last executing test programs: 3.57285336s ago: executing program 0 (id=1349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.471580479s ago: executing program 0 (id=1352): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r2, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6}]) 2.963474006s ago: executing program 4 (id=1365): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 2.963208656s ago: executing program 4 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.855707246s ago: executing program 4 (id=1369): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x8, 0x1, 0xfffffffc, 0x18, "1207b72d7fff64e9cafb000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) 2.459182933s ago: executing program 1 (id=1379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2ea}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.356645302s ago: executing program 1 (id=1382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000001040)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 2.339984794s ago: executing program 1 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000300)={0x0, 0x733bb934a93f55f4, 0x8, {0x8, 0xb, "82b6064c4850"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.975679718s ago: executing program 4 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[]) 1.821647722s ago: executing program 4 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sched_switch\x00', r2}, 0x10) r3 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r3) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 1.723941081s ago: executing program 4 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, &(0x7f0000000300)={0x0, 0x733bb934a93f55f4, 0x5, {0x5, 0xb, "82b606"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.439020237s ago: executing program 3 (id=1406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.381714763s ago: executing program 3 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@discard}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 1.314223068s ago: executing program 0 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.29283388s ago: executing program 3 (id=1410): r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ftruncate(r0, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) 1.252011214s ago: executing program 0 (id=1411): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001900000019a4240002000000000000000000000f010000000204000000000000070000000000000000005c4c0d32541e1b454529360bacb322a546b84484ee87408ba1f28a8dc6d8af24b5fbe8358050f051e803faa35f8aefaeaca9c4b2aa385e0badffea011f630b3c266c0bee45b5e31f0d66bd746742e59cc19594bc9b152220f9d8fb7e16837b50a42bc05b99671d616666dd5ad556150ea328550a"], 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) 1.179939681s ago: executing program 0 (id=1412): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000880)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.179522421s ago: executing program 3 (id=1413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r1 = syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 1.136257385s ago: executing program 0 (id=1414): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410017ff5d810009050f1f0504000000090583"], 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x3f, 0x441) 665.575458ms ago: executing program 3 (id=1415): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000500)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r1, 0x9f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 320.73086ms ago: executing program 2 (id=1420): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x345000, 0x0) pidfd_getfd(r3, r4, 0x0) 312.086541ms ago: executing program 1 (id=1421): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18799cb61cbe217da50000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 252.116056ms ago: executing program 3 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) 188.564533ms ago: executing program 2 (id=1423): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv6={0x86dd, @tcp={0x6, 0x6, 'z{%', 0x14, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x4, 0x0, 0x2}}}}}}}, 0x0) 175.788453ms ago: executing program 1 (id=1424): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_load(r0, &(0x7f0000000040)=ANY=[], 0x10) 119.375289ms ago: executing program 2 (id=1425): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000059c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) 118.142409ms ago: executing program 2 (id=1426): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fsync(r0) 59.983464ms ago: executing program 2 (id=1427): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x6, 0xdf, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 59.747614ms ago: executing program 1 (id=1428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x142131}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 0s ago: executing program 2 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) kernel console output (not intermixed with test programs): [ 97.409978][ T2494] EXT4-fs (loop1): unmounting filesystem. [ 97.438325][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.449060][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.461411][ T2520] device bridge_slave_0 entered promiscuous mode [ 97.507957][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.517451][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.528705][ T2520] device bridge_slave_1 entered promiscuous mode [ 97.564019][ T1312] usb 5-1: device firmware changed [ 97.575070][ T320] usb 5-1: USB disconnect, device number 20 [ 97.605707][ T28] audit: type=1400 audit(1727256124.060:372): avc: denied { mounton } for pid=2538 comm="syz.1.849" path="/2/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.694470][ T2547] netlink: 165 bytes leftover after parsing attributes in process `syz.3.853'. [ 97.707735][ T2547] netlink: 277 bytes leftover after parsing attributes in process `syz.3.853'. [ 97.777203][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.785238][ T2520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.793823][ T320] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 97.794186][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.809887][ T2520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.841064][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.851411][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.866292][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.879410][ T2559] syz.3.857[2559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.879476][ T2559] syz.3.857[2559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.906715][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.929898][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.938752][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.958645][ T44] device bridge_slave_1 left promiscuous mode [ 97.966491][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.976691][ T44] device bridge_slave_0 left promiscuous mode [ 97.987368][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.998127][ T44] device veth1_macvtap left promiscuous mode [ 98.010884][ T44] device veth0_vlan left promiscuous mode [ 98.136961][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.147000][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.154661][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.173971][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.178971][ T2520] device veth0_vlan entered promiscuous mode [ 98.194359][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.202799][ T2520] device veth1_macvtap entered promiscuous mode [ 98.212216][ T320] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.225057][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.241559][ T320] usb 5-1: config 0 descriptor?? [ 98.252309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.262210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.273908][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.285371][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.294446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.303946][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.314309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.324914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.335999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.345732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.353813][ T1312] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 98.354782][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.371265][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.381577][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.391804][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.401041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.410963][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.419977][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.480766][ T2586] loop3: detected capacity change from 0 to 512 [ 98.500391][ T2586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.515320][ T2586] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 98.554320][ T2084] EXT4-fs (loop3): unmounting filesystem. [ 98.599875][ T2599] loop2: detected capacity change from 0 to 256 [ 98.611330][ T2599] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xa154a131, utbl_chksum : 0xe619d30d) [ 98.704131][ T320] hid (null): bogus close delimiter [ 98.744094][ T1312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.757209][ T1312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.772768][ T1312] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.784507][ T1312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.796451][ T1312] usb 2-1: config 0 descriptor?? [ 98.845259][ T28] audit: type=1326 audit(1727256125.300:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d817def9 code=0x7ffc0000 [ 98.870224][ T6] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 98.881791][ T28] audit: type=1326 audit(1727256125.300:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d817def9 code=0x7ffc0000 [ 98.910263][ T28] audit: type=1326 audit(1727256125.300:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9d817def9 code=0x7ffc0000 [ 98.938665][ T28] audit: type=1326 audit(1727256125.300:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d817def9 code=0x7ffc0000 [ 98.971420][ T28] audit: type=1326 audit(1727256125.300:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2606 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d817def9 code=0x7ffc0000 [ 99.224030][ T2627] loop2: detected capacity change from 0 to 40427 [ 99.234120][ T2627] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 99.244848][ T2627] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.258207][ T320] usb 5-1: string descriptor 0 read error: -71 [ 99.264796][ T2627] F2FS-fs (loop2): invalid crc value [ 99.275061][ T1312] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 99.284089][ T320] uclogic 0003:256C:006D.0036: failed retrieving string descriptor #200: -71 [ 99.289710][ T1312] plantronics 0003:047F:FFFF.0037: unbalanced delimiter at end of report description [ 99.300050][ T2627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.317032][ T6] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 99.322291][ T320] uclogic 0003:256C:006D.0036: failed retrieving pen parameters: -71 [ 99.331312][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.350596][ T1312] plantronics 0003:047F:FFFF.0037: parse failed [ 99.357256][ T1312] plantronics: probe of 0003:047F:FFFF.0037 failed with error -22 [ 99.357476][ T320] uclogic 0003:256C:006D.0036: failed probing pen v2 parameters: -71 [ 99.370367][ T6] usb 4-1: config 0 descriptor?? [ 99.383792][ T320] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 99.401290][ T320] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 99.416573][ T320] usb 5-1: USB disconnect, device number 21 [ 99.424841][ T2627] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.438141][ T2627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.489667][ T6] usb 2-1: USB disconnect, device number 21 [ 100.013647][ T2655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.893'. [ 100.074059][ T6] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 100.106741][ T320] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 100.223926][ T556] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 100.353888][ T320] usb 5-1: Using ep0 maxpacket: 8 [ 100.383935][ T299] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 100.473944][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.473980][ T320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.503604][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.515475][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 100.528176][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.539224][ T6] usb 1-1: config 0 descriptor?? [ 100.554238][ T320] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 100.567861][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 100.580231][ T320] usb 5-1: SerialNumber: syz [ 100.587684][ T320] usb 5-1: config 0 descriptor?? [ 100.594465][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.610173][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.624103][ T556] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 100.636364][ T299] usb 2-1: Using ep0 maxpacket: 8 [ 100.645141][ T320] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 100.653883][ T556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.663914][ T320] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 100.677243][ T320] usb 5-1: Failed to create links for entity 255 [ 100.686215][ T556] usb 3-1: config 0 descriptor?? [ 100.692067][ T320] usb 5-1: Failed to register entities (-22). [ 100.783896][ T299] usb 2-1: config 0 has no interfaces? [ 100.792156][ T299] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 100.807781][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.820186][ T299] usb 2-1: config 0 descriptor?? [ 100.848272][ T320] usb 5-1: USB disconnect, device number 22 [ 101.024966][ T6] lg-g15 0003:046D:C222.0038: unknown main item tag 0x1 [ 101.033504][ T6] lg-g15 0003:046D:C222.0038: unbalanced delimiter at end of report description [ 101.051296][ T6] lg-g15: probe of 0003:046D:C222.0038 failed with error -22 [ 101.069844][ T6] usb 2-1: USB disconnect, device number 22 [ 101.238382][ T298] usb 1-1: USB disconnect, device number 22 [ 101.604630][ T556] hid-led 0003:27B8:01ED.0039: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 101.626689][ T556] hid-led 0003:27B8:01ED.0039: ThingM blink(1) initialized [ 101.719412][ T298] usb 4-1: USB disconnect, device number 20 [ 101.752964][ T2679] loop4: detected capacity change from 0 to 256 [ 101.809638][ T6] usb 3-1: USB disconnect, device number 20 [ 101.831024][ T2686] loop3: detected capacity change from 0 to 256 [ 101.841367][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 101.841387][ T28] audit: type=1400 audit(1727256128.300:393): avc: denied { mounton } for pid=2684 comm="syz.3.907" path="/57/file0/bus" dev="loop3" ino=1048689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 101.844197][ T299] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 101.947983][ T2084] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 101.959284][ T2084] FAT-fs (loop3): Filesystem has been set read-only [ 101.967236][ T2084] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 102.054016][ T39] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 102.083654][ T28] audit: type=1400 audit(1727256128.530:394): avc: denied { mount } for pid=2694 comm="syz.0.913" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.123016][ T28] audit: type=1400 audit(1727256128.570:395): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 102.208556][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.217775][ T2698] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.228171][ T2698] device bridge_slave_0 entered promiscuous mode [ 102.239564][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.244112][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.250155][ T2698] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.264749][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.290028][ T299] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.305333][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.306032][ T2698] device bridge_slave_1 entered promiscuous mode [ 102.334873][ T299] usb 2-1: config 0 descriptor?? [ 102.342481][ T2703] input: syz1 as /devices/virtual/input/input30 [ 102.431704][ T28] audit: type=1400 audit(1727256128.880:396): avc: denied { write } for pid=2708 comm="syz.2.