last executing test programs: 5.158892224s ago: executing program 1 (id=200): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x10, &(0x7f0000000380)={0x0, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) 4.130027047s ago: executing program 2 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f0000001180)=""/4094, 0xffe}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f0000000180)=""/228, 0x11d}], 0x5}, 0x947}, {{&(0x7f0000000b80)=@rc={0x1f, @none}, 0x0, &(0x7f0000000f80)=[{&(0x7f00000004c0)=""/36}, {&(0x7f0000000c00)=""/125}, {&(0x7f0000003040)=""/4096}, {&(0x7f0000000a00)=""/30}, {&(0x7f0000000c80)=""/76}, {&(0x7f0000000d00)=""/26}, {&(0x7f0000000d40)=""/148}, {&(0x7f0000000e00)=""/126}, {&(0x7f0000000e80)=""/17}, {&(0x7f0000004040)=""/4096}], 0x0, &(0x7f0000001040)=""/76}, 0x9}], 0x1, 0x30002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 4.074928261s ago: executing program 2 (id=209): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 3.2308304s ago: executing program 2 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x3c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xddf0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffff960}]}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) 3.230677969s ago: executing program 2 (id=219): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000010"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) 2.889105117s ago: executing program 1 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x7, '\x00', 0x4b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x8, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x0, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.829334012s ago: executing program 1 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sync() sync() 2.675525294s ago: executing program 1 (id=232): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 2.675354854s ago: executing program 1 (id=233): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x804, &(0x7f0000000380)={[{@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@fat=@uid}, {@utf8}, {@fat=@showexec}, {@fat=@check_strict}, {@shortname_win95}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '869'}}]}, 0x1, 0x27c, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12a) 2.632244978s ago: executing program 1 (id=234): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 935.561894ms ago: executing program 3 (id=242): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x9, &(0x7f0000000800)=@generic={0x0, 0x7}, 0x18) 923.561965ms ago: executing program 3 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 870.71961ms ago: executing program 3 (id=244): ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={{0x1, 0x1, 0x7f, 0x3, 0x6, 0x1}, 0x60, [0x7, 0x7fffffff, 0xc146, 0x2, 0x7fffffff, 0x40, 0xf, 0x3ef, 0x7fff, 0x7, 0x462a, 0x2, 0xf, 0x9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x4, 0x4, 0xa59c, 0x10001, 0x7ff, 0x5, 0x80000000, 0x1, 0x38000, 0x0, 0xe, 0x1346, 0x2, 0x10, 0x800, 0xffffffff, 0xffffdd51, 0x8, 0x7ff, 0x7ff, 0x2, 0x8, 0x4, 0x1, 0x6, 0x9, 0x2, 0x0, 0xfff, 0x9, 0x1, 0x2, 0x4fb00, 0x3, 0x5, 0x5, 0x3, 0x2, 0x4, 0xfffffffe, 0x0, 0x16b, 0x4, 0x3, 0x2, 0xfffffff9, 0x5, 0x9, 0x8, 0x6c8f, 0x3, 0x1, 0x0, 0x7, 0x5, 0x733, 0x3ff, 0x2, 0x1, 0x9, 0x0, 0x6, 0xff, 0x5, 0xab, 0x3ff, 0x3ff, 0x3000000, 0x640, 0x1, 0x40, 0x39, 0x2, 0x80, 0x9, 0x100, 0x7fff, 0x21, 0x141, 0x12f2, 0x1, 0x8001, 0xb, 0x9, 0xf8f, 0x5, 0x2, 0x1ff, 0x2, 0x5, 0x6, 0x8, 0x7, 0x5, 0xb7, 0x9, 0x0, 0xe7c705a, 0x8, 0x0, 0x7fffffff, 0x3, 0xb, 0x3, 0xc2, 0x100, 0x200, 0x30000000, 0x3, 0x5e, 0x5, 0x2, 0xd, 0x1faf, 0x1, 0x5, 0xb8f4, 0x22f, 0x3, 0x7, 0xffff, 0x80000001, 0x7, 0x6, 0x31, 0xa, 0x7f, 0x5, 0x6, 0x400, 0x400, 0x4, 0x80000001, 0x8000, 0x8001, 0xa2, 0xab23, 0x7, 0x9, 0x80000000, 0x4, 0x7, 0x60e1, 0x4, 0x8, 0x7fffffff, 0x8, 0x80, 0x5, 0x101, 0x8, 0x800, 0x0, 0x0, 0x3, 0x2, 0x5f8, 0x0, 0xffffffff, 0x2, 0xffff, 0x5, 0x9, 0x90, 0x4, 0x0, 0x1, 0x7fffffff, 0x0, 0x10001, 0x8, 0x80020000, 0x3, 0xed, 0x80000000, 0x50, 0x7fff, 0x0, 0x50000000, 0x81, 0x9, 0xfffffff8, 0x9, 0x2, 0x1, 0x0, 0x9, 0x0, 0x3, 0x49, 0x7f, 0x6, 0x0, 0x0, 0x2, 0x82, 0x9, 0x3, 0x0, 0x5, 0x1000, 0x7, 0x2, 0xf, 0x3ff, 0x1, 0x6, 0x0, 0xd, 0xb, 0x9, 0x9, 0x4, 0xb, 0x7, 0xfffffff1, 0x2, 0x9, 0xd72, 0x9, 0x6, 0x100, 0xa3, 0xff, 0x0, 0x2, 0x3, 0x9, 0x2, 0x7fffffff, 0xfffffffb, 0xdba, 0x6, 0x10, 0x400, 0x340, 0xd, 0x5044, 0xfce, 0x0, 0xc, 0x3, 0x6, 0xe4a, 0xed47, 0x0, 0x5, 0x9, 0xa83, 0x8, 0x2, 0x3800, 0xe8, 0xf, 0x10001, 0xb7d6, 0x5, 0x4, 0xf, 0x3b4, 0x5, 0x4, 0x2, 0x5, 0x4, 0x7fffffff, 0x8, 0xb, 0x0, 0x6, 0x9, 0x0, 0x6, 0x400, 0x1, 0xbd9d, 0x2, 0x4, 0x40, 0xbb7, 0x10001, 0x9, 0x10000, 0xffff8a10, 0x800, 0x54, 0x84e2, 0x1, 0x2, 0x8000, 0x57, 0x0, 0x0, 0xe, 0x6, 0x6, 0x4, 0xffffff07, 0x1, 0x7, 0x8, 0x9, 0x4, 0x9, 0x7, 0x1, 0x3, 0x8, 0x31bc8007, 0x3, 0x8, 0x3, 0x0, 0x7ff, 0xe8, 0x4, 0x7, 0x0, 0x9, 0x4, 0x80000001, 0x2, 0x0, 0x6, 0xffffffff, 0x9, 0xf44e, 0x3, 0x9, 0x0, 0x3, 0x5, 0x0, 0xfffffff9, 0x9, 0x31fe, 0x7, 0x100, 0x5, 0x2, 0x80, 0x0, 0x5, 0x942, 0x8, 0xfffffff8, 0x2, 0x3, 0x0, 0x10000, 0x0, 0x1, 0x7, 0x9, 0x6, 0x99d, 0xc2, 0x2, 0x7, 0x966, 0xffff, 0xa, 0x9b, 0x5, 0x1, 0x2c, 0xffffffff, 0x7, 0x8, 0x80, 0x4, 0x8, 0x9, 0x7, 0xffffffff, 0x3, 0x49e, 0x8, 0x0, 0xfffffffc, 0x53eb, 0x78, 0x3, 0x75ec36e2, 0x40000000, 0x7fff, 0x9, 0x1, 0x81, 0x9, 0x9, 0x1, 0x9, 0x8, 0x4, 0x0, 0x9, 0x10, 0x9, 0x4, 0x6, 0x80000001, 0xd, 0x8, 0x9, 0x4, 0x1, 0x5, 0x1, 0x5d9, 0x0, 0x68000, 0x20000000, 0x1, 0x599, 0x2d08000, 0xe45, 0x100, 0x2, 0x2, 0xffffffff, 0x92cf, 0x1234, 0x2, 0x7, 0x4, 0x6ae, 0x6, 0x1a, 0xe44, 0x1, 0x4, 0x40, 0x6, 0x40, 0x80000000, 0xe, 0x3, 0x8a4, 0x0, 0x46e3f9b, 0x3ff, 0xb, 0x1, 0x4e, 0x63, 0xfffffffc, 0x9, 0x1, 0x4, 0x9, 0x0, 0x0, 0x5, 0x5, 0x80000001, 0x6, 0x800, 0x0, 0x9945, 0x401, 0xa5f, 0x401, 0xecd, 0x5, 0x5, 0x506, 0x9, 0x4, 0x8, 0x9, 0x7fffffff, 0x2, 0x9, 0x6, 0x4, 0x5, 0x8, 0x7fffffff, 0x1, 0x9, 0x9, 0x10001, 0x9, 0x7, 0x400, 0x5, 0x7, 0x0, 0x7ff, 0xfffffffa, 0xfffffc00, 0x9, 0x360, 0x81, 0x6, 0x461, 0x2, 0x9, 0x8, 0x10001, 0x7fff, 0xc74, 0x3, 0x7e, 0x1000, 0x6, 0x8, 0x9, 0x6fa938e6, 0x90d0, 0x6, 0x8, 0xd47, 0xf, 0x7, 0x2, 0x1, 0x9, 0x1, 0x4, 0xf3, 0x7, 0xf012, 0x8, 0x5, 0x7, 0x7f, 0x3, 0x9, 0xff, 0x6, 0x101, 0xfffffff8, 0xff, 0x4, 0x3, 0x1, 0x8001, 0x2f8, 0x7, 0x80, 0x3, 0x8001, 0x4, 0x37ad, 0x6, 0x4, 0x0, 0x3, 0xfff, 0x80000000, 0x2, 0xe, 0x8, 0x0, 0x1, 0x18e7, 0x9, 0x401, 0x800, 0x3, 0x6, 0x5, 0xf49d, 0x6, 0x2, 0x4, 0x1, 0x8, 0x4, 0x40, 0x9, 0x7644, 0x5, 0x7, 0x5, 0x5, 0x6, 0x0, 0xf330, 0xfffffff7, 0xf, 0x64f0, 0x3, 0x90c7, 0x8, 0xd2cf, 0x7, 0x400, 0x30b1, 0xfffffff9, 0x7, 0x0, 0xd, 0x3, 0xb, 0x3, 0x7fff, 0x400, 0x6, 0x2, 0x5, 0x10, 0x53e8, 0x5, 0x4d95, 0x82c, 0x8, 0x5, 0x1, 0x5, 0x6d, 0x3ff, 0x0, 0x7f, 0x7, 0x9, 0x6, 0x8, 0x0, 0x4, 0xe, 0x8001, 0x0, 0xfffffccf, 0x10001, 0x3, 0xc, 0x9, 0x4, 0xcc, 0x4, 0x6425, 0xffffffff, 0x7fff, 0x8, 0xff, 0x6, 0x0, 0xb, 0x9c5, 0x0, 0x8a, 0x91b, 0xffff, 0x2, 0x6, 0x3598, 0x4, 0x6, 0x3874, 0x7, 0xd, 0x6, 0x4, 0x6, 0x0, 0xf48, 0x10001, 0x40, 0x1, 0x7, 0x7, 0x81, 0x7, 0xe, 0x1, 0x8, 0x4, 0x5, 0x5, 0x9, 0xfffffff7, 0xce6c, 0x2, 0x0, 0xff92, 0x7fffffff, 0x5, 0x9, 0x2, 0x2e, 0x1, 0x5, 0x3ff, 0x0, 0x4, 0x1, 0xee, 0x87, 0xd66, 0x200, 0x6, 0x100, 0x5, 0x8, 0xfffffff9, 0x3, 0xb23, 0x4, 0x4, 0x80000000, 0x2, 0xe, 0x6, 0xffffffff, 0x2, 0x6, 0x6b18, 0xa8c, 0x727, 0x9, 0x800, 0x8, 0x4b, 0x10, 0x0, 0xb1a, 0xf5cb, 0x8, 0x4, 0xc0000, 0xa0, 0x5, 0xa, 0x67, 0x9, 0x1, 0x2, 0x6, 0x8, 0x100, 0x8, 0x1, 0x2, 0x400, 0x2, 0x7fff, 0x2c78, 0x3, 0x81, 0x9, 0x89, 0xcc2, 0x788, 0xf3fd, 0xa5fe, 0x9d60, 0xe23f, 0x4, 0x5dfb4a0c, 0x9, 0x6, 0x3, 0x2, 0x4, 0xfffffffb, 0xfff, 0x8001, 0x5, 0x8001, 0x9, 0xe804, 0x8, 0x3, 0xb20, 0xe, 0xfffffffd, 0x3dc1, 0xd49, 0x5, 0x1, 0x7fffffff, 0x3, 0x6, 0x10001, 0x1, 0x9, 0xfffffff7, 0x2ffc, 0x8, 0x8, 0x6, 0xffff, 0x81, 0x5, 0x4, 0x6, 0x9, 0x9, 0x1, 0x0, 0x8, 0x401, 0x200, 0x7, 0xfffffff7, 0x0, 0x8, 0x0, 0x1, 0x34000000, 0x4, 0xfdf8, 0x3, 0x2, 0x2, 0x4, 0x6, 0xfff, 0x0, 0x8, 0x9, 0x5, 0x80000000, 0x8, 0x64, 0x0, 0x7ff, 0x6, 0xf0e8, 0x4, 0x7, 0x10, 0xe, 0x7f, 0x7, 0x5, 0x1, 0xfffffff9, 0x0, 0x6, 0x5, 0x3, 0x3, 0x7, 0x7, 0x1, 0x800, 0x10, 0x0, 0x7, 0x1, 0x0, 0xfffffffc, 0xfffffffa, 0x8, 0x37, 0x2, 0x101, 0x0, 0x6, 0x8001, 0x80000d, 0x0, 0xd, 0x9, 0x2, 0xa7, 0x3, 0x0, 0x1, 0x2, 0x6, 0x2, 0x6, 0xd, 0xdb90, 0x3, 0x8, 0x2fd59340, 0x9, 0x860, 0xfffffffd, 0xfff, 0x0, 0x5, 0x7fffffff, 0x7, 0x6, 0x3ff, 0x10, 0x10, 0x1, 0x2, 0x101, 0x0, 0x1, 0x6, 0x9, 0x5, 0x8, 0xffff, 0x3, 0x101, 0x6, 0x8, 0x0, 0x4, 0xbe6, 0x5, 0x0, 0x4, 0x6, 0x7, 0x9, 0xff, 0x1, 0xefb, 0x12000, 0x696, 0x95, 0xffffffff, 0x8, 0x800, 0xca, 0x0, 0x4, 0x1, 0x8, 0x8, 0x1, 0x81, 0x1, 0xd78, 0x5, 0x66, 0x7, 0x0, 0xc5b, 0xc, 0x9, 0x1, 0x9, 0xdb, 0x3, 0x55d, 0x7, 0x9, 0x5, 0x0, 0x2967, 0x6, 0xfb0a, 0x1, 0x5, 0xfffffffc, 0x2, 0x2, 0x1d7, 0x8, 0x7, 0x8, 0x2, 0x2, 0x7fff, 0x1, 0x8001, 0x9, 0x1ae, 0xffffffff, 0x7, 0x7, 0x9, 0x2, 0xfffffffb, 0x7, 0xa, 0x7357, 0x1, 0x80, 0x200, 0x7, 0x9, 0x7fffffff, 0xffffff5e, 0x0, 0x1ff, 0x9, 0x4f9c, 0xddf, 0xfffffffc, 0x3, 0x3, 0x9, 0x5, 0x7, 0x10000, 0xfffff55b, 0x3, 0xdd1, 0x0, 0xd25, 0xfffffffc, 0x0, 0xa0, 0x1, 0x6, 0x80, 0x0, 0x3, 0x3, 0xb, 0x8]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 