last executing test programs: 4.863972263s ago: executing program 0 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 4.852768734s ago: executing program 0 (id=836): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"85f080884e142b266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb69e6f4048f2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778681ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659e506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b560300020000000000005131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa812a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe65701000000000000000742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d158607883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca89db0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7f6ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setrlimit(0x9, &(0x7f0000000040)) brk(0x55d55ede6004) 4.812382058s ago: executing program 0 (id=837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000007040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000070c0)={0x0}) 4.764062902s ago: executing program 0 (id=839): socket$inet_icmp(0x2, 0x2, 0x1) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xb4f) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 2.972016077s ago: executing program 3 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.923069161s ago: executing program 3 (id=861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.886990145s ago: executing program 3 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.858785007s ago: executing program 3 (id=865): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000040095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.622635349s ago: executing program 2 (id=868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0xfffffffffffffffe], 0x5000, 0x380711}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.518366259s ago: executing program 0 (id=869): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.466302473s ago: executing program 2 (id=871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.432706916s ago: executing program 2 (id=872): r0 = timerfd_create(0x8, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, r2+10000000}}, 0x0) close(r1) 2.424962617s ago: executing program 2 (id=873): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0xee00) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.330397755s ago: executing program 2 (id=875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='sched_process_wait\x00', r1}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 2.294944369s ago: executing program 2 (id=876): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x40000010, 0x2, 0x10, 0x10, 0x10, 0x10, 0x10, 0x9, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.06580781s ago: executing program 4 (id=881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0x0, 0x0, 0x1, {[@mss={0x2, 0x4, 0x8fb}]}}}}}}}, 0x0) 2.057517071s ago: executing program 4 (id=882): connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) 1.664037817s ago: executing program 1 (id=884): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4ec13209f4c6b61f836", 0xf2}, {&(0x7f0000000180)="63dc795835b4abc3c66a6e43fea75ec65048efda024fdf35087571dc1d1b616c974a193938ab50c5a9040e493af0d8b3fd64c4b6c4e240f82c33fa04565e96627b710e1a1bed2b0bf3b639a0330dfd84769348c374bc3df81dcba87c805741808d97453f774927a7eac58c92dcb5bbe6c7f3c8928c6f67fce77871e66b", 0x7d}, {&(0x7f0000000200)="e6fa9509b3792cd8646ebb9e5cd3c4a3c0298aa2f0e9af3211b9955da6183790f633515fc57370dc7213c5344ed303e14a4df7bdf7c927fdba448e0f08f7279b9dcdeaf9da197bebd94e1cef1fdc75679ea9503c9d7d411ef4ec64f9f8c4cf89c9eb1c8ca62a1ee73ef25529b0a184249f2bef66", 0x74}, {&(0x7f0000000280)="bade6986c4232e27e3f99c07302eade2ff6d6f759679f4facdf6527ccd2990bf067d2035a5a40b89881da26e8e31b8a69542e9c28544292a9f7b98ed76ec55f43051e0f5c054e218f68921671d930e4482680ecdb7b48da951639612eb96e3f5dde849be9be09d7c4344", 0x6a}, {&(0x7f0000000300)="cbc573c9900f51448fab2864e1d1172045", 0x11}, {&(0x7f0000000600)="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", 0x367}], 0x6}, 0x0) 1.216083918s ago: executing program 4 (id=885): syz_mount_image$f2fs(&(0x7f0000005900), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x21, 0x552d, &(0x7f000000abc0)="$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") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$f2fs(&(0x7f00000059c0), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000006700)=ANY=[@ANYBLOB="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"], 0x24, 0x5556, &(0x7f0000010100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005800)=ANY=[@ANYBLOB='noinline_/attr,active_logs=4,discard,fault_Snjection=00000000000000041160,ant_cache,user_xattr,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,\x00'], 0x21, 0x5533, &(0x7f00000002c0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 885.525008ms ago: executing program 3 (id=886): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 820.054824ms ago: executing program 1 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0xa) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 796.254636ms ago: executing program 1 (id=888): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB='system_u:object_r:ptch0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x67) 782.583488ms ago: executing program 1 (id=889): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) 763.661719ms ago: executing program 1 (id=890): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 716.853454ms ago: executing program 1 (id=891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 702.171855ms ago: executing program 4 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x5) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x39}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 643.227241ms ago: executing program 0 (id=893): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000004b57db0a640746ca768cb3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff}) 622.227953ms ago: executing program 4 (id=894): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f0000000280)=0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x20000044}]) 519.116202ms ago: executing program 4 (id=895): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)={0x0, 0x11, 0x6, "475d451488ca"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000380)={0xb9a71a8eb99a8dec, 0x17, 0x6a, "2acf170a7abbd140718aa1f7d4c53d709a96e5421dd53d2af7ccb906647134e05b317ed89a58792b9925acc9b2422957c066c67c8b206c646ae37d515d2284def3deb11c3256b75ea43c22f8031162450b7ff2c9374a51b8281769e173c32364c15a65acd9b45374e211"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x3}}) 0s ago: executing program 3 (id=896): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ack. [ 34.694423][ T1003] System zones: 0-1, 3-36 [ 34.712838][ T1003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.725877][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.740055][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.752718][ T19] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.756494][ T1001] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.761620][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.762215][ T19] usb 5-1: config 0 descriptor?? [ 34.782121][ T291] EXT4-fs (loop0): unmounting filesystem. [ 34.814562][ T294] EXT4-fs (loop1): unmounting filesystem. [ 34.994490][ T1021] binder: 1020:1021 ioctl c0306201 200003c0 returned -22 [ 35.115834][ T316] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.165863][ T315] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.259210][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input10 [ 35.295853][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.336791][ T19] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 35.385848][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 35.405900][ T315] usb 1-1: Using ep0 maxpacket: 32 [ 35.505865][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.516633][ T316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 35.525886][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.526112][ T316] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 35.537161][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.549654][ T316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.559364][ T315] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 35.568277][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.577317][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.593622][ T315] usb 1-1: config 0 descriptor?? [ 35.605920][ T1011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 35.626203][ T316] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 35.684229][ T591] usb 5-1: USB disconnect, device number 6 [ 35.705888][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 35.716588][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.727661][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.737391][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 35.750206][ T24] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 35.758986][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.767277][ T24] usb 4-1: config 0 descriptor?? [ 35.846295][ T316] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 35.856273][ T316] usb 2-1: USB disconnect, device number 6 [ 36.076471][ T315] lua 0003:1E7D:2C2E.000E: global environment stack underflow [ 36.083863][ T315] lua 0003:1E7D:2C2E.000E: item 0 0 1 11 parsing failed [ 36.090723][ T315] lua 0003:1E7D:2C2E.000E: parse failed [ 36.096232][ T315] lua: probe of 0003:1E7D:2C2E.000E failed with error -22 [ 36.236468][ T24] thrustmaster 0003:044F:B653.000F: unbalanced delimiter at end of report description [ 36.246037][ T24] thrustmaster 0003:044F:B653.000F: parse failed [ 36.252190][ T24] thrustmaster: probe of 0003:044F:B653.000F failed with error -22 [ 36.308142][ T24] usb 1-1: USB disconnect, device number 5 [ 36.449801][ T591] usb 4-1: USB disconnect, device number 6 [ 36.836151][ T1034] netlink: 128 bytes leftover after parsing attributes in process `syz.0.300'. [ 36.845024][ T1034] netlink: 128 bytes leftover after parsing attributes in process `syz.0.300'. [ 36.854221][ T1034] netlink: 128 bytes leftover after parsing attributes in process `syz.0.300'. [ 37.018823][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 37.018836][ T28] audit: type=1400 audit(1727722801.452:259): avc: denied { setopt } for pid=1039 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.093205][ T28] audit: type=1400 audit(1727722801.512:260): avc: denied { unmount } for pid=574 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.369280][ T28] audit: type=1400 audit(1727722801.802:261): avc: denied { getopt } for pid=1066 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.426002][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.614092][ T1087] loop1: detected capacity change from 0 to 256 [ 37.623020][ T1087] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 37.675884][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 37.784051][ T28] audit: type=1400 audit(1727722802.212:262): avc: denied { shutdown } for pid=1099 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.804050][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.819911][ T28] audit: type=1400 audit(1727722802.212:263): avc: denied { read } for pid=1099 comm="syz.1.