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.433903][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.454503][ T298] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 102.469446][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.498062][ T39] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 102.514085][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.532801][ T39] usb 5-1: config 0 descriptor?? [ 102.551408][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.561064][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.570868][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.580828][ T2698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.614724][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.624864][ T556] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.633471][ T556] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.655091][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.667077][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.676024][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.686352][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.695374][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.703567][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.715752][ T43] device bridge_slave_1 left promiscuous mode [ 102.723556][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.733528][ T298] usb 1-1: Using ep0 maxpacket: 16 [ 102.742765][ T43] device bridge_slave_0 left promiscuous mode [ 102.755900][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.771823][ T43] device veth1_macvtap left promiscuous mode [ 102.781042][ T43] device veth0_vlan left promiscuous mode [ 102.814639][ T299] hid (null): bogus close delimiter [ 102.854073][ T298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.894577][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.904478][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.920966][ T2698] device veth0_vlan entered promiscuous mode [ 102.931938][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.942119][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.955657][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.965518][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.980622][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.991486][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.001672][ T2698] device veth1_macvtap entered promiscuous mode [ 103.012345][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.023414][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.033541][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.035240][ T39] hid-steam 0003:28DE:1142.003B: unknown main item tag 0x0 [ 103.053669][ T39] hid-steam 0003:28DE:1142.003B: item fetching failed at offset 2/5 [ 103.057189][ T298] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 103.064520][ T39] hid-steam 0003:28DE:1142.003B: steam_probe:parse of hid interface failed [ 103.075951][ T298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.085412][ T39] hid-steam: probe of 0003:28DE:1142.003B failed with error -22 [ 103.094448][ T298] usb 1-1: Product: syz [ 103.118046][ T298] usb 1-1: Manufacturer: syz [ 103.124286][ T298] usb 1-1: SerialNumber: syz [ 103.132259][ T298] usb 1-1: config 0 descriptor?? [ 103.140423][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.150682][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.262287][ T39] usb 5-1: USB disconnect, device number 23 [ 103.344022][ T299] usb 2-1: string descriptor 0 read error: -71 [ 103.364118][ T299] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #200: -71 [ 103.375088][ T299] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71 [ 103.385258][ T299] uclogic 0003:256C:006D.003A: failed probing pen v2 parameters: -71 [ 103.395359][ T299] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 103.404989][ T299] uclogic: probe of 0003:256C:006D.003A failed with error -71 [ 103.424419][ T320] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 103.435048][ T299] usb 2-1: USB disconnect, device number 23 [ 103.653966][ T298] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 103.661756][ T298] usb 1-1: No valid video chain found. [ 103.674533][ T298] usb 1-1: USB disconnect, device number 23 [ 103.676422][ T320] usb 4-1: Using ep0 maxpacket: 32 [ 103.804118][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.816746][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.840160][ T320] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 103.858646][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.870251][ T320] usb 4-1: config 0 descriptor?? [ 103.952540][ T28] audit: type=1400 audit(1727256130.400:397): avc: denied { mount } for pid=2740 comm="syz.1.930" name="/" dev="configfs" ino=13051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.981037][ T28] audit: type=1400 audit(1727256130.400:398): avc: denied { setattr } for pid=2740 comm="syz.1.930" name="/" dev="configfs" ino=13051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.012238][ T28] audit: type=1400 audit(1727256130.410:399): avc: denied { unmount } for pid=2494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 104.153808][ T298] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 104.354886][ T320] lua 0003:1E7D:2C2E.003C: global environment stack underflow [ 104.364483][ T320] lua 0003:1E7D:2C2E.003C: item 0 0 1 11 parsing failed [ 104.374002][ T320] lua 0003:1E7D:2C2E.003C: parse failed [ 104.390567][ T320] lua: probe of 0003:1E7D:2C2E.003C failed with error -22 [ 104.409964][ T2755] loop2: detected capacity change from 0 to 1024 [ 104.434918][ T2755] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.936: casefold flag without casefold feature [ 104.451184][ T2755] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 104.465285][ T2755] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.482307][ T28] audit: type=1326 audit(1727256130.930:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2754 comm="syz.2.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c24d7def9 code=0x0 [ 104.494112][ T299] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 104.560771][ T1312] usb 4-1: USB disconnect, device number 21 [ 104.583902][ T298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.596648][ T298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.609475][ T298] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 104.621080][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.635976][ T298] usb 5-1: config 0 descriptor?? [ 104.873862][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.887884][ T299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.902462][ T299] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 104.913493][ T299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.926085][ T299] usb 1-1: config 0 descriptor?? [ 105.018308][ T2769] syz.1.940[2769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.018371][ T2769] syz.1.940[2769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.104740][ T298] elo 0003:04E7:0030.003D: item fetching failed at offset 2/5 [ 105.126739][ T298] elo 0003:04E7:0030.003D: parse failed [ 105.133418][ T298] elo: probe of 0003:04E7:0030.003D failed with error -22 [ 105.171837][ T2778] x_tables: duplicate underflow at hook 4 [ 105.188947][ T2520] EXT4-fs (loop2): unmounting filesystem. [ 105.307884][ T298] usb 5-1: USB disconnect, device number 24 [ 105.353910][ T556] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 105.405782][ T299] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.003E/input/input31 [ 105.422857][ T299] uclogic 0003:28BD:0909.003E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 105.483881][ T320] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 105.626329][ T298] usb 1-1: USB disconnect, device number 24 [ 105.733958][ T556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.752864][ T556] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.766752][ T556] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.777411][ T556] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.789873][ T556] usb 4-1: config 0 descriptor?? [ 105.863819][ T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.879381][ T320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.896295][ T320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.913488][ T320] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 105.925774][ T320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.938970][ T320] usb 3-1: config 0 descriptor?? [ 105.978182][ T2795] loop7: detected capacity change from 0 to 16384 [ 106.081263][ T2798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 106.092830][ T2796] loop7: detected capacity change from 16384 to 16383 [ 106.264088][ T556] hid (null): bogus close delimiter [ 106.406647][ T2824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 106.432339][ T320] waltop 0003:172F:0038.0040: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 106.568604][ T28] audit: type=1400 audit(1727256133.020:401): avc: denied { append } for pid=2832 comm="syz.4.967" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.687632][ T2835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.705995][ T2835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.717177][ T298] usb 3-1: USB disconnect, device number 21 [ 106.717642][ T2837] loop4: detected capacity change from 0 to 256 [ 106.763914][ T556] usb 4-1: string descriptor 0 read error: -71 [ 106.783864][ T556] uclogic 0003:256C:006D.003F: failed retrieving string descriptor #200: -71 [ 106.814402][ T556] uclogic 0003:256C:006D.003F: failed retrieving pen parameters: -71 [ 106.833757][ T556] uclogic 0003:256C:006D.003F: failed probing pen v2 parameters: -71 [ 106.842332][ T556] uclogic 0003:256C:006D.003F: failed probing parameters: -71 [ 106.853890][ T556] uclogic: probe of 0003:256C:006D.003F failed with error -71 [ 106.863609][ T556] usb 4-1: USB disconnect, device number 22 [ 107.093886][ T1312] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 107.354015][ T2860] loop3: detected capacity change from 0 to 256 [ 107.395727][ T2860] syz.3.978: attempt to access beyond end of device [ 107.395727][ T2860] loop3: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 107.417797][ T2860] syz.3.978: attempt to access beyond end of device [ 107.417797][ T2860] loop3: rw=524288, sector=256, nr_sectors = 8 limit=256 [ 107.433335][ T2860] syz.3.978: attempt to access beyond end of device [ 107.433335][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.450302][ T2860] syz.3.978: attempt to access beyond end of device [ 107.450302][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.472075][ T2860] syz.3.978: attempt to access beyond end of device [ 107.472075][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.487342][ T1312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.500894][ T6] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 107.509389][ T2860] syz.3.978: attempt to access beyond end of device [ 107.509389][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.525570][ T1312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.534125][ T2860] syz.3.978: attempt to access beyond end of device [ 107.534125][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.537831][ T1312] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 107.553890][ T2860] syz.3.978: attempt to access beyond end of device [ 107.553890][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.564904][ T1312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.590101][ T2860] syz.3.978: attempt to access beyond end of device [ 107.590101][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.605754][ T2860] syz.3.978: attempt to access beyond end of device [ 107.605754][ T2860] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 107.621242][ T1312] usb 5-1: config 0 descriptor?? [ 107.653812][ T556] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 107.893914][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 107.905756][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.923558][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.939367][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 107.958838][ T6] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 107.972274][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.994906][ T6] usb 2-1: config 0 