870.51497ms ago: executing program 3 (id=245): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001fff000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="000300000000010024001280090001007866726d00000000140002800800020001000000080001"], 0x4c}}, 0x0) 855.502801ms ago: executing program 3 (id=246): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 360.883591ms ago: executing program 0 (id=253): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0xfffffffc, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffb, 0x0, 0x0, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0x0, 0x9c3e, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x4, 0x0, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0x3, 0x9, 0x0, 0x0, 0xfffffff4, 0x2, 0x0, 0x2000079, 0x3fe, 0x0, 0xfffffffd, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffc002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x36, 0xfffffffc, 0x0, 0x0, 0x4771, 0x1], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xe, 0x20000006, 0x0, 0x0, 0x0, 0x9, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x5], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x2, 0x800, 0xc, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 325.641834ms ago: executing program 0 (id=255): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x28000000, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 325.531623ms ago: executing program 4 (id=256): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x5, 0x7fff0000}]}) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) 276.110758ms ago: executing program 0 (id=257): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='stat\x00') setreuid(0xffffffffffffffff, 0xee00) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x7) 276.013838ms ago: executing program 4 (id=258): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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") socket$unix(0x1, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 275.539788ms ago: executing program 0 (id=259): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) 249.31257ms ago: executing program 0 (id=260): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl(r0, 0x1, &(0x7f0000000000)) 238.138771ms ago: executing program 4 (id=261): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) 190.974525ms ago: executing program 2 (id=262): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfb, 0x0) 155.268287ms ago: executing program 2 (id=263): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x5c295e24e120003b, 0x6}, 0x0, 0x0, 0x0, 0x0}) 106.980381ms ago: executing program 4 (id=264): r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000080)={0x1, 0xffff, 0x9, 0x0, 0x2, "3eccd800"}) close_range(r0, 0xffffffffffffffff, 0x0) 50.860376ms ago: executing program 4 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r3]) 50.628366ms ago: executing program 0 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x3, 0x7f, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 23.371178ms ago: executing program 4 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000010000)={0x80000000, 0x2000, 0x2, r2, 0x8}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x4}) 0s ago: executing program 3 (id=268): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@random="8b44c1531c44", @link_local, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 22.255524][ T24] audit: type=1400 audit(1755706757.610:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.257191][ T267] cgroup: Unknown subsys name 'net' [ 22.279290][ T24] audit: type=1400 audit(1755706757.610:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.307823][ T24] audit: type=1400 audit(1755706757.640:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.308095][ T267] cgroup: Unknown subsys name 'devices' [ 22.514696][ T267] cgroup: Unknown subsys name 'hugetlb' [ 22.520541][ T267] cgroup: Unknown subsys name 'rlimit' [ 22.723785][ T24] audit: type=1400 audit(1755706758.080:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.747249][ T24] audit: type=1400 audit(1755706758.080:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.755253][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.781662][ T24] audit: type=1400 audit(1755706758.080:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.805412][ T24] audit: type=1400 audit(1755706758.130:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.831838][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.831897][ T24] audit: type=1400 audit(1755706758.130:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.866739][ T24] audit: type=1400 audit(1755706758.170:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.893480][ T24] audit: type=1400 audit(1755706758.170:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.670755][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.677926][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.685741][ T275] device bridge_slave_0 entered promiscuous mode [ 23.693743][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.700965][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.708674][ T275] device bridge_slave_1 entered promiscuous mode [ 23.793273][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.800618][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.808845][ T277] device bridge_slave_0 entered promiscuous mode [ 23.816618][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.823729][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.831378][ T277] device bridge_slave_1 entered promiscuous mode [ 23.871828][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.879582][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.887258][ T279] device bridge_slave_0 entered promiscuous mode [ 23.897529][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.904974][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.912813][ T279] device bridge_slave_1 entered promiscuous mode [ 23.923842][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.931538][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.939478][ T276] device bridge_slave_0 entered promiscuous mode [ 23.972289][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.979427][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.987136][ T276] device bridge_slave_1 entered promiscuous mode [ 24.031632][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.039236][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.046766][ T278] device bridge_slave_0 entered promiscuous mode [ 24.055307][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.062576][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.070169][ T278] device bridge_slave_1 entered promiscuous mode [ 24.123123][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.130472][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.137803][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.144978][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.183839][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.191089][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.198378][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.205521][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.247789][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.254992][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.262354][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.270348][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.281704][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.289435][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.298644][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.306483][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.326516][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333614][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.341328][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.348645][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.365402][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.374078][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.382457][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.390990][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.398748][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.406693][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.414726][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.421934][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.429469][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.437454][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.445111][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.453104][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.460671][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.485437][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.493966][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.501088][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.509078][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.517686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.525768][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.533980][