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.839835][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.849779][ T24] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 37.858767][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.867444][ T24] usb 1-1: config 0 descriptor?? [ 37.914524][ T28] audit: type=1400 audit(1727722802.342:264): avc: denied { execute } for pid=1111 comm="syz.1.335" path="/69/cpuacct.usage_all" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.960822][ T28] audit: type=1400 audit(1727722802.392:265): avc: denied { read } for pid=1115 comm="syz.1.337" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.984445][ T28] audit: type=1400 audit(1727722802.392:266): avc: denied { open } for pid=1115 comm="syz.1.337" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.008493][ T28] audit: type=1400 audit(1727722802.442:267): avc: denied { ioctl } for pid=1115 comm="syz.1.337" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.137766][ T28] audit: type=1400 audit(1727722802.572:268): avc: denied { name_bind } for pid=1119 comm="syz.1.339" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 38.346712][ T24] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 38.353739][ T24] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 38.360930][ T24] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 38.367985][ T24] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 38.374996][ T24] hid-steam 0003:28DE:1142.0010: unknown main item tag 0x0 [ 38.382683][ T24] hid-steam 0003:28DE:1142.0010: hidraw0: USB HID v0.01 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 38.485833][ T315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 38.535840][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.576086][ T19] usb 1-1: USB disconnect, device number 6 [ 38.725826][ T315] usb 5-1: Using ep0 maxpacket: 8 [ 38.775825][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 38.848699][ T315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.895896][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 38.936871][ T315] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 38.946121][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 38.954094][ T315] usb 5-1: SerialNumber: syz [ 38.961180][ T315] usb 5-1: config 0 descriptor?? [ 39.016977][ T315] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 39.023697][ T315] usb 5-1: No valid video chain found. [ 39.065910][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 39.074935][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.082745][ T24] usb 2-1: Product: syz [ 39.086823][ T24] usb 2-1: Manufacturer: syz [ 39.091287][ T24] usb 2-1: SerialNumber: syz [ 39.218359][ T301] usb 5-1: USB disconnect, device number 7 [ 39.338498][ T19] usb 2-1: USB disconnect, device number 7 [ 39.435870][ T315] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.695910][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 39.815906][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.826720][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.836220][ T315] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.850784][ T315] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.859666][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.870139][ T315] usb 1-1: config 0 descriptor?? [ 40.035849][ T19] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 40.075621][ T1187] input: syz0 as /devices/virtual/input/input11 [ 40.225835][ T591] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.346714][ T315] microsoft 0003:045E:07DA.0011: unknown main item tag 0x7 [ 40.353739][ T315] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 40.361148][ T315] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 40.368284][ T315] microsoft 0003:045E:07DA.0011: unknown main item tag 0x2 [ 40.375228][ T315] microsoft 0003:045E:07DA.0011: unknown main item tag 0x2 [ 40.382283][ T315] microsoft 0003:045E:07DA.0011: unknown main item tag 0x2 [ 40.391787][ T315] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0011/input/input12 [ 40.403916][ T315] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 40.415744][ T19] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 40.426254][ T301] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.437288][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.449358][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.458931][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 40.471992][ T19] usb 5-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 40.480956][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.489788][ T19] usb 5-1: config 0 descriptor?? [ 40.563477][ T343] usb 1-1: USB disconnect, device number 7 [ 40.585868][ T591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.596640][ T591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.606356][ T591] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 40.615228][ T591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.625116][ T591] usb 4-1: config 0 descriptor?? [ 40.785863][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.796602][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.806118][ T301] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 40.814974][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.823477][ T301] usb 2-1: config 0 descriptor?? [ 40.966528][ T19] thrustmaster 0003:044F:B653.0012: unbalanced delimiter at end of report description [ 40.976173][ T19] thrustmaster 0003:044F:B653.0012: parse failed [ 40.982304][ T19] thrustmaster: probe of 0003:044F:B653.0012 failed with error -22 [ 41.116637][ T591] wacom 0003:056A:032B.0013: unknown main item tag 0x0 [ 41.123340][ T591] wacom 0003:056A:032B.0013: item fetching failed at offset 2/3 [ 41.131643][ T591] wacom 0003:056A:032B.0013: parse failed [ 41.137223][ T591] wacom: probe of 0003:056A:032B.0013 failed with error -22 [ 41.168983][ T6] usb 5-1: USB disconnect, device number 8 [ 41.296655][ T301] lg-g15 0003:046D:C222.0014: unknown main item tag 0x0 [ 41.303923][ T301] lg-g15 0003:046D:C222.0014: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 41.321582][ T591] usb 4-1: USB disconnect, device number 7 [ 41.385826][ T19] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 41.506816][ T24] usb 2-1: USB disconnect, device number 8 [ 41.709446][ T1208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 41.734645][ T1211] loop4: detected capacity change from 0 to 256 [ 41.775911][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 41.786837][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.796644][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 41.809546][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 41.818440][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.826990][ T19] usb 1-1: config 0 descriptor?? [ 41.837038][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.843912][ T1212] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.855974][ T1212] device bridge_slave_0 entered promiscuous mode [ 41.862820][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.873335][ T1219] SELinux: security_context_str_to_sid (ò‰b|€w±*a#UPÕ) failed with errno=-22 [ 41.874398][ T1212] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.891921][ T1212] device bridge_slave_1 entered promiscuous mode [ 41.931340][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.938189][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.945250][ T1212] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.952099][ T1212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.983781][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.991589][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.999105][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.006417][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.039475][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.048066][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.056358][ T591] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.063197][ T591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.070600][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.078552][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.085376][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.092625][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.100493][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.109140][ T1229] 8021q: VLANs not supported on lo [ 42.119833][ T1212] device veth0_vlan entered promiscuous mode [ 42.132043][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.145726][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.153548][ T1233] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 42.162090][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.182067][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 42.182079][ T28] audit: type=1400 audit(1727722806.612:276): avc: denied { write } for pid=1234 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.183084][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.188437][ T28] audit: type=1400 audit(1727722806.612:277): avc: denied { nlmsg_write } for pid=1234 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.222852][ T1212] device veth1_macvtap entered promiscuous mode [ 42.253566][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.279453][ T1241] loop3: detected capacity change from 0 to 16 [ 42.286552][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.302164][ T1241] erofs: (device loop3): mounted with root inode @ nid 36. [ 42.310524][ T28] audit: type=1400 audit(1727722806.742:278): avc: denied { mount } for pid=1240 comm="syz.3.392" name="/" dev="loop3" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.311434][ T1241] process 'syz.3.392' launched './file1' with NULL argv: empty string added [ 42.339498][ T28] audit: type=1400 audit(1727722806.772:279): avc: denied { unmount } for pid=1212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.361393][ T28] audit: type=1400 audit(1727722806.772:280): avc: denied { execute } for pid=1240 comm="syz.3.392" name="file1" dev="loop3" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.384261][ T19] logitech 0003:046D:C50C.0015: unknown main item tag 0x0 [ 42.392384][ T19] logitech 0003:046D:C50C.0015: report_id 0 is invalid [ 42.399750][ T28] audit: type=1400 audit(1727722806.772:281): avc: denied { execute_no_trans } for pid=1240 comm="syz.3.392" path="/98/file2/file1" dev="loop3" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.399805][ T19] logitech 0003:046D:C50C.0015: item 0 2 1 8 parsing failed [ 42.430773][ T19] logitech 0003:046D:C50C.0015: parse failed [ 42.436701][ T19] logitech: probe of 0003:046D:C50C.0015 failed with error -22 [ 42.465908][ T301] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.466700][ T28] audit: type=1400 audit(1727722806.902:282): avc: denied { connect } for pid=1251 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.503446][ T28] audit: type=1400 audit(1727722806.922:283): avc: denied { write } for pid=1251 comm="syz.2.396" path="socket:[19340]" dev="sockfs" ino=19340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.540449][ T28] audit: type=1400 audit(1727722806.962:284): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.565479][ T591] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 42.573268][ T28] audit: type=1400 audit(1727722806.962:285): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.624002][ T343] usb 1-1: USB disconnect, device number 8 [ 42.751278][ T1270] loop3: detected capacity change from 0 to 512 [ 42.755857][ T301] usb 2-1: Using ep0 maxpacket: 32 [ 42.767756][ T1270] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.404: inline data xattr refers to an external xattr inode [ 42.783008][ T1270] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.404: couldn't read orphan inode 12 (err -117) [ 42.795553][ T1270] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.809460][ T1270] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5890: inode #18: comm syz.3.404: bad extra_isize 10 (inode size 256) [ 42.825673][ T293] EXT4-fs (loop3): unmounting filesystem. [ 42.906133][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 42.917479][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 42.925888][ T591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.928747][ T301] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 42.940790][ T591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.948249][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.969356][ T301] usb 2-1: config 0 descriptor?? [ 42.980722][ T591] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.989737][ T591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.997584][ T1237] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 43.007590][ T591] usb 5-1: config 0 descriptor?? [ 43.007730][ T301] hub 2-1:0.0: USB hub found [ 43.092868][ T1290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.411'. [ 43.101730][ T1290] device bridge_slave_1 left promiscuous mode [ 43.107925][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.115140][ T1290] device bridge_slave_0 left promiscuous mode [ 43.121404][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.165865][ T343] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.225915][ T301] hub 2-1:0.0: 2 ports detected [ 43.271281][ T1292] loop0: detected capacity change from 0 to 40427 [ 43.280152][ T1292] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 43.287848][ T1292] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.296848][ T1292] F2FS-fs (loop0): invalid crc value [ 43.303111][ T1292] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.327271][ T1292] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.334176][ T1292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.435882][ T301] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 43.442194][ T301] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 43.455978][ T343] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 43.486650][ T591] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 43.499499][ T591] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 43.525862][ T300] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 43.555937][ T301] usbhid 2-1:0.0: can't add hid device: -71 [ 43.561703][ T301] usbhid: probe of 2-1:0.0 failed with error -71 [ 43.597545][ T301] usb 2-1: USB disconnect, device number 9 [ 43.765830][ T300] usb 4-1: Using ep0 maxpacket: 16 [ 43.796094][ T591] usb 5-1: USB disconnect, device number 9 [ 43.885929][ T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 43.896634][ T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 43.906365][ T300] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 43.915199][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.923774][ T300] usb 4-1: config 0 descriptor?? [ 44.185916][ T343] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 44.194786][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.235875][ T301] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.243212][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 44.386352][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.394874][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.406039][ T300] hid (null): bogus close delimiter [ 44.411365][ T300] hid (null): bogus close delimiter [ 44.418899][ T300] hid-generic 0003:0158:0100.0017: unknown main item tag 0x0 [ 44.426168][ T300] hid-generic 0003:0158:0100.0017: unknown main item tag 0x0 [ 44.433312][ T300] hid-generic 0003:0158:0100.0017: bogus close delimiter [ 44.441211][ T300] hid-generic 0003:0158:0100.0017: item 0 0 2 10 parsing failed [ 44.449063][ T300] hid-generic: probe of 0003:0158:0100.0017 failed with error -22 [ 44.505856][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 44.609032][ T315] usb 4-1: USB disconnect, device number 8 [ 44.616005][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.626847][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.636665][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.647707][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.657326][ T301] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.669909][ T19] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 44.678724][ T301] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 44.687569][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.695547][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.703684][ T19] usb 2-1: config 0 descriptor?? [ 44.709469][ T301] usb 1-1: config 0 descriptor?? [ 44.715860][ T343] usb 3-1: string descriptor 0 read error: -71 [ 44.721831][ T343] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 44.728632][ T343] usb 3-1: No valid video chain found. [ 44.734646][ T343] usb 3-1: USB disconnect, device number 4 [ 45.134060][ T1322] syz.3.422[1322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.134107][ T1322] syz.3.422[1322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.176735][ T301] holtek_mouse 0003:04D9:A070.0018: item fetching failed at offset 1/5 [ 45.201391][ T19] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 45.214231][ T19] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 45.224321][ T19] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 45.232140][ T301] holtek_mouse 0003:04D9:A070.0018: hid parse failed: -22 [ 45.239502][ T19] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 45.247196][ T301] holtek_mouse: probe of 0003:04D9:A070.0018 failed with error -22 [ 45.255957][ T19] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 45.264214][ T19] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.01 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 45.333410][ T1341] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 45.380620][ T1347] loop3: detected capacity change from 0 to 1024 [ 45.393105][ T1347] EXT4-fs: Ignoring removed orlov option [ 45.399295][ T300] usb 1-1: USB disconnect, device number 9 [ 45.405592][ T1347] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.416766][ T1347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.425744][ T316] usb 2-1: USB disconnect, device number 10 [ 45.435642][ T293] EXT4-fs (loop3): unmounting filesystem. [ 45.514000][ T1343] loop2: detected capacity change from 0 to 40427 [ 45.522944][ T1343] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 45.531743][ T1343] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 45.540186][ T1343] F2FS-fs (loop2): invalid crc value [ 45.546471][ T1343] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.570523][ T1343] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.577473][ T1343] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 45.833010][ T1362] loop2: detected capacity change from 0 to 128 [ 45.919597][ T1368] loop0: detected capacity change from 0 to 128 [ 45.928150][ T1370] syz.2.441[1370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.928219][ T1370] syz.2.441[1370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.968921][ T1374] loop0: detected capacity change from 0 to 256 [ 45.988638][ T1374] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 46.032992][ T1382] loop0: detected capacity change from 0 to 512 [ 46.042869][ T1382] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.446: bad orphan inode 17 [ 46.069823][ T1382] ext4_test_bit(bit=16, block=4) = 1 [ 46.074982][ T1382] is_bad_inode(inode)=0 [ 46.079275][ T1382] NEXT_ORPHAN(inode)=0 [ 46.083153][ T1382] max_ino=32 [ 46.086694][ T1382] i_nlink=1 [ 46.089788][ T1382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.120761][ T1382] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.446: bg 0: block 7: invalid block bitmap [ 46.139788][ T291] EXT4-fs (loop0): unmounting filesystem. [ 46.325860][ T300] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.485842][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 46.565829][ T300] usb 3-1: Using ep0 maxpacket: 16 [ 46.695957][ T300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.706703][ T300] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 46.716231][ T300] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 46.729074][ T300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.737833][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.765877][ T1379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.786165][ T300] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 46.855894][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.875810][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.885420][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 46.905823][ T19] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 46.914679][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.929292][ T19] usb 4-1: config 0 descriptor?? [ 47.006285][ T300] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 47.026030][ T300] usb 3-1: USB disconnect, device number 5 [ 47.406744][ T19] holtek_mouse 0003:04D9:A070.001A: item fetching failed at offset 1/5 [ 47.415009][ T19] holtek_mouse 0003:04D9:A070.001A: hid parse failed: -22 [ 47.422025][ T19] holtek_mouse: probe of 0003:04D9:A070.001A failed with error -22 [ 47.500988][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 47.501003][ T28] audit: type=1400 audit(1727722811.932:299): avc: denied { bind } for pid=1427 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.526170][ T316] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.537033][ T1432] binder_alloc: binder_alloc_mmap_handler: 1431 20ffc000-20ffd000 already mapped failed -16 [ 47.550849][ T28] audit: type=1400 audit(1727722811.962:300): avc: denied { write } for pid=1431 comm="syz.0.466" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.573696][ T28] audit: type=1400 audit(1727722811.972:301): avc: denied { map } for pid=1431 comm="syz.0.466" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.606051][ T1435] syz.2.467 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.616495][ T300] usb 4-1: USB disconnect, device number 9 [ 47.865826][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 47.915866][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.927684][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.937272][ T316] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 47.946083][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.954670][ T316] usb 2-1: config 0 descriptor?? [ 48.035842][ T343] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 48.105828][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 48.275819][ T343] usb 3-1: Using ep0 maxpacket: 16 [ 48.345875][ T24] usb 1-1: config 0 has an invalid interface number: 125 but max is 2 [ 48.353896][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 48.362584][ T24] usb 1-1: config 0 has no interface number 0 [ 48.368472][ T24] usb 1-1: config 0 interface 125 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 48.381333][ T24] usb 1-1: config 0 interface 125 has no altsetting 0 [ 48.395912][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 48.406770][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 48.414574][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 48.424257][ T343] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 48.433192][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.437110][ T316] hid-led 0003:1D34:000A.001B: unknown main item tag 0x0 [ 48.448278][ T316] hid-led 0003:1D34:000A.001B: unbalanced delimiter at end of report description [ 48.450779][ T343] usb 3-1: config 0 descriptor?? [ 48.457623][ T316] hid-led: probe of 0003:1D34:000A.001B failed with error -22 [ 48.655523][ T316] usb 2-1: USB disconnect, device number 11 [ 48.675889][ T24] usb 1-1: language id specifier not provided by device, defaulting to English [ 48.765862][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.776613][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.789265][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.798069][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.806445][ T19] usb 4-1: config 0 descriptor?? [ 48.926327][ T1456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.934592][ T1456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.946016][ T343] hid (null): bogus close delimiter [ 48.951259][ T343] hid (null): bogus close delimiter [ 48.958927][ T343] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 48.966153][ T343] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0 [ 48.973331][ T343] hid-generic 0003:0158:0100.001C: bogus close delimiter [ 48.980368][ T343] hid-generic 0003:0158:0100.001C: item 0 0 2 10 parsing failed [ 48.987977][ T343] hid-generic: probe of 0003:0158:0100.001C failed with error -22 [ 49.055869][ T24] usb 1-1: Dual-Role OTG device on HNP port [ 49.085849][ T24] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 49.094699][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.106341][ T24] usb 1-1: Product: syz [ 49.110343][ T24] usb 1-1: SerialNumber: syz [ 49.115229][ T24] usb 1-1: config 0 descriptor?? [ 49.153565][ T343] usb 3-1: USB disconnect, device number 6 [ 49.261018][ T28] audit: type=1400 audit(1727722813.692:302): avc: denied { bind } for pid=1472 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.281189][ T28] audit: type=1400 audit(1727722813.692:303): avc: denied { node_bind } for pid=1472 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 49.302649][ T19] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 49.311930][ T19] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 49.405977][ T24] hub 1-1:0.125: bad descriptor, ignoring hub [ 49.411858][ T24] hub: probe of 1-1:0.125 failed with error -5 [ 49.452569][ T1483] futex_wake_op: syz.1.489 tries to shift op by 32; fix this program [ 49.460599][ T24] usb 1-1: Found UVC 15.ff device syz (17dc:0202) [ 49.466084][ T28] audit: type=1400 audit(1727722813.902:304): avc: denied { block_suspend } for pid=1482 comm="syz.1.489" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.467014][ T24] usb 1-1: No valid video chain found. [ 49.527116][ T24] usb 1-1: USB disconnect, device number 10 [ 49.576613][ T343] usb 4-1: USB disconnect, device number 10 [ 49.795836][ T300] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.915394][ T28] audit: type=1400 audit(1727722814.342:305): avc: denied { mounton } for pid=1492 comm="syz.0.494" path="/proc/216/task" dev="proc" ino=20970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 50.055832][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 50.175885][ T300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 50.187870][ T300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 50.199415][ T300] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.212166][ T300] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.220953][ T300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.229266][ T300] usb 2-1: config 0 descriptor?? [ 50.245878][ T1485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.425848][ T19] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 50.425850][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.425876][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.453485][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 50.462361][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.472024][ T24] usb 3-1: config 0 descriptor?? [ 50.619541][ T1518] loop0: detected capacity change from 0 to 131072 [ 50.630721][ T1518] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (6747996280161764837, 6747996279205463525) [ 50.651835][ T1518] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 50.675881][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 50.706506][ T300] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 50.714395][ T300] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 50.725680][ T300] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 50.835867][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.846895][ T19] usb 4-1: config 0 has no interfaces? [ 50.956474][ T24] sony 0003:054C:0268.001F: unknown main item tag 0x0 [ 50.977985][ T24] sony 0003:054C:0268.001F: hiddev97,hidraw1: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 50.989691][ T24] sony 0003:054C:0268.001F: failed to claim input [ 50.999321][ T24] usb 2-1: USB disconnect, device number 12 [ 51.006012][ T19] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 51.017358][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.025486][ T19] usb 4-1: Product: syz [ 51.029655][ T19] usb 4-1: Manufacturer: syz [ 51.034211][ T19] usb 4-1: SerialNumber: syz [ 51.039365][ T19] usb 4-1: config 0 descriptor?? [ 51.172049][ T19] usb 3-1: USB disconnect, device number 7 [ 51.185919][ T343] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 51.437446][ T19] usb 4-1: USB disconnect, device number 11 [ 51.489832][ T1531] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 51.545854][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.556621][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.645867][ T343] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 51.654718][ T343] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 51.662582][ T343] usb 1-1: Product: syz [ 51.667151][ T343] usb 1-1: config 0 descriptor?? [ 51.734059][ T1566] syz.2.515[1566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.734111][ T1566] syz.2.515[1566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.965833][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 51.989143][ T1570] loop3: detected capacity change from 0 to 256 [ 52.000841][ T1570] FAT-fs (loop3): Directory bread(block 64) failed [ 52.007489][ T1570] FAT-fs (loop3): Directory bread(block 65) failed [ 52.013813][ T1570] FAT-fs (loop3): Directory bread(block 66) failed [ 52.020233][ T1570] FAT-fs (loop3): Directory bread(block 67) failed [ 52.025865][ T300] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 52.026539][ T1570] FAT-fs (loop3): Directory bread(block 68) failed [ 52.040168][ T1570] FAT-fs (loop3): Directory bread(block 69) failed [ 52.046508][ T1570] FAT-fs (loop3): Directory bread(block 70) failed [ 52.052800][ T1570] FAT-fs (loop3): Directory bread(block 71) failed [ 52.059203][ T1570] FAT-fs (loop3): Directory bread(block 72) failed [ 52.065439][ T1570] FAT-fs (loop3): Directory bread(block 73) failed [ 52.090965][ T326] kworker/u4:3: attempt to access beyond end of device [ 52.090965][ T326] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 52.141280][ T28] audit: type=1400 audit(1727722816.572:306): avc: denied { read } for pid=1577 comm="syz.3.521" dev="nsfs" ino=4026532646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.146786][ T343] konepure 0003:1E7D:2DB4.0020: item fetching failed at offset 10/11 [ 52.162500][ T28] audit: type=1400 audit(1727722816.572:307): avc: denied { open } for pid=1577 comm="syz.3.521" path="net:[4026532646]" dev="nsfs" ino=4026532646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.170179][ T343] konepure 0003:1E7D:2DB4.0020: parse failed [ 52.193615][ T28] audit: type=1400 audit(1727722816.572:308): avc: denied { write } for pid=1577 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.200640][ T343] konepure: probe of 0003:1E7D:2DB4.0020 failed with error -22 [ 52.245910][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 52.285915][ T300] usb 3-1: Using ep0 maxpacket: 8 [ 52.365980][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.385925][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.405704][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.407940][ T1584] loop3: detected capacity change from 0 to 40427 [ 52.418488][ T300] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 52.435387][ T1584] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 52.443134][ T1584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.445399][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 52.460424][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.465254][ T1584] F2FS-fs (loop3): invalid crc value [ 52.471269][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.486046][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.488686][ T19] usb 1-1: USB disconnect, device number 11 [ 52.494438][ T24] usb 2-1: config 0 descriptor?? [ 52.504787][ T300] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 52.517821][ T300] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 52.518809][ T1584] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.526904][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.541786][ T300] usb 3-1: config 0 descriptor?? [ 52.559645][ T1584] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 52.566548][ T1584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.584250][ T1584] syz.3.523: attempt to access beyond end of device [ 52.584250][ T1584] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 52.602559][ T293] syz-executor: attempt to access beyond end of device [ 52.602559][ T293] loop3: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 52.712983][ T1591] loop3: detected capacity change from 0 to 4096 [ 52.721758][ T1591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.747680][ T1591] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.524: corrupted inode contents [ 52.759492][ T1591] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #15: comm syz.3.524: mark_inode_dirty error [ 52.770822][ T1591] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.524: corrupted inode contents [ 52.782775][ T1591] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.524: mark_inode_dirty error [ 52.796033][ T1591] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.524: corrupted inode contents [ 52.808075][ T1591] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.524: mark_inode_dirty error [ 52.808364][ T1594] EXT4-fs (loop3): shut down requested (2) [ 52.819569][ T1591] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #15: comm syz.3.524: corrupted inode contents [ 52.836452][ T1594] EXT4-fs warning (device loop3): ext4_empty_dir:3110: inode #12: comm syz.3.524: directory missing '..' [ 52.855683][ T293] EXT4-fs (loop3): unmounting filesystem. [ 52.861560][ T43] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 52.871977][ T43] Quota error (device loop3): write_blk: dquota write failed [ 52.879107][ T43] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 52.986631][ T24] microsoft 0003:045E:07DA.0021: unknown main item tag 0x7 [ 52.993675][ T24] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 53.000714][ T24] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 53.010194][ T24] microsoft 0003:045E:07DA.0021: unknown main item tag 0x2 [ 53.017395][ T24] microsoft 0003:045E:07DA.0021: unknown main item tag 0x2 [ 53.024556][ T24] microsoft 0003:045E:07DA.0021: unknown main item tag 0x2 [ 53.032486][ T300] apple 0003:05AC:0246.0022: unknown main item tag 0x0 [ 53.044069][ T300] apple 0003:05AC:0246.0022: unknown main item tag 0x0 [ 53.051167][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0021/input/input14 [ 53.062416][ T300] apple 0003:05AC:0246.0022: global environment stack underflow [ 53.070207][ T300] apple 0003:05AC:0246.0022: item 0 4 1 11 parsing failed [ 53.081756][ T24] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 53.093693][ T300] apple 0003:05AC:0246.0022: parse failed [ 53.100243][ T300] apple: probe of 0003:05AC:0246.0022 failed with error -22 [ 53.165876][ T19] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 53.219941][ T300] usb 2-1: USB disconnect, device number 13 [ 53.247737][ T1606] loop0: detected capacity change from 0 to 256 [ 53.262378][ T343] usb 3-1: USB disconnect, device number 8 [ 53.272249][ T1606] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 53.303286][ T1608] syz.0.531[1608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.303331][ T1608] syz.0.531[1608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.355985][ T1616] loop0: detected capacity change from 0 to 512 [ 53.386852][ T1616] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 53.394730][ T1616] System zones: 0-2, 18-18, 34-35 [ 53.400168][ T1616] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.408915][ T1616] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038 (0x7fffffff) [ 53.428893][ T291] EXT4-fs (loop0): unmounting filesystem. [ 53.525927][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.536488][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.584434][ T28] audit: type=1400 audit(1727722818.012:309): avc: denied { mounton } for pid=1627 comm="syz.0.539" path="/127/file0" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 53.613886][ T1630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.540'. [ 53.622685][ T19] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.625871][ T1630] IPv6: Can't replace route, no match found [ 53.631771][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.645386][ T19] usb 4-1: SerialNumber: syz [ 53.658585][ T1632] devpts: called with bogus options [ 53.682477][ T1636] loop0: detected capacity change from 0 to 1024 [ 53.692237][ T1636] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 53.702652][ T1636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.715840][ T28] audit: type=1400 audit(1727722818.142:310): avc: denied { mounton } for pid=1635 comm="syz.0.543" path="/131/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.739836][ T291] EXT4-fs error (device loop0): __ext4_iget:5046: inode #15: block 1803188595: comm syz-executor: invalid block [ 53.753805][ T291] EXT4-fs error (device loop0): __ext4_iget:5046: inode #15: block 1803188595: comm syz-executor: invalid block [ 53.783586][ T28] audit: type=1400 audit(1727722818.212:311): avc: denied { ioctl } for pid=1640 comm="syz.2.546" path="socket:[22214]" dev="sockfs" ino=22214 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.833632][ T1644] loop2: detected capacity change from 0 to 512 [ 53.853968][ T1647] loop1: detected capacity change from 0 to 1024 [ 53.860800][ T291] EXT4-fs (loop0): unmounting filesystem. [ 53.867216][ T1644] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 53.876934][ T1647] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.889794][ T1644] System zones: 0-2, 18-18, 34-35 [ 53.895257][ T1644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 53.926376][ T19] usb 4-1: 0:2 : does not exist [ 53.935051][ T19] usb 4-1: USB disconnect, device number 12 [ 53.941715][ T294] EXT4-fs (loop1): unmounting filesystem. [ 53.948579][ T1644] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 54.016174][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 54.028529][ T28] audit: type=1400 audit(1727722818.462:312): avc: denied { listen } for pid=1654 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.067111][ T1663] input: syz0 as /devices/virtual/input/input15 [ 54.073963][ T1653] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.088152][ T1653] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.102355][ T1653] device bridge_slave_0 entered promiscuous mode [ 54.117674][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.124598][ T28] audit: type=1400 audit(1727722818.552:313): avc: denied { watch } for pid=1666 comm="syz.1.564" path="/126/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 54.136041][ T1653] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.156622][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.158333][ T1653] device bridge_slave_1 entered promiscuous mode [ 54.254508][ T1653] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.261377][ T1653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.269036][ T1678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 54.296372][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.304530][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.312026][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.329316][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.338438][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.347343][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.354165][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.361403][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.369349][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.376191][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.383879][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.391766][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.409738][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.421729][ T1653] device veth0_vlan entered promiscuous mode [ 54.432106][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.440597][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.448038][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.455874][ T300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 54.461323][ T1653] device veth1_macvtap entered promiscuous mode [ 54.474016][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.490195][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.498575][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.647684][ T1707] loop0: detected capacity change from 0 to 512 [ 54.654333][ T1707] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.678039][ T1707] EXT4-fs (loop0): 1 orphan inode deleted [ 54.683571][ T1707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.692679][ T1707] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 54.695938][ T343] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 54.709830][ T342] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.719928][ T342] EXT4-fs error (device loop0): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1 [ 54.731593][ T300] usb 3-1: Using ep0 maxpacket: 16 [ 54.737234][ T1707] EXT4-fs (loop0): shut down requested (2) [ 54.746588][ T1653] EXT4-fs (loop0): unmounting filesystem. [ 54.865935][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.876752][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.886550][ T300] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.899236][ T300] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.908371][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.919143][ T300] usb 3-1: config 0 descriptor?? [ 55.065936][ T343] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 55.077048][ T343] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 55.088151][ T343] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 55.097048][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.115912][ T1685] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 55.302106][ T28] audit: type=1400 audit(1727722819.732:314): avc: denied { bind } for pid=1747 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.369460][ T1750] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.376484][ T1750] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.383523][ T1750] device bridge_slave_0 entered promiscuous mode [ 55.386938][ T300] microsoft 0003:045E:07DA.0023: unknown main item tag 0x7 [ 55.391722][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.403575][ T1750] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.403661][ T300] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 55.410928][ T1750] device bridge_slave_1 entered promiscuous mode [ 55.417855][ T300] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 55.438205][ T300] microsoft 0003:045E:07DA.0023: unknown main item tag 0x2 [ 55.448124][ T300] microsoft 0003:045E:07DA.0023: unknown main item tag 0x2 [ 55.455301][ T300] microsoft 0003:045E:07DA.0023: unknown main item tag 0x2 [ 55.467334][ T300] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0023/input/input17 [ 55.485356][ T300] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 55.837068][ T43] device bridge_slave_1 left promiscuous mode [ 55.843017][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.886396][ T43] device bridge_slave_0 left promiscuous mode [ 55.892360][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.956984][ T43] device veth1_macvtap left promiscuous mode [ 55.962832][ T43] device veth0_vlan left promiscuous mode [ 56.604245][ T300] usb 3-1: USB disconnect, device number 9 [ 56.617458][ T343] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 56.627529][ T343] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input16 [ 56.649760][ T1770] Zero length message leads to an empty skb [ 56.664350][ T343] usb 4-1: USB disconnect, device number 13 [ 56.675818][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 56.729342][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.738503][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.749282][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.750158][ T1780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 56.757697][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.774627][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.781498][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.788999][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.797427][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.805525][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.812403][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.830145][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.837755][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.845628][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.859975][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.872042][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.880121][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.894446][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.903038][ T1750] device veth0_vlan entered promiscuous mode [ 56.910548][ T1786] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.917527][ T1786] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.927561][ T1786] ÿÿÿÿÿÿ: renamed from bridge0 [ 56.938447][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.952919][ T1750] device veth1_macvtap entered promiscuous mode [ 56.966217][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.974747][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.992418][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.001647][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.015924][ T316] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 57.081521][ T1798] loop0: detected capacity change from 0 to 2048 [ 57.131891][ T1803] loop2: detected capacity change from 0 to 512 [ 57.137838][ T1798] Alternate GPT is invalid, using primary GPT. [ 57.145217][ T1798] loop0: p2 p3 p7 [ 57.176775][ T1803] EXT4-fs (loop2): 1 orphan inode deleted [ 57.182335][ T1803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.191506][ T326] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.194431][ T1803] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038 (0x7fffffff) [ 57.205625][ T326] EXT4-fs error (device loop2): ext4_release_dquot:6787: comm kworker/u4:3: Failed to release dquot type 1 [ 57.233209][ T385] udevd[385]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 57.246497][ T459] udevd[459]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 57.258851][ T1803] EXT4-fs (loop2): shut down requested (2) [ 57.269441][ T319] udevd[319]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 57.281814][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 57.352236][ T1815] syz.3.618[1815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.352310][ T1815] syz.3.618[1815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.391338][ T1822] device pim6reg1 entered promiscuous mode [ 57.408276][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.419492][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.429789][ T316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.443239][ T316] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 57.477917][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.491503][ T316] usb 2-1: config 0 descriptor?? [ 57.504541][ T1811] loop2: detected capacity change from 0 to 40427 [ 57.517220][ T1811] F2FS-fs (loop2): invalid crc value [ 57.524305][ T1811] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.548575][ T1811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 57.568413][ T1212] syz-executor: attempt to access beyond end of device [ 57.568413][ T1212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 57.653099][ T1834] syz.2.623[1834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.653146][ T1834] syz.2.623[1834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.736588][ T343] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 57.765939][ T301] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 57.775865][ T300] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 57.976661][ T316] holtek_mouse 0003:04D9:A070.0024: item fetching failed at offset 1/5 [ 57.985044][ T316] holtek_mouse 0003:04D9:A070.0024: hid parse failed: -22 [ 57.985842][ T343] usb 1-1: Using ep0 maxpacket: 16 [ 57.992195][ T316] holtek_mouse: probe of 0003:04D9:A070.0024 failed with error -22 [ 58.006063][ T301] usb 4-1: Using ep0 maxpacket: 16 [ 58.035856][ T300] usb 5-1: Using ep0 maxpacket: 16 [ 58.115884][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.126649][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.137303][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.146830][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.156358][ T343] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 58.165165][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.165888][ T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.173051][ T301] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.184045][ T300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.196654][ T301] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.214652][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.222890][ T343] usb 1-1: config 0 descriptor?? [ 58.227809][ T300] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.240579][ T300] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 58.249451][ T300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.249699][ T301] usb 4-1: config 0 descriptor?? [ 58.262478][ T300] usb 5-1: config 0 descriptor?? [ 58.268019][ T315] usb 2-1: USB disconnect, device number 14 [ 58.707004][ T343] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0025/input/input18 [ 58.746767][ T300] ryos 0003:1E7D:31CE.0027: ignoring exceeding usage max [ 58.747024][ T301] microsoft 0003:045E:07DA.0026: unknown main item tag 0x7 [ 58.754652][ T300] ryos 0003:1E7D:31CE.0027: ignoring exceeding usage max [ 58.761032][ T301] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 58.767758][ T300] ryos 0003:1E7D:31CE.0027: usage index exceeded [ 58.778234][ T301] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 58.787551][ T300] ryos 0003:1E7D:31CE.0027: item 0 0 2 2 parsing failed [ 58.798457][ T343] appleir 0003:05AC:8241.0025: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 58.800921][ T1845] loop2: detected capacity change from 0 to 1024 [ 58.812069][ T1843] loop1: detected capacity change from 0 to 512 [ 58.817300][ T300] ryos 0003:1E7D:31CE.0027: parse failed [ 58.823235][ T301] microsoft 0003:045E:07DA.0026: unknown main item tag 0x2 [ 58.831375][ T1845] EXT4-fs: Ignoring removed orlov option [ 58.841433][ T300] ryos: probe of 0003:1E7D:31CE.0027 failed with error -22 [ 58.845066][ T301] microsoft 0003:045E:07DA.0026: unknown main item tag 0x2 [ 58.858168][ T301] microsoft 0003:045E:07DA.0026: unknown main item tag 0x2 [ 58.870251][ T301] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0026/input/input19 [ 58.883261][ T301] microsoft 0003:045E:07DA.0026: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 58.884280][ T1843] EXT4-fs (loop1): 1 orphan inode deleted [ 58.900649][ T342] __quota_error: 1 callbacks suppressed [ 58.900663][ T342] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.917491][ T342] EXT4-fs error (device loop1): ext4_release_dquot:6787: comm kworker/u4:4: Failed to release dquot type 1 [ 58.936603][ T1845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.944210][ T1843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.956159][ T1843] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038 (0x7fffffff) [ 58.997440][ T1845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.011844][ T28] audit: type=1400 audit(1727722823.442:316): avc: denied { setattr } for pid=1844 comm="syz.2.627" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.028620][ T1843] EXT4-fs (loop1): shut down requested (2) [ 59.053622][ T301] usb 4-1: USB disconnect, device number 14 [ 59.060027][ T294] EXT4-fs (loop1): unmounting filesystem. [ 59.082020][ T343] usb 5-1: USB disconnect, device number 10 [ 59.091643][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 59.324039][ T1862] loop1: detected capacity change from 0 to 40427 [ 59.331633][ T1862] F2FS-fs (loop1): invalid crc value [ 59.339150][ T1862] F2FS-fs (loop1): Found nat_bits in checkpoint [ 59.363756][ T1862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 59.381405][ T294] syz-executor: attempt to access beyond end of device [ 59.381405][ T294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.517456][ T315] usb 1-1: USB disconnect, device number 12 [ 59.585827][ T343] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 59.638324][ T1880] loop3: detected capacity change from 0 to 256 [ 59.651678][ T1880] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 59.745568][ T28] audit: type=1400 audit(1727722824.172:317): avc: denied { getopt } for pid=1890 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.755833][ T301] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 59.781334][ T1894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 59.825845][ T343] usb 3-1: Using ep0 maxpacket: 8 [ 59.831242][ T1898] netlink: 64 bytes leftover after parsing attributes in process `syz.3.647'. [ 59.844731][ T1901] netlink: 104 bytes leftover after parsing attributes in process `syz.4.648'. [ 59.891435][ T1909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 59.920656][ T1914] loop3: detected capacity change from 0 to 512 [ 59.927204][ T1914] EXT4-fs: Ignoring removed bh option [ 59.937943][ T1914] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 59.946091][ T343] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.955067][ T343] usb 3-1: config 1 has no interface number 1 [ 59.961345][ T343] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 59.974602][ T1914] EXT4-fs (loop3): 1 truncate cleaned up [ 59.980209][ T1914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.990952][ T1914] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 60.001301][ T343] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.015850][ T301] usb 2-1: Using ep0 maxpacket: 8 [ 60.021386][ T293] EXT4-fs (loop3): unmounting filesystem. [ 60.090066][ T1927] loop0: detected capacity change from 0 to 1024 [ 60.097520][ T1927] EXT4-fs: Ignoring removed orlov option [ 60.103264][ T1927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.127351][ T1927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.136133][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.147361][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.157155][ T301] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 60.166246][ T343] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.175433][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.183928][ T343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.192494][ T343] usb 3-1: Product: syz [ 60.195910][ T1653] EXT4-fs (loop0): unmounting filesystem. [ 60.196907][ T301] usb 2-1: config 0 descriptor?? [ 60.207299][ T343] usb 3-1: Manufacturer: syz [ 60.211756][ T343] usb 3-1: SerialNumber: syz [ 60.485882][ T315] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 60.515869][ T19] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 60.536109][ T343] usb 3-1: 2:1 : unsupported format bits 0x80 [ 60.559996][ T343] usb 3-1: USB disconnect, device number 10 [ 60.696775][ T301] playstation 0003:054C:0CE6.0028: item fetching failed at offset 5/7 [ 60.705365][ T301] playstation 0003:054C:0CE6.0028: Parse failed [ 60.711505][ T301] playstation: probe of 0003:054C:0CE6.0028 failed with error -22 [ 60.766485][ T459] udevd[459]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.845864][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.856744][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.866329][ T315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.878931][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.889573][ T315] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 60.898468][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.908013][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.915836][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 60.917864][ T300] usb 2-1: USB disconnect, device number 15 [ 60.924605][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.925529][ T315] usb 5-1: config 0 descriptor?? [ 60.943746][ T19] usb 1-1: config 0 descriptor?? [ 60.968138][ T1943] loop2: detected capacity change from 0 to 512 [ 60.974540][ T1943] EXT4-fs: Ignoring removed bh option [ 60.980212][ T1943] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 60.990670][ T1943] EXT4-fs (loop2): 1 truncate cleaned up [ 60.996348][ T1943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.013195][ T1943] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 3 (only 1 groups) [ 61.027554][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 61.275827][ T343] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 61.426771][ T19] wacom 0003:056A:032B.0029: unknown main item tag 0x0 [ 61.433452][ T19] wacom 0003:056A:032B.0029: item fetching failed at offset 2/3 [ 61.441605][ T315] holtek_mouse 0003:04D9:A070.002A: item fetching failed at offset 1/5 [ 61.449886][ T315] holtek_mouse 0003:04D9:A070.002A: hid parse failed: -22 [ 61.458730][ T19] wacom 0003:056A:032B.0029: parse failed [ 61.464346][ T315] holtek_mouse: probe of 0003:04D9:A070.002A failed with error -22 [ 61.472280][ T19] wacom: probe of 0003:056A:032B.0029 failed with error -22 [ 61.629971][ T316] usb 1-1: USB disconnect, device number 13 [ 62.554398][ T316] usb 5-1: USB disconnect, device number 11 [ 62.635928][ T343] usb 4-1: device descriptor read/all, error -71 [ 62.845855][ T19] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 62.935891][ T296] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 63.077421][ T1972] loop4: detected capacity change from 0 to 512 [ 63.084088][ T1972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.106206][ T1972] EXT4-fs (loop4): 1 truncate cleaned up [ 63.121112][ T1972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.144119][ T1750] EXT4-fs (loop4): unmounting filesystem. [ 63.215898][ T19] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 63.235927][ T296] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 63.238643][ T19] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 63.264625][ T1988] loop3: detected capacity change from 0 to 512 [ 63.265491][ T19] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 63.271287][ T1988] EXT4-fs (loop3): Test dummy encryption mode enabled [ 63.283649][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.295302][ T1988] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.684: invalid block [ 63.314720][ T1988] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.684: couldn't read orphan inode 11 (err -117) [ 63.326438][ T1964] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.333616][ T1988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.346414][ T315] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 63.370936][ T1988] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 63.381577][ T1988] overlayfs: failed to resolve './file0': -2 [ 63.392584][ T293] EXT4-fs (loop3): unmounting