last executing test programs: 32.890371796s ago: executing program 4 (id=342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="a90300000000000000003200000008004001"], 0x1c}}, 0x0) 32.882899947s ago: executing program 4 (id=343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 32.640219815s ago: executing program 4 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) 32.639950755s ago: executing program 4 (id=353): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) 32.639811175s ago: executing program 4 (id=354): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x4, 0x3, 0xb}) 32.410188012s ago: executing program 4 (id=356): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ptrace(0x10, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="05", @ANYRES16, @ANYRES8, @ANYRES16, @ANYRES16=r1], 0x0) 11.173515586s ago: executing program 3 (id=476): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 7.940525525s ago: executing program 3 (id=483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220a000000c1"], 0x0}, 0x0) 6.181807694s ago: executing program 1 (id=485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/103) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.181552375s ago: executing program 2 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x9) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000740)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x2b, 0x100086, 0x6, 0x6, 0xfffffffd, 0x3}, 0x5b) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 4.276808675s ago: executing program 2 (id=488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 4.276345605s ago: executing program 3 (id=489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_disconnect(r2) 4.259356346s ago: executing program 0 (id=490): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=@framed={{}, [@map_idx_val, @tail_call, @printk={@ld}, @initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 4.226148458s ago: executing program 0 (id=491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.225899008s ago: executing program 0 (id=492): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.225563648s ago: executing program 0 (id=500): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x557, &(0x7f0000000ac0)="$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") mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bind(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000002480)='./file0\x00', 0x0, 0x104000, 0x0) 2.285343431s ago: executing program 1 (id=493): syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0001000500000000000072000000000000000000", 0x39}], 0x1) 2.284388242s ago: executing program 2 (id=494): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) 2.283480712s ago: executing program 3 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10400}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) 2.283278091s ago: executing program 0 (id=496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Pm\x1d\xb4\xb8', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x4, 0x0) 2.241532685s ago: executing program 1 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x9) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000740)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x2b, 0x100086, 0x6, 0x6, 0xfffffffd, 0x3}, 0x5b) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2.176179s ago: executing program 2 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x20, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) 84.022404ms ago: executing program 1 (id=499): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x4, 0x3, 0xb}) 79.653864ms ago: executing program 2 (id=501): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r2) 79.398804ms ago: executing program 3 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 75.037854ms ago: executing program 0 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000005c0)=ANY=[]) 51.577396ms ago: executing program 2 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000000f80)=ANY=[@ANYBLOB="d8000000000000000000000000000000c60000808201c7b33abfc6102193e4983094cb0ee0039459062ec1e630fdd95184dc57b8a92d2ddeed0f991c84bb43df425aea39f37ef20719e2416ea99c35e14995fb1a2067cbb225220f24529a185c3465528adf0f2d7c950274dbe07b949512a0c4bbf975baea8437735fb4afc7213564180aad02e280092cbb817ac3e8d911e14095676fd802e6f51667e3a9907014bc29a4f6b9b66547ed0c6abee8fa62e31e02cba1de67284d925beba6e38d5199de508bdd657979ced9db7b6fcb415715e1f7ff42e1"], 0xd8}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.184786ms ago: executing program 1 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r3, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414", @ANYRES64=r2], 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 147.3µs ago: executing program 1 (id=506): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000010000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00031200000012033f"], 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=507): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x1000, 0x10000) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000800)={0x0, 0x7, 0x4}) kernel console output (not intermixed with test programs): ngs: Mfr=0, Product=0, SerialNumber=0 [ 33.928763][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.935987][ T450] usb 5-1: config 0 descriptor?? [ 33.940983][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.949482][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.957550][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.966786][ T745] device veth1_macvtap entered promiscuous mode [ 33.977676][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.985168][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.993330][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.008000][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.016300][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.035550][ T751] loop0: detected capacity change from 0 to 256 [ 34.066380][ T321] device bridge_slave_1 left promiscuous mode [ 34.072332][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.079563][ T321] device bridge_slave_0 left promiscuous mode [ 34.085482][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.092720][ T751] support for cryptoloop has been removed. Use dm-crypt instead. [ 34.100830][ T321] device veth1_macvtap left promiscuous mode [ 34.106750][ T321] device veth0_vlan left promiscuous mode [ 34.235758][ T313] hub 4-1:0.0: activate --> -90 [ 34.236521][ T452] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 34.247340][ T452] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 34.254202][ T452] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 34.261158][ T452] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 34.268005][ T452] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 34.275130][ T452] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 34.425908][ T450] hid (null): bogus close delimiter [ 34.430429][ T745] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 34.439471][ T745] FAT-fs (loop0): Filesystem has been set read-only [ 34.446034][ T745] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 34.476050][ T452] cp2112 0003:10C4:EA90.000A: error requesting version [ 34.483197][ T452] cp2112: probe of 0003:10C4:EA90.000A failed with error -5 [ 34.496501][ T541] usb 4-1: USB disconnect, device number 5 [ 34.594537][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.601510][ T759] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.608940][ T759] device bridge_slave_0 entered promiscuous mode [ 34.616094][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.622924][ T759] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.630138][ T759] device bridge_slave_1 entered promiscuous mode [ 34.645725][ T450] usb 5-1: language id specifier not provided by device, defaulting to English [ 34.665660][ T399] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.682837][ T314] usb 2-1: USB disconnect, device number 5 [ 34.701797][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.708780][ T759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.715880][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.722653][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.742411][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.749687][ T541] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.756798][ T541] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.765861][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.774045][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.782109][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.788961][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.805840][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.813942][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.822014][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.828868][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.836092][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.843761][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.851674][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.859711][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.873466][ T759] device veth0_vlan entered promiscuous mode [ 34.879560][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.887630][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.896001][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.903615][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.911661][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.919328][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.932003][ T759] device veth1_macvtap entered promiscuous mode [ 34.938809][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.946996][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.954849][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.969034][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.977151][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.985155][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.993253][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.022176][ T765] loop0: detected capacity change from 0 to 128 [ 35.039647][ T765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.048207][ T399] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 35.055857][ T765] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 35.066608][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.067190][ T399] usb 3-1: config 0 descriptor?? [ 35.075326][ T321] device bridge_slave_1 left promiscuous mode [ 35.085437][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.092683][ T450] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 35.101882][ T321] device bridge_slave_0 left promiscuous mode [ 35.107866][ T450] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 35.110454][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.116178][ T450] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 35.130625][ T450] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 35.131578][ T759] EXT4-fs (loop0): unmounting filesystem. [ 35.138023][ T450] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 35.151568][ T321] device veth1_macvtap left promiscuous mode [ 35.155584][ T450] usb 5-1: USB disconnect, device number 5 [ 35.157956][ T321] device veth0_vlan left promiscuous mode [ 35.218118][ T776] loop1: detected capacity change from 0 to 256 [ 35.251572][ T779] loop1: detected capacity change from 0 to 1024 [ 35.266757][ T779] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.278046][ T779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.292411][ T779] syz.1.161[779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.292477][ T779] syz.1.161[779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.309807][ T292] EXT4-fs (loop1): unmounting filesystem. [ 35.484721][ T784] loop3: detected capacity change from 0 to 40427 [ 35.501502][ T784] F2FS-fs (loop3): invalid crc value [ 35.508639][ T784] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.532490][ T784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.551466][ T784] syz.3.163: attempt to access beyond end of device [ 35.551466][ T784] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 35.569250][ T291] syz-executor: attempt to access beyond end of device [ 35.569250][ T291] loop3: rw=2049, sector=45208, nr_sectors = 16 limit=40427 [ 35.660502][ T797] Illegal XDP return value 4294967274 on prog (id 106) dev N/A, expect packet loss! [ 35.776636][ T805] loop3: detected capacity change from 0 to 256 [ 35.785669][ T313] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.025648][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 36.032106][ T819] loop0: detected capacity change from 0 to 256 [ 36.054261][ T819] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 37.045604][ C0] sched: RT throttling activated [ 37.115745][ T313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.195736][ T6] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.275709][ T399] usb 3-1: Cannot set autoneg [ 37.280261][ T399] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 