351:288): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 423.199672][ T26] audit: type=1800 audit(1786072874.451:289): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 423.266350][ T4264] usb 4-1: device descriptor read/64, error -71 [ 423.343797][ T26] audit: type=1800 audit(1786072874.631:290): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 423.389022][ T4264] usb usb4-port1: attempt power cycle [ 423.574222][ T26] audit: type=1800 audit(1786072874.711:291): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1446" name="size" dev="configfs" ino=48470 res=0 errno=0 [ 423.811606][ T26] audit: type=1800 audit(1786072874.711:292): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1446" name="zoned" dev="configfs" ino=48471 res=0 errno=0 [ 424.063749][ T4264] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 424.192806][ T26] audit: type=1800 audit(1786072874.711:293): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1446" name="zone_size" dev="configfs" ino=48472 res=0 errno=0 [ 424.216346][ T4264] usb 4-1: device descriptor read/8, error -71 [ 424.491478][ T26] audit: type=1800 audit(1786072874.711:294): pid=8653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1446" name="power" dev="configfs" ino=48473 res=0 errno=0 [ 424.516108][ T2287] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 424.524310][ T4264] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 424.667018][ T4264] usb 4-1: device descriptor read/8, error -71 [ 424.763350][ T26] audit: type=1800 audit(1786072874.741:295): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 424.859088][ T2287] usb 2-1: Using ep0 maxpacket: 8 [ 424.866672][ T4264] usb usb4-port1: unable to enumerate USB device [ 424.934961][ T26] audit: type=1800 audit(1786072874.791:296): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 425.036377][ T2287] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.100602][ T2287] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.119654][ T26] audit: type=1800 audit(1786072874.971:297): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 425.180903][ T8703] netlink: 'syz.4.1460': attribute type 12 has an invalid length. [ 426.476187][ T2287] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.642278][ T2287] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.678424][ T8703] netlink: 'syz.4.1460': attribute type 29 has an invalid length. [ 426.709442][ T8703] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1460'. [ 426.725311][ T2287] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.759311][ T2287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.768326][ T8703] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1460'. [ 428.089214][ T8713] udc-core: couldn't find an available UDC or it's busy [ 428.124311][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 428.124325][ T26] audit: type=1800 audit(1786072879.431:320): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1466" name="UDC" dev="configfs" ino=48729 res=0 errno=0 [ 428.346931][ T2287] usb 2-1: usb_control_msg returned -71 [ 428.360732][ T2287] usbtmc 2-1:16.0: can't read capabilities [ 428.510724][ T2287] usb 2-1: USB disconnect, device number 16 [ 428.520720][ T26] audit: type=1800 audit(1786072879.611:321): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 428.901426][ T26] audit: type=1800 audit(1786072879.681:322): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 429.027621][ T26] audit: type=1800 audit(1786072879.841:323): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129953 res=0 errno=0 [ 429.097887][ T26] audit: type=1800 audit(1786072879.841:324): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=129971 res=0 errno=0 [ 429.233196][ T26] audit: type=1800 audit(1786072880.121:325): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 429.357942][ T4232] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 429.403381][ T26] audit: type=1800 audit(1786072880.151:326): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1469" name="mem_sleep" dev="sysfs" ino=1154 res=0 errno=0 [ 429.473053][ T26] audit: type=1800 audit(1786072880.201:327): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 429.515729][ T8744] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 429.536821][ T8744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.565095][ T8744] bond1: (slave veth0_to_bond): making interface the new active one [ 429.574646][ T8744] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 429.584647][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 429.596287][ T4232] usb 5-1: device descriptor read/64, error -71 [ 429.619667][ T26] audit: type=1800 audit(1786072880.271:328): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 429.664792][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 429.683419][ T8744] device macvlan2 entered promiscuous mode [ 429.690555][ T8744] device bond1 entered promiscuous mode [ 429.697426][ T8744] device veth0_to_bond entered promiscuous mode [ 429.704634][ T8744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 429.712645][ T8744] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 429.738619][ T8744] device bond1 left promiscuous mode [ 429.744356][ T8744] device veth0_to_bond left promiscuous mode [ 429.822988][ T26] audit: type=1800 audit(1786072880.281:329): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1470" name="size" dev="configfs" ino=48790 res=0 errno=0 [ 429.876886][ T4232] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 430.089889][ T4232] usb 5-1: device descriptor read/64, error -71 [ 430.236313][ T4232] usb usb5-port1: attempt power cycle [ 430.338131][ T8758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1482'. [ 430.878467][ T4232] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 431.093349][ T4232] usb 5-1: device descriptor read/8, error -71 [ 432.476837][ T4232] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 432.554072][ T8779] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 432.602576][ T8783] autofs4:pid:8783:autofs_fill_super: called with bogus options [ 432.622801][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1490'. [ 432.749556][ T4232] usb 5-1: device not accepting address 28, error -71 [ 432.789260][ T4232] usb usb5-port1: unable to enumerate USB device [ 433.195760][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 433.195774][ T26] audit: type=1800 audit(1786072884.531:359): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 434.896614][ T26] audit: type=1800 audit(1786072885.961:360): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 435.020494][ T4232] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 436.297394][ T8813] udc-core: couldn't find an available UDC or it's busy [ 436.420523][ T8813] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 436.455872][ T26] audit: type=1800 audit(1786072886.211:361): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 436.502864][ T8813] udc-core: couldn't find an available UDC or it's busy [ 436.563407][ T8813] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 436.595687][ T26] audit: type=1800 audit(1786072887.651:362): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 438.012246][ T26] audit: type=1800 audit(1786072887.741:363): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 439.592644][ T26] audit: type=1800 audit(1786072887.781:364): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 441.371215][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.423798][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.440398][ T26] audit: type=1800 audit(1786072887.861:365): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 442.106126][ T26] audit: type=1800 audit(1786072887.921:366): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 442.372680][ T26] audit: type=1800 audit(1786072888.091:367): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 442.736229][ T4232] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 442.744108][ T4306] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 442.789610][ T26] audit: type=1800 audit(1786072888.121:368): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 442.882572][ T26] audit: type=1800 audit(1786072889.391:369): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 442.978871][ T4232] usb 5-1: device descriptor read/64, error -71 [ 442.985528][ T26] audit: type=1800 audit(1786072890.861:370): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 443.146181][ T4306] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 444.396142][ T4306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.426290][ T4306] usb 4-1: config 0 has no interface number 0 [ 444.433551][ T26] audit: type=1800 audit(1786072890.971:371): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 444.583799][ T4306] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.628036][ T4306] usb 4-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 444.853310][ T4232] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 444.874607][ T26] audit: type=1800 audit(1786072891.031:372): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 444.911196][ T4306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.951912][ T4306] usb 4-1: config 0 descriptor?? [ 444.974352][ T26] audit: type=1800 audit(1786072892.871:373): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 445.066227][ T26] audit: type=1800 audit(1786072892.931:374): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 445.088579][ T4232] usb 5-1: device descriptor read/64, error -71 [ 445.146811][ T4306] usb 4-1: USB disconnect, device number 17 [ 445.160929][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.257040][ T4232] usb usb5-port1: attempt power cycle [ 445.369873][ T26] audit: type=1800 audit(1786072892.961:375): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 445.649558][ T26] audit: type=1800 audit(1786072893.081:376): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 448.272170][ T26] audit: type=1800 audit(1786072893.431:377): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 448.339341][ T8932] netlink: 'syz.0.1543': attribute type 11 has an invalid length. [ 448.449726][ T26] audit: type=1804 audit(1786072893.501:378): pid=8876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1521" name="/newroot/291/file0" dev="tmpfs" ino=1534 res=1 errno=0 [ 448.953356][ T26] audit: type=1800 audit(1786072893.501:379): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 450.446137][ T26] audit: type=1800 audit(1786072893.561:380): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 451.579640][ T26] audit: type=1800 audit(1786072894.061:381): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 451.914378][ T8951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.010600][ T26] audit: type=1800 audit(1786072894.311:382): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35408 res=0 errno=0 [ 452.198048][ T26] audit: type=1800 