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.541198][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.574687][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.583855][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.591890][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.600427][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.609327][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.617710][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.625212][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.632702][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.641028][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.648268][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.655852][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.664535][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.672033][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.679716][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.688219][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.695300][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.718998][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.727625][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.736719][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.745757][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.755260][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.763608][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.771768][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.780272][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.788466][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.797269][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.806119][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.814486][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.822908][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.830990][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.839431][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.847208][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.855506][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.863927][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.885556][ T275] device veth0_vlan entered promiscuous mode [ 24.894160][ T277] device veth0_vlan entered promiscuous mode [ 24.902709][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.910274][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.918653][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.926891][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.934576][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.943556][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.951947][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.959106][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.966930][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.975498][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.983777][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.990901][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.998547][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.007494][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.019718][ T278] device veth0_vlan entered promiscuous mode [ 25.032114][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.040795][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.049690][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.058759][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.066917][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.075371][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.083887][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.091619][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.106743][ T275] device veth1_macvtap entered promiscuous mode [ 25.118504][ T276] device veth0_vlan entered promiscuous mode [ 25.125899][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.134348][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.142197][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.150219][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.159023][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.167796][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.175533][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.184620][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.193441][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.201583][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.213249][ T278] device veth1_macvtap entered promiscuous mode [ 25.221702][ T277] device veth1_macvtap entered promiscuous mode [ 25.236960][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.245585][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.254026][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.261850][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.270744][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.280067][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.288854][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.297917][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.306804][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.318967][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.327644][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.338297][ T279] device veth0_vlan entered promiscuous mode [ 25.350223][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.358538][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.366737][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.376119][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.385003][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.393272][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.413568][ T275] request_module fs-gadgetfs succeeded, but still no fs? [ 25.413585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.430825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.440210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.449781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.458497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.472449][ T275] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.473501][ T279] device veth1_macvtap entered promiscuous mode [ 25.493959][ T276] device veth1_macvtap entered promiscuous mode [ 25.508239][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.520278][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.528858][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.552162][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.561618][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.570649][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.571768][ T304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.579238][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.614118][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.630666][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.662731][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.671435][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.816959][ T324] pit: kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 26.142735][ T297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.322677][ T15] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.392668][ T297] usb 4-1: Using ep0 maxpacket: 32 [ 26.432769][ T297] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 26.522938][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 26.531267][ T297] usb 4-1: config 0 has no interface number 0 [ 26.538189][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.548580][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 26.572836][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 26.632696][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 26.640762][ T297] usb 4-1: config 0 has no interface number 0 [ 26.648605][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.659648][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 26.712970][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.725123][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.735948][ T15] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.742756][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 26.749586][ T15] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.766536][ T297] usb 4-1: config 0 has no interface number 0 [ 26.766590][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.772795][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.772810][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 26.803222][ T15] usb 1-1: config 0 descriptor?? [ 26.852709][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 26.861165][ T297] usb 4-1: config 0 has no interface number 0 [ 26.880568][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.891656][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 26.974054][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 26.982217][ T297] usb 4-1: config 0 has no interface number 0 [ 26.992685][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.998889][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.020635][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.112752][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 