37.289650][ T399] usb 3-1: USB disconnect, device number 5 [ 37.325733][ T313] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 37.334645][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.342504][ T313] usb 2-1: Product: syz [ 37.346529][ T313] usb 2-1: Manufacturer: syz [ 37.350891][ T313] usb 2-1: SerialNumber: syz [ 37.355718][ T314] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.356091][ T313] usb 2-1: config 0 descriptor?? [ 37.435670][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 37.555791][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.645779][ T6] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 37.654713][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 37.662766][ T6] usb 4-1: SerialNumber: syz [ 37.667733][ T6] usb 4-1: config 0 descriptor?? [ 37.706163][ T6] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 37.712919][ T6] uvcvideo 4-1:0.0: Entity type for entity Output 255 was not initialized! [ 37.721405][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.732132][ T6] usb 4-1: Failed to create links for entity 255 [ 37.738722][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.748280][ T6] usb 4-1: Failed to register entities (-22). [ 37.754304][ T314] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.763914][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.772375][ T314] usb 1-1: config 0 descriptor?? [ 37.788938][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 37.788951][ T28] audit: type=1400 audit(1725306390.972:236): avc: denied { setopt } for pid=833 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.814147][ T28] audit: type=1400 audit(1725306390.972:237): avc: denied { read } for pid=833 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.837099][ T836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=836 comm=syz.4.185 [ 37.905921][ T313] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 37.907066][ T6] usb 4-1: USB disconnect, device number 6 [ 37.912358][ T313] usb 2-1: No valid video chain found. [ 37.925274][ T313] usb 2-1: USB disconnect, device number 6 [ 38.056492][ T450] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.125688][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 38.275825][ T314] hid (null): bogus close delimiter [ 38.387528][ T28] audit: type=1400 audit(1725306391.572:238): avc: denied { mounton } for pid=840 comm="syz.1.187" path="/proc/105/task" dev="proc" ino=18149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 38.436278][ T450] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 38.448216][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.460654][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.470284][ T450] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 38.485713][ T314] usb 1-1: language id specifier not provided by device, defaulting to English [ 38.525710][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.538542][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.565711][ T450] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 38.574655][ T450] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 38.582614][ T450] usb 3-1: Manufacturer: syz [ 38.590675][ T450] usb 3-1: config 0 descriptor?? [ 38.635825][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 38.645295][ T39] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 38.653443][ T39] usb 5-1: Product: syz [ 38.657895][ T39] usb 5-1: config 0 descriptor?? [ 38.685670][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.885666][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.925769][ T314] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 38.934403][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 38.939460][ T314] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 38.947535][ T314] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 38.955420][ T314] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 38.962840][ T314] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 38.971138][ T314] usb 1-1: USB disconnect, device number 4 [ 39.065726][ T6] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 39.066444][ T450] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 39.081428][ T450] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 39.090024][ T450] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 39.126399][ T39] konepure 0003:1E7D:2DB4.000E: item fetching failed at offset 10/11 [ 39.134404][ T39] konepure 0003:1E7D:2DB4.000E: parse failed [ 39.140162][ T39] konepure: probe of 0003:1E7D:2DB4.000E failed with error -22 [ 39.265807][ T6] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 39.274745][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.282733][ T6] usb 2-1: Product: syz [ 39.286927][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.296837][ T6] usb 2-1: Manufacturer: syz [ 39.301221][ T6] usb 2-1: SerialNumber: syz [ 39.306337][ T6] usb 2-1: config 0 descriptor?? [ 39.327510][ T39] usb 5-1: USB disconnect, device number 6 [ 39.346285][ T6] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 39.353894][ T6] usb 2-1: Detected FT232R [ 39.366648][ T313] usb 3-1: USB disconnect, device number 6 [ 39.431004][ T28] audit: type=1400 audit(1725306392.612:239): avc: denied { ioctl } for pid=857 comm="syz.0.194" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.495800][ T19] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 39.505084][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.512944][ T19] usb 4-1: Product: syz [ 39.517027][ T19] usb 4-1: Manufacturer: syz [ 39.521627][ T19] usb 4-1: SerialNumber: syz [ 39.527114][ T19] usb 4-1: config 0 descriptor?? [ 39.555719][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 39.566474][ T19] usb_ehset_test: probe of 4-1:0.0 failed with error -32 [ 39.769147][ T313] usb 4-1: USB disconnect, device number 7 [ 39.826863][ T6] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 39.868003][ T28] audit: type=1400 audit(1725306393.052:240): avc: denied { create } for pid=864 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.918688][ T28] audit: type=1400 audit(1725306393.052:241): avc: denied { getopt } for pid=864 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.946156][ T870] loop2: detected capacity change from 0 to 2048 [ 39.992217][ T870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.018261][ T28] audit: type=1400 audit(1725306393.202:242): avc: denied { execute } for pid=869 comm="syz.2.199" path="/21/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.044388][ T6] usb 2-1: USB disconnect, device number 7 [ 40.064100][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 40.076917][ T868] loop4: detected capacity change from 0 to 40427 [ 40.097272][ T868] F2FS-fs (loop4): invalid crc value [ 40.098556][ T6] ftdi_sio 2-1:0.0: device disconnected [ 40.113462][ T868] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.179818][ T868] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.231461][ T28] audit: type=1400 audit(1725306393.412:243): avc: denied { rename } for pid=867 comm="syz.4.198" name="#9" dev="loop4" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.249426][ T505] syz-executor: attempt to access beyond end of device [ 40.249426][ T505] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 40.271422][ T28] audit: type=1400 audit(1725306393.412:244): avc: denied { reparent } for pid=867 comm="syz.4.198" name="#8" dev="loop4" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.285723][ T505] syz-executor: attempt to access beyond end of device [ 40.285723][ T505] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 40.317271][ T28] audit: type=1400 audit(1725306393.412:245): avc: denied { create } for pid=867 comm="syz.4.198" name="#a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.376887][ T321] kworker/u4:3: attempt to access beyond end of device [ 40.376887][ T321] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 40.398829][ T493] EXT4-fs (loop2): unmounting filesystem. [ 40.400199][ T883] loop3: detected capacity change from 0 to 2048 [ 40.435996][ T885] syz.2.204[885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.436072][ T885] syz.2.204[885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.448391][ T885] syz.2.204[885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.462460][ T883] loop3: p1 < > p4 [ 40.485719][ T885] syz.2.204[885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.486391][ T883] loop3: p4 size 8388608 extends beyond EOD, truncated [ 40.534198][ T102] loop3: p1 < > p4 [ 40.545873][ T102] loop3: p4 size 8388608 extends beyond EOD, truncated [ 40.581210][ T102] loop3: p1 < > p4 [ 40.593031][ T102] loop3: p4 size 8388608 extends beyond EOD, truncated [ 40.626366][ T328] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.655324][ T389] udevd[389]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 40.671974][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.707787][ T389] udevd[389]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 40.719409][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.855865][ T6] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.965693][ T314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.986054][ T8] device bridge_slave_1 left promiscuous mode [ 40.991967][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.999323][ T8] device bridge_slave_0 left promiscuous mode [ 41.005231][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.012850][ T8] device veth1_macvtap left promiscuous mode [ 41.018830][ T8] device veth0_vlan left promiscuous mode [ 41.235729][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.246483][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.256194][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.268808][ T6] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 41.277720][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.288814][ T6] usb 2-1: config 0 descriptor?? [ 41.345859][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.357081][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.366670][ T314] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 41.375472][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.383940][ T314] usb 4-1: config 0 descriptor?? [ 41.688809][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.705642][ T909] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.712996][ T909] device bridge_slave_0 entered promiscuous mode [ 41.720327][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.727271][ T909] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.734445][ T909] device bridge_slave_1 entered promiscuous mode [ 41.795321][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.802201][ T909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.809298][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.816078][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.824206][ T6] prodikeys 0003:041E:2801.000F: unexpected long global item [ 41.831826][ T6] prodikeys 0003:041E:2801.000F: hid parse failed [ 41.838485][ T6] prodikeys: probe of 0003:041E:2801.000F failed with error -22 [ 41.845973][ T19] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.855879][ T314] hid (null): bogus close delimiter [ 41.880307][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.888093][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.895219][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.924081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.932503][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.939395][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.946854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.954861][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.961745][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.969107][ T313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.977375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.985282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.003253][ T909] device veth0_vlan entered promiscuous mode [ 42.010259][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.018812][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.033336][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.040751][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.054404][ T909] device veth1_macvtap entered promiscuous mode [ 42.062403][ T450] usb 2-1: USB disconnect, device number 8 [ 42.065728][ T314] usb 4-1: string descriptor 0 read error: -22 [ 42.073922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.086536][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.100531][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.226106][ T19] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 42.236810][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.247575][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.257099][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 42.271003][ T314] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0010/input/input6 [ 42.283679][ T314] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0010/input/input7 [ 42.299087][ T314] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0010/input/input8 [ 42.312198][ T314] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0010/input/input9 [ 42.332292][ T314] uclogic 0003:256C:006D.0010: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 42.335700][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.355540][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.373793][ T313] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 42.382670][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.385684][ T19] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 42.399441][ T19] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 42.399633][ T313] usb 3-1: config 0 descriptor?? [ 42.410195][ T19] usb 1-1: Manufacturer: syz [ 42.417129][ T19] usb 1-1: config 0 descriptor?? [ 42.425728][ T399] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 42.477245][ T314] usb 4-1: USB disconnect, device number 8 [ 42.805755][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.816483][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.825992][ T399] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.838592][ T399] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 42.847676][ T399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.856453][ T399] usb 5-1: config 0 descriptor?? [ 42.886489][ T19] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 42.888645][ T313] wacom 0003:056A:00D0.0012: item fetching failed at offset 1/5 [ 42.893600][ T19] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 42.902315][ T313] wacom 0003:056A:00D0.0012: parse failed [ 42.910519][ T19] appleir 0003:05AC:8243.0011: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 42.914833][ T313] wacom: probe of 0003:056A:00D0.0012 failed with error -22 [ 42.999095][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 42.999111][ T28] audit: type=1400 audit(1725306396.182:252): avc: denied { block_suspend } for pid=921 comm="syz.1.226" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.108637][ T314] usb 3-1: USB disconnect, device number 7 [ 43.196453][ T60] usb 1-1: USB disconnect, device number 5 [ 43.265688][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.326370][ T399] gt683r_led 0003:1770:FF00.0013: item fetching failed at offset 1/5 [ 43.335291][ T399] gt683r_led 0003:1770:FF00.0013: hid parsing failed [ 43.342043][ T399] gt683r_led: probe of 0003:1770:FF00.0013 failed with error -22 [ 43.505985][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 43.526866][ T399] usb 5-1: USB disconnect, device number 7 [ 43.645693][ T19] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 43.712457][ T937] kvm: emulating exchange as write [ 43.823719][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x1 [ 43.831041][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.835718][ T19] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 43.838773][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.847238][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.854564][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.862265][ T19] usb 4-1: Product: syz [ 43.869568][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.873756][ T19] usb 4-1: Manufacturer: syz [ 43.880955][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.885178][ T19] usb 4-1: SerialNumber: syz [ 43.892759][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.897387][ T19] usb 4-1: config 0 descriptor?? [ 43.904145][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x4 [ 43.915999][ T60] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.923283][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.930492][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.937724][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.944861][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.952092][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.956180][ T19] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 43.959394][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.966939][ T19] usb 4-1: Detected FT232R [ 43.974000][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.985230][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.992457][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 43.999656][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.006856][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.014037][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.021271][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.028465][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.035800][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.043025][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.081427][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.088922][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.096338][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.103529][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.110816][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.117954][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.125138][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.132429][ T313] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 44.178496][ T313] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.289966][ T947] loop4: detected capacity change from 0 to 128 [ 44.314778][ T28] audit: type=1400 audit(1725306397.492:253): avc: denied { map } for pid=943 comm="syz.4.225" path="socket:[19388]" dev="sockfs" ino=19388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.340268][ T28] audit: type=1400 audit(1725306397.492:254): avc: denied { read } for pid=943 comm="syz.4.225" path="socket:[19388]" dev="sockfs" ino=19388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.363387][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 44.365665][ T28] audit: type=1400 audit(1725306397.492:255): avc: denied { create } for pid=949 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.389002][ T28] audit: type=1400 audit(1725306397.492:256): avc: denied { write } for pid=949 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.389107][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.418643][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.505730][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.516461][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.605841][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.616708][ T313] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.623915][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.666433][ T19] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.705724][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.716459][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.805836][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.816630][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.826197][ T60] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 44.835042][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.843344][ T60] usb 3-1: config 0 descriptor?? [ 44.901312][ T541] usb 4-1: USB disconnect, device number 9 [ 44.907973][ T541] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.915486][ T955] loop4: detected capacity change from 0 to 512 [ 44.917601][ T541] ftdi_sio 4-1:0.0: device disconnected [ 44.937275][ T955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.946158][ T28] audit: type=1400 audit(1725306398.132:257): avc: denied { mount } for pid=954 comm="syz.4.229" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.946171][ T955] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 44.980751][ T28] audit: type=1400 audit(1725306398.162:258): avc: denied { setattr } for pid=954 comm="syz.4.229" path="/2/file0/blkio.bfq.sectors_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.985707][ T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.015003][ T313] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.015769][ T955] EXT4-fs (loop4): shut down requested (0) [ 45.034467][ T28] audit: type=1400 audit(1725306398.212:259): avc: denied { unmount } for pid=909 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.054505][ T909] EXT4-fs (loop4): unmounting filesystem. [ 45.095779][ T313] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 45.101852][ T960] syz.4.230[960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.104675][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.104790][ T960] syz.4.230[960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.126518][ T313] usb 1-1: SerialNumber: syz [ 45.165937][ T966] loop4: detected capacity change from 0 to 1024 [ 45.177455][ T966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 45.192247][ T909] EXT4-fs (loop4): unmounting filesystem. [ 45.356294][ T60] petalynx 0003:18B1:0037.0015: collection stack underflow [ 45.363340][ T60] petalynx 0003:18B1:0037.0015: item 0 1 0 12 parsing failed [ 45.370717][ T60] petalynx 0003:18B1:0037.0015: parse failed [ 45.376926][ T313] usb 1-1: 0:2 : does not exist [ 45.381655][ T60] petalynx: probe of 0003:18B1:0037.0015 failed with error -22 [ 45.563576][ T450] usb 3-1: USB disconnect, device number 8 [ 45.725676][ T60] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 45.800690][ T450] usb 1-1: USB disconnect, device number 6 [ 46.165733][ T60] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 46.176531][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.187458][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.197208][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 46.295799][ T60] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 46.304956][ T28] audit: type=1400 audit(1725306399.482:260): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 46.305086][ T60] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 46.353517][ T60] usb 4-1: Manufacturer: syz [ 46.360785][ T60] usb 4-1: config 0 descriptor?? [ 46.404128][ T1002] incfs_lookup_dentry err:-22 [ 46.408728][ T1002] incfs: Can't find or create .index dir in ./file0 [ 46.415162][ T1002] incfs: mount failed -22 [ 46.417428][ T28] audit: type=1400 audit(1725306399.602:261): avc: denied { execute } for pid=1004 comm="syz.4.250" name="file0" dev="ramfs" ino=19667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 46.449449][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.459880][ T993] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.467541][ T993] device bridge_slave_0 entered promiscuous mode [ 46.476287][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.483119][ T993] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.490663][ T993] device bridge_slave_1 entered promiscuous mode [ 46.546382][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.553269][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.560346][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.567119][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.675951][ T541] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 46.841831][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.849540][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.857367][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.876795][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.885073][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.891947][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.896394][ T60] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 46.899432][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.914269][ T60] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 46.914599][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.928323][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.935659][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.943639][ T60] appleir 0003:05AC:8243.0016: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 46.943819][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.972782][ T993] device veth0_vlan entered promiscuous mode [ 46.979186][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.987471][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.995156][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.002898][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.016828][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.026577][ T993] device veth1_macvtap entered promiscuous mode [ 47.037509][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.046957][ T1028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.259'. [ 47.055756][ T1028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.259'. [ 47.065789][ T8] device bridge_slave_1 left promiscuous mode [ 47.071861][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.079147][ T8] device bridge_slave_0 left promiscuous mode [ 47.085040][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.092294][ T541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.103308][ T541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.105051][ T8] device veth1_macvtap left promiscuous mode [ 47.118958][ T8] device veth0_vlan left promiscuous mode [ 47.119360][ T541] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 47.134047][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.142740][ T541] usb 2-1: config 0 descriptor?? [ 47.226284][ T399] usb 4-1: USB disconnect, device number 10 [ 47.240055][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.257592][ T1031] loop4: detected capacity change from 0 to 1024 [ 47.264092][ T1031] EXT4-fs: Ignoring removed orlov option [ 47.269805][ T1031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.295345][ T1035] loop2: detected capacity change from 0 to 512 [ 47.307728][ T1035] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.320429][ T1031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.325731][ T1035] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 47.351842][ T1035] EXT4-fs error (device loop2): ext4_map_blocks:721: inode #18: block 44: comm syz.2.261: lblock 0 mapped to illegal pblock 44 (length 4) [ 47.366415][ T1035] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 47.376143][ T1035] EXT4-fs error (device loop2): ext4_alloc_file_blocks:4506: inode #18: comm syz.2.261: mark_inode_dirty error [ 47.387701][ T1031] loop4: detected capacity change from 1024 to 64 [ 47.399817][ T993] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 47.421378][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.421537][ T993] EXT4-fs (loop2): unmounting filesystem. [ 47.436858][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.440869][ T993] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 47.453554][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.463129][ T993] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 47.486710][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.486904][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.500575][ T993] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 47.513404][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.522533][ T993] EXT4-fs error (device loop2): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 47.536711][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.562852][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.577230][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.591309][ T909] EXT4-fs warning (device loop4): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 47.666321][ T541] belkin 0003:1020:0006.0017: report_id 0 is invalid [ 47.672824][ T541] belkin 0003:1020:0006.0017: item 0 0 1 8 parsing failed [ 47.680113][ T541] belkin 0003:1020:0006.0017: parse failed [ 47.686418][ T541] belkin: probe of 0003:1020:0006.0017 failed with error -22 [ 47.727753][ T909] EXT4-fs (loop4): unmounting filesystem. [ 47.736931][ T1036] kmmpd-loop4: attempt to access beyond end of device [ 47.736931][ T1036] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 47.765656][ T1036] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 48.058497][ T313] usb 2-1: USB disconnect, device number 9 [ 48.122858][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.129838][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.137580][ T1059] device bridge_slave_0 entered promiscuous mode [ 48.144137][ T1076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 48.152932][ T1076] device bridge_slave_1 left promiscuous mode [ 48.159246][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.166612][ T1076] device bridge_slave_0 left promiscuous mode [ 48.172783][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.226565][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.233433][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.240713][ T1059] device bridge_slave_1 entered promiscuous mode [ 48.312472][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.319500][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.326783][ T1077] device bridge_slave_0 entered promiscuous mode [ 48.335998][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.342888][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.350186][ T1077] device bridge_slave_1 entered promiscuous mode [ 48.409407][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.416271][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.423358][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.430249][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.444329][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.451622][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.458984][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.466914][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.479420][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.487506][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.495392][ T541] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.502157][ T541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.515743][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.523437][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.531949][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.539905][ T541] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.546745][ T541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.554226][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.562098][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.569797][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.577679][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.612227][ T1059] device veth0_vlan entered promiscuous mode [ 48.639326][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.650317][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.658389][ T1089] serio: Serial port ptm0 [ 48.663277][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.671037][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.679241][ T8] device bridge_slave_1 left promiscuous mode [ 48.685215][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.692785][ T8] device bridge_slave_0 left promiscuous mode [ 48.698827][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.706547][ T8] device veth1_macvtap left promiscuous mode [ 48.712367][ T8] device veth0_vlan left promiscuous mode [ 48.759810][ T1098] loop1: detected capacity change from 0 to 1024 [ 48.771300][ T1098] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 48.846087][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.854040][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.861808][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.869077][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.876474][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.967214][ T1107] loop3: detected capacity change from 0 to 128 [ 49.092049][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.100227][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.107070][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.114202][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.122119][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.128957][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.138392][ T1059] device veth1_macvtap entered promiscuous mode [ 49.156486][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.164536][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.172403][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.184030][ T1077] device veth0_vlan entered promiscuous mode [ 49.191227][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.199046][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.206492][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.218141][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.226235][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.234292][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.242505][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.265477][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.275432][ T1077] device veth1_macvtap entered promiscuous mode [ 49.284628][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.292578][ T314] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.302977][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.311102][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.315686][ T450] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 49.421223][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 49.421244][ T28] audit: type=1400 audit(1725306402.602:266): avc: denied { read } for pid=1114 comm="syz.4.275" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.449573][ T28] audit: type=1400 audit(1725306402.602:267): avc: denied { open } for pid=1114 comm="syz.4.275" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.477672][ T28] audit: type=1400 audit(1725306402.602:268): avc: denied { ioctl } for pid=1114 comm="syz.4.275" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.503702][ T28] audit: type=1400 audit(1725306402.602:269): avc: denied { set_context_mgr } for pid=1114 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.545788][ T19] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 49.665745][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.688039][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.725669][ T314] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 49.734533][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.777233][ T314] usb 1-1: config 0 descriptor?? [ 49.996506][ T8] device bridge_slave_1 left promiscuous mode [ 50.002456][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.046039][ T8] device bridge_slave_0 left promiscuous mode [ 50.051987][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.096575][ T8] device veth1_macvtap left promiscuous mode [ 50.102424][ T8] device veth0_vlan left promiscuous mode [ 53.355664][ T450] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 53.363052][ T450] usb 2-1: can't read configurations, error -71 [ 53.815726][ T314] usb 1-1: can't set config #0, error -71 [ 53.825977][ T314] usb 1-1: USB disconnect, device number 7 [ 54.171232][ T1137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.178274][ T1137] IPv6: NLM_F_CREATE should be set when creating new route [ 54.195482][ T1137] netlink: 'syz.1.296': attribute type 27 has an invalid length. [ 54.205670][ T19] usb 3-1: device descriptor read/all, error -71 [ 54.222307][ T28] audit: type=1400 audit(1725306407.402:270): avc: denied { mount } for pid=1139 comm="syz.0.297" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.244526][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.244626][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.267268][ T28] audit: type=1400 audit(1725306407.452:271): avc: denied { unmount } for pid=759 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.290659][ T28] audit: type=1400 audit(1725306407.452:272): avc: denied { write } for pid=1141 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.325711][ T28] audit: type=1400 audit(1725306407.502:273): avc: denied { write } for pid=1148 comm="syz.4.301" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 54.348510][ T28] audit: type=1400 audit(1725306407.502:274): avc: denied { read } for pid=1148 comm="syz.4.301" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.371546][ T28] audit: type=1400 audit(1725306407.502:275): avc: denied { open } for pid=1148 comm="syz.4.301" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.405080][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 54.780742][ T1169] tipc: Started in network mode [ 54.785448][ T1169] tipc: Node identity 32768b945b0f, cluster identity 4711 [ 54.792560][ T1169] tipc: Enabled bearer , priority 0 [ 54.800309][ T1168] tipc: Disabling bearer [ 54.881855][ T1171] loop3: detected capacity change from 0 to 4096 [ 54.890163][ T1171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 54.909350][ T291] EXT4-fs (loop3): unmounting filesystem. [ 55.185689][ T313] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 55.210812][ T28] audit: type=1326 audit(1725306408.392:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.235014][ T28] audit: type=1326 audit(1725306408.392:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.258999][ T28] audit: type=1326 audit(1725306408.422:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.282307][ T28] audit: type=1326 audit(1725306408.422:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.309778][ T1188] loop1: detected capacity change from 0 to 512 [ 55.316882][ T28] audit: type=1326 audit(1725306408.422:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.339995][ T28] audit: type=1326 audit(1725306408.452:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.340413][ T1188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.363146][ T28] audit: type=1326 audit(1725306408.452:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.394597][ T28] audit: type=1326 audit(1725306408.452:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.397629][ T1188] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.417780][ T28] audit: type=1326 audit(1725306408.452:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.436344][ T1188] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.449595][ T28] audit: type=1326 audit(1725306408.452:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809d79eb9 code=0x7ffc0000 [ 55.455647][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 55.479672][ T1188] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3845: comm syz.1.315: Allocating blocks 41-42 which overlap fs metadata [ 55.483475][ T541] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 55.497340][ T1188] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.315: Failed to acquire dquot type 0 [ 55.515345][ T1188] EXT4-fs (loop1): 1 truncate cleaned up [ 55.521129][ T1188] EXT4-fs (loop1): pa ffff888110e8f498: logic 1, phys. 41, len 23 [ 55.528798][ T1188] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4885: group 0, free 22, pa_free 23 [ 55.538934][ T1188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 55.554304][ T292] EXT4-fs (loop1): unmounting filesystem. [ 55.625731][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.636503][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.646140][ T313] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 55.654973][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.663485][ T313] usb 4-1: config 0 descriptor?? [ 55.668293][ T450] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.825682][ T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 55.855710][ T541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.866477][ T541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.875963][ T541] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 55.884814][ T541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.893134][ T541] usb 5-1: config 0 descriptor?? [ 55.915718][ T450] usb 1-1: Using ep0 maxpacket: 8 [ 56.035720][ T450] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.065696][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 56.125762][ T450] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 56.134678][ T450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 56.142816][ T450] usb 1-1: SerialNumber: syz [ 56.147971][ T313] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0 [ 56.155168][ T313] hid-picolcd 0003:04D8:F002.0018: item fetching failed at offset 5/7 [ 56.163709][ T450] usb 1-1: config 0 descriptor?? [ 56.168695][ T313] hid-picolcd 0003:04D8:F002.0018: device report parse failed [ 56.176012][ T313] hid-picolcd: probe of 0003:04D8:F002.0018 failed with error -22 [ 56.185857][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.196750][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.206319][ T19] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 56.215182][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.216082][ T450] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 56.223737][ T19] usb 2-1: config 0 descriptor?? [ 56.230671][ T450] usb 1-1: No valid video chain found. [ 56.353508][ T450] usb 4-1: USB disconnect, device number 11 [ 56.359968][ T541] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 56.367468][ T541] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 56.374234][ T541] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 56.381451][ T541] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 56.388281][ T541] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 56.394973][ T541] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 56.401804][ T541] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 56.408569][ T541] lg-g15 0003:046D:C222.0019: item fetching failed at offset 7/11 [ 56.416319][ T541] lg-g15: probe of 0003:046D:C222.0019 failed with error -22 [ 56.438091][ T541] usb 1-1: USB disconnect, device number 8 [ 56.576132][ T452] usb 5-1: USB disconnect, device number 8 [ 56.706353][ T19] greenasia 0003:0E8F:0012.001A: item fetching failed at offset 0/3 [ 56.714238][ T19] greenasia 0003:0E8F:0012.001A: parse failed [ 56.720114][ T19] greenasia: probe of 0003:0E8F:0012.001A failed with error -22 [ 56.909747][ T452] usb 2-1: USB disconnect, device number 12 [ 57.045206][ T1209] loop3: detected capacity change from 0 to 128 [ 57.495668][ T60] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.739232][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 57.825663][ T541] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 57.855733][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.866580][ T60] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 57.876136][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 57.888896][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.897742][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.925711][ T1213] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 57.946043][ T60] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 58.055695][ T450] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 58.065661][ T541] usb 1-1: Using ep0 maxpacket: 16 [ 58.166096][ T60] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 58.172381][ T60] usb 5-1: USB disconnect, device number 9 [ 58.185783][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.196612][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.206229][ T541] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.218814][ T541] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 58.227718][ T541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.236323][ T541] usb 1-1: config 0 descriptor?? [ 58.415706][ T450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.426444][ T450] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.435961][ T450] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 58.444788][ T450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.453328][ T450] usb 4-1: config 0 descriptor?? [ 58.525661][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 58.716551][ T541] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 58.724392][ T541] koneplus 0003:1E7D:2E22.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 58.765649][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 58.905722][ T39] usb 2-1: config 0 has no interfaces? [ 58.926285][ T450] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 58.934718][ T541] koneplus 0003:1E7D:2E22.001B: couldn't init struct koneplus_device [ 58.943934][ T541] koneplus 0003:1E7D:2E22.001B: couldn't install mouse [ 58.951363][ T450] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input10 [ 58.963206][ T541] koneplus: probe of 0003:1E7D:2E22.001B failed with error -5 [ 58.985713][ T39] usb 2-1: config 0 has no interfaces? [ 59.028059][ T450] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 59.065714][ T39] usb 2-1: config 0 has no interfaces? [ 59.138136][ T450] usb 1-1: USB disconnect, device number 9 [ 59.144789][ T541] usb 4-1: USB disconnect, device number 12 [ 59.225737][ T39] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.234832][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.243471][ T39] usb 2-1: Product: syz [ 59.247793][ T39] usb 2-1: Manufacturer: syz [ 59.252232][ T39] usb 2-1: SerialNumber: syz [ 59.257678][ T39] usb 2-1: config 0 descriptor?? [ 59.507027][ T1252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.515330][ T1252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.525958][ T450] usb 2-1: USB disconnect, device number 13 [ 59.597919][ T1260] loop4: detected capacity change from 0 to 512 [ 59.606037][ T1260] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.612197][ T1260] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.343: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 59.630193][ T1260] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.343: Bad quota inode: 4, type: 1 [ 59.641282][ T1260] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.655811][ T1260] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 59.663767][ T1260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.682694][ T1260] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 59.704637][ T1270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 59.730903][ T1260] EXT4-fs warning (device loop4): ext4_multi_mount_protect:338: MMP startup interrupted, failing mount [ 59.730903][ T1260] [ 59.749839][ T1277] syz.0.350 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.788725][ T1077] EXT4-fs (loop4): unmounting filesystem. [ 59.989233][ T1287] loop3: detected capacity change from 0 to 128 [ 60.335683][ T541] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.343116][ T450] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 60.362628][ T1298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.357'. [ 60.524536][ T1305] device pim6reg1 entered promiscuous mode [ 60.635659][ T541] usb 1-1: Using ep0 maxpacket: 16 [ 60.665673][ T450] usb 5-1: device descriptor read/64, error -71 [ 60.785868][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.796635][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.806129][ T541] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 60.818741][ T541] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 60.827540][ T541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.835827][ T541] usb 1-1: config 0 descriptor?? [ 60.855905][ T39] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 61.075742][ T450] usb 5-1: device descriptor read/64, error -71 [ 61.245795][ T39] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 61.256507][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.267240][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.276858][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 61.289658][ T39] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 61.298453][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.306944][ T541] microsoft 0003:045E:07DA.001D: report_id 8966 is invalid [ 61.313941][ T541] microsoft 0003:045E:07DA.001D: item 0 2 1 8 parsing failed [ 61.321821][ T39] usb 4-1: config 0 descriptor?? [ 61.326674][ T541] microsoft 0003:045E:07DA.001D: parse failed [ 61.332477][ T541] microsoft: probe of 0003:045E:07DA.001D failed with error -22 [ 61.345745][ T450] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 61.507508][ T541] usb 1-1: USB disconnect, device number 10 [ 61.527949][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 61.527967][ T28] audit: type=1326 audit(1725306414.712:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1312 comm="syz.1.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc6f779eb9 code=0x0 [ 61.577880][ T28] audit: type=1326 audit(1725306414.762:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1312 comm="syz.1.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fdc6f7abfa5 code=0x0 [ 61.665712][ T450] usb 5-1: device descriptor read/64, error -71 [ 61.816563][ T39] nintendo 0003:057E:2009.001E: unknown main item tag 0x0 [ 61.823511][ T39] nintendo 0003:057E:2009.001E: unknown main item tag 0x0 [ 61.830607][ T39] nintendo 0003:057E:2009.001E: item fetching failed at offset 2/5 [ 61.838574][ T39] nintendo 0003:057E:2009.001E: HID parse failed [ 61.844677][ T39] nintendo 0003:057E:2009.001E: probe - fail = -22 [ 61.851150][ T39] nintendo: probe of 0003:057E:2009.001E failed with error -22 [ 62.016835][ T39] usb 4-1: USB disconnect, device number 13 [ 62.065707][ T450] usb 5-1: device descriptor read/64, error -71 [ 62.185801][ T450] usb usb5-port1: attempt power cycle [ 62.415691][ T452] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 62.605686][ T450] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 62.775710][ T452] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 62.786378][ T399] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 62.793695][ T452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.795717][ T450] usb 5-1: device descriptor read/8, error -71 [ 62.804593][ T452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.819913][ T452] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 62.832793][ T452] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 62.841732][ T452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.849993][ T452] usb 1-1: config 0 descriptor?? [ 63.025674][ T399] usb 4-1: Using ep0 maxpacket: 32 [ 63.086293][ T450] usb 5-1: device descriptor read/8, error -71 [ 63.145704][ T399] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.153923][ T399] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.162300][ T399] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.171109][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.180522][ T399] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.189995][ T399] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.202741][ T399] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.211600][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.219844][ T399] usb 4-1: config 0 descriptor?? [ 63.326283][ T452] thrustmaster 0003:044F:B653.001F: unbalanced delimiter at end of report description [ 63.336755][ T452] thrustmaster 0003:044F:B653.001F: parse failed [ 63.342893][ T452] thrustmaster: probe of 0003:044F:B653.001F failed with error -22 [ 63.365683][ T450] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 63.476044][ T399] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.487245][ T399] usb 4-1: USB disconnect, device number 14 [ 63.493412][ T399] usblp0: removed [ 63.528122][ T452] usb 1-1: USB disconnect, device number 11 [ 63.565702][ T450] usb 5-1: device descriptor read/8, error -71 [ 63.835706][ T450] usb 5-1: device descriptor read/8, error -71 [ 63.965742][ T450] usb usb5-port1: unable to enumerate USB device [ 64.045679][ T399] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 64.061716][ T28] audit: type=1400 audit(1725306417.242:309): avc: denied { write } for pid=1329 comm="syz.0.369" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.066495][ T1330] usb usb8: usbfs: process 1330 (syz.0.369) did not claim interface 0 before use [ 64.108814][ T1332] device pim6reg1 entered promiscuous mode [ 64.295702][ T399] usb 4-1: Using ep0 maxpacket: 32 [ 64.555750][ T399] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.563955][ T399] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.572936][ T399] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.583942][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.593940][ T399] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.603586][ T399] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.617175][ T399] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.634648][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.645308][ T399] usb 4-1: config 0 descriptor?? [ 64.689149][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.696023][ T1344] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.703079][ T1344] device bridge_slave_0 entered promiscuous mode [ 64.711139][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.718009][ T1344] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.725084][ T1344] device bridge_slave_1 entered promiscuous mode [ 64.767580][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.774418][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.781546][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.788323][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.807148][ T28] audit: type=1400 audit(1725306417.992:310): avc: denied { read } for pid=1348 comm="syz.1.374" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.837692][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.845108][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.852585][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.875092][ T1344] device veth0_vlan entered promiscuous mode [ 64.882239][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.890906][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.898864][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.906457][ T399] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.917157][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.924397][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.933508][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.940354][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.947604][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.955506][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.962267][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.969411][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.977202][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.989816][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.998547][ T1344] device veth1_macvtap entered promiscuous mode [ 65.007450][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.019385][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.042851][ T1357] loop2: detected capacity change from 0 to 256 [ 65.049462][ T1357] exfat: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 65.110676][ T450] usb 4-1: USB disconnect, device number 15 [ 65.117101][ T450] usblp0: removed [ 65.489170][ T28] audit: type=1400 audit(1725306418.672:311): avc: denied { write } for pid=1383 comm="syz.0.387" name="igmp" dev="proc" ino=4026532674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.511618][ T1384] device tunl0 entered promiscuous mode [ 65.517756][ T1384] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 65.525255][ T1384] netlink: 9 bytes leftover after parsing attributes in process `syz.0.387'. [ 65.794851][ T1398] loop1: detected capacity change from 0 to 2048 [ 65.816655][ T452] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 65.817002][ T1398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.840307][ T1398] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.855351][ T1398] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 65.867595][ T1398] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.867595][ T1398] [ 65.877343][ T1398] EXT4-fs (loop1): Total free blocks count 0 [ 65.883254][ T1398] EXT4-fs (loop1): Free/Dirty block details [ 65.889082][ T1398] EXT4-fs (loop1): free_blocks=2415919104 [ 65.894745][ T1398] EXT4-fs (loop1): dirty_blocks=32 [ 65.900105][ T1398] EXT4-fs (loop1): Block reservation details [ 65.906169][ T1398] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 65.917405][ T388] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 65.936418][ T28] audit: type=1400 audit(1725306419.122:312): avc: denied { create } for pid=1403 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.961006][ T28] audit: type=1400 audit(1725306419.142:313): avc: denied { getopt } for pid=1403 comm="syz.1.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.065524][ T1410] device syzkaller0 entered promiscuous mode [ 66.068541][ T1392] loop3: detected capacity change from 0 to 131072 [ 66.088757][ T1392] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.112824][ T1392] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.175719][ T452] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 66.183631][ T452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 66.194944][ T452] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 66.206053][ T452] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.219378][ T452] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.228358][ T452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.238016][ T452] usb 1-1: config 0 descriptor?? [ 66.255684][ T399] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 66.255766][ T1388] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.310370][ T1427] loop2: detected capacity change from 0 to 1024 [ 66.317650][ T1427] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 66.328131][ T1427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.347254][ T1427] Disabled LAPIC found during irq injection [ 66.418425][ T1344] EXT4-fs (loop2): unmounting filesystem. [ 66.429157][ T1434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.406'. [ 66.444651][ T28] audit: type=1400 audit(1725306419.622:314): avc: denied { ioctl } for pid=1435 comm="syz.2.407" path="socket:[23559]" dev="sockfs" ino=23559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.469431][ T28] audit: type=1400 audit(1725306419.622:315): avc: denied { bind } for pid=1435 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.515738][ T399] usb 2-1: Using ep0 maxpacket: 32 [ 66.562870][ T1441] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 66.570455][ T1441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.409'. [ 66.605385][ T1448] loop2: detected capacity change from 0 to 512 [ 66.611847][ T1448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.623099][ T1448] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.412: invalid indirect mapped block 83886080 (level 1) [ 66.635735][ T399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.647576][ T399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.647868][ T1448] EXT4-fs (loop2): 1 orphan inode deleted [ 66.657812][ T399] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 66.663064][ T1448] EXT4-fs (loop2): 1 truncate cleaned up [ 66.671724][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.677191][ T1448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.686142][ T399] usb 2-1: config 0 descriptor?? [ 66.702619][ T28] audit: type=1400 audit(1725306419.882:316): avc: denied { map } for pid=1447 comm="syz.2.412" path="/17/file0/file0/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.736511][ T452] plantronics 0003:047F:FFFF.0020: unknown main item tag 0xd [ 66.736889][ T1448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.412: bg 0: bad block bitmap checksum [ 66.744331][ T28] audit: type=1400 audit(1725306419.922:317): avc: denied { rename } for pid=1447 comm="syz.2.412" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 66.755921][ T1448] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Filesystem failed CRC [ 66.778997][ T452] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 66.795561][ T452] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 66.807886][ T1344] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 66.830887][ T1344] EXT4-fs (loop2): unmounting filesystem. [ 66.956476][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.963321][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.970882][ T1451] device bridge_slave_0 entered promiscuous mode [ 66.978796][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.985669][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.992738][ T1451] device bridge_slave_1 entered promiscuous mode [ 67.006295][ T313] usb 1-1: USB disconnect, device number 12 [ 67.040473][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.047458][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.054511][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.061352][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.081932][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.089272][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.096437][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.105014][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.113136][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.119992][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.137169][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.145115][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.152033][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.161690][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.169971][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.178734][ T399] hkems 0003:2006:0118.0021: unbalanced delimiter at end of report description [ 67.188911][ T399] hkems 0003:2006:0118.0021: parse failed [ 67.194711][ T399] hkems: probe of 0003:2006:0118.0021 failed with error -22 [ 67.197325][ T1458] loop3: detected capacity change from 0 to 128 [ 67.208499][ T1458] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.221188][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.221236][ T1458] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.229395][ T541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.248191][ T1451] device veth0_vlan entered promiscuous mode [ 67.254178][ T388] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.260915][ T1451] device veth1_macvtap entered promiscuous mode [ 67.275446][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.283307][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.291207][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.300324][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.308301][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.315750][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.323802][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.332012][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.339302][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.349401][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.357949][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.396503][ T452] usb 2-1: USB disconnect, device number 14 [ 67.516168][ T321] device bridge_slave_1 left promiscuous mode [ 67.522083][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.529383][ T321] device bridge_slave_0 left promiscuous mode [ 67.535298][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.542931][ T321] device veth1_macvtap left promiscuous mode [ 67.548821][ T321] device veth0_vlan left promiscuous mode [ 67.645667][ T399] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 67.775670][ T450] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 67.904072][ T1468] loop1: detected capacity change from 0 to 512 [ 67.910626][ T1468] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.921565][ T1468] EXT4-fs (loop1): 1 truncate cleaned up [ 67.927081][ T1468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.943358][ T292] EXT4-fs (loop1): unmounting filesystem. [ 67.956198][ T1471] loop1: detected capacity change from 0 to 1024 [ 67.964281][ T1471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.978191][ T292] EXT4-fs (loop1): unmounting filesystem. [ 67.988707][ T1474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.422'. [ 68.005785][ T399] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 68.017027][ T399] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 68.029295][ T399] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 68.038235][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.065712][ T1464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.165719][ T450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.176470][ T450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.185967][ T450] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 