descriptor?? [ 108.023846][ T556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 108.043772][ T556] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 108.076460][ T556] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.093355][ T556] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.108079][ T556] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.129197][ T556] usb 1-1: config 0 descriptor?? [ 108.132357][ T1312] elo 0003:04E7:0030.0041: item fetching failed at offset 5/7 [ 108.153926][ T2862] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 108.154018][ T1312] elo 0003:04E7:0030.0041: parse failed [ 108.173364][ T1312] elo: probe of 0003:04E7:0030.0041 failed with error -22 [ 108.395609][ T1312] usb 5-1: USB disconnect, device number 25 [ 108.470430][ T2878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 108.486273][ T6] nintendo 0003:057E:2009.0042: unknown main item tag 0x0 [ 108.493586][ T6] nintendo 0003:057E:2009.0042: unknown main item tag 0x0 [ 108.509692][ T6] nintendo 0003:057E:2009.0042: item fetching failed at offset 2/5 [ 108.515933][ T2881] loop2: detected capacity change from 0 to 512 [ 108.518694][ T6] nintendo 0003:057E:2009.0042: HID parse failed [ 108.532922][ T6] nintendo 0003:057E:2009.0042: probe - fail = -22 [ 108.540715][ T6] nintendo: probe of 0003:057E:2009.0042 failed with error -22 [ 108.541452][ T2881] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.565011][ T2881] EXT4-fs (loop2): 1 truncate cleaned up [ 108.572491][ T2881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.591299][ T28] audit: type=1400 audit(1727256135.050:402): avc: denied { create } for pid=2880 comm="syz.2.986" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 108.651261][ T2520] EXT4-fs (loop2): unmounting filesystem. [ 108.665481][ T556] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 108.679125][ T556] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 108.694948][ T556] plantronics 0003:047F:FFFF.0043: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.725351][ T556] usb 2-1: USB disconnect, device number 24 [ 108.857396][ T6] kernel write not supported for file /vcsa1 (pid: 6 comm: kworker/0:0) [ 108.881318][ T2895] syz.2.991[2895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.881387][ T2895] syz.2.991[2895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.261728][ T2931] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1008'. [ 109.273870][ T39] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 109.276067][ T2931] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1008'. [ 109.503877][ T320] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 109.524416][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 109.643884][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.657296][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.670967][ T39] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 109.684629][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.696694][ T39] usb 5-1: config 0 descriptor?? [ 109.813820][ T6] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 109.873866][ T320] usb 2-1: config 1 interface 0 has no altsetting 0 [ 109.977667][ T2958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 110.033878][ T320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 110.044780][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.056226][ T320] usb 2-1: Product: syz [ 110.061117][ T320] usb 2-1: Manufacturer: syz [ 110.067614][ T320] usb 2-1: SerialNumber: syz [ 110.068794][ T28] audit: type=1400 audit(1727256136.530:403): avc: denied { relabelfrom } for pid=2965 comm="syz.2.1024" name="NETLINK" dev="sockfs" ino=31132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.101911][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 110.110773][ T28] audit: type=1400 audit(1727256136.540:404): avc: denied { relabelto } for pid=2965 comm="syz.2.1024" name="NETLINK" dev="sockfs" ino=31132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 110.175846][ T39] saitek 0003:06A3:0CCD.0044: unknown main item tag 0x0 [ 110.184759][ T39] saitek 0003:06A3:0CCD.0044: unknown main item tag 0x0 [ 110.195764][ T39] saitek 0003:06A3:0CCD.0044: item fetching failed at offset 2/11 [ 110.206153][ T39] saitek 0003:06A3:0CCD.0044: parse failed [ 110.213270][ T39] saitek: probe of 0003:06A3:0CCD.0044 failed with error -22 [ 110.243917][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.257531][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.268959][ T6] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 110.281908][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.293354][ T6] usb 4-1: config 0 descriptor?? [ 110.391814][ T709] usb 5-1: USB disconnect, device number 26 [ 110.485205][ T2977] syz.2.1028[2977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.485319][ T2977] syz.2.1028[2977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.499643][ T2977] syz.2.1028[2977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.514317][ T2977] syz.2.1028[2977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.755811][ T320] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 110.791620][ T1312] usb 1-1: USB disconnect, device number 25 [ 110.802105][ T6] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 110.816513][ T6] hid-picolcd 0003:04D8:F002.0045: item fetching failed at offset 5/7 [ 110.828531][ T6] hid-picolcd 0003:04D8:F002.0045: device report parse failed [ 110.836847][ T6] hid-picolcd: probe of 0003:04D8:F002.0045 failed with error -22 [ 110.884178][ T298] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 110.893997][ T28] audit: type=1400 audit(1727256137.350:405): avc: denied { setattr } for pid=2995 comm="syz.0.1037" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 110.957493][ T6] usb 2-1: USB disconnect, device number 25 [ 110.968657][ T6] usblp0: removed [ 111.005195][ T19] usb 4-1: USB disconnect, device number 23 [ 111.048145][ T3005] loop4: detected capacity change from 0 to 4096 [ 111.059583][ T3005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.080859][ T1988] EXT4-fs (loop4): unmounting filesystem. [ 111.143831][ T3014] syz.4.1045[3014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.143902][ T3014] syz.4.1045[3014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.194516][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.216672][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.225794][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.234621][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.244735][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.252809][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.260635][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.268663][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x4 [ 111.277244][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.285292][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x2 [ 111.294533][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.309095][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.319257][ T298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.335202][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.343794][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.351820][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.359590][ T298] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.369091][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.379677][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.387833][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.397455][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.405638][ T298] usb 3-1: config 0 descriptor?? [ 111.412059][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.420473][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.428655][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.436704][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.446984][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.455705][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.464377][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.473303][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.481418][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.489685][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.498124][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.509029][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.518182][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.528554][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.540759][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.550032][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.558345][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.566589][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.571321][ T3022] loop3: detected capacity change from 0 to 128 [ 111.576918][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.593683][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.604132][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.615339][ T3022] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.616412][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.627033][ T3022] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038 (0x7fffffff) [ 111.636093][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.666299][ T2698] EXT4-fs (loop3): unmounting filesystem. [ 111.678065][ T1312] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 111.698256][ T1312] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.80 Device [syz0] on syz0 [ 111.777744][ T3040] loop1: detected capacity change from 0 to 512 [ 111.807116][ T3040] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1057: inline data xattr refers to an external xattr inode [ 111.830356][ T3040] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1057: couldn't read orphan inode 12 (err -117) [ 111.873473][ T3040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.905043][ T298] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 111.917832][ T298] plantronics 0003:047F:FFFF.0047: No inputs registered, leaving [ 111.940098][ T298] plantronics 0003:047F:FFFF.0047: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 111.943433][ T3052] loop4: detected capacity change from 0 to 1024 [ 111.956615][ T28] audit: type=1400 audit(1727256138.420:406): avc: denied { read } for pid=3049 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.964449][ T3052] EXT4-fs: Ignoring removed orlov option [ 111.995045][ T2494] EXT4-fs (loop1): unmounting filesystem. [ 112.014038][ T3052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.056556][ T3052] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.098264][ T1988] EXT4-fs (loop4): unmounting filesystem. [ 112.189092][ T3070] loop4: detected capacity change from 0 to 1024 [ 112.199580][ T3070] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 112.204541][ T19] usb 3-1: USB disconnect, device number 22 [ 112.210942][ T3070] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 112.233845][ T3070] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 112.570905][ T3074] loop4: detected capacity change from 0 to 512 [ 112.588565][ T3074] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 112.599473][ T3074] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff) [ 112.619907][ T3074] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.1068: corrupted inode contents [ 112.649837][ T3074] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.1068: mark_inode_dirty error [ 112.666996][ T3074] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.1068: corrupted inode contents [ 112.683595][ T3074] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1068: mark_inode_dirty error [ 112.704048][ T1988] EXT4-fs (loop4): unmounting filesystem. [ 112.755064][ T3094] loop2: detected capacity change from 0 to 128 [ 112.773004][ T3094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.787867][ T3094] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 112.835688][ T28] audit: type=1400 audit(1727256139.290:407): avc: denied { read } for pid=3093 comm="syz.2.1074" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 112.861874][ T3094] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 112.863903][ T28] audit: type=1400 audit(1727256139.290:408): avc: denied { rename } for pid=3093 comm="syz.2.1074" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 112.899412][ T28] audit: type=1400 audit(1727256139.290:409): avc: denied { remount } for pid=3093 comm="syz.2.1074" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 112.933831][ T298] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 112.940662][ T28] audit: type=1400 audit(1727256139.390:410): avc: denied { bind } for pid=3100 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.957899][ T2520] EXT4-fs (loop2): unmounting filesystem. [ 113.194170][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.202667][ T3116] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.212447][ T3116] device bridge_slave_0 entered promiscuous mode [ 113.222077][ T3116] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.231547][ T3116] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.241499][ T3116] device bridge_slave_1 entered promiscuous mode [ 113.253931][ T6] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 113.313897][ T298] usb 4-1: config 1 interface 0 has no altsetting 0 [ 113.331470][ T3116] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.340395][ T3116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.348989][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.357969][ T3116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.387371][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.398730][ T556] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.411396][ T556] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.434595][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.444705][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.454330][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.463561][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.475209][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.483343][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.491447][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.500477][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.515811][ T298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.528538][ T298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.537895][ T298] usb 4-1: Product: syz [ 113.538260][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.542513][ T298] usb 4-1: Manufacturer: syz [ 113.542532][ T298] usb 4-1: SerialNumber: syz [ 113.579977][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.589681][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.598716][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.609072][ T3116] device veth0_vlan entered promiscuous mode [ 113.627389][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.639290][ T3116] device veth1_macvtap entered promiscuous mode [ 113.653989][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.655801][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.678663][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.691930][ T43] device bridge_slave_1 left promiscuous mode [ 113.696142][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 113.699093][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.717479][ T43] device bridge_slave_0 left promiscuous mode [ 113.717633][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.724525][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.743996][ T43] device veth1_macvtap left promiscuous mode [ 113.749417][ T6] usb 5-1: config 0 descriptor?? [ 113.750978][ T43] device veth0_vlan left promiscuous mode [ 113.937467][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.225027][ T298] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 114.245417][ T6] lg-g15 0003:046D:C222.0048: unknown main item tag 0x1 [ 114.254234][ T6] lg-g15 0003:046D:C222.0048: unbalanced delimiter at end of report description [ 114.266691][ T6] lg-g15: probe of 0003:046D:C222.0048 failed with error -22 [ 114.423889][ T6] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 114.433848][ T556] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 114.448273][ T298] usb 4-1: USB disconnect, device number 24 [ 114.459348][ T298] usblp0: removed [ 114.461587][ T299] usb 5-1: USB disconnect, device number 27 [ 114.464824][ T19] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 114.693954][ T556] usb 3-1: Using ep0 maxpacket: 16 [ 114.743904][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 114.813961][ T556] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 114.824210][ T556] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 114.835325][ T556] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 114.843942][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.847356][ T556] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 114.859794][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.869800][ T556] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 114.880544][ T6] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 114.896670][ T556] usb 3-1: config 1 interface 0 has no altsetting 0 [ 114.907116][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.915056][ T556] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 114.924190][ T19] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 114.934295][ T556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.943396][ T6] usb 2-1: config 0 descriptor?? [ 114.958431][ T19] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 114.968572][ T19] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 114.979027][ T19] usb 1-1: config 250 has no interface number 0 [ 114.985868][ T19] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 114.994599][ T556] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 114.998817][ T19] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 115.018728][ T19] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 115.032715][ T19] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 115.048585][ T19] usb 1-1: config 250 interface 228 has no altsetting 0 [ 115.195830][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 115.209308][ T19] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 115.221770][ T19] usb 1-1: Product: syz [ 115.226491][ T19] usb 1-1: SerialNumber: syz [ 115.244509][ T556] scsi host1: usb-storage 3-1:1.0 [ 115.264433][ T19] hub 1-1:250.228: bad descriptor, ignoring hub [ 115.272598][ T19] hub: probe of 1-1:250.228 failed with error -5 [ 115.464784][ T6] pantherlord 0003:0F30:0111.0049: item fetching failed at offset 6/7 [ 115.473885][ T299] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 115.478219][ T6] pantherlord 0003:0F30:0111.0049: parse failed [ 115.495096][ T6] pantherlord: probe of 0003:0F30:0111.0049 failed with error -22 [ 115.514576][ T19] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 115.528593][ T556] usb 3-1: USB disconnect, device number 23 [ 115.693753][ T19] usb 2-1: USB disconnect, device number 26 [ 115.853921][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.865452][ T299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.876383][ T299] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 115.886540][ T299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.899724][ T299] usb 4-1: config 0 descriptor?? [ 116.124084][ T3159] usb 1-1: reset high-speed USB device number 26 using dummy_hcd [ 116.235853][ T3179] bridge: RTM_NEWNEIGH with invalid ether address [ 116.313808][ T556] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 116.384709][ T299] arvo 0003:1E7D:30D4.004A: unknown main item tag 0x0 [ 116.393161][ T299] arvo 0003:1E7D:30D4.004A: unknown main item tag 0x0 [ 116.414676][ T299] arvo 0003:1E7D:30D4.004A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 116.693824][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 116.723758][ T556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 116.737013][ T556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.755407][ T556] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.768493][ T556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.779495][ T556] usb 3-1: config 0 descriptor?? [ 116.803993][ T3172] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.815391][ T299] usb 4-1: USB disconnect, device number 25 [ 116.853755][ C0] usblp0: nonzero read bulk status received: -71 [ 117.000608][ T3189] loop4: detected capacity change from 0 to 1024 [ 117.009500][ T3189] EXT4-fs: Ignoring removed orlov option [ 117.017668][ T3189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.034063][ T6] usb 1-1: USB disconnect, device number 26 [ 117.043070][ T6] usblp0: removed [ 117.050113][ T3189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.114588][ T28] audit: type=1400 audit(1727256143.570:411): avc: denied { execute } for pid=3188 comm="syz.4.1114" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.143464][ T28] audit: type=1400 audit(1727256143.570:412): avc: denied { execute_no_trans } for pid=3188 comm="syz.4.1114" path="/79/file1/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.164713][ T1988] EXT4-fs (loop4): unmounting filesystem. [ 117.217017][ T3200] netlink: 'syz.4.1117': attribute type 3 has an invalid length. [ 117.284720][ T556] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 117.294940][ T556] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 117.307955][ T556] plantronics 0003:047F:FFFF.004B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.473812][ T39] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 117.614356][ T6] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 117.823767][ T19] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 117.843814][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.863840][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 117.873762][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.886346][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 117.896709][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.912086][ T39] usb 2-1: config 0 descriptor?? [ 117.983896][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.995398][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.006647][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.022540][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 118.032799][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.047617][ T6] usb 4-1: config 0 descriptor?? [ 118.063931][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 118.193797][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.363891][ T19] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=c5.ff [ 118.376165][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.387971][ T19] usb 1-1: Product: syz [ 118.394266][ T19] usb 1-1: Manufacturer: syz [ 118.395273][ T39] lg-g15 0003:046D:C222.004C: unknown main item tag 0x1 [ 118.399220][ T19] usb 1-1: SerialNumber: syz [ 118.408062][ T39] lg-g15 0003:046D:C222.004C: unbalanced delimiter at end of report description [ 118.425246][ T39] lg-g15: probe of 0003:046D:C222.004C failed with error -22 [ 118.429667][ T19] usb 1-1: config 0 descriptor?? [ 118.455004][ T3225] loop4: detected capacity change from 0 to 128 [ 118.465337][ T3225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.477984][ T3225] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038 (0x7fffffff) [ 118.485278][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 118.507055][ T19] ftdi_sio ttyUSB0: unknown device type: 0xc5ff [ 118.519327][ T6] koneplus 0003:1E7D:2E22.004D: item fetching failed at offset 0/2 [ 118.519699][ T1988] EXT4-fs (loop4): unmounting filesystem. [ 118.538372][ T6] koneplus 0003:1E7D:2E22.004D: parse failed [ 118.554066][ T6] koneplus: probe of 0003:1E7D:2E22.004D failed with error -22 [ 118.624964][ T299] usb 2-1: USB disconnect, device number 27 [ 118.677722][ T3228] loop4: detected capacity change from 0 to 40427 [ 118.688934][ T3228] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 118.692940][ T24] usb 1-1: USB disconnect, device number 27 [ 118.698375][ T3228] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.715357][ T24] ftdi_sio 1-1:0.0: device disconnected [ 118.724150][ T6] usb 4-1: USB disconnect, device number 26 [ 118.744228][ T3228] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.770440][ T3228] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.779271][ T3228] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.965664][ T3236] loop4: detected capacity change from 0 to 40427 [ 118.974312][ T3236] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 118.982516][ T3236] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 118.994509][ T3236] F2FS-fs (loop4): invalid crc value [ 119.001231][ T3236] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.028445][ T3236] F2FS-fs (loop4): Start checkpoint disabled! [ 119.037014][ T3236] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 119.045770][ T3236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 119.130011][ T601] bio_check_eod: 23829 callbacks suppressed [ 119.130040][ T601] kworker/u4:5: attempt to access beyond end of device [ 119.130040][ T601] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 119.276402][ T28] audit: type=1400 audit(1727256145.730:413): avc: denied { append } for pid=3261 comm="syz.4.1132" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.282268][ T3260] loop3: detected capacity change from 0 to 2048 [ 119.339732][ T3255] loop2: detected capacity change from 0 to 2048 [ 119.352160][ T3264] loop4: detected capacity change from 0 to 4096 [ 119.374642][ T556] usb 3-1: USB disconnect, device number 24 [ 119.396107][ T3260] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.405471][ T3264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.441792][ T28] audit: type=1400 audit(1727256145.890:414): avc: denied { read } for pid=3258 comm="syz.3.1140" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 119.514515][ T321] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.544668][ T2698] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 119.580048][ T28] audit: type=1400 audit(1727256146.020:415): avc: denied { read write } for pid=3116 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.591605][ T3274] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #12: comm syz.4.1141: No space for directory leaf checksum. Please run e2fsck -D. [ 119.637647][ T28] audit: type=1400 audit(1727256146.020:416): avc: denied { open } for pid=3116 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 119.666387][ T3274] EXT4-fs error (device loop4): ext4_get_first_dir_block:3540: inode #12: comm syz.4.1141: Directory block failed checksum [ 119.677230][ T28] audit: type=1400 audit(1727256146.030:417): avc: denied { rename } for pid=3263 comm="syz.4.1141" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.691394][ T2698] EXT4-fs (loop3): unmounting filesystem. [ 119.753863][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.804186][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.824432][ T1988] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz-executor: Invalid block bitmap block 0 in block_group 0 [ 119.846478][ T1988] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 119.858364][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.878404][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.903329][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.923225][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.943929][ T1988] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /93/file0/lost+found: directory fails checksum at offset 0 [ 119.964044][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 119.980831][ T1988] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /93/file0/lost+found: directory fails checksum at offset 4096 [ 119.997575][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 120.014914][ T6] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 120.023167][ T19] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 120.023928][ T1988] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /93/file0/lost+found: directory fails checksum at offset 8192 [ 120.053573][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.062586][ T1988] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 120.063761][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.084849][ T1988] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /93/file0/lost+found: directory fails checksum at offset 12288 [ 120.085273][ T1988] EXT4-fs error (device loop4): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 120.093627][ T298] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 120.114237][ T1988] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /93/file0/lost+found: directory fails checksum at offset 0 [ 120.144475][ T3285] device bridge_slave_0 entered promiscuous mode [ 