audit(1786072896.281:383): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130492 res=0 errno=0 [ 452.355136][ T26] audit: type=1800 audit(1786072896.281:384): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=130532 res=0 errno=0 [ 452.589965][ T26] audit: type=1800 audit(1786072896.291:385): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=130499 res=0 errno=0 [ 454.193630][ T26] audit: type=1800 audit(1786072896.291:386): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=130500 res=0 errno=0 [ 454.694966][ T26] audit: type=1800 audit(1786072896.291:387): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=130501 res=0 errno=0 [ 454.834753][ T26] audit: type=1800 audit(1786072896.451:388): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130541 res=0 errno=0 [ 455.002023][ T26] audit: type=1800 audit(1786072896.471:389): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=130542 res=0 errno=0 [ 455.289320][ T9015] tmpfs: Unknown parameter 'grpquota' [ 455.425913][ T9015] Invalid ELF header magic: != ELF [ 455.475106][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 455.475118][ T26] audit: type=1800 audit(1786072906.811:435): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 455.753484][ T26] audit: type=1800 audit(1786072907.091:436): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 457.249709][ T26] audit: type=1800 audit(1786072907.091:437): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=130881 res=0 errno=0 [ 457.467559][ T26] audit: type=1800 audit(1786072907.201:438): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 457.605529][ T26] audit: type=1800 audit(1786072908.671:439): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 457.703171][ T9038] overlayfs: failed to resolve './bus': -2 [ 457.780954][ T26] audit: type=1800 audit(1786072908.761:440): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1576" name="size" dev="configfs" ino=50150 res=0 errno=0 [ 457.972747][ T26] audit: type=1800 audit(1786072908.761:441): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1576" name="zoned" dev="configfs" ino=50151 res=0 errno=0 [ 458.530580][ T26] audit: type=1800 audit(1786072908.761:442): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1576" name="zone_size" dev="configfs" ino=50152 res=0 errno=0 [ 458.662597][ T9059] udc-core: couldn't find an available UDC or it's busy [ 458.699420][ T9059] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 460.436825][ T26] audit: type=1800 audit(1786072908.761:443): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1576" name="power" dev="configfs" ino=50153 res=0 errno=0 [ 461.231058][ T9064] Restarting kernel threads ... done. [ 461.613284][ T26] audit: type=1800 audit(1786072908.841:444): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 462.892436][ T9074] gadgetfs: bound to dummy_udc driver [ 462.935221][ T26] audit: type=1800 audit(1786072908.921:445): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 463.176145][ T4232] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 463.186108][ T4306] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 464.484327][ T26] audit: type=1800 audit(1786072908.981:446): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 464.505597][ C0] gadgetfs: connected [ 464.515314][ T4306] gadgetfs: disconnected [ 464.618948][ T9083] udc-core: couldn't find an available UDC or it's busy [ 464.670947][ T26] audit: type=1800 audit(1786072909.101:447): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 464.733971][ T9083] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 464.837976][ T26] audit: type=1800 audit(1786072909.171:448): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 466.230442][ T26] audit: type=1800 audit(1786072909.281:449): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 466.329219][ T2287] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 466.338442][ T26] audit: type=1800 audit(1786072909.301:450): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 466.370767][ T26] audit: type=1800 audit(1786072909.821:451): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 466.524487][ T26] audit: type=1800 audit(1786072909.861:452): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 468.793543][ T9100] Restarting kernel threads ... done. [ 468.820707][ T26] audit: type=1800 audit(1786072911.741:453): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 468.923780][ T2287] usb 5-1: device descriptor read/all, error -71 [ 469.029655][ T9106] tipc: Started in network mode [ 470.628191][ T26] audit: type=1800 audit(1786072912.711:454): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 470.654250][ T9106] tipc: Node identity ce19f765aae8, cluster identity 4711 [ 470.739104][ T9106] tipc: Enabled bearer , priority 0 [ 470.838422][ T9114] syzkaller0: MTU too low for tipc bearer [ 470.869784][ T26] audit: type=1800 audit(1786072912.761:455): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 470.964712][ T9114] tipc: Disabling bearer [ 471.014626][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 471.026546][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 471.042309][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 471.052439][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 471.066649][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 471.076450][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 471.086699][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 471.234672][ T26] audit: type=1800 audit(1786072912.801:456): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 471.373998][ T26] audit: type=1800 audit(1786072914.261:457): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=50722 res=0 errno=0 [ 471.529740][ T26] audit: type=1800 audit(1786072914.351:458): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 471.649655][ T9120] chnl_net:caif_netlink_parms(): no params data found [ 471.657978][ T4232] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 471.681131][ T26] audit: type=1800 audit(1786072915.921:459): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 471.713010][ T9132] udc-core: couldn't find an available UDC or it's busy [ 471.766296][ T9132] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 471.840949][ T26] audit: type=1800 audit(1786072915.981:460): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 471.981350][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.036536][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.058273][ T9119] udc-core: couldn't find an available UDC or it's busy [ 472.075423][ T9132] vivid-000: disconnect [ 472.092107][ T9131] vivid-000: reconnect [ 472.104756][ T9120] device bridge_slave_0 entered promiscuous mode [ 472.116313][ T9119] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 472.170459][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.182742][ T26] audit: type=1800 audit(1786072916.121:461): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 472.261285][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.310374][ T9120] device bridge_slave_1 entered promiscuous mode [ 472.330560][ T26] audit: type=1800 audit(1786072916.151:462): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 472.353945][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 472.433349][ T9120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.495363][ T9120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.506252][ T4232] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 472.533457][ T4232] usb 5-1: can't read configurations, error -71 [ 472.714438][ T9120] team0: Port device team_slave_0 added [ 472.773596][ T9120] team0: Port device team_slave_1 added [ 472.808563][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 472.900305][ T9143] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1611'. [ 472.932749][ T9148] nvme_fabrics: unknown parameter or missing value 'nqn' in ctrl creation request [ 472.964985][ T8291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.315734][ T9150] Restarting kernel threads ... done. [ 474.328418][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 474.405196][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 474.405209][ T26] audit: type=1800 audit(1786072925.741:478): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 474.523783][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.040867][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.127399][ T26] audit: type=1800 audit(1786072925.881:479): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 476.169410][ T9162] MTRR 1 not used [ 476.478901][ T2287] Bluetooth: hci5: command 0x041b tx timeout [ 477.493382][ T26] audit: type=1800 audit(1786072925.901:480): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1616" name="unbind" dev="sysfs" ino=45738 res=0 errno=0 [ 477.520378][ T9120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.629286][ T8291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.652524][ T26] audit: type=1800 audit(1786072925.911:481): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135366 res=0 errno=0 [ 477.713583][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.870803][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.260851][ T26] audit: type=1800 audit(1786072927.431:482): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=135380 res=0 errno=0 [ 478.401230][ T9120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.429065][ T26] audit: type=1800 audit(1786072928.761:483): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 478.595207][ T9185] UBIFS error (pid: 9185): cannot open "ubi0_0", error -19 [ 478.604565][ T8291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.754947][ T26] audit: type=1800 audit(1786072928.901:484): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 478.913289][ T26] audit: type=1800 audit(1786072928.931:485): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 478.962745][ T8291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.034419][ T9120] device hsr_slave_0 entered promiscuous mode [ 479.054020][ T26] audit: type=1800 audit(1786072929.081:486): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 479.118303][ T9120] device hsr_slave_1 entered promiscuous mode [ 479.142629][ T9120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.173568][ T26] audit: type=1800 audit(1786072929.661:487): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 479.199683][ T9120] Cannot create hsr debugfs directory [ 479.570140][ T4306] Bluetooth: hci5: command 0x040f tx timeout [ 479.640178][ T26] audit: type=1800 audit(1786072929.731:488): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 479.793878][ T9215] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1634'. [ 479.809898][ T26] audit: type=1800 audit(1786072929.811:489): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 479.988882][ T8291] tipc: Left network mode [ 480.135191][ T26] audit: type=1800 