68.194805][ T450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.203066][ T450] usb 1-1: config 0 descriptor?? [ 68.305719][ T541] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 68.305747][ T399] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 68.320331][ T399] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input12 [ 68.330846][ T399] usb 3-1: USB disconnect, device number 11 [ 68.375736][ T39] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 68.555664][ T541] usb 2-1: Using ep0 maxpacket: 16 [ 68.615964][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 68.676298][ T450] smartjoyplus 0003:6666:8801.0022: unknown main item tag 0x0 [ 68.683612][ T450] smartjoyplus 0003:6666:8801.0022: ignoring exceeding usage max [ 68.691197][ T541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.702509][ T450] smartjoyplus 0003:6666:8801.0022: usage index exceeded [ 68.709389][ T541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.719067][ T450] smartjoyplus 0003:6666:8801.0022: item 0 0 2 0 parsing failed [ 68.726521][ T541] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.739151][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.749848][ T450] smartjoyplus 0003:6666:8801.0022: parse failed [ 68.755927][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.765459][ T39] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 68.774342][ T450] smartjoyplus: probe of 0003:6666:8801.0022 failed with error -22 [ 68.782076][ T541] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 68.791615][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.799437][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.807672][ T541] usb 2-1: config 0 descriptor?? [ 68.813466][ T39] usb 4-1: config 0 descriptor?? [ 68.877199][ T313] usb 1-1: USB disconnect, device number 13 [ 69.080196][ T1488] loop2: detected capacity change from 0 to 512 [ 69.086506][ T1488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.093878][ T1488] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 69.102426][ T1488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1802c01c, mo2=0002] [ 69.110639][ T1488] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 69.119991][ T1488] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 69.128634][ T1488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.138796][ T1488] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 69.147817][ T1451] EXT4-fs (loop2): unmounting filesystem. [ 69.316548][ T541] ryos 0003:1E7D:31CE.0023: ignoring exceeding usage max [ 69.324521][ T541] ryos 0003:1E7D:31CE.0023: ignoring exceeding usage max [ 69.331977][ T39] hid-picolcd 0003:04D8:F002.0024: item fetching failed at offset 5/7 [ 69.340474][ T39] hid-picolcd 0003:04D8:F002.0024: device report parse failed [ 69.347759][ T541] ryos 0003:1E7D:31CE.0023: usage index exceeded [ 69.353890][ T541] ryos 0003:1E7D:31CE.0023: item 0 0 2 2 parsing failed [ 69.360853][ T39] hid-picolcd: probe of 0003:04D8:F002.0024 failed with error -22 [ 69.369121][ T541] ryos 0003:1E7D:31CE.0023: parse failed [ 69.374561][ T541] ryos: probe of 0003:1E7D:31CE.0023 failed with error -22 [ 69.537078][ T541] usb 2-1: USB disconnect, device number 15 [ 69.662253][ T399] usb 4-1: USB disconnect, device number 16 [ 69.805663][ T452] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 70.185740][ T452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.196567][ T452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.206273][ T452] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.215146][ T452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.227998][ T452] usb 3-1: config 0 descriptor?? [ 70.263765][ T1522] loop1: detected capacity change from 0 to 1024 [ 70.298478][ T1526] loop3: detected capacity change from 0 to 256 [ 70.304719][ T1526] exfat: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 70.313803][ T1522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.322311][ T1522] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038 (0x7fffffff) [ 70.342038][ T292] EXT4-fs (loop1): unmounting filesystem. [ 70.425641][ T28] audit: type=1400 audit(1725306423.602:318): avc: denied { ioctl } for pid=1534 comm="syz.1.443" path="socket:[23442]" dev="sockfs" ino=23442 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.676263][ T43] device bridge_slave_1 left promiscuous mode [ 70.682175][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.689448][ T452] hid (null): bogus close delimiter [ 70.694640][ T43] device bridge_slave_0 left promiscuous mode [ 70.700721][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.708300][ T43] device veth1_macvtap left promiscuous mode [ 70.714131][ T43] device veth0_vlan left promiscuous mode [ 70.719781][ T39] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 70.955782][ T452] usb 3-1: string descriptor 0 read error: -71 [ 70.966893][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 70.985763][ T452] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #200: -71 [ 70.994427][ T452] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71 [ 71.002378][ T452] uclogic 0003:256C:006D.0025: failed probing pen v2 parameters: -71 [ 71.010458][ T452] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 71.017892][ T452] uclogic: probe of 0003:256C:006D.0025 failed with error -71 [ 71.025797][ T452] usb 3-1: USB disconnect, device number 12 [ 71.085709][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.095690][ T39] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.108258][ T39] usb 2-1: config 1 interface 0 has no altsetting 0 [ 71.195695][ T399] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 71.225693][ T19] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 71.265751][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.274684][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.282862][ T39] usb 2-1: Product: syz [ 71.286903][ T39] usb 2-1: Manufacturer: syz [ 71.291259][ T39] usb 2-1: SerialNumber: syz [ 71.455679][ T399] usb 4-1: Using ep0 maxpacket: 32 [ 71.585735][ T399] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.596643][ T399] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.606285][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.615910][ T39] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 71.616912][ T399] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 71.624135][ T39] usb 2-1: USB disconnect, device number 16 [ 71.632193][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.647588][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.655503][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.668357][ T19] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 71.677217][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.685546][ T19] usb 1-1: config 0 descriptor?? [ 71.706137][ T399] hub 4-1:4.0: USB hub found [ 71.755692][ T541] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 71.925687][ T399] hub 4-1:4.0: 2 ports detected [ 71.995672][ T541] usb 3-1: Using ep0 maxpacket: 8 [ 72.115745][ T541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.126481][ T541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.136118][ T541] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 72.144970][ T541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.154473][ T541] usb 3-1: config 0 descriptor?? [ 72.166552][ T19] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 72.173684][ T19] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 72.180935][ T19] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 72.188366][ T19] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 72.195500][ T19] prodikeys 0003:041E:2801.0026: unknown main item tag 0x0 [ 72.205744][ T19] prodikeys 0003:041E:2801.0026: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 72.386021][ T314] usb 1-1: USB disconnect, device number 14 [ 72.425795][ T452] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 72.666209][ T541] hid-picolcd 0003:04D8:F002.0027: item fetching failed at offset 5/7 [ 72.674332][ T541] hid-picolcd 0003:04D8:F002.0027: device report parse failed [ 72.681683][ T541] hid-picolcd: probe of 0003:04D8:F002.0027 failed with error -22 [ 72.785765][ T452] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 72.796459][ T452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.808132][ T452] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.817732][ T452] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 72.830604][ T452] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 72.839423][ T452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.847693][ T452] usb 2-1: config 0 descriptor?? [ 72.868810][ T541] usb 3-1: USB disconnect, device number 13 [ 73.379594][ T399] hub 4-1:4.0: activate --> -90 [ 73.416508][ T452] thrustmaster 0003:044F:B653.0028: unbalanced delimiter at end of report description [ 73.426147][ T452] thrustmaster 0003:044F:B653.0028: parse failed [ 73.432282][ T452] thrustmaster: probe of 0003:044F:B653.0028 failed with error -22 [ 73.436189][ T39] usb 4-1: USB disconnect, device number 17 [ 73.445694][ T399] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 73.616865][ T450] usb 2-1: USB disconnect, device number 17 [ 73.831293][ T1564] loop2: detected capacity change from 0 to 256 [ 73.842504][ T28] audit: type=1400 audit(1725306427.022:319): avc: denied { getopt } for pid=1563 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.871942][ T1564] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 73.896104][ T28] audit: type=1400 audit(1725306427.082:320): avc: denied { append } for pid=1562 comm="syz.2.453" path="/9/file0/memory.events" dev="loop2" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 73.923020][ T28] audit: type=1400 audit(1725306427.112:321): avc: denied { ioctl } for pid=1562 comm="syz.2.453" path="/9/file0/memory.events" dev="loop2" ino=1048655 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.873431][ T1574] loop3: detected capacity change from 0 to 1024 [ 74.900921][ T1574] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 74.906579][ T1576] loop2: detected capacity change from 0 to 2048 [ 74.926661][ T1574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.987730][ T1574] Disabled LAPIC found during irq injection [ 75.078288][ T291] EXT4-fs (loop3): unmounting filesystem. [ 75.175689][ T399] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 75.415699][ T399] usb 2-1: Using ep0 maxpacket: 32 [ 75.535728][ T399] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 75.543874][ T399] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 75.552319][ T399] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 75.561079][ T399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.570553][ T399] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.579990][ T399] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.592776][ T399] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 75.601614][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.609905][ T399] usb 2-1: config 0 descriptor?? [ 75.866295][ T399] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 75.877358][ T399] usb 2-1: USB disconnect, device number 18 [ 75.883561][ T399] usblp0: removed [ 76.169434][ T1595] loop2: detected capacity change from 0 to 128 [ 76.415668][ T452] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 76.575664][ T399] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 76.655656][ T452] usb 4-1: Using ep0 maxpacket: 16 [ 76.775855][ T452] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.786600][ T452] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 76.796144][ T452] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 76.809152][ T452] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.817975][ T452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.825800][ T399] usb 2-1: Using ep0 maxpacket: 32 [ 76.865796][ T1591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.886250][ T452] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 76.955732][ T399] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 76.963881][ T399] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 76.972400][ T399] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 76.981220][ T399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.990667][ T399] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.000125][ T399] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.012984][ T399] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 77.021850][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.030131][ T399] usb 2-1: config 0 descriptor?? [ 77.096007][ T452] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 77.102302][ T452] usb 4-1: USB disconnect, device number 18 [ 77.286116][ T399] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 77.445678][ T39] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 77.445685][ T399] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 77.489801][ T314] usb 2-1: USB disconnect, device number 19 [ 77.496283][ T314] usblp0: removed [ 77.685660][ T399] usb 1-1: Using ep0 maxpacket: 8 [ 