120.150228][ T1988] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /93/file0/lost+found: directory fails checksum at offset 4096 [ 120.175033][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.182998][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.192139][ T3285] device bridge_slave_1 entered promiscuous mode [ 120.269521][ T3053] EXT4-fs (loop4): unmounting filesystem. [ 120.305701][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.315785][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.327697][ T3285] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.336140][ T3285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.366885][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.376229][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.385882][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.407445][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.417728][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.426494][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.436064][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.447743][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.455836][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.464865][ T19] usb 3-1: config 1 interface 0 has no altsetting 0 [ 120.472728][ T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 120.486675][ T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 120.520672][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.530757][ T298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.543607][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.553273][ T298] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.591109][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.614893][ T3285] device veth0_vlan entered promiscuous mode [ 120.621823][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.631925][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.640975][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.648983][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.662084][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.672572][ T6] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 120.684762][ T298] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.696526][ T19] usb 3-1: Product: syz [ 120.702175][ T19] usb 3-1: Manufacturer: syz [ 120.709909][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.718698][ T19] usb 3-1: SerialNumber: syz [ 120.724596][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.734505][ T298] usb 2-1: SerialNumber: syz [ 120.742068][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.750427][ T6] usb 1-1: Product: syz [ 120.756377][ T6] usb 1-1: Manufacturer: syz [ 120.761330][ T6] usb 1-1: SerialNumber: syz [ 120.766652][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.777193][ T6] usb 1-1: config 0 descriptor?? [ 120.784195][ T3290] device bridge_slave_0 entered promiscuous mode [ 120.793063][ T44] device bridge_slave_1 left promiscuous mode [ 120.800671][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.804031][ T3280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.815606][ T3280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.815780][ T44] device bridge_slave_0 left promiscuous mode [ 120.830382][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.839157][ T44] device veth1_macvtap left promiscuous mode [ 120.845876][ T44] device veth0_vlan left promiscuous mode [ 120.930935][ T3285] device veth1_macvtap entered promiscuous mode [ 120.940371][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.950708][ T3290] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.958381][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.966466][ T3290] device bridge_slave_1 entered promiscuous mode [ 120.997808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.007858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.024763][ T298] usb 2-1: 0:2 : does not exist [ 121.031132][ T298] usb 2-1: unit 255 not found! [ 121.047715][ T3280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.057226][ T3280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.066094][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.077433][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.152191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.160519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.174640][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.184148][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.192377][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.199917][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.207930][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.220012][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.230936][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.242099][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.252917][ T298] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 121.268915][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.279475][ T298] usb 2-1: USB disconnect, device number 28 [ 121.296007][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.309690][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.310088][ T1136] udevd[1136]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.355136][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.367959][ T3290] device veth0_vlan entered promiscuous mode [ 121.377612][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.395473][ T3290] device veth1_macvtap entered promiscuous mode [ 121.404236][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.414832][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.423124][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.431919][ T19] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 121.448044][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.458430][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.464054][ T1312] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 121.513880][ T6] dm9601: No valid MAC address in EEPROM, using 96:7b:86:d0:cd:84 [ 121.628548][ T298] usb 3-1: USB disconnect, device number 25 [ 121.642156][ T298] usblp0: removed [ 121.685482][ T3307] binder: 3306:3307 ioctl c0306201 200001c0 returned -14 [ 121.721102][ T3311] netlink: 'syz.1.1158': attribute type 4 has an invalid length. [ 121.769694][ T3318] 9pnet: p9_errstr2errno: server reported unknown error œęē×¾|üģ«n„ˆćtšM7” [ 121.814996][ T44] device bridge_slave_1 left promiscuous mode [ 121.822964][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.833500][ T44] device bridge_slave_0 left promiscuous mode [ 121.840250][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.850325][ T44] device veth1_macvtap left promiscuous mode [ 121.853854][ T1312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.858559][ T44] device veth0_vlan left promiscuous mode [ 121.874563][ T1312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.993866][ T1312] usb 4-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 122.013774][ T1312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.033853][ T1312] usb 4-1: SerialNumber: syz [ 122.288349][ T3296] loop3: detected capacity change from 0 to 1024 [ 122.304929][ T3296] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 122.317087][ T3229] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 122.324200][ T3296] EXT4-fs error (device loop3): ext4_get_journal_inode:5720: inode #32: comm syz.3.1151: iget: special inode unallocated [ 122.341952][ T6] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 122.355531][ T6] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 96:7b:86:d0:cd:84 [ 122.364236][ T3296] EXT4-fs (loop3): no journal found [ 122.376421][ T6] usb 1-1: USB disconnect, device number 28 [ 122.382980][ T3296] EXT4-fs (loop3): can't get journal size [ 122.398741][ T6] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 122.399570][ T3296] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.1151: iget: special inode unallocated [ 122.428838][ T3296] EXT4-fs (loop3): failed to initialize system zone (-117) [ 122.438032][ T3296] EXT4-fs (loop3): mount failed [ 122.506360][ T1312] usb 4-1: 0:81 : does not exist [ 122.515221][ T1312] usb 4-1: 0:134 : does not exist [ 122.528546][ T28] audit: type=1326 audit(1727256148.980:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c24d7def9 code=0x7ffc0000 [ 122.534935][ T1312] usb 4-1: USB disconnect, device number 27 [ 122.565132][ T28] audit: type=1326 audit(1727256148.980:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c24d7def9 code=0x7ffc0000 [ 122.595818][ T28] audit: type=1326 audit(1727256149.020:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f7c24d7def9 code=0x7ffc0000 [ 122.628985][ T28] audit: type=1326 audit(1727256149.020:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c24d7def9 code=0x7ffc0000 [ 122.661529][ T3343] loop2: detected capacity change from 0 to 128 [ 122.662708][ T28] audit: type=1326 audit(1727256149.020:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c24d7def9 code=0x7ffc0000 [ 122.753936][ T3229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.780969][ T3229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.796188][ T3359] xt_bpf: check failed: parse error [ 122.803044][ T3229] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 122.831955][ T3229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.837758][ T3355] loop2: detected capacity change from 0 to 1024 [ 122.869261][ T3229] usb 2-1: config 0 descriptor?? [ 122.890020][ T3355] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 122.911174][ T3355] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.921509][ T3355] EXT4-fs error (device loop2): ext4_free_blocks:6213: comm syz.2.1174: Freeing blocks not in datazone - block = 0, count = 4096 [ 122.941268][ T3355] EXT4-fs (loop2): 1 orphan inode deleted [ 122.952491][ T3355] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.989894][ T2520] EXT4-fs (loop2): unmounting filesystem. [ 123.184531][ T28] audit: type=1400 audit(1727256149.640:423): avc: denied { setopt } for pid=3402 comm="syz.3.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.194275][ T3405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 123.227646][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 123.257593][ T3412] loop3: detected capacity change from 0 to 1024 [ 123.304825][ T3412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.320637][ T3412] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 123.364544][ T3229] cp2112 0003:10C4:EA90.004E: item fetching failed at offset 5/7 [ 123.377595][ T3229] cp2112 0003:10C4:EA90.004E: parse failed [ 123.385275][ T3285] EXT4-fs (loop3): unmounting filesystem. [ 123.404608][ T3229] cp2112: probe of 0003:10C4:EA90.004E failed with error -22 [ 123.444562][ T3430] loop4: detected capacity change from 0 to 512 [ 123.458747][ T3430] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.472334][ T3430] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1198: casefold flag without casefold feature [ 123.488834][ T3430] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1198: missing EA_INODE flag [ 123.504645][ T3430] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1198: error while reading EA inode 12 err=-117 [ 123.525267][ T3430] EXT4-fs (loop4): 1 orphan inode deleted [ 123.532267][ T3430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 123.560415][ T3290] EXT4-fs (loop4): unmounting filesystem. [ 123.569106][ T1312] usb 2-1: USB disconnect, device number 29 [ 123.913777][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 124.036911][ T3463] loop0: detected capacity change from 0 to 1024 [ 124.066769][ T3463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.083820][ T28] audit: type=1400 audit(1727256150.530:424): avc: denied { mounton } for pid=3462 comm="syz.0.1213" path="/17/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 124.113533][ T3229] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 124.125593][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.156038][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.167611][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 124.173175][ T28] audit: type=1400 audit(1727256150.570:425): avc: denied { write } for pid=3462 comm="syz.0.1213" name="/" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.200335][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.222053][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.240105][ T28] audit: type=1400 audit(1727256150.570:426): avc: denied { remove_name } for pid=3462 comm="syz.0.1213" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.269286][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.284526][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.303836][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.313972][ T28] audit: type=1400 audit(1727256150.570:427): avc: denied { rename } for pid=3462 comm="syz.0.1213" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 124.319953][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.341997][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.356333][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.367211][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.379709][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.390941][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.403858][ T3229] usb 4-1: Using ep0 maxpacket: 16 [ 124.415311][ T3116] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 124.421246][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.461495][ T24] usb 5-1: config 0 descriptor?? [ 124.533998][ T3229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.555635][ T3229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.570213][ T3229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.572429][ T3116] EXT4-fs (loop0): unmounting filesystem. [ 124.585825][ T3229] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.606877][ T3483] loop2: detected capacity change from 0 to 1024 [ 124.614753][ T3229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.625665][ T3483] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 124.640312][ T3229] usb 4-1: config 0 descriptor?? [ 124.644010][ T3483] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 124.662183][ T3483] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 124.773830][ T299] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 124.800617][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.811261][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.824599][ T3485] device bridge_slave_0 entered promiscuous mode [ 124.836207][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.844075][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.852910][ T3485] device bridge_slave_1 entered promiscuous mode [ 124.944924][ T24] microsoft 0003:045E:07DA.004F: ignoring exceeding usage max [ 124.959205][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.967580][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.975539][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.982983][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.992885][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.000684][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.008671][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.016965][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.028922][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.041547][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.064556][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.072213][ T24] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 125.082996][ T24] microsoft 0003:045E:07DA.004F: No inputs registered, leaving [ 125.092673][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.101736][ T24] microsoft 0003:045E:07DA.004F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 125.116157][ T1312] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.125381][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.129299][ T24] microsoft 0003:045E:07DA.004F: no inputs found [ 125.140676][ T3229] microsoft 0003:045E:07DA.0050: unknown main item tag 0x0 [ 125.150209][ T24] microsoft 0003:045E:07DA.004F: could not initialize ff, continuing anyway [ 125.162220][ T3229] microsoft 0003:045E:07DA.0050: item 0 4 0 8 parsing failed [ 125.162349][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.171660][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 125.182479][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.205658][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.209862][ T3229] microsoft 0003:045E:07DA.0050: parse failed [ 125.215867][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.216730][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.233981][ T24] usb 5-1: USB disconnect, device number 28 [ 125.243583][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.249837][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 125.260331][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.273105][ T3229] microsoft: probe of 0003:045E:07DA.0050 failed with error -22 [ 125.281523][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.301050][ T299] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.318659][ T299] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.318866][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.338519][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.339472][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.354936][ T299] usb 2-1: config 0 descriptor?? [ 125.361481][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.372179][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.373871][ T3477] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 125.399455][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.410008][ T3229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.421822][ T43] device bridge_slave_1 left promiscuous mode [ 125.428937][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.437840][ T298] usb 4-1: USB disconnect, device number 28 [ 125.446460][ T43] device bridge_slave_0 left promiscuous mode [ 125.453162][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.464929][ T43] device veth1_macvtap left promiscuous mode [ 125.473152][ T43] device veth0_vlan left promiscuous mode [ 125.483903][ T6] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 125.559304][ T3485] device veth0_vlan entered promiscuous mode [ 125.568600][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.579691][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.591744][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.606589][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.631309][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.645065][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.662229][ T3485] device veth1_macvtap entered promiscuous mode [ 125.672998][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.682257][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.692262][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.706297][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.718167][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.863940][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.865025][ T299] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 125.878316][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.889916][ T299] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 125.903859][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.914717][ T299] plantronics 0003:047F:FFFF.0051: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 125.929136][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 125.972171][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.992758][ T6] usb 3-1: config 0 descriptor?? [ 126.484756][ T6] logitech 0003:046D:C293.0052: item fetching failed at offset 5/7 [ 126.496870][ T6] logitech 0003:046D:C293.0052: parse failed [ 126.505368][ T6] logitech: probe of 0003:046D:C293.0052 failed with error -22 [ 126.725207][ T298] usb 3-1: USB disconnect, device number 26 [ 126.904377][ T6] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 126.969252][ T3525] loop4: detected capacity change from 0 to 40427 [ 126.991292][ T3525] F2FS-fs (loop4): invalid crc value [ 126.998442][ T3525] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.047540][ T3525] F2FS-fs (loop4): Start checkpoint disabled! [ 127.061186][ T3525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 127.079829][ T601] kworker/u4:5: attempt to access beyond end of device [ 127.079829][ T601] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.131974][ T3535] loop0: detected capacity change from 0 to 2048 [ 127.153798][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 127.172279][ T3535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.253361][ T3542] syz.4.1241[3542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.260028][ T3542] syz.4.1241[3542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.277910][ T3485] EXT4-fs (loop0): unmounting filesystem. [ 127.297087][ T6] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 127.306970][ T6] usb 4-1: config 0 has no interface number 0 [ 127.314802][ T6] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 127.327043][ T6] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.398099][ T3546] kvm: emulating exchange as write [ 127.504189][ T6] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 127.514916][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.524147][ T6] usb 4-1: Product: syz [ 127.529073][ T6] usb 4-1: Manufacturer: syz [ 127.535619][ T6] usb 4-1: SerialNumber: syz [ 127.556116][ T6] usb 4-1: config 0 descriptor?? [ 127.599091][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.608489][ T3515] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.616173][ T3515] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.624541][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.632879][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.735204][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.748052][ T3572] device bridge_slave_0 left promiscuous mode [ 127.755275][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.764775][ T3572] device bridge_slave_1 left promiscuous mode [ 127.772225][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.789172][ T3573] bridge0: port 1(dummy0) entered blocking state [ 127.799484][ T3573] bridge0: port 1(dummy0) entered disabled state [ 127.808668][ T3573] device dummy0 entered promiscuous mode [ 127.815671][ T3573] bridge0: port 1(dummy0) entered blocking state [ 127.822576][ T3573] bridge0: port 1(dummy0) entered forwarding state [ 127.834688][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.845308][ T3572] device dummy0 left promiscuous mode [ 127.852065][ T3572] bridge0: port 1(dummy0) entered disabled state [ 127.856280][ T3515] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.867496][ T3515] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.902279][ T3578] loop1: detected capacity change from 0 to 1024 [ 127.910264][ T3578] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 127.923528][ T300] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 127.934188][ T3578] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 127.946252][ T3578] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 128.034054][ T3229] usb 2-1: USB disconnect, device number 30 [ 128.094067][ T6] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 128.106490][ T6] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 128.118801][ T6] asix: probe of 4-1:0.251 failed with error -5 [ 128.223798][ T1312] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 128.260767][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 128.260783][ T28] audit: type=1400 audit(1727256154.710:433): avc: denied { remount } for pid=3590 comm="syz.1.1261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.294518][ T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.313092][ T6] usb 4-1: USB disconnect, device number 29 [ 128.318008][ T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.320408][ T28] audit: type=1400 audit(1727256154.770:434): avc: denied { getopt } for pid=3593 comm="syz.1.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.349225][ T3596] loop1: detected capacity change from 0 to 128 [ 128.363905][ T300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.383660][ T300] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 128.397124][ T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.408591][ T300] usb 5-1: config 0 descriptor?? [ 128.414972][ T3596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.426006][ T3596] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 128.481283][ T2494] EXT4-fs (loop1): unmounting filesystem. [ 128.523852][ T1312] usb 3-1: Using ep0 maxpacket: 32 [ 128.653847][ T1312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.667556][ T1312] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.677896][ T1312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.688716][ T1312] usb 3-1: config 0 descriptor?? [ 128.735182][ T1312] hub 3-1:0.0: USB hub found [ 128.788675][ T3599] loop0: detected capacity change from 0 to 131072 [ 128.803323][ T3599] F2FS-fs (loop0): invalid crc value [ 128.811298][ T3599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.856919][ T3599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 128.895378][ T3614] loop3: detected capacity change from 0 to 1024 [ 128.907887][ T3614] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 128.920478][ T300] acrux 0003:1A34:0802.0053: item fetching failed at offset 3/5 [ 128.928814][ T300] acrux 0003:1A34:0802.0053: parse failed [ 128.935661][ T300] acrux: probe of 0003:1A34:0802.0053 failed with error -22 [ 128.944241][ T3614] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 128.955040][ T3614] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 129.033820][ T1312] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 129.121780][ T300] usb 5-1: USB disconnect, device number 29 [ 129.265287][ T3622] loop3: detected capacity change from 0 to 128 [ 129.274945][ T3622] EXT4-fs: Ignoring removed bh option [ 129.291529][ T3622] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 129.313857][ T3622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.324318][ T3622] ext2 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 129.385634][ T3285] EXT4-fs (loop3): unmounting filesystem. [ 129.394108][ T1312] usbhid 3-1:0.0: can't add hid device: -71 [ 129.401698][ T1312] usbhid: probe of 3-1:0.0 failed with error -71 [ 129.438134][ T3636] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 129.449420][ T3636] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1275'. [ 129.462832][ T1312] usb 3-1: USB disconnect, device number 27 [ 129.567752][ T28] audit: type=1400 audit(1727256156.020:435): avc: denied { create } for pid=3648 comm="syz.3.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.593775][ T28] audit: type=1400 audit(1727256156.030:436): avc: denied { write } for pid=3648 comm="syz.3.1282" path="socket:[35129]" dev="sockfs" ino=35129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.630612][ T28] audit: type=1400 audit(1727256156.030:437): avc: denied { nlmsg_read } for pid=3648 comm="syz.3.