27.121112][ T297] usb 4-1: config 0 has no interface number 0 [ 27.127904][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.139418][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.232739][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 27.232789][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 27.246814][ T297] usb 4-1: config 0 has no interface number 0 [ 27.253600][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.264381][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.272832][ T5] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 27.294091][ T15] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 27.316052][ T15] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input4 [ 27.362763][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.383805][ T297] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 27.392636][ T297] usb 4-1: config 0 has no interface number 0 [ 27.400628][ T15] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 27.407935][ T297] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.424300][ T297] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.453339][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.542743][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.554880][ T25] usb 1-1: USB disconnect, device number 2 [ 27.592712][ T297] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 27.602085][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.610565][ T297] usb 4-1: Product: syz [ 27.615167][ T297] usb 4-1: Manufacturer: syz [ 27.619909][ T297] usb 4-1: SerialNumber: syz [ 27.629637][ T297] usb 4-1: config 0 descriptor?? [ 27.642725][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.742745][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.832740][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.922744][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.012921][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.023255][ T15] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.076780][ T24] kauditd_printk_skb: 54 callbacks suppressed [ 28.076792][ T24] audit: type=1400 audit(1755706763.430:128): avc: denied { create } for pid=399 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 28.103638][ T5] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 28.112833][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 28.124920][ T5] usb 3-1: SerialNumber: syz [ 28.130245][ T5] usb 3-1: config 0 descriptor?? [ 28.137350][ T24] audit: type=1400 audit(1755706763.490:129): avc: denied { setopt } for pid=401 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.157638][ T24] audit: type=1400 audit(1755706763.490:130): avc: denied { read } for pid=401 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.177896][ T5] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 28.222728][ T297] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.365120][ T405] kvm: pic: non byte write [ 28.380940][ T24] audit: type=1400 audit(1755706763.730:131): avc: denied { write } for pid=367 comm="syz.2.29" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.382480][ T368] input: syz1 as /devices/virtual/input/input5 [ 28.416630][ T5] usb 3-1: USB disconnect, device number 2 [ 28.422776][ T15] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.434467][ T15] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 28.448388][ T24] audit: type=1400 audit(1755706763.730:132): avc: denied { open } for pid=367 comm="syz.2.29" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.472348][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.473408][ T24] audit: type=1400 audit(1755706763.730:133): avc: denied { ioctl } for pid=367 comm="syz.2.29" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.485166][ T15] usb 5-1: config 0 descriptor?? [ 28.506366][ T297] usb 2-1: Using ep0 maxpacket: 8 [ 28.712692][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.802798][ T297] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 28.812085][ T297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.820526][ T297] usb 2-1: Product: syz [ 28.824880][ T297] usb 2-1: Manufacturer: syz [ 28.829776][ T297] usb 2-1: SerialNumber: syz [ 28.835304][ T297] usb 2-1: config 0 descriptor?? [ 28.887236][ T286] usb 4-1: USB disconnect, device number 2 [ 28.962733][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 29.014368][ T24] audit: type=1400 audit(1755706764.370:134): avc: denied { write } for pid=416 comm="syz.2.45" name="netlink" dev="proc" ino=4026532618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.095795][ T24] audit: type=1400 audit(1755706764.450:135): avc: denied { create } for pid=418 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.102855][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.128682][ T25] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 29.128852][ T24] audit: type=1400 audit(1755706764.480:136): avc: denied { write } for pid=418 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.138751][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.167624][ T24] audit: type=1400 audit(1755706764.480:137): avc: denied { read } for pid=418 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.188153][ T25] usb 1-1: config 0 descriptor?? [ 29.409500][ T297] usb 2-1: USB disconnect, device number 2 [ 29.674231][ T25] belkin 0003:050D:3201.0002: unknown main item tag 0x3 [ 29.681582][ T25] belkin 0003:050D:3201.0002: unknown global tag 0xe [ 29.688734][ T25] belkin 0003:050D:3201.0002: item 0 0 1 14 parsing failed [ 29.697005][ T25] belkin 0003:050D:3201.0002: parse failed [ 29.703195][ T25] belkin: probe of 0003:050D:3201.0002 failed with error -22 [ 29.902668][ T5] usb 1-1: USB disconnect, device number 3 [ 29.943692][ T429] erofs: (device loop3): mounted with root inode @ nid 36. [ 30.075399][ T442] EXT4-fs (loop1): Test dummy encryption mode enabled [ 30.083039][ T442] EXT4-fs (loop1): blocks per group (100794368) and clusters per group (8192) inconsistent [ 31.299127][ T311] usb 5-1: USB disconnect, device number 2 [ 31.322914][ T473] ====================================================== [ 31.322914][ T473] WARNING: the mand mount option is being deprecated and [ 31.322914][ T473] will be removed in v5.15! [ 31.322914][ T473] ====================================================== [ 31.454068][ T473] EXT4-fs (loop2): Ignoring removed nobh option [ 31.461506][ T473] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.489822][ T471] F2FS-fs (loop1): invalid crc value [ 31.549542][ T492] tipc: Started in network mode [ 31.554959][ T492] tipc: Own node identity 8aee440cdcef, cluster identity 4711 [ 31.563268][ T492] tipc: Enabled bearer , priority 0 [ 31.571194][ T492] device syzkaller0 entered promiscuous mode [ 31.589419][ T492] tipc: Resetting bearer [ 31.597018][ T491] tipc: Resetting bearer [ 31.604149][ T491] tipc: Disabling bearer [ 31.648955][ T471] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.657356][ T473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c856c018, mo2=0002] [ 31.667401][ T473] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,abort,data_err=ignore,discard,debug,grpquota,noblock_validity,user_xattr,lazytime,nobh,,errors=continue [ 31.697908][ T471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.717139][ T473] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3342: comm syz.2.63: Allocating blocks 497-513 which overlap fs metadata [ 31.736242][ T473] EXT4-fs (loop2): pa ffff88811b0d40a8: logic 128, phys. 385, len 8 [ 31.745149][ T473] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 31.770662][ T501] EXT4-fs (loop0): Ignoring removed bh option [ 31.782750][ T501] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 31.786139][ T296] attempt to access beyond end of device [ 31.786139][ T296] loop1: rw=2049, want=40976, limit=40427 [ 31.797463][ T501] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal [ 31.811632][ T471] VFS:Filesystem freeze failed [ 32.115475][ T507] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.405939][ T505] F2FS-fs (loop2): fault_injection options not supported [ 32.595659][ T505] F2FS-fs (loop2): fault_type options not supported [ 32.602603][ T505] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 32.630318][ T526] tipc: Started in network mode [ 32.643709][ T505] F2FS-fs (loop2): invalid crc value [ 32.680397][ T526] tipc: Own node identity 5223d9cf2067, cluster identity 4711 [ 32.682311][ T505] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.727356][ T505] F2FS-fs (loop2): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 32.737069][ T505] F2FS-fs (loop2): Failed to read root inode [ 32.740432][ T526] tipc: Enabled bearer , priority 0 [ 32.751075][ T537] device syzkaller0 entered promiscuous mode [ 32.771732][ T526] tipc: Resetting bearer [ 32.778218][ T525] tipc: Resetting bearer [ 32.784975][ T525] tipc: Disabling bearer [ 33.112669][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.193867][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 33.193882][ T24] audit: type=1326 