77.805731][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.815764][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.816446][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.827518][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.836729][ T399] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 77.846504][ T39] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 77.855082][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.864190][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.872545][ T399] usb 1-1: config 0 descriptor?? [ 77.880108][ T39] usb 3-1: config 0 descriptor?? [ 78.356328][ T399] hid-picolcd 0003:04D8:F002.0029: item fetching failed at offset 5/7 [ 78.364528][ T399] hid-picolcd 0003:04D8:F002.0029: device report parse failed [ 78.366429][ T39] holtek 0003:1241:5015.002A: collection stack underflow [ 78.371867][ T399] hid-picolcd: probe of 0003:04D8:F002.0029 failed with error -22 [ 78.378964][ T39] holtek 0003:1241:5015.002A: item 0 1 0 12 parsing failed [ 78.393555][ T39] holtek 0003:1241:5015.002A: parse failed [ 78.399197][ T39] holtek: probe of 0003:1241:5015.002A failed with error -22 [ 78.434671][ T1609] netlink: 'syz.1.464': attribute type 10 has an invalid length. [ 78.451645][ T1609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.464'. [ 78.572794][ T452] usb 3-1: USB disconnect, device number 14 [ 78.592256][ T399] usb 1-1: USB disconnect, device number 15 [ 80.027258][ T1630] loop3: detected capacity change from 0 to 128 [ 80.085719][ T39] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 80.255664][ T399] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 80.335694][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 80.485700][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.495649][ T399] usb 3-1: Using ep0 maxpacket: 16 [ 80.496515][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.511014][ T39] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 80.519844][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.528010][ T39] usb 2-1: config 0 descriptor?? [ 80.616585][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.627351][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.636851][ T399] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.649455][ T399] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 80.658334][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.666589][ T399] usb 3-1: config 0 descriptor?? [ 80.695695][ T6] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 80.707451][ T6] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 80.718630][ T6] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 80.727540][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.755776][ T1628] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 80.986439][ T39] hid-multitouch 0003:0EEF:72D0.002B: unbalanced collection at end of report description [ 80.995748][ T6] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 80.996345][ T39] hid-multitouch: probe of 0003:0EEF:72D0.002B failed with error -22 [ 81.003402][ T6] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input13 [ 81.021266][ T6] usb 1-1: USB disconnect, device number 16 [ 81.146220][ T399] koneplus 0003:1E7D:2E22.002C: unknown main item tag 0x0 [ 81.153930][ T399] koneplus 0003:1E7D:2E22.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 81.189682][ T39] usb 2-1: USB disconnect, device number 20 [ 81.355764][ T399] koneplus 0003:1E7D:2E22.002C: couldn't init struct koneplus_device [ 81.363681][ T399] koneplus 0003:1E7D:2E22.002C: couldn't install mouse [ 81.370759][ T399] koneplus: probe of 0003:1E7D:2E22.002C failed with error -5 [ 81.559545][ T6] usb 3-1: USB disconnect, device number 15 [ 81.765689][ T399] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 82.005662][ T399] usb 4-1: Using ep0 maxpacket: 16 [ 82.125836][ T399] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 82.135925][ T399] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 82.145435][ T399] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.315768][ T399] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.324607][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.332469][ T399] usb 4-1: Product: syz [ 82.336468][ T399] usb 4-1: Manufacturer: syz [ 82.340831][ T399] usb 4-1: SerialNumber: syz [ 82.365758][ T1635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.372721][ T1635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.596436][ T1635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.603388][ T1635] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.615751][ T399] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 82.622768][ T399] usb 4-1: USB disconnect, device number 19 [ 82.860906][ T1644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.478'. [ 83.125675][ T39] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 83.165767][ T399] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 83.165803][ T313] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 83.375693][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 83.415708][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 83.505741][ T39] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 83.513917][ T39] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.522330][ T39] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.531125][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.540549][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.545701][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.550057][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.560794][ T399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.571385][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.581279][ T399] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 83.593688][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.607134][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.612080][ T39] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.620506][ T399] usb 3-1: config 0 descriptor?? [ 83.628886][ T313] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 83.642712][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.650711][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.658695][ T39] usb 1-1: config 0 descriptor?? [ 83.663955][ T313] usb 2-1: config 0 descriptor?? [ 83.926111][ T39] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 83.938089][ T39] usb 1-1: USB disconnect, device number 17 [ 83.944256][ T39] usblp0: removed [ 84.106651][ T399] pantherlord 0003:0F30:0111.002D: item fetching failed at offset 6/7 [ 84.114941][ T399] pantherlord 0003:0F30:0111.002D: parse failed [ 84.121045][ T399] pantherlord: probe of 0003:0F30:0111.002D failed with error -22 [ 84.136180][ T313] hid-picolcd 0003:04D8:F002.002E: item fetching failed at offset 5/7 [ 84.144261][ T313] hid-picolcd 0003:04D8:F002.002E: device report parse failed [ 84.151479][ T313] hid-picolcd: probe of 0003:04D8:F002.002E failed with error -22 [ 84.312534][ T313] usb 3-1: USB disconnect, device number 16 [ 84.357834][ T399] usb 2-1: USB disconnect, device number 21 [ 84.505653][ T39] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 84.795662][ T6] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 84.805645][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 84.935696][ T39] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.943866][ T39] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.952312][ T39] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.961073][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.970515][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.979983][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.992743][ T39] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 85.001592][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.010046][ T39] usb 1-1: config 0 descriptor?? [ 85.155725][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.166461][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.175995][ T6] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 85.184831][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.193071][ T6] usb 4-1: config 0 descriptor?? [ 85.266082][ T39] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 85.469378][ T39] usb 1-1: USB disconnect, device number 18 [ 85.475570][ T39] usblp0: removed [ 85.676225][ T6] petalynx 0003:18B1:0037.002F: collection stack underflow [ 85.683265][ T6] petalynx 0003:18B1:0037.002F: item 0 1 0 12 parsing failed [ 85.690608][ T6] petalynx 0003:18B1:0037.002F: parse failed [ 85.696493][ T6] petalynx: probe of 0003:18B1:0037.002F failed with error -22 [ 85.876741][ T6] usb 4-1: USB disconnect, device number 20 [ 86.528501][ T1669] loop2: detected capacity change from 0 to 128 [ 86.715655][ T6] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 87.115705][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.126481][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.136079][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.159775][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.168292][ T6] usb 2-1: config 0 descriptor?? [ 87.646011][ T6] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 87.654961][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0030/input/input14 [ 87.736714][ T6] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 87.849755][ T6] usb 2-1: USB disconnect, device number 22 [ 88.258505][ T28] audit: type=1400 audit(1725306441.442:322): avc: denied { unmount } for pid=759 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.465656][ T39] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 88.473093][ T313] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 88.825718][ T39] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 88.836763][ T39] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 88.847855][ T313] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 88.858441][ T39] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 88.867243][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.877902][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.885721][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.895240][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 88.908284][ T313] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 88.917343][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.925495][ T313] usb 3-1: config 0 descriptor?? [ 88.935889][ T1677] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.185789][ T39] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 89.192922][ T39] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input15 [ 89.203427][ T39] usb 4-1: USB disconnect, device number 21 [ 89.396562][ T313] nintendo 0003:057E:2009.0031: unknown main item tag 0x0 [ 89.403499][ T313] nintendo 0003:057E:2009.0031: unknown main item tag 0x0 [ 89.410527][ T313] nintendo 0003:057E:2009.0031: item fetching failed at offset 2/5 [ 89.418456][ T313] nintendo 0003:057E:2009.0031: HID parse failed [ 89.424709][ T313] nintendo 0003:057E:2009.0031: probe - fail = -22 [ 89.431097][ T313] nintendo: probe of 0003:057E:2009.0031 failed with error -22 [ 89.599133][ T313] usb 3-1: USB disconnect, device number 17 [ 90.186291][ T1694] device tunl0 entered promiscuous mode [ 90.193486][ T1694] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 90.201301][ T1694] netlink: 9 bytes leftover after parsing attributes in process `syz.1.493'. [ 91.198986][ T1707] loop1: detected capacity change from 0 to 128 [ 92.390328][ T1717] syz.2.501[1717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.390383][ T1717] syz.2.501[1717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.447172][ T1731] loop3: detected capacity change from 0 to 2048 [ 92.477159][ T1731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=4 req=436 state=1 status=1 (errno 11: Resource temporarily unavailable) [ 92.493917][ T291] EXT4-fs (loop3): unmounting filesystem. [ 92.705670][ T39] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 93.126059][ T43] device bridge_slave_1 left promiscuous mode [ 93.131974][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.139221][ T43] device bridge_slave_0 left promiscuous mode [ 93.145136][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.496523][ T43] tipc: Left network mode [ 93.987465][ T43] device bridge_slave_1 left promiscuous mode [ 93.993380][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.000679][ T43] device bridge_slave_0 left promiscuous mode [ 94.006641][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.013993][ T43] device bridge_slave_1 left promiscuous mode [ 94.019967][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.027033][ T43] device bridge_slave_0 left promiscuous mode [ 94.033016][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.040988][ T43] device veth1_macvtap left promiscuous mode [ 94.046823][ T43] device veth0_vlan left promiscuous mode [ 94.052560][ T43] device veth1_macvtap left promiscuous mode [ 94.058629][ T43] device veth0_vlan left promiscuous mode [ 94.064479][ T43] device veth1_macvtap left promiscuous mode [ 94.070324][ T43] device veth0_vlan left promiscuous mode