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.770367][ T3662] netlink: 'syz.2.1288': attribute type 30 has an invalid length. [ 129.803784][ T299] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 129.943845][ T300] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 129.966052][ T3679] loop3: detected capacity change from 0 to 256 [ 129.975373][ T3679] FAT-fs (loop3): bogus number of FAT sectors [ 129.989705][ T3679] FAT-fs (loop3): Can't find a valid FAT filesystem [ 130.173817][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.189291][ T299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.200245][ T299] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.215028][ T299] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 130.225342][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.234759][ T299] usb 2-1: config 0 descriptor?? [ 130.313830][ T300] usb 5-1: config index 0 descriptor too short (expected 65233, got 154) [ 130.323464][ T300] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 130.332979][ T300] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 130.345334][ T300] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4 [ 130.513825][ T300] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.533761][ T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.560654][ T300] usb 5-1: Product: syz [ 130.565572][ T300] usb 5-1: Manufacturer: syz [ 130.571169][ T300] usb 5-1: SerialNumber: syz [ 130.705918][ T299] prodikeys 0003:041E:2801.0054: unknown main item tag 0x0 [ 130.714577][ T299] prodikeys 0003:041E:2801.0054: unknown main item tag 0x0 [ 130.722476][ T299] prodikeys 0003:041E:2801.0054: unknown main item tag 0x0 [ 130.732881][ T299] prodikeys 0003:041E:2801.0054: unknown main item tag 0x0 [ 130.741792][ T299] prodikeys 0003:041E:2801.0054: unknown main item tag 0x0 [ 130.754160][ T299] prodikeys 0003:041E:2801.0054: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 130.768841][ T601] device bridge_slave_1 left promiscuous mode [ 130.794810][ T601] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.804379][ T601] device bridge_slave_0 left promiscuous mode [ 130.813110][ T601] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.829727][ T601] device veth1_macvtap left promiscuous mode [ 130.837071][ T601] device veth0_vlan left promiscuous mode [ 130.917610][ T24] usb 2-1: USB disconnect, device number 31 [ 130.944050][ T300] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 130.955941][ T3229] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 130.966374][ T300] usb 5-1: found format II with max.bitrate = 0, frame size=2 [ 130.974181][ T300] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 130.984228][ T300] usb 5-1: found format II with max.bitrate = 0, frame size=2 [ 131.010592][ T3708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1309'. [ 131.034628][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.050964][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.054637][ T300] usb 5-1: failed to enable PITCH for EP 0x82 [ 131.066906][ T3703] device bridge_slave_0 entered promiscuous mode [ 131.067811][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.083191][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.096093][ T3703] device bridge_slave_1 entered promiscuous mode [ 131.097567][ T300] usb 5-1: USB disconnect, device number 30 [ 131.182709][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.190441][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.198496][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.206642][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.228984][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.240897][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.250025][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.269881][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.283651][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.295500][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.306225][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.316229][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.331591][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.333879][ T3229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.343397][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.366802][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.367393][ T3229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.380703][ T1136] udevd[1136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.387178][ T3229] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 131.424734][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.434973][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.455890][ T3718] syz.1.1312[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.455993][ T3718] syz.1.1312[3718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.457429][ T3229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.469236][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.504804][ T3229] usb 3-1: config 0 descriptor?? [ 131.511739][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.545840][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.556491][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.573182][ T3703] device veth0_vlan entered promiscuous mode [ 131.581076][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.592395][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.613534][ T3725] loop4: detected capacity change from 0 to 2048 [ 131.615433][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.627651][ T3725] EXT4-fs: Ignoring removed orlov option [ 131.643250][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.656252][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.667680][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.680613][ T3726] loop1: detected capacity change from 0 to 4096 [ 131.680857][ T3725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.689168][ T3703] device veth1_macvtap entered promiscuous mode [ 131.710679][ T3726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.719820][ T3725] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.744372][ T3725] EXT4-fs (loop4): Remounting filesystem read-only [ 131.748320][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.762268][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.763279][ T3726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.772895][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.783394][ T3290] EXT4-fs (loop4): unmounting filesystem. [ 131.810765][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.831344][ T2494] EXT4-fs (loop1): unmounting filesystem. [ 131.835688][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.985689][ T3229] input: HID 28bd:1903 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:1903.0055/input/input33 [ 132.000796][ T3229] uclogic 0003:28BD:1903.0055: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.2-1/input0 [ 132.113906][ T6] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 132.163809][ T298] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 132.193958][ T1312] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 132.211212][ T3229] usb 3-1: USB disconnect, device number 28 [ 132.383749][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 132.524194][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.544089][ T298] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.555647][ T298] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 132.568044][ T1312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 132.581839][ T298] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 132.595359][ T19] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 132.604474][ T1312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 132.617476][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 132.628084][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 132.637651][ T1312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.656766][ T6] usb 5-1: SerialNumber: syz [ 132.663173][ T1312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.674320][ T6] usb 5-1: config 0 descriptor?? [ 132.679706][ T1312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.688941][ T1312] usb 4-1: config 0 descriptor?? [ 132.713906][ T3741] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 132.714644][ T6] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 132.730072][ T6] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 132.741259][ T6] usb 5-1: Failed to create links for entity 255 [ 132.748972][ T6] usb 5-1: Failed to register entities (-22). [ 132.803923][ T298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.819665][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.830417][ T298] usb 2-1: Product: syz [ 132.834817][ T298] usb 2-1: Manufacturer: syz [ 132.842009][ T298] usb 2-1: SerialNumber: syz [ 132.863950][ T3739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.930642][ T6] usb 5-1: USB disconnect, device number 31 [ 133.013912][ T19] usb 1-1: config 0 has no interfaces? [ 133.020634][ T19] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 133.033191][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.043445][ T19] usb 1-1: config 0 descriptor?? [ 133.085618][ T3739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.154597][ T1312] plantronics 0003:047F:FFFF.0056: unknown main item tag 0xd [ 133.164508][ T1312] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 133.174812][ T1312] plantronics 0003:047F:FFFF.0056: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 133.299380][ T1312] usb 1-1: USB disconnect, device number 29 [ 133.424790][ T19] usb 4-1: USB disconnect, device number 30 [ 133.954236][ T3739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 134.034086][ T3771] loop0: detected capacity change from 0 to 1024 [ 134.056951][ T3771] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 134.069340][ T3771] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 134.083850][ T3771] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 134.193901][ T298] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 134.212452][ T298] cdc_ncm 2-1:1.0: dwNtbInMaxSize=41 is too small. Using 2048 [ 134.243784][ T298] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 134.338754][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.349927][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.365989][ T3787] device bridge_slave_0 entered promiscuous mode [ 134.401770][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.413163][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.413793][ T298] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 134.429513][ T3787] device bridge_slave_1 entered promiscuous mode [ 134.445633][ T298] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 134.482781][ T298] usb 2-1: USB disconnect, device number 32 [ 134.490415][ T298] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 134.494075][ T3229] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 134.526018][ T3805] loop0: detected capacity change from 0 to 4096 [ 134.538727][ T3805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.549530][ T3805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.582087][ T3703] EXT4-fs (loop0): unmounting filesystem. [ 134.656355][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.661653][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.673342][ T3787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.681742][ T3787] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.689237][ T3787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.715150][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.726035][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.737422][ T3819] loop4: detected capacity change from 0 to 128 [ 134.745329][ T3819] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 134.749430][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.777145][ T3819] syz.4.1353: attempt to access beyond end of device [ 134.777145][ T3819] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 134.795616][ T3819] syz.4.1353: attempt to access beyond end of device [ 134.795616][ T3819] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 134.813298][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.823862][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.831162][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.839241][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.851547][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.858745][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.873853][ T3229] usb 4-1: config 0 has no interfaces? [ 134.880552][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.891337][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.911491][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.934244][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.944879][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.955423][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.964839][ T3787] device veth0_vlan entered promiscuous mode [ 134.985567][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.999953][ T3787] device veth1_macvtap entered promiscuous mode [ 135.015726][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.037428][ T3229] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 135.054077][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.059570][ T3229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.085053][ T3229] usb 4-1: Product: syz [ 135.091504][ T3229] usb 4-1: Manufacturer: syz [ 135.099879][ T3229] usb 4-1: SerialNumber: syz [ 135.112394][ T3229] r8152-cfgselector 4-1: config 0 descriptor?? [ 135.362544][ T3862] loop2: detected capacity change from 0 to 2048 [ 135.395852][ T3862] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.408265][ T3862] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 135.444695][ T3787] EXT4-fs (loop2): unmounting filesystem. [ 135.488314][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 135.504573][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 135.581146][ T3229] usb 4-1: USB disconnect, device number 31 [ 136.007166][ T3904] loop2: detected capacity change from 0 to 512 [ 136.015762][ T3904] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 136.027157][ T3904] EXT4-fs (loop2): invalid journal inode [ 136.033384][ T3904] EXT4-fs (loop2): can't get journal size [ 136.041809][ T3904] EXT4-fs (loop2): 1 truncate cleaned up [ 136.048584][ T3904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.070529][ T3787] EXT4-fs (loop2): unmounting filesystem. [ 136.096470][ T3229] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 136.155109][ T3914] loop3: detected capacity change from 0 to 256 [ 136.207049][ T321] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.244068][ T3925] loop3: detected capacity change from 0 to 512 [ 136.261786][ T3925] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1395: casefold flag without casefold feature [ 136.284959][ T3925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1395: casefold flag without casefold feature [ 136.301579][ T3925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1395: ea_inode with extended attributes [ 136.316089][ T3925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1395: error while reading EA inode 12 err=-117 [ 136.340779][ T3925] EXT4-fs (loop3): 1 orphan inode deleted [ 136.347933][ T3925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.367289][ T3285] EXT4-fs (loop3): unmounting filesystem. [ 136.397709][ T3930] loop3: detected capacity change from 0 to 256 [ 136.417745][ T3930] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 136.440853][ T28] audit: type=1400 audit(1727256418.895:438): avc: denied { append } for pid=3929 comm="syz.3.1397" path="/51/file0/cpu.stat" dev="loop3" ino=1048725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.463844][ T3229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.481123][ T3229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.486160][ T28] audit: type=1400 audit(1727256418.935:439): avc: denied { map } for pid=3929 comm="syz.3.1397" path="/51/file0/cpu.stat" dev="loop3" ino=1048725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.492076][ T3229] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 136.554042][ T3938] loop3: detected capacity change from 0 to 256 [ 136.562015][ T3229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.575822][ T3938] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 136.592823][ T3229] usb 2-1: config 0 descriptor?? [ 136.733896][ T803] Bluetooth: hci0: command 0x1003 tx timeout [ 136.744617][ T480] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.753833][ T299] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 136.786864][ T3953] loop3: detected capacity change from 0 to 1024 [ 136.799959][ T3953] EXT4-fs: Ignoring removed orlov option [ 136.810733][ T3953] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.830728][ T3953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.862359][ T3285] EXT4-fs (loop3): unmounting filesystem. [ 137.074838][ T3229] samsung 0003:0419:0600.0057: item fetching failed at offset 1/5 [ 137.084836][ T3229] samsung 0003:0419:0600.0057: parse failed [ 137.091927][ T3229] samsung: probe of 0003:0419:0600.0057 failed with error -22 [ 137.134019][ T299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.145800][ T299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.158694][ T299] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 137.168148][ T299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.178719][ T299] usb 5-1: config 0 descriptor?? [ 137.302380][ T39] usb 2-1: USB disconnect, device number 33 [ 137.333851][ T300] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 137.573829][ T300] usb 1-1: Using ep0 maxpacket: 8 [ 137.596976][ T3973] loop3: detected capacity change from 0 to 40427 [ 137.612977][ T3973] F2FS-fs (loop3): invalid crc value [ 137.626550][ T3973] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.665851][ T299] samsung 0003:0419:0600.0058: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 137.679891][ T3973] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.694086][ T300] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.709465][ T3973] syz.3.1415: attempt to access beyond end of device [ 137.709465][ T3973] loop3: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 137.728080][ T300] usb 1-1: config 179 has no interface number 0 [ 137.737844][ T300] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 137.758076][ T300] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 137.772881][ T300] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 137.787256][ T300] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 137.805630][ T300] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.822940][ T300] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 137.846191][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.856400][ T3285] syz-executor: attempt to access beyond end of device [ 137.856400][ T3285] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.877196][ T1312] usb 5-1: USB disconnect, device number 32 [ 137.893961][ T3971] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 137.905836][ T3971] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 137.922016][ T28] audit: type=1400 audit(1727256420.375:440): avc: denied { ioctl } for pid=3984 comm="syz.2.1420" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 137.935347][ T300] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input35 [ 137.994788][ T28] audit: type=1400 audit(1727256420.455:441): avc: denied { load_policy } for pid=3991 comm="syz.1.1424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 138.023951][ T3992] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 138.069186][ T3992] SELinux: failed to load policy [ 138.069557][ T3998] loop2: detected capacity change from 0 to 1024 [ 138.117148][ T3998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.155035][ T3787] EXT4-fs (loop2): unmounting filesystem. [ 138.168071][ T1312] usb 1-1: USB disconnect, device number 30 [ 138.173783][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.175665][ T28] audit: type=1400 audit(1727256420.635:442): avc: denied { append } for pid=3970 comm="syz.0.1414" name="event3" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.187530][ T3971] ================================================================== [ 138.213638][ T1312] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 138.221949][ T3971] BUG: KASAN: use-after-free in mutex_lock+0xa4/0x1e0 [ 138.242006][ T3971] Write of size 8 at addr ffff88812d61ac50 by task syz.0.1414/3971 [ 138.252085][ T3971] [ 138.254992][ T3971] CPU: 1 PID: 3971 Comm: syz.0.1414 Tainted: G W 6.1.99-syzkaller-00083-g03b93dc707ed #0 [ 138.267950][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 138.280416][ T3971] Call Trace: [ 138.284349][ T3971] [ 138.287617][ T3971] dump_stack_lvl+0x151/0x1b7 [ 138.292589][ T3971] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 138.299186][ T3971] ? _printk+0xd1/0x111 [ 138.303846][ T3971] ? __virt_addr_valid+0x242/0x2f0 [ 138.308911][ T3971] print_report+0x158/0x4e0 [ 138.313602][ T3971] ? do_syscall_64+0x3b/0xb0 [ 138.318374][ T3971] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.324710][ T3971] ? __virt_addr_valid+0x242/0x2f0 [ 138.330973][ T3971] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 138.338541][ T3971] ? mutex_lock+0xa4/0x1e0 [ 138.343552][ T3971] kasan_report+0x13c/0x170 [ 138.349075][ T3971] ? mutex_lock+0xa4/0x1e0 [ 138.354495][ T3971] kasan_check_range+0x294/0x2a0 [ 138.359774][ T3971] __kasan_check_write+0x14/0x20 [ 138.365390][ T3971] mutex_lock+0xa4/0x1e0 [ 138.371043][ T3971] ? bit_wait_io_timeout+0x120/0x120 [ 138.377921][ T3971] ? kasan_save_alloc_info+0x1f/0x30 [ 138.383291][ T3971] steam_input_open+0x91/0x1a0 [ 138.389162][ T3971] ? steam_input_register+0xa70/0xa70 [ 138.396545][ T3971] ? __kasan_check_write+0x14/0x20 [ 138.404907][ T3971] ? mutex_lock_interruptible+0xb1/0x1e0 [ 138.411725][ T3971] ? __kasan_check_write+0x14/0x20 [ 138.417061][ T3971] input_open_device+0x1a5/0x310 [ 138.422382][ T3971] ? kobject_get_unless_zero+0x229/0x320 [ 138.428718][ T3971] evdev_open+0x3df/0x620 [ 138.433327][ T3971] chrdev_open+0x4f7/0x620 [ 138.438024][ T3971] ? cd_forget+0x170/0x170 [ 138.443068][ T3971] ? fsnotify_perm+0x3e5/0x5b0 [ 138.448459][ T3971] ? cd_forget+0x170/0x170 [ 138.453123][ T3971] do_dentry_open+0x891/0x1250 [ 138.458011][ T3971] vfs_open+0x73/0x80 [ 138.463592][ T3971] path_openat+0x2532/0x2d60 [ 138.469149][ T3971] ? kasan_save_alloc_info+0x1f/0x30 [ 138.474622][ T3971] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.481183][ T3971] ? do_filp_open+0x480/0x480 [ 138.485884][ T3971] do_filp_open+0x230/0x480 [ 138.491396][ T3971] ? vfs_tmpfile+0x480/0x480 [ 138.496224][ T3971] ? alloc_fd+0x4fa/0x5a0 [ 138.500748][ T3971] do_sys_openat2+0x151/0x870 [ 138.505805][ T3971] ? __secure_computing+0x300/0x300 [ 138.512078][ T3971] ? __ia32_sys_get_robust_list+0x90/0x90 [ 138.519020][ T3971] ? do_sys_open+0x220/0x220 [ 138.525003][ T3971] __x64_sys_openat+0x243/0x290 [ 138.529814][ T3971] ? __ia32_sys_open+0x270/0x270 [ 138.534891][ T3971] ? __secure_computing+0xf0/0x300 [ 138.540588][ T3971] x64_sys_call+0x6bf/0x9a0 [ 138.545284][ T3971] do_syscall_64+0x3b/0xb0 [ 138.550033][ T3971] ? clear_bhb_loop+0x55/0xb0 [ 138.554712][ T3971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.561400][ T3971] RIP: 0033:0x7fe6fb97c890 [ 138.565927][ T3971] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 138.588896][ T3971] RSP: 002b:00007fe6fc842b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 138.600638][ T3971] RAX: ffffffffffffffda RBX: 0000000000000441 RCX: 00007fe6fb97c890 [ 138.609138][ T3971] RDX: 0000000000000441 RSI: 00007fe6fc842c10 RDI: 00000000ffffff9c [ 138.617664][ T3971] RBP: 00007fe6fc842c10 R08: 0000000000000000 R09: 0000000000000000 [ 138.626615][ T3971] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 138.635979][ T3971] R13: 0000000000000000 R14: 00007fe6fbb35f80 R15: 00007ffc52e72ee8 [ 138.644929][ T3971] [ 138.647864][ T3971] [ 138.650111][ T3971] Allocated by task 3485: [ 138.655487][ T3971] kasan_set_track+0x4b/0x70 [ 138.660069][ T3971] kasan_save_alloc_info+0x1f/0x30 [ 138.666982][ T3971] __kasan_kmalloc+0x9c/0xb0 [ 138.673802][ T3971] __kmalloc+0xb4/0x1e0 [ 138.679099][ T3971] __register_sysctl_table+0x9d8/0x1060 [ 138.685119][ T3971] register_net_sysctl+0x246/0x260 [ 138.690813][ T3971] neigh_sysctl_register+0x3ec/0x4d0 [ 138.696499][ T3971] devinet_sysctl_register+0xaa/0x1e0 [ 138.702121][ T3971] inetdev_init+0x2b4/0x4e0 [ 138.706929][ T3971] inetdev_event+0x205/0x1110 [ 138.712476][ T3971] raw_notifier_call_chain+0x8c/0xf0 [ 138.718341][ T3971] call_netdevice_notifiers+0x145/0x1b0 [ 138.725372][ T3971] register_netdevice+0x10cf/0x1490 [ 138.731247][ T3971] veth_newlink+0x7fc/0xc70 [ 138.737997][ T3971] rtnl_newlink+0x14c6/0x2030 [ 138.744273][ T3971] rtnetlink_rcv_msg+0x9a5/0xca0 [ 138.751034][ T3971] netlink_rcv_skb+0x1cd/0x410 [ 138.757478][ T3971] rtnetlink_rcv+0x1c/0x20 [ 138.762412][ T3971] netlink_unicast+0x906/0xab0 [ 138.768477][ T3971] netlink_sendmsg+0xa15/0xd30 [ 138.773864][ T3971] __sys_sendto+0x480/0x600 [ 138.779583][ T3971] __x64_sys_sendto+0xe5/0x100 [ 138.785677][ T3971] x64_sys_call+0x15c/0x9a0 [ 138.790295][ T3971] do_syscall_64+0x3b/0xb0 [ 138.794578][ T3971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.802171][ T3971] [ 138.805440][ T3971] Freed by task 24: [ 138.809535][ T3971] kasan_set_track+0x4b/0x70 [ 138.815966][ T3971] kasan_save_free_info+0x2b/0x40 [ 138.822922][ T3971] ____kasan_slab_free+0x131/0x180 [ 138.829545][ T3971] __kasan_slab_free+0x11/0x20 [ 138.836474][ T3971] kmem_cache_free_bulk+0x636/0x7a0 [ 138.841859][ T3971] kfree_rcu_work+0x2ae/0x760 [ 138.846694][ T3971] process_one_work+0x73d/0xcb0 [ 138.851851][ T3971] worker_thread+0xa60/0x1260 [ 138.857018][ T3971] kthread+0x26d/0x300 [ 138.861460][ T3971] ret_from_fork+0x1f/0x30 [ 138.866470][ T3971] [ 138.868883][ T3971] Last potentially related work creation: [ 138.875126][ T3971] kasan_save_stack+0x3b/0x60 [ 138.880683][ T3971] __kasan_record_aux_stack+0xb4/0xc0 [ 138.886864][ T3971] kasan_record_aux_stack_noalloc+0xb/0x10 [ 138.893380][ T3971] kvfree_call_rcu+0x9f/0x800 [ 138.898369][ T3971] drop_sysctl_table+0x311/0x450 [ 138.903657][ T3971] drop_sysctl_table+0x323/0x450 [ 138.908677][ T3971] unregister_sysctl_table+0x76/0x120 [ 138.915433][ T3971] unregister_net_sysctl_table+0x15/0x20 [ 138.922105][ T3971] neigh_sysctl_unregister+0x78/0x90 [ 138.928199][ T3971] inetdev_event+0x848/0x1110 [ 138.933863][ T3971] raw_notifier_call_chain+0x8c/0xf0 [ 138.939880][ T3971] unregister_netdevice_many+0xe2a/0x1740 [ 138.946904][ T3971] default_device_exit_batch+0x975/0xa00 [ 138.953235][ T3971] cleanup_net+0x6c9/0xbf0 [ 138.957992][ T3971] process_one_work+0x73d/0xcb0 [ 138.963892][ T3971] worker_thread+0xa60/0x1260 [ 138.969732][ T3971] kthread+0x26d/0x300 [ 138.974205][ T3971] ret_from_fork+0x1f/0x30 [ 138.978681][ T3971] [ 138.981074][ T3971] Second to last potentially related work creation: [ 138.987865][ T3971] kasan_save_stack+0x3b/0x60 [ 138.992641][ T3971] __kasan_record_aux_stack+0xb4/0xc0 [ 138.998896][ T3971] kasan_record_aux_stack_noalloc+0xb/0x10 [ 139.005584][ T3971] call_rcu+0xee/0x1340 [ 139.009941][ T3971] pwq_unbound_release_workfn+0x29f/0x2e0 [ 139.016056][ T3971] process_one_work+0x73d/0xcb0 [ 139.020856][ T3971] worker_thread+0xa60/0x1260 [ 139.026065][ T3971] kthread+0x26d/0x300 [ 139.030236][ T3971] ret_from_fork+0x1f/0x30 [ 139.034755][ T3971] [ 139.037266][ T3971] The buggy address belongs to the object at ffff88812d61ac00 [ 139.037266][ T3971] which belongs to the cache kmalloc-512 of size 512 [ 139.053016][ T3971] The buggy address is located 80 bytes inside of [ 139.053016][ T3971] 512-byte region [ffff88812d61ac00, ffff88812d61ae00) [ 139.068698][ T3971] [ 139.070969][ T3971] The buggy address belongs to the physical page: [ 139.078155][ T3971] page:ffffea0004b58600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12d618 [ 139.089075][ T3971] head:ffffea0004b58600 order:2 compound_mapcount:0 compound_pincount:0 [ 139.097687][ T3971] flags: 0x4000000000010200(slab|head|zone=1) [ 139.104605][ T3971] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 139.115247][ T3971] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 139.126779][ T3971] page dumped because: kasan: bad access detected [ 139.133620][ T3971] page_owner tracks the page as allocated [ 139.139779][ T3971] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 297, tgid 297 (syz-executor), ts 27204612235, free_ts 0 [ 139.163428][ T3971] post_alloc_hook+0x213/0x220 [ 139.168754][ T3971] prep_new_page+0x1b/0x110 [ 139.173491][ T3971] get_page_from_freelist+0x27ea/0x2870 [ 139.180548][ T3971] __alloc_pages+0x3a1/0x780 [ 139.186214][ T3971] alloc_slab_page+0x6c/0xf0 [ 139.191427][ T3971] new_slab+0x90/0x3e0 [ 139.195941][ T3971] ___slab_alloc+0x6f9/0xb80 [ 139.200938][ T3971] __slab_alloc+0x5d/0xa0 [ 139.206412][ T3971] __kmem_cache_alloc_node+0x1af/0x250 [ 139.212196][ T3971] __kmalloc_node_track_caller+0xa2/0x1e0 [ 139.218672][ T3971] __alloc_skb+0x125/0x2d0 [ 139.223670][ T3971] netlink_ack+0x392/0x12a0 [ 139.229839][ T3971] netlink_rcv_skb+0x24a/0x410 [ 139.235895][ T3971] rtnetlink_rcv+0x1c/0x20 [ 139.241178][ T3971] netlink_unicast+0x906/0xab0 [ 139.247011][ T3971] netlink_sendmsg+0xa15/0xd30 [ 139.252104][ T3971] page_owner free stack trace missing [ 139.258009][ T3971] [ 139.260386][ T3971] Memory state around the buggy address: [ 139.266901][ T3971] ffff88812d61ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.276556][ T3971] ffff88812d61ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 139.285982][ T3971] >ffff88812d61ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.295403][ T3971] ^ [ 139.305543][ T3971] ffff88812d61ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.315430][ T3971] ffff88812d61ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.325123][ T3971] ================================================================== [ 139.367844][ T3971] Disabling lock debugging due to kernel taint [ 139.391074][ T3971] €"*(ˆ’’> (efault): No HID_FEATURE_REPORT submitted - nothing to read [ 139.419836][ T3971] €"*(ˆ’’> (efault): No HID_FEATURE_REPORT submitted - nothing to read [ 139.947254][ T3971] €"*(ˆ’’> (efault): No HID_FEATURE_REPORT submitted - nothing to read [ 139.957898][ T3971] €"*(ˆ’’> (efault): No HID_FEATURE_REPORT submitted - nothing to read [ 139.967649][ T3971] €"*(ˆ’’> (efault): No HID_FEATURE_REPORT submitted - nothing to read