audit(1755706768.550:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d7a0be9 code=0x7ffc0000 [ 33.284299][ T24] audit: type=1326 audit(1755706768.550:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb38d73cdd9 code=0x7ffc0000 [ 33.352739][ T24] audit: type=1326 audit(1755706768.550:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d7a0be9 code=0x7ffc0000 [ 33.376398][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 33.430325][ T24] audit: type=1326 audit(1755706768.580:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb38d73cdd9 code=0x7ffc0000 [ 33.498710][ T24] audit: type=1326 audit(1755706768.580:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb38d73cdd9 code=0x7ffc0000 [ 33.522434][ T311] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 33.563659][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.594918][ T311] usb 1-1: config 0 has no interface number 0 [ 33.613171][ T311] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.626812][ T24] audit: type=1326 audit(1755706768.580:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb38d73cdd9 code=0x7ffc0000 [ 33.680975][ T311] usb 1-1: config 0 interface 200 has no altsetting 0 [ 33.702232][ T24] audit: type=1326 audit(1755706768.580:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d7a0be9 code=0x7ffc0000 [ 33.765906][ T24] audit: type=1326 audit(1755706768.580:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb38d73cdd9 code=0x7ffc0000 [ 33.839736][ T24] audit: type=1326 audit(1755706768.580:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d7a0be9 code=0x7ffc0000 [ 33.882726][ T311] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 33.911974][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.927947][ T311] usb 1-1: Product: syz [ 33.934992][ T24] audit: type=1326 audit(1755706768.580:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=553 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb38d73cdd9 code=0x7ffc0000 [ 33.961842][ T311] usb 1-1: Manufacturer: syz [ 33.975262][ T311] usb 1-1: SerialNumber: syz [ 33.991044][ T311] usb 1-1: config 0 descriptor?? [ 34.171889][ T563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 34.213315][ T563] fs-verity: sha256 using implementation "sha256-avx2" [ 34.273321][ T311] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 34.289605][ T311] usb 1-1: USB disconnect, device number 4 [ 34.574096][ T573] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.007599][ T586] overlayfs: missing 'workdir' [ 35.125658][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.904347][ T604] tipc: Started in network mode [ 35.914828][ T604] tipc: Own node identity , cluster identity 4711 [ 35.927721][ T604] tipc: Failed to obtain node identity [ 35.938483][ T604] tipc: Enabling of bearer rejected, failed to enable media [ 35.971785][ T604] device syzkaller0 entered promiscuous mode [ 36.133296][ T614] tipc: Started in network mode [ 36.143247][ T614] tipc: Own node identity cacbf5503ac4, cluster identity 4711 [ 36.163029][ T614] tipc: Enabled bearer , priority 0 [ 36.170760][ T614] device syzkaller0 entered promiscuous mode [ 36.192871][ T614] tipc: Resetting bearer [ 36.202786][ T611] tipc: Resetting bearer [ 36.220995][ T617] usb usb8: usbfs: process 617 (syz.0.114) did not claim interface 0 before use [ 36.230259][ T523] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.230701][ T611] tipc: Disabling bearer [ 36.472677][ T523] usb 4-1: Using ep0 maxpacket: 32 [ 36.493592][ T602] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 36.502055][ T602] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 36.513506][ T602] F2FS-fs (loop1): invalid crc value [ 36.521110][ T602] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.554501][ T602] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.562011][ T602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 36.573109][ T297] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.592873][ T523] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.602479][ T602] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 36.603724][ T523] usb 4-1: config 0 has no interfaces? [ 36.613935][ T602] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 36.619536][ T523] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 36.638532][ T523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.651249][ T523] usb 4-1: config 0 descriptor?? [ 36.701014][ T602] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 36.710766][ T602] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 36.832726][ T297] usb 5-1: Using ep0 maxpacket: 8 [ 36.959257][ T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.973916][ T297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.992696][ T297] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 36.994060][ T602] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 37.024290][ T297] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 37.059423][ T297] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 37.081946][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.123421][ T297] hub 5-1:1.0: bad descriptor, ignoring hub [ 37.130268][ T297] hub: probe of 5-1:1.0 failed with error -5 [ 37.140136][ T297] cdc_wdm 5-1:1.0: skipping garbage [ 37.145450][ T297] cdc_wdm 5-1:1.0: skipping garbage [ 37.163166][ T297] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 37.442792][ T311] usb 5-1: USB disconnect, device number 3 [ 37.485826][ T297] usb 4-1: USB disconnect, device number 3 [ 37.697508][ T635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=635 comm=syz.2.119 [ 37.792695][ T390] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.812724][ T311] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 37.948722][ T648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 38.034027][ T660] tipc: Enabled bearer , priority 0 [ 38.041669][ T660] Zero length message leads to an empty skb [ 38.048229][ T390] usb 2-1: Using ep0 maxpacket: 8 [ 38.048794][ T660] device syzkaller0 entered promiscuous mode [ 38.068875][ T660] tipc: Resetting bearer [ 38.075763][ T659] tipc: Resetting bearer [ 38.083841][ T659] tipc: Disabling bearer [ 38.192729][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.210056][ T311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 38.217766][ T390] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 38.228285][ T311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 38.228945][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.249117][ T390] usb 2-1: config 0 descriptor?? [ 38.272008][ T311] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 38.281280][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.302736][ T619] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.411933][ T24] kauditd_printk_skb: 178 callbacks suppressed [ 38.411976][ T24] audit: type=1400 audit(1755706773.740:364): avc: denied { bind } for pid=663 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 38.503171][ T24] audit: type=1400 audit(1755706773.740:365): avc: denied { name_bind } for pid=663 comm="syz.3.131" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 38.526743][ T666] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.539991][ T666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.582973][ T390] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 38.652928][ T666] EXT4-fs (loop3): 1 orphan inode deleted [ 38.658886][ T666] EXT4-fs (loop3): 1 truncate cleaned up [ 38.664851][ T666] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,init_itable=0x0000000000000002,jqfmt=vfsv0,nombcache, [ 38.734966][ T666] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 38.751436][ T666] EXT4-fs (loop3): Remounting filesystem read-only [ 39.299308][ T24] audit: type=1400 audit(1755706773.740:366): avc: denied { node_bind } for pid=663 comm="syz.3.131" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 39.382086][ T311] hub 5-1:1.0: bad descriptor, ignoring hub [ 39.388475][ T311] hub: probe of 5-1:1.0 failed with error -5 [ 39.394625][ T311] cdc_wdm 5-1:1.0: skipping garbage [ 39.400042][ T311] cdc_wdm 5-1:1.0: skipping garbage [ 39.407990][ T311] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 39.443751][ T311] usb 5-1: USB disconnect, device number 4 [ 39.503299][ T390] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 39.517831][ T390] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 39.562777][ T390] asix: probe of 2-1:0.0 failed with error -71 [ 39.570350][ T390] usb 2-1: USB disconnect, device number 3 [ 39.595895][ T24] audit: type=1400 audit(1755706774.950:367): avc: denied { create } for pid=681 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.621859][ T24] audit: type=1400 audit(1755706774.950:368): avc: denied { setopt } for pid=681 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.648740][ T24] audit: type=1400 audit(1755706774.960:369): avc: denied { bind } for pid=681 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.718881][ T687] netlink: 'syz.4.138': attribute type 6 has an invalid length. [ 39.777679][ T24] audit: type=1400 audit(1755706775.130:370): avc: denied { getopt } for pid=691 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.254823][ T24] audit: type=1400 audit(1755706775.610:371): avc: denied { getopt } for pid=713 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.300194][ T24] audit: type=1400 audit(1755706775.650:372): avc: denied { ioctl } for pid=721 comm="syz.1.153" path="socket:[16903]" dev="sockfs" ino=16903 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.344930][ T24] audit: type=1400 audit(1755706775.700:373): avc: denied { setopt } for pid=725 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.402695][ T15] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.542683][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.642698][ T15] usb 5-1: Using ep0 maxpacket: 16 [ 40.692710][ T5] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.762760][ T15] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.774421][ T15] usb 5-1: config 0 interface 0 has no altsetting 0 [ 40.781121][ T15] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 40.790900][ T311] usb 3-1: Using ep0 maxpacket: 8 [ 40.796327][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.805885][ T15] usb 5-1: config 0 descriptor?? [ 40.862725][ T733] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.912754][ T311] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 40.924720][ T311] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 40.939366][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 40.946777][ T311] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 40.957708][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.966583][ T311] usb 3-1: config 0 descriptor?? [ 41.054437][ T5] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 41.066784][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.067527][ T742] tipc: Enabling of bearer rejected, failed to enable media [ 41.078405][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.097651][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 41.122717][ T733] usb 4-1: Using ep0 maxpacket: 32 [ 41.182863][ T5] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 41.192311][ T5] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 41.201376][ T5] usb 2-1: Manufacturer: syz [ 41.207418][ T5] usb 2-1: config 0 descriptor?? [ 41.242794][ T733] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 41.251281][ T733] usb 4-1: config 0 has no interface number 0 [ 41.259281][ T733] usb 4-1: config 0 interface 31 has no altsetting 0 [ 41.284017][ T15] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 41.292846][ T15] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 41.300942][ T15] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 41.309521][ T15] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 41.317894][ T15] logitech-djreceiver 0003:046D:C71B.0003: unknown main item tag 0x0 [ 41.422820][ T733] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=34.16 [ 41.432242][ T733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.440346][ T733] usb 4-1: Product: syz [ 41.444672][ T733] usb 4-1: Manufacturer: syz [ 41.449782][ T733] usb 4-1: SerialNumber: syz [ 41.456496][ T733] usb 4-1: config 0 descriptor?? [ 41.482717][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 41.489322][ T311] usbhid: probe of 3-1:0.0 failed with error -71 [ 41.499041][ T311] usb 3-1: USB disconnect, device number 4 [ 41.505038][ T390] usb 5-1: USB disconnect, device number 5 [ 41.512683][ T669] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.693464][ T5] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 41.698623][ T286] usb 4-1: USB disconnect, device number 4 [ 41.700971][ T5] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 41.715980][ T5] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 41.882747][ T669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.893746][ T669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.904269][ T669] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.922199][ T669] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 41.940699][ T669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.955092][ T669] usb 1-1: config 0 descriptor?? [ 42.222675][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.292833][ T311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.423628][ T669] dragonrise 0003:0079:0011.0005: unknown main item tag 0x0 [ 42.432117][ T669] dragonrise 0003:0079:0011.0005: hidraw1: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 42.602801][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.614568][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.626649][ T5] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 42.635984][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.645404][ T733] usb 1-1: USB disconnect, device number 5 [ 42.652269][ T5] usb 3-1: config 0 descriptor?? [ 42.822713][ T311] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 42.832201][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.840675][ T311] usb 5-1: Product: syz [ 42.845009][ T311] usb 5-1: Manufacturer: syz [ 42.849728][ T311] usb 5-1: SerialNumber: syz [ 42.855358][ T311] usb 5-1: config 0 descriptor?? [ 42.894211][ T311] usb-storage 5-1:0.0: USB Mass Storage device detected [ 42.912744][ T286] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.149214][ T793] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.162690][ T286] usb 4-1: Using ep0 maxpacket: 32 [ 43.206474][ T799] device syzkaller0 entered promiscuous mode [ 43.284363][ T286] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 43.293016][ T286] usb 4-1: config 0 has no interface number 0 [ 43.304137][ T286] usb 4-1: config 0 interface 12 has no altsetting 0 [ 43.329206][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 43.338466][ T811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 43.415166][ T817] tipc: Enabled bearer , priority 0 [ 43.422371][ T817] device syzkaller0 entered promiscuous mode [ 43.431135][ T816] tipc: Resetting bearer [ 43.438398][ T816] tipc: Disabling bearer [ 43.462844][ T286] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 43.475812][ T286] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 43.490945][ T286] usb 4-1: Product: syz [ 43.495620][ T286] usb 4-1: Manufacturer: syz [ 43.500247][ T286] usb 4-1: SerialNumber: syz [ 43.506914][ T286] usb 4-1: config 0 descriptor?? [ 43.544543][ T828] tipc: Started in network mode [ 43.549674][ T828] tipc: Own node identity 8ee0e9a318bf, cluster identity 4711 [ 43.558229][ T828] tipc: Enabled bearer , priority 0 [ 43.566363][ T828] device syzkaller0 entered promiscuous mode [ 43.576189][ T828] tipc: Resetting bearer [ 43.583412][ T827] tipc: Resetting bearer [ 43.590516][ T827] tipc: Disabling bearer [ 43.624279][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 43.624291][ T24] audit: type=1400 audit(1755706778.980:376): avc: denied { create } for pid=830 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.650870][ T24] audit: type=1400 audit(1755706778.980:377): avc: denied { getopt } for pid=830 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.752654][ T53] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 44.022827][ T733] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 44.042793][ T5] uclogic 0003:256C:006D.0006: v1 buttonpad probing failed: -71 [ 44.050644][ T5] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 44.058467][ T5] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 44.066154][ T733] usb 2-1: device reset changed ep0 maxpacket size! [ 44.074090][ T311] usb 2-1: USB disconnect, device number 4 [ 44.080770][ T5] usb 3-1: USB disconnect, device number 5 [ 44.112840][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.124598][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.134593][ T53] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 44.143882][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.152998][ T53] usb 1-1: config 0 descriptor?? [ 44.232783][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.472742][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 44.519828][ T837] netlink: 'syz.2.201': attribute type 13 has an invalid length. [ 44.587839][ T847] tipc: Started in network mode [ 44.592764][ T311] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 44.592964][ T847] tipc: Own node identity 12bb974fe482, cluster identity 4711 [ 44.602287][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.607375][ T311] usb 2-1: config 0 descriptor?? [ 44.610799][ T847] tipc: Enabled bearer , priority 0 [ 44.632293][ T847] device syzkaller0 entered promiscuous mode [ 44.639755][ T846] tipc: Resetting bearer [ 44.647775][ T846] tipc: Disabling bearer [ 44.648871][ T53] logitech-djreceiver 0003:046D:C52F.0007: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.0-1/input0 [ 44.852452][ T53] usb 1-1: USB disconnect, device number 6 [ 45.035612][ T311] usb 5-1: USB disconnect, device number 6 [ 45.442694][ T311] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 45.461119][ T24] audit: type=1400 audit(1755706780.810:378): avc: denied { map } for pid=873 comm="syz.0.216" path="socket:[17705]" dev="sockfs" ino=17705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.485053][ T24] audit: type=1400 audit(1755706780.810:379): avc: denied { read } for pid=873 comm="syz.0.216" path="socket:[17705]" dev="sockfs" ino=17705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.506971][ T876] tipc: Enabled bearer , priority 0 [ 45.516070][ T876] device syzkaller0 entered promiscuous mode [ 45.524517][ T875] tipc: Resetting bearer [ 45.531775][ T875] tipc: Disabling bearer [ 45.640011][ T390] usb 4-1: USB disconnect, device number 5 [ 45.664342][ T24] audit: type=1326 audit(1755706781.020:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d639debe9 code=0x7ffc0000 [ 45.688563][ T24] audit: type=1326 audit(1755706781.020:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6d639debe9 code=0x7ffc0000 [ 45.713057][ T24] audit: type=1326 audit(1755706781.020:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d639debe9 code=0x7ffc0000 [ 45.737336][ T24] audit: type=1326 audit(1755706781.020:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f6d639debe9 code=0x7ffc0000 [ 45.744884][ T889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 45.761425][ T24] audit: type=1326 audit(1755706781.020:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=886 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d639debe9 code=0x7ffc0000 [ 45.794660][ T24] audit: type=1400 audit(1755706781.120:385): avc: denied { write } for pid=888 comm="syz.3.223" path="/37/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.862740][ T669] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 45.872817][ T5] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 45.892716][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.932696][ T311] usb 5-1: not running at top speed; connect to a high speed hub [ 45.941960][ T390] usb 2-1: USB disconnect, device number 5 [ 45.944091][ T902] kvm: pic: non byte read [ 45.952986][ T902] kvm: pic: non byte read [ 45.957717][ T902] kvm: pic: non byte read [ 45.962226][ T902] kvm: pic: non byte read [ 45.966979][ T902] kvm: pic: non byte read [ 45.971616][ T902] kvm: pic: non byte read [ 45.976474][ T902] kvm: pic: non byte read [ 45.981120][ T902] kvm: pic: non byte read [ 45.988308][ T902] kvm: pic: non byte read [ 45.992897][ T902] kvm: pic: non byte read [ 46.012749][ T311] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 46.022270][ T311] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 46.031538][ T311] usb 5-1: config 17 has no interface number 0 [ 46.040696][ T311] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 46.051254][ T311] usb 5-1: config 17 interface 8 has no altsetting 0 [ 46.134236][ T911] FAT-fs (loop3): Directory bread(block 64) failed [ 46.141091][ T911] FAT-fs (loop3): Directory bread(block 65) failed [ 46.149739][ T911] FAT-fs (loop3): Directory bread(block 66) failed [ 46.157023][ T911] FAT-fs (loop3): Directory bread(block 67) failed [ 46.164125][ T911] FAT-fs (loop3): Directory bread(block 68) failed [ 46.171349][ T911] FAT-fs (loop3): Directory bread(block 69) failed [ 46.172732][ T5] usb 3-1: device descriptor read/64, error -71 [ 46.178605][ T911] FAT-fs (loop3): Directory bread(block 70) failed [ 46.191938][ T911] FAT-fs (loop3): Directory bread(block 71) failed [ 46.199097][ T911] FAT-fs (loop3): Directory bread(block 72) failed [ 46.207203][ T911] FAT-fs (loop3): Directory bread(block 73) failed [ 46.232865][ T311] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 46.242780][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.251337][ T311] usb 5-1: Product: syz [ 46.262728][ T669] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.270531][ T311] usb 5-1: Manufacturer: syz [ 46.282728][ T311] usb 5-1: SerialNumber: syz [ 46.372739][ T669] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 46.381642][ T669] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 46.392655][ T669] usb 1-1: config 63 has no interface number 0 [ 46.398999][ T669] usb 1-1: config 63 interface 66 has no altsetting 0 [ 46.552756][ T390] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.562924][ T669] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 46.573083][ T286] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 46.580982][ T669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.589806][ T669] usb 1-1: Product: syz [ 46.592711][ T5] usb 3-1: device descriptor read/64, error -71 [ 46.594392][ T669] usb 1-1: Manufacturer: syz [ 46.605527][ T669] usb 1-1: SerialNumber: syz [ 46.623265][ T311] usb 5-1: selecting invalid altsetting 0 [ 46.630943][ T311] usb 5-1: USB disconnect, device number 7 [ 46.833140][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.845060][ T883] udc-core: couldn't find an available UDC or it's busy [ 46.856973][ T883] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.865898][ T5] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 46.912795][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.924147][ T390] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 46.933496][ T286] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 46.942285][ T286] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 46.953197][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.961478][ T286] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 46.971226][ T390] usb 2-1: config 0 descriptor?? [ 46.976688][ T286] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 46.987955][ T286] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 47.072877][ T669] uvcvideo: Found UVC 0.07 device syz (174f:8a31) [ 47.092777][ T669] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 47.112806][ T286] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 47.121976][ T286] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 47.130036][ T669] uvcvideo: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 47.139674][ T286] usb 4-1: Product: syz [ 47.143873][ T286] usb 4-1: Manufacturer: syz [ 47.152749][ T669] uvcvideo: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 47.152759][ T5] usb 3-1: device descriptor read/64, error -71 [ 47.183108][ T286] cdc_wdm 4-1:1.0: skipping garbage [ 47.188537][ T286] cdc_wdm 4-1:1.0: skipping garbage [ 47.194356][ T669] uvcvideo: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 47.204298][ T286] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 47.222722][ T669] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 47.231920][ T669] uvcvideo: No valid video chain found. [ 47.242782][ T669] usb 1-1: USB disconnect, device number 7 [ 47.312781][ T20] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 47.320673][ T390] usbhid 2-1:0.0: can't add hid device: -71 [ 47.326694][ T390] usbhid: probe of 2-1:0.0 failed with error -71 [ 47.333927][ T390] usb 2-1: USB disconnect, device number 6 [ 47.389975][ T311] usb 4-1: USB disconnect, device number 6 [ 47.552694][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 47.572724][ T5] usb 3-1: device descriptor read/64, error -71 [ 47.672704][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.683520][ T20] usb 5-1: config 0 has no interfaces? [ 47.689112][ T20] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 47.698327][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.704331][ T5] usb usb3-port1: attempt power cycle [ 47.708483][ T20] usb 5-1: config 0 descriptor?? [ 47.782719][ T390] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.968959][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 47.987327][ T311] usb 5-1: USB disconnect, device number 8 [ 47.992685][ T947] process 'syz.3.246' launched './file0' with NULL argv: empty string added [ 48.122686][ T5] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 48.162719][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.173845][ T390] usb 2-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 48.182952][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.191961][ T390] usb 2-1: config 0 descriptor?? [ 48.302858][ T5] usb 3-1: device descriptor read/8, error -71 [ 48.380610][ T959] tipc: Enabled bearer , priority 0 [ 48.396473][ T959] device syzkaller0 entered promiscuous mode [ 48.412880][ T959] tipc: Resetting bearer [ 48.420022][ T958] tipc: Resetting bearer [ 48.430530][ T958] tipc: Disabling bearer [ 48.484331][ T961] input: syz1 as /devices/virtual/input/input6 [ 48.549076][ T970] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 48.572693][ T5] usb 3-1: device descriptor read/8, error -71 [ 48.651124][ T978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.668305][ T978] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 48.689539][ T978] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.703513][ T978] EXT4-fs (loop0): 1 truncate cleaned up [ 48.714376][ T978] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue [ 48.742931][ T978] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1969368878 > max in inode 18 [ 48.762809][ T390] usbhid 2-1:0.0: can't add hid device: -71 [ 48.769168][ T390] usbhid: probe of 2-1:0.0 failed with error -71 [ 48.777834][ T390] usb 2-1: USB disconnect, device number 7 [ 48.816183][ T994] ================================================================== [ 48.824575][ T994] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 