audit(1786072930.051:490): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 480.728315][ T26] audit: type=1800 audit(1786072930.081:491): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="unbind" dev="sysfs" ino=45738 res=0 errno=0 [ 480.862736][ T9120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 482.047790][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 483.336154][ T26] audit: type=1800 audit(1786072930.171:492): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 483.416877][ T9244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1643'. [ 483.542219][ T9253] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 483.576556][ T9120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 483.638579][ T9120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 483.686156][ T26] audit: type=1800 audit(1786072930.191:493): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1627" name="del_device" dev="sysfs" ino=44184 res=0 errno=0 [ 483.779830][ T9120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.169563][ T26] audit: type=1800 audit(1786072930.431:494): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 484.226176][ T4264] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 484.395824][ T26] audit: type=1800 audit(1786072931.011:495): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136484 res=0 errno=0 [ 484.513528][ T26] audit: type=1800 audit(1786072931.011:496): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=136489 res=0 errno=0 [ 484.579640][ T9120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.729932][ T26] audit: type=1800 audit(1786072931.011:497): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=136493 res=0 errno=0 [ 484.755117][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.834830][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 484.891238][ T9120] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.026309][ T4264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.041781][ T26] audit: type=1800 audit(1786072931.011:498): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=136492 res=0 errno=0 [ 485.085618][ T4264] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 485.383325][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.402624][ T26] audit: type=1800 audit(1786072931.011:499): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=136495 res=0 errno=0 [ 485.456671][ T4264] usb 4-1: config 0 descriptor?? [ 485.590221][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.651999][ T26] audit: type=1800 audit(1786072931.071:500): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136768 res=0 errno=0 [ 485.685400][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.754087][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.763178][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.842417][ T26] audit: type=1800 audit(1786072931.071:501): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=136773 res=0 errno=0 [ 485.896606][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.954092][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.984250][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.991390][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.009694][ T26] audit: type=1800 audit(1786072931.071:502): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=136777 res=0 errno=0 [ 486.064828][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 486.094067][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 486.114919][ T26] audit: type=1800 audit(1786072931.071:503): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=136776 res=0 errno=0 [ 486.153487][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 486.183964][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 486.249701][ T26] audit: type=1800 audit(1786072931.071:504): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=136779 res=0 errno=0 [ 486.285858][ T9120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.356195][ T4264] usb 4-1: string descriptor 0 read error: -71 [ 486.394286][ T4264] cypress_m8 4-1:0.0: DeLorme Earthmate USB converter detected [ 486.406298][ T9120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.445642][ T26] audit: type=1800 audit(1786072931.101:505): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137052 res=0 errno=0 [ 486.478720][ T4264] earthmate ttyUSB0: required endpoint is missing [ 486.498513][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.562844][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 486.571152][ T4264] usb 4-1: USB disconnect, device number 18 [ 486.600189][ T4264] cypress_m8 4-1:0.0: device disconnected [ 486.611324][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 486.650515][ T26] audit: type=1800 audit(1786072931.101:506): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=137057 res=0 errno=0 [ 486.707657][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 486.760778][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 486.816488][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.889438][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 486.968369][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.113213][ T8291] device hsr_slave_0 left promiscuous mode [ 487.385500][ T8291] device hsr_slave_1 left promiscuous mode [ 487.419737][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.470083][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.528493][ T8291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.567759][ T8291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.625654][ T8291] device bridge_slave_1 left promiscuous mode [ 487.662411][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.755670][ T8291] device bridge_slave_0 left promiscuous mode [ 487.862446][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.174921][ T8291] device veth1_macvtap left promiscuous mode [ 489.194318][ T8291] device veth0_macvtap left promiscuous mode [ 489.236422][ T8291] device veth1_vlan left promiscuous mode [ 489.293843][ T8291] device veth0_vlan left promiscuous mode [ 489.895902][ T8291] team0 (unregistering): Port device team_slave_1 removed [ 489.955913][ T8291] team0 (unregistering): Port device team_slave_0 removed [ 489.995898][ T8291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.020587][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 490.020598][ T26] audit: type=1800 audit(1786072941.361:569): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 490.101122][ T8291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.343190][ T8291] bond0 (unregistering): Released all slaves [ 490.390161][ T26] audit: type=1800 audit(1786072941.731:570): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 490.479011][ T9305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 490.512836][ T9305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.545356][ T26] audit: type=1800 audit(1786072941.881:571): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 490.610980][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 490.670931][ T26] audit: type=1800 audit(1786072941.981:572): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=138677 res=0 errno=0 [ 491.016430][ T26] audit: type=1800 audit(1786072941.981:573): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=138681 res=0 errno=0 [ 492.909007][ T26] audit: type=1800 audit(1786072942.001:574): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=138760 res=0 errno=0 [ 492.942700][ T9120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.020419][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 493.087475][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.141377][ T26] audit: type=1800 audit(1786072942.001:575): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=138764 res=0 errno=0 [ 493.364346][ T26] audit: type=1800 audit(1786072942.081:576): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 493.541446][ T26] audit: type=1800 audit(1786072942.131:577): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 493.764481][ T26] audit: type=1800 audit(1786072942.401:578): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 493.996401][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.005825][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.122303][ T9120] device veth0_vlan entered promiscuous mode [ 494.283769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.317961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.618761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.677743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 494.714952][ T9120] device veth1_vlan entered promiscuous mode [ 494.845968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.903002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.973265][ T9120] device veth0_macvtap entered promiscuous mode [ 495.065572][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 495.065584][ T26] audit: type=1800 audit(1786072946.401:591): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 495.140393][ T9428] ubi16: attaching mtd0 [ 495.147109][ T9120] device veth1_macvtap entered promiscuous mode [ 496.160268][ T9428] ubi16: scanning is finished [ 496.165628][ T9428] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 496.565169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.616900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.685385][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.800543][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.877024][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.958619][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.973375][ T9428] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 497.019856][ T26] audit: type=1800 audit(1786072948.361:592): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 497.053126][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.146720][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.188243][ T26] audit: type=1800 audit(1786072948.531:593): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 497.576404][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.622560][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.902965][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.987653][ T26] audit: type=1800 audit(1786072950.331:594): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 499.095503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 499.272132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 500.526076][ T26] audit: type=1800 audit(1786072950.401:595): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 500.574353][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.740028][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.019276][ T26] audit: type=1800 audit(1786072950.431:596): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1689" name="size" dev="configfs" ino=52165 res=0 errno=0 [ 501.048424][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.113994][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.165172][ T26] audit: type=1800 audit(1786072950.451:597): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1689" name="zoned" dev="configfs" ino=52170 res=0 errno=0 [ 501.204684][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.272503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.313993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.343568][ T26] audit: type=1800 audit(1786072950.451:598): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1689" name="zone_size" dev="configfs" ino=52171 res=0 errno=0 [ 501.417277][ T9120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.487067][ T9120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.531087][ T26] audit: type=1800 audit(1786072950.451:599): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1689" name="power" dev="configfs" ino=52172 res=0 errno=0 [ 501.558490][ T9120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.615324][ T9120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.658110][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.664516][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.768424][ T26] audit: type=1800 audit(1786072950.819:600): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 503.298252][ T26] audit: type=1800 audit(1786072950.899:601): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35620 res=0 errno=0 [ 503.797319][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.805385][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.853404][ T26] audit: type=1800 audit(1786072951.119:602): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35514 res=0 errno=0 [ 503.917904][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.088745][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 504.098519][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.146293][ T9497] comedi comedi1: pcl724: I/O port conflict (0x100,4) [ 504.192043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 504.241283][ T26] audit: type=1800 audit(1786072951.599:603): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139040 res=0 errno=0 [ 504.457253][ T26] audit: type=1800 audit(1786072951.599:604): pid=4178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=139044 res=0 errno=0 [ 505.664119][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 505.664131][ T26] audit: type=1800 audit(1786072955.999:625): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 505.934583][ T26] audit: type=1800 audit(1786072956.269:626): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35302 res=0 errno=0 [ 506.350378][ T26] audit: type=1800 audit(1786072956.399:627): pid=3559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35726 res=0 errno=0 [ 507.175515][ T9546] ================================================================== [ 507.175572][ T9546] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x2110/0x25d0 [ 507.175667][ T9546] Write of size 4 at addr ffffc90004941ff8 by task syz.1.1709/9546 [ 507.175680][ T9546] [ 507.175684][ T9546] CPU: 0 PID: 9546 Comm: syz.1.1709 Not tainted syzkaller #0 [ 507.175697][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.175706][ T9546] Call Trace: [ 507.175711][ T9546] [ 507.175717][ T9546] dump_stack_lvl+0x188/0x250 [ 507.175747][ T9546] ? show_regs_print_info+0x20/0x20 [ 507.175764][ T9546] ? load_image+0x410/0x410 [ 507.175793][ T9546] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 507.175823][ T9546] ? drm_fb_helper_setcmap+0x2974/0x2b30 [ 507.175867][ T9546] print_address_description+0x60/0x2d0 [ 507.175881][ T9546] ? sys_imageblit+0x2110/0x25d0 [ 507.175894][ T9546] kasan_report+0xdf/0x130 [ 507.175925][ T9546] ? sys_imageblit+0x2110/0x25d0 [ 507.175940][ T9546] sys_imageblit+0x2110/0x25d0 [ 507.175961][ T9546] ? sys_copyarea+0x2530/0x2530 [ 507.175979][ T9546] ? __lock_acquire+0x7b50/0x7b50 [ 507.176018][ T9546] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 507.176030][ T9546] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 507.176046][ T9546] cw_putcs+0x15ef/0x18a0 [ 507.176077][ T9546] ? cw_clear+0x250/0x250 [ 507.176093][ T9546] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 507.176111][ T9546] fbcon_putcs+0x2c8/0x450 [ 507.176125][ T9546] ? cw_clear+0x250/0x250 [ 507.176138][ T9546] do_update_region+0x4e5/0x640 [ 507.176184][ T9546] ? hide_cursor+0x320/0x320 [ 507.176200][ T9546] ? fbcon_set_palette+0x54a/0x660 [ 507.176218][ T9546] redraw_screen+0xa2c/0x1000 [ 507.176231][ T9546] ? _raw_spin_unlock+0x40/0x40 [ 507.176248][ T9546] ? clear_buffer_attributes+0x320/0x320 [ 507.176265][ T9546] ? tty_do_resize+0xeb/0x160 [ 507.176294][ T9546] vc_do_resize+0x122c/0x17b0 [ 507.176306][ T9546] ? con_font_op+0xace/0xdc0 [ 507.176334][ T9546] ? vc_resize+0x50/0x50 [ 507.176351][ T9546] ? crc32_le_base+0x59e/0xd60 [ 507.176367][ T9546] fbcon_do_set_font+0xc6e/0x1cd0 [ 507.176391][ T9546] ? fbcon_blank+0xa70/0xa70 [ 507.176402][ T9546] con_font_op+0xace/0xdc0 [ 507.176417][ T9546] ? reset_palette+0xdc0/0xdc0 [ 507.176431][ T9546] ? __might_fault+0xb7/0x110 [ 507.176487][ T9546] ? __lock_acquire+0x7b50/0x7b50 [ 507.176506][ T9546] ? __might_fault+0xb3/0x110 [ 507.176520][ T9546] ? _copy_from_user+0x111/0x170 [ 507.176536][ T9546] vt_ioctl+0x162f/0x1cb0 [ 507.176553][ T9546] ? __vt_event_wait+0x260/0x260 [ 507.176576][ T9546] ? tty_jobctrl_ioctl+0x164/0xae0 [ 507.176593][ T9546] tty_ioctl+0x848/0xc30 [ 507.176606][ T9546] ? security_file_ioctl+0x7c/0xa0 [ 507.176641][ T9546] ? tty_get_icount+0xa0/0xa0 [ 507.176655][ T9546] __se_sys_ioctl+0xfa/0x170 [ 507.176674][ T9546] do_syscall_64+0x4c/0xa0 [ 507.176686][ T9546] ? clear_bhb_loop+0x30/0x80 [ 507.176698][ T9546] ? clear_bhb_loop+0x30/0x80 [ 507.176712][ T9546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 507.176725][ T9546] RIP: 0033:0x7f48ba5d20d9 [ 507.176740][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.176751][ T9546] RSP: 002b:00007f48b87e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.176768][ T9546] RAX: ffffffffffffffda RBX: 00007f48ba85a180 RCX: 00007f48ba5d20d9 [ 507.176778][ T9546] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000007 [ 507.176787][ T9546] RBP: 00007f48ba669024 R08: 0000000000000000 R09: 0000000000000000 [ 507.176795][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.176803][ T9546] R13: 00007f48ba85a218 R14: 00007f48ba85a180 R15: 00007ffc61eccee8 [ 507.176821][ T9546] [ 507.176826][ T9546] [ 507.176828][ T9546] [ 507.176831][ T9546] Memory state around the buggy address: [ 507.176838][ T9546] ffffc90004941e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 507.176846][ T9546] ffffc90004941f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 507.176855][ T9546] >ffffc90004941f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 507.176861][ T9546] ^ [ 507.176868][ T9546] ffffc90004942000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 507.176876][ T9546] ffffc90004942080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 507.176882][ T9546] ================================================================== [ 507.176887][ T9546] Disabling lock debugging due to kernel taint [ 507.176927][ T9546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 507.176934][ T9546] CPU: 0 PID: 9546 Comm: syz.1.1709 Tainted: G B syzkaller #0 [ 507.176946][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.176953][ T9546] Call Trace: [ 507.176957][ T9546] [ 507.176961][ T9546] dump_stack_lvl+0x188/0x250 [ 507.176976][ T9546] ? show_regs_print_info+0x20/0x20 [ 507.176988][ T9546] ? load_image+0x410/0x410 [ 507.177002][ T9546] panic+0x2f8/0x850 [ 507.177015][ T9546] ? bpf_jit_dump+0xd0/0xd0 [ 507.177027][ T9546] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 507.177038][ T9546] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 507.177050][ T9546] ? _raw_spin_unlock+0x40/0x40 [ 507.177060][ T9546] ? sys_imageblit+0x2110/0x25d0 [ 507.177072][ T9546] check_panic_on_warn+0x80/0xa0 [ 507.177085][ T9546] ? sys_imageblit+0x2110/0x25d0 [ 507.177097][ T9546] end_report+0x6d/0xf0 [ 507.177109][ T9546] kasan_report+0x102/0x130 [ 507.177121][ T9546] ? sys_imageblit+0x2110/0x25d0 [ 507.177133][ T9546] sys_imageblit+0x2110/0x25d0 [ 507.177148][ T9546] ? sys_copyarea+0x2530/0x2530 [ 507.177162][ T9546] ? __lock_acquire+0x7b50/0x7b50 [ 507.177176][ T9546] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 507.177187][ T9546] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 507.177198][ T9546] cw_putcs+0x15ef/0x18a0 [ 507.177216][ T9546] ? cw_clear+0x250/0x250 [ 507.177228][ T9546] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 507.177242][ T9546] fbcon_putcs+0x2c8/0x450 [ 507.177253][ T9546] ? cw_clear+0x250/0x250 [ 507.177263][ T9546] do_update_region+0x4e5/0x640 [ 507.177277][ T9546] ? hide_cursor+0x320/0x320 [ 507.177288][ T9546] ? fbcon_set_palette+0x54a/0x660 [ 507.177299][ T9546] redraw_screen+0xa2c/0x1000 [ 507.177310][ T9546] ? _raw_spin_unlock+0x40/0x40 [ 507.177321][ T9546] ? clear_buffer_attributes+0x320/0x320 [ 507.177334][ T9546] ? tty_do_resize+0xeb/0x160 [ 507.177346][ T9546] vc_do_resize+0x122c/0x17b0 [ 507.177356][ T9546] ? con_font_op+0xace/0xdc0 [ 507.177373][ T9546] ? vc_resize+0x50/0x50 [ 507.177385][ T9546] ? crc32_le_base+0x59e/0xd60 [ 507.177397][ T9546] fbcon_do_set_font+0xc6e/0x1cd0 [ 507.177412][ T9546] ? fbcon_blank+0xa70/0xa70 [ 507.177422][ T9546] con_font_op+0xace/0xdc0 [ 507.177434][ T9546] ? reset_palette+0xdc0/0xdc0 [ 507.177446][ T9546] ? __might_fault+0xb7/0x110 [ 507.177457][ T9546] ? __lock_acquire+0x7b50/0x7b50 [ 507.177471][ T9546] ? __might_fault+0xb3/0x110 [ 507.177482][ T9546] ? _copy_from_user+0x111/0x170 [ 507.177494][ T9546] vt_ioctl+0x162f/0x1cb0 [ 507.177506][ T9546] ? __vt_event_wait+0x260/0x260 [ 507.177522][ T9546] ? tty_jobctrl_ioctl+0x164/0xae0 [ 507.177534][ T9546] tty_ioctl+0x848/0xc30 [ 507.177544][ T9546] ? security_file_ioctl+0x7c/0xa0 [ 507.177555][ T9546] ? tty_get_icount+0xa0/0xa0 [ 507.177566][ T9546] __se_sys_ioctl+0xfa/0x170 [ 507.177577][ T9546] do_syscall_64+0x4c/0xa0 [ 507.177587][ T9546] ? clear_bhb_loop+0x30/0x80 [ 507.177597][ T9546] ? clear_bhb_loop+0x30/0x80 [ 507.177608][ T9546] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 507.177619][ T9546] RIP: 0033:0x7f48ba5d20d9 [ 507.177636][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.177646][ T9546] RSP: 002b:00007f48b87e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.177658][ T9546] RAX: ffffffffffffffda RBX: 00007f48ba85a180 RCX: 00007f48ba5d20d9 [ 507.177667][ T9546] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000007 [ 507.177674][ T9546] RBP: 00007f48ba669024 R08: 0000000000000000 R09: 0000000000000000 [ 507.177682][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.177689][ T9546] R13: 00007f48ba85a218 R14: 00007f48ba85a180 R15: 00007ffc61eccee8 [ 507.177700][ T9546] [ 507.177756][ T9546] Kernel Offset: disabled [ 508.027676][ T9546] Rebooting in 86400 seconds..