48.833259][ T994] Read of size 8 at addr ffff888115b56dc0 by task syz.0.266/994 [ 48.840983][ T994] [ 48.843420][ T994] CPU: 0 PID: 994 Comm: syz.0.266 Not tainted 5.10.240-syzkaller #0 [ 48.851929][ T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.862097][ T994] Call Trace: [ 48.865624][ T994] __dump_stack+0x21/0x24 [ 48.870054][ T994] dump_stack_lvl+0x169/0x1d8 [ 48.874761][ T994] ? show_regs_print_info+0x18/0x18 [ 48.880068][ T994] ? thaw_kernel_threads+0x220/0x220 [ 48.885473][ T994] print_address_description+0x7f/0x2c0 [ 48.891044][ T994] ? tc_setup_flow_action+0x842/0x3280 [ 48.896540][ T994] kasan_report+0xe2/0x130 [ 48.900973][ T994] ? flow_action_cookie_create+0x28/0x90 [ 48.906706][ T994] ? tc_setup_flow_action+0x842/0x3280 [ 48.912170][ T994] __asan_report_load8_noabort+0x14/0x20 [ 48.917843][ T994] tc_setup_flow_action+0x842/0x3280 [ 48.923160][ T994] ? __kmalloc+0x1a7/0x330 [ 48.927593][ T994] ? flow_rule_alloc+0x32/0x2c0 [ 48.932741][ T994] mall_replace_hw_filter+0x293/0x810 [ 48.938418][ T994] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 48.944628][ T994] ? mall_set_parms+0x410/0x410 [ 48.949606][ T994] ? tcf_exts_destroy+0xb0/0xb0 [ 48.954468][ T994] ? pcpu_alloc+0xf8a/0x16b0 [ 48.959068][ T994] ? mall_set_parms+0x19d/0x410 [ 48.963921][ T994] mall_change+0x528/0x750 [ 48.968437][ T994] ? __kasan_check_write+0x14/0x20 [ 48.973562][ T994] ? mall_get+0xa0/0xa0 [ 48.977949][ T994] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 48.983899][ T994] ? nla_strcmp+0xf4/0x140 [ 48.988326][ T994] tc_new_tfilter+0x13f6/0x1a10 [ 48.993284][ T994] ? mall_get+0xa0/0xa0 [ 48.997646][ T994] ? tcf_gate_entry_destructor+0x20/0x20 [ 49.003438][ T994] ? security_capable+0x87/0xb0 [ 49.008535][ T994] ? ns_capable+0x8c/0xf0 [ 49.012956][ T994] ? netlink_net_capable+0x125/0x160 [ 49.018420][ T994] ? tcf_gate_entry_destructor+0x20/0x20 [ 49.024082][ T994] rtnetlink_rcv_msg+0x800/0xb90 [ 49.029110][ T994] ? rtnetlink_bind+0x80/0x80 [ 49.034016][ T994] ? arch_stack_walk+0xee/0x140 [ 49.038983][ T994] ? stack_trace_save+0x98/0xe0 [ 49.043831][ T994] ? stack_trace_snprint+0xf0/0xf0 [ 49.049190][ T994] ? memcpy+0x56/0x70 [ 49.053222][ T994] ? avc_has_perm+0x234/0x360 [ 49.057926][ T994] ? __kasan_slab_alloc+0xbd/0xf0 [ 49.063043][ T994] ? slab_post_alloc_hook+0x5d/0x2f0 [ 49.068417][ T994] ? ___sys_sendmsg+0x1f0/0x260 [ 49.073620][ T994] ? avc_has_perm_noaudit+0x240/0x240 [ 49.079397][ T994] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 49.084974][ T994] netlink_rcv_skb+0x1e0/0x430 [ 49.090015][ T994] ? rtnetlink_bind+0x80/0x80 [ 49.094798][ T994] ? netlink_ack+0xb80/0xb80 [ 49.099799][ T994] ? __netlink_lookup+0x387/0x3b0 [ 49.104947][ T994] rtnetlink_rcv+0x1c/0x20 [ 49.109578][ T994] netlink_unicast+0x876/0xa40 [ 49.114624][ T994] netlink_sendmsg+0x88d/0xb30 [ 49.119516][ T994] ? netlink_getsockopt+0x530/0x530 [ 49.125345][ T994] ? security_socket_sendmsg+0x82/0xa0 [ 49.130821][ T994] ? netlink_getsockopt+0x530/0x530 [ 49.136086][ T994] ____sys_sendmsg+0x5a2/0x8c0 [ 49.140862][ T994] ? __sys_sendmsg_sock+0x40/0x40 [ 49.145986][ T994] ? import_iovec+0x7c/0xb0 [ 49.150490][ T994] ___sys_sendmsg+0x1f0/0x260 [ 49.155170][ T994] ? __sys_sendmsg+0x250/0x250 [ 49.159939][ T994] ? __fdget+0x1a1/0x230 [ 49.164185][ T994] __x64_sys_sendmsg+0x1e2/0x2a0 [ 49.169210][ T994] ? ___sys_sendmsg+0x260/0x260 [ 49.174058][ T994] ? switch_fpu_return+0x197/0x340 [ 49.179165][ T994] do_syscall_64+0x31/0x40 [ 49.183583][ T994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.189492][ T994] RIP: 0033:0x7fd67ef3cbe9 [ 49.194032][ T994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.213865][ T994] RSP: 002b:00007fd67d9a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.222387][ T994] RAX: ffffffffffffffda RBX: 00007fd67f163fa0 RCX: 00007fd67ef3cbe9 [ 49.230573][ T994] RDX: 0000000004004810 RSI: 0000200000000580 RDI: 0000000000000004 [ 49.238638][ T994] RBP: 00007fd67efbfe19 R08: 0000000000000000 R09: 0000000000000000 [ 49.246733][ T994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.255010][ T994] R13: 00007fd67f164038 R14: 00007fd67f163fa0 R15: 00007fff42d8dd98 [ 49.263103][ T994] [ 49.265583][ T994] Allocated by task 994: [ 49.270049][ T994] __kasan_kmalloc+0xda/0x110 [ 49.274935][ T994] __kmalloc+0x1a7/0x330 [ 49.279637][ T994] tcf_idr_create+0x5f/0x790 [ 49.284424][ T994] tcf_idr_create_from_flags+0x61/0x70 [ 49.289886][ T994] tcf_gact_init+0x2b4/0x520 [ 49.294680][ T994] tcf_action_init_1+0x3e1/0x670 [ 49.300081][ T994] tcf_action_init+0x1e6/0x700 [ 49.305046][ T994] tcf_exts_validate+0x215/0x510 [ 49.310141][ T994] mall_set_parms+0x4b/0x410 [ 49.315049][ T994] mall_change+0x45c/0x750 [ 49.320032][ T994] tc_new_tfilter+0x13f6/0x1a10 [ 49.324986][ T994] rtnetlink_rcv_msg+0x800/0xb90 [ 49.330070][ T994] netlink_rcv_skb+0x1e0/0x430 [ 49.334922][ T994] rtnetlink_rcv+0x1c/0x20 [ 49.339511][ T994] netlink_unicast+0x876/0xa40 [ 49.344396][ T994] netlink_sendmsg+0x88d/0xb30 [ 49.349240][ T994] ____sys_sendmsg+0x5a2/0x8c0 [ 49.354008][ T994] ___sys_sendmsg+0x1f0/0x260 [ 49.358680][ T994] __x64_sys_sendmsg+0x1e2/0x2a0 [ 49.363973][ T994] do_syscall_64+0x31/0x40 [ 49.368560][ T994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.374442][ T994] [ 49.376777][ T994] The buggy address belongs to the object at ffff888115b56d00 [ 49.376777][ T994] which belongs to the cache kmalloc-192 of size 192 [ 49.390931][ T994] The buggy address is located 0 bytes to the right of [ 49.390931][ T994] 192-byte region [ffff888115b56d00, ffff888115b56dc0) [ 49.404808][ T994] The buggy address belongs to the page: [ 49.410565][ T994] page:ffffea000456d580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115b56 [ 49.421011][ T994] flags: 0x4000000000000200(slab) [ 49.426043][ T994] raw: 4000000000000200 ffffea000456d680 0000000200000002 ffff888100043380 [ 49.434975][ T994] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 49.444360][ T994] page dumped because: kasan: bad access detected [ 49.451025][ T994] page_owner tracks the page as allocated [ 49.456791][ T994] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 95, ts 6768404094, free_ts 0 [ 49.471935][ T994] prep_new_page+0x179/0x180 [ 49.476757][ T994] get_page_from_freelist+0x2235/0x23d0 [ 49.482309][ T994] __alloc_pages_nodemask+0x268/0x5f0 [ 49.487762][ T994] new_slab+0x84/0x3f0 [ 49.491914][ T994] ___slab_alloc+0x2a6/0x450 [ 49.496686][ T994] __slab_alloc+0x63/0xa0 [ 49.501011][ T994] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 49.506383][ T994] kernfs_fop_open+0x343/0xb30 [ 49.511290][ T994] do_dentry_open+0x793/0x1090 [ 49.516253][ T994] vfs_open+0x73/0x80 [ 49.520247][ T994] path_openat+0x27ad/0x3160 [ 49.524932][ T994] do_filp_open+0x1b3/0x3e0 [ 49.529630][ T994] do_sys_openat2+0x14c/0x6d0 [ 49.534583][ T994] __x64_sys_openat+0x136/0x160 [ 49.539622][ T994] do_syscall_64+0x31/0x40 [ 49.544129][ T994] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.550098][ T994] page_owner free stack trace missing [ 49.555672][ T994] [ 49.557991][ T994] Memory state around the buggy address: [ 49.563790][ T994] ffff888115b56c80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 49.571843][ T994] ffff888115b56d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.580001][ T994] >ffff888115b56d80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 49.588159][ T994] ^ [ 49.594325][ T994] ffff888115b56e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.602459][ T994] ffff888115b56e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 49.610909][ T994] ================================================================== [ 49.619891][ T994] Disabling lock debugging due to kernel taint [ 49.634533][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 49.634544][ T24] audit: type=1400 audit(1755706784.990:406): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.665759][ T24] audit: type=1400 audit(1755706784.990:407): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.687394][ T24] audit: type=1400 audit(1755706784.990:408): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.709736][ T5] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 49.717640][ T24] audit: type=1400 audit(1755706784.990:409): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.739272][ T24] audit: type=1400 audit(1755706784.990:410): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.760597][ T24] audit: type=1400 audit(1755706784.990:411): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.785108][ T24] audit: type=1400 audit(1755706784.990:412): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.822777][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 49.943675][ T5] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 49.951938][ T5] usb 3-1: config 0 has no interface number 0 [ 50.112773][ T5] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 50.121862][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.130091][ T5] usb 3-1: Product: syz [ 50.134325][ T5] usb 3-1: Manufacturer: syz [ 50.139098][ T5] usb 3-1: SerialNumber: syz [ 50.145323][ T5] usb 3-1: config 0 descriptor?? [ 51.455439][ T5] usb 3-1: USB disconnect, device number 9