filesystem. [ 63.408000][ T28] audit: type=1400 audit(1727722827.842:318): avc: denied { append } for pid=1997 comm="syz.3.688" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.565905][ T19] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 63.573531][ T19] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input20 [ 63.584879][ T19] usb 3-1: USB disconnect, device number 11 [ 63.635887][ T6] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 63.725882][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.736676][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.746245][ T315] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 63.755099][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.763672][ T315] usb 1-1: config 0 descriptor?? [ 63.875847][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 63.976336][ T296] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 63.985320][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.995872][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.007530][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.017897][ T6] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 64.026891][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.035408][ T6] usb 5-1: config 0 descriptor?? [ 64.247246][ T315] hid-steam 0003:28DE:1142.002B: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 64.356665][ T28] audit: type=1400 audit(1727722828.792:319): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.449203][ T315] usb 1-1: USB disconnect, device number 14 [ 64.505859][ T296] usb 2-1: string descriptor 0 read error: -71 [ 64.511867][ T296] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 64.516696][ T6] lua 0003:1E7D:2C2E.002C: global environment stack underflow [ 64.520205][ T2015] loop3: detected capacity change from 0 to 256 [ 64.525994][ T6] lua 0003:1E7D:2C2E.002C: item 0 0 1 11 parsing failed [ 64.531955][ T296] usb 2-1: No valid video chain found. [ 64.539224][ T6] lua 0003:1E7D:2C2E.002C: parse failed [ 64.546914][ T2015] FAT-fs (loop3): Unrecognized mount option "smackfsdef=wpan3" or missing value [ 64.552062][ T6] lua: probe of 0003:1E7D:2C2E.002C failed with error -22 [ 64.564981][ T296] usb 2-1: USB disconnect, device number 16 [ 64.631393][ T6] kernel write not supported for file bpf-prog (pid: 6 comm: kworker/0:0) [ 64.699141][ T28] audit: type=1400 audit(1727722829.132:320): avc: denied { read } for pid=2019 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.747454][ T6] usb 5-1: USB disconnect, device number 12 [ 64.765013][ T28] audit: type=1400 audit(1727722829.192:321): avc: denied { create } for pid=2022 comm="syz.3.697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.793600][ T28] audit: type=1400 audit(1727722829.222:322): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.812192][ T2025] loop3: detected capacity change from 0 to 1024 [ 64.822475][ T2025] EXT4-fs: Ignoring removed orlov option [ 64.829219][ T2025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.846974][ T2025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 64.910367][ T2029] loop2: detected capacity change from 0 to 16 [ 64.926882][ T293] EXT4-fs (loop3): unmounting filesystem. [ 64.933184][ T2029] erofs: (device loop2): mounted with root inode @ nid 36. [ 64.943804][ T28] audit: type=1400 audit(1727722829.372:323): avc: denied { append } for pid=2028 comm="syz.2.699" name="file1" dev="loop2" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.034956][ T2047] loop2: detected capacity change from 0 to 512 [ 65.041811][ T2047] EXT4-fs (loop2): Test dummy encryption mode enabled [ 65.049275][ T2047] EXT4-fs error (device loop2): __ext4_iget:5046: inode #11: block 1: comm syz.2.708: invalid block [ 65.060301][ T2047] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.708: couldn't read orphan inode 11 (err -117) [ 65.072131][ T2047] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.094400][ T2047] overlayfs: failed to resolve './file0': -2 [ 65.105946][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 65.245890][ T6] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 65.285852][ T19] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 65.395827][ T315] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 65.525905][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 65.545899][ T301] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 65.605920][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.617339][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.626910][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 65.635887][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.644362][ T6] usb 1-1: config 0 descriptor?? [ 65.649183][ T315] usb 3-1: Using ep0 maxpacket: 8 [ 65.655866][ T19] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 65.664006][ T19] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 65.674352][ T19] usb 2-1: config 135 has no interface number 0 [ 65.680445][ T19] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.765897][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.776733][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.786278][ T315] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 65.795049][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.803415][ T315] usb 3-1: config 0 descriptor?? [ 65.855862][ T19] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 65.864730][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.872701][ T19] usb 2-1: Product: syz [ 65.876704][ T19] usb 2-1: Manufacturer: syz [ 65.881100][ T19] usb 2-1: SerialNumber: syz [ 65.906056][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.916762][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.926830][ T19] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 65.932986][ T19] usb 2-1: No valid video chain found. [ 65.938314][ T301] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 65.947658][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.956001][ T301] usb 5-1: config 0 descriptor?? [ 66.126499][ T6] appleir 0003:05AC:8243.002D: report_id 0 is invalid [ 66.128981][ T316] usb 2-1: USB disconnect, device number 17 [ 66.133589][ T6] appleir 0003:05AC:8243.002D: item 0 0 1 8 parsing failed [ 66.146471][ T6] appleir 0003:05AC:8243.002D: parse failed [ 66.153100][ T6] appleir: probe of 0003:05AC:8243.002D failed with error -22 [ 66.224148][ T2058] kvm: pic: non byte write [ 66.228532][ T2058] kvm: pic: non byte write [ 66.232829][ T2058] kvm: pic: non byte write [ 66.237272][ T2058] kvm: pic: non byte write [ 66.241561][ T2058] kvm: pic: non byte write [ 66.245851][ T2058] kvm: pic: non byte write [ 66.250051][ T2058] kvm: pic: non byte write [ 66.254291][ T2058] kvm: pic: non byte write [ 66.258763][ T2058] kvm: pic: non byte write [ 66.263049][ T2058] kvm: pic: non byte write [ 66.286568][ T315] playstation 0003:054C:0CE6.002E: item fetching failed at offset 5/7 [ 66.294628][ T315] playstation 0003:054C:0CE6.002E: Parse failed [ 66.300854][ T315] playstation: probe of 0003:054C:0CE6.002E failed with error -22 [ 66.332458][ T315] usb 1-1: USB disconnect, device number 15 [ 66.436709][ T301] lg-g15 0003:046D:C222.002F: unknown main item tag 0x2 [ 66.444150][ T301] lg-g15 0003:046D:C222.002F: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 66.489171][ T301] usb 3-1: USB disconnect, device number 12 [ 66.646765][ T300] usb 5-1: USB disconnect, device number 13 [ 66.665874][ T316] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 66.811104][ T2068] loop1: detected capacity change from 0 to 40427 [ 66.817823][ T2068] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 66.830726][ T2068] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.839508][ T2068] F2FS-fs (loop1): invalid crc value [ 66.851905][ T2068] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.879217][ T2068] F2FS-fs (loop1): Start checkpoint disabled! [ 66.886105][ T2068] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.892959][ T2068] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 66.915841][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 66.939453][ T28] audit: type=1400 audit(1727722831.372:324): avc: denied { create } for pid=2067 comm="syz.1.725" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 66.990074][ T342] kworker/u4:4: attempt to access beyond end of device [ 66.990074][ T342] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 67.052201][ T2077] loop1: detected capacity change from 0 to 512 [ 67.062140][ T2077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 67.068964][ T2077] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 67.079809][ T2077] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 67.095880][ T2077] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 67.105139][ T2077] EXT4-fs (loop1): 1 truncate cleaned up [ 67.115916][ T2077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.125856][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 67.134600][ T294] EXT4-fs (loop1): unmounting filesystem. [ 67.152215][ T2084] loop1: detected capacity change from 0 to 512 [ 67.158954][ T2084] EXT4-fs (loop1): Test dummy encryption mode enabled [ 67.167148][ T2084] EXT4-fs error (device loop1): __ext4_iget:5046: inode #11: block 1: comm syz.1.720: invalid block [ 67.178476][ T2084] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.720: couldn't read orphan inode 11 (err -117) [ 67.190861][ T2084] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.230815][ T2084] overlayfs: failed to resolve './file0': -2 [ 67.254392][ T294] EXT4-fs (loop1): unmounting filesystem. [ 67.265887][ T316] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.276184][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.283993][ T316] usb 4-1: Product: syz [ 67.289274][ T316] usb 4-1: Manufacturer: syz [ 67.293726][ T316] usb 4-1: SerialNumber: syz [ 67.299134][ T316] r8152-cfgselector 4-1: config 0 descriptor?? [ 67.346181][ T2092] kvm: apic: phys broadcast and lowest prio [ 67.415945][ T24] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 67.459183][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.485836][ T300] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 67.555939][ T316] r8152-cfgselector 4-1: Unknown version 0x0000 [ 67.612767][ T2088] loop4: detected capacity change from 0 to 131072 [ 67.619556][ T2088] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 67.628937][ T2088] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 67.637314][ T2088] F2FS-fs (loop4): invalid crc value [ 67.643802][ T2088] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.666961][ T2088] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 67.673833][ T2088] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 67.735830][ T300] usb 3-1: Using ep0 maxpacket: 16 [ 67.766041][ T316] r8152-cfgselector 4-1: Unknown version 0x0000 [ 67.772164][ T316] r8152-cfgselector 4-1: bad CDC descriptors [ 67.796336][ T316] r8152-cfgselector 4-1: Unknown version 0x0000 [ 67.802927][ T316] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 67.895941][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.907179][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.916904][ T300] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.929778][ T300] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 67.938730][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.949104][ T300] usb 3-1: config 0 descriptor?? [ 68.125858][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 68.134828][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.225839][ T315] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 68.300542][ T2112] loop3: detected capacity change from 0 to 8192 [ 68.309840][ T2112] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.346222][ T2114] loop3: detected capacity change from 0 to 512 [ 68.358053][ T2114] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.731: attempt to clear invalid blocks 2 len 1 [ 68.370841][ T2114] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 68.385324][ T2114] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.731: invalid indirect mapped block 1819239214 (level 0) [ 68.399395][ T2114] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.731: invalid indirect mapped block 1819239214 (level 1) [ 68.413561][ T2114] EXT4-fs (loop3): 1 truncate cleaned up [ 68.419761][ T300] koneplus 0003:1E7D:2E22.0030: item fetching failed at offset 0/2 [ 68.425841][ T2114] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.427740][ T300] koneplus 0003:1E7D:2E22.0030: parse failed [ 68.442371][ T2114] EXT4-fs warning (device loop3): dx_probe:832: inode #2: comm syz.3.731: Unrecognised inode hash code 20 [ 68.443936][ T300] koneplus: probe of 0003:1E7D:2E22.0030 failed with error -22 [ 68.453830][ T2114] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.731: Corrupt directory, running e2fsck is recommended [ 68.474758][ T315] usb 5-1: Using ep0 maxpacket: 8 [ 68.485485][ T293] EXT4-fs (loop3): unmounting filesystem. [ 68.515241][ T2121] loop3: detected capacity change from 0 to 256 [ 68.523911][ T2121] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 68.545248][ T28] audit: type=1400 audit(1727722832.972:325): avc: denied { execute } for pid=2120 comm="syz.3.734" path="/184/file0/blkio.bfq.io_service_time" dev="loop3" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.579595][ T2124] loop3: detected capacity change from 0 to 512 [ 68.586927][ T2124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.596760][ T315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.607428][ T2124] EXT4-fs (loop3): 1 truncate cleaned up [ 68.612877][ T2124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.652120][ T296] usb 3-1: USB disconnect, device number 13 [ 68.657889][ T24] usb 1-1: string descriptor 0 read error: -71 [ 68.663824][ T24] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 68.671735][ T28] audit: type=1400 audit(1727722833.102:326): avc: denied { remount } for pid=2123 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.685882][ T315] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 68.699276][ T24] usb 1-1: No valid video chain found. [ 68.701798][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 68.705550][ T24] usb 1-1: USB disconnect, device number 16 [ 68.717932][ T315] usb 5-1: SerialNumber: syz [ 68.726620][ T315] usb 5-1: config 0 descriptor?? [ 68.757932][ T293] EXT4-fs (loop3): unmounting filesystem. [ 68.777859][ T315] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 68.784576][ T315] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 68.805878][ T315] usb 5-1: Failed to create links for entity 255 [ 68.812033][ T315] usb 5-1: Failed to register entities (-22). [ 68.884799][ T2127] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.891668][ T2127] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.898868][ T2127] device bridge_slave_0 entered promiscuous mode [ 68.905568][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.912615][ T2127] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.919808][ T2127] device bridge_slave_1 entered promiscuous mode [ 68.964523][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.971383][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.978515][ T2127] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.985261][ T2127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.986311][ T301] usb 5-1: USB disconnect, device number 14 [ 69.011343][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.018930][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.026469][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.038799][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.046882][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.053703][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.061063][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.069091][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.076034][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.095328][ T2127] device veth0_vlan entered promiscuous mode [ 69.102951][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.111288][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.119082][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.127035][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.134285][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.146273][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.163644][ T2134] loop0: detected capacity change from 0 to 2048 [ 69.165245][ T2127] device veth1_macvtap entered promiscuous mode [ 69.180480][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.194955][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.203572][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.222385][ T28] audit: type=1400 audit(1727722833.652:327): avc: denied { watch watch_reads } for pid=2133 comm="syz.0.740" path="/26/file0/bus" dev="loop0" ino=1048667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 69.330817][ T2149] syz.3.746[2149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.330884][ T2149] syz.3.746[2149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.381205][ T326] device veth1_macvtap left promiscuous mode [ 69.409480][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 69.409498][ T28] audit: type=1400 audit(1727722833.842:342): avc: denied { read write } for pid=2154 comm="syz.3.749" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.415878][ T326] device veth0_vlan left promiscuous mode [ 69.465843][ T28] audit: type=1400 audit(1727722833.842:343): avc: denied { open } for pid=2154 comm="syz.3.749" path="/dev/raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.495858][ T703] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.521144][ T28] audit: type=1400 audit(1727722833.842:344): avc: denied { ioctl } for pid=2154 comm="syz.3.749" path="/dev/raw-gadget" dev="devtmpfs" ino=166 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.654687][ T28] audit: type=1400 audit(1727722834.022:345): avc: denied { create } for pid=2162 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.677180][ T301] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 69.680080][ T28] audit: type=1400 audit(1727722834.022:346): avc: denied { setopt } for pid=2162 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.713823][ T28] audit: type=1400 audit(1727722834.042:347): avc: denied { read } for pid=2164 comm="syz.2.754" dev="nsfs" ino=4026532808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.718587][ T2143] loop0: detected capacity change from 0 to 40427 [ 69.735291][ T28] audit: type=1400 audit(1727722834.042:348): avc: denied { open } for pid=2164 comm="syz.2.754" path="net:[4026532808]" dev="nsfs" ino=4026532808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.765400][ T28] audit: type=1400 audit(1727722834.042:349): avc: denied { create } for pid=2164 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.765663][ T2177] input: syz0 as /devices/virtual/input/input21 [ 69.785277][ T28] audit: type=1400 audit(1727722834.052:350): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 69.823112][ T28] audit: type=1400 audit(1727722834.052:351): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.858568][ T2143] F2FS-fs (loop0): invalid crc value [ 69.876657][ T2143] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.877107][ T2184] loop4: detected capacity change from 0 to 1024 [ 69.898994][ T2184] EXT4-fs: Ignoring removed orlov option [ 69.909407][ T2184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.926661][ T2143] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.927635][ T2184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.976580][ T301] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 69.992856][ T1653] syz-executor: attempt to access beyond end of device [ 69.992856][ T1653] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.008051][ T1750] EXT4-fs (loop4): unmounting filesystem. [ 70.125841][ T300] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 70.135654][ T2200] serio: Serial port ptm0 [ 70.210937][ T2209] loop4: detected capacity change from 0 to 1024 [ 70.223981][ T2209] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 70.233588][ T2209] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.240701][ T2209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.772: bg 0: block 10: padding at end of block bitmap is not set [ 70.255485][ T2209] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.772: Failed to acquire dquot type 0 [ 70.267207][ T2209] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.772: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.289780][ T2209] EXT4-fs (loop4): 1 truncate cleaned up [ 70.301420][ T2209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.311076][ T2209] syz.4.772 (2209) used greatest stack depth: 19752 bytes left [ 70.322595][ T1750] EXT4-fs (loop4): unmounting filesystem. [ 70.376319][ T300] usb 3-1: Using ep0 maxpacket: 16 [ 70.453521][ T2222] loop4: detected capacity change from 0 to 40427 [ 70.463867][ T2222] F2FS-fs (loop4): invalid crc value [ 70.469894][ T2222] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.493537][ T2222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.514550][ T1750] syz-executor: attempt to access beyond end of device [ 70.514550][ T1750] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.535897][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.546812][ T300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.556728][ T300] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 70.565571][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.577131][ T300] usb 3-1: config 0 descriptor?? [ 70.625914][ T301] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 70.645839][ T6] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 70.653313][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.672028][ T2234] loop4: detected capacity change from 0 to 1024 [ 70.675874][ T19] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 70.680830][ T2234] EXT4-fs: Ignoring removed orlov option [ 70.691515][ T2234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.717285][ T2234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.736260][ T1750] EXT4-fs (loop4): unmounting filesystem. [ 70.867270][ T2252] loop4: detected capacity change from 0 to 512 [ 70.873699][ T2252] EXT4-fs: Ignoring removed oldalloc option [ 70.880367][ T2252] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.897242][ T2252] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 70.910191][ T2252] EXT4-fs (loop4): 1 truncate cleaned up [ 70.916196][ T2252] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.926064][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 70.938385][ T1750] EXT4-fs (loop4): unmounting filesystem. [ 71.005907][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.017996][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.027966][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 71.037130][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.047652][ T6] usb 2-1: config 0 descriptor?? [ 71.055998][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.066274][ T19] usb 1-1: config 0 has no interfaces? [ 71.076703][ T300] apple 0003:05AC:0247.0031: unknown main item tag 0x0 [ 71.083398][ T300] apple 0003:05AC:0247.0031: unknown main item tag 0x0 [ 71.105848][ T300] apple 0003:05AC:0247.0031: item fetching failed at offset 2/160 [ 71.113577][ T300] apple 0003:05AC:0247.0031: parse failed [ 71.119080][ T300] apple: probe of 0003:05AC:0247.0031 failed with error -22 [ 71.166072][ T301] usb 4-1: string descriptor 0 read error: -71 [ 71.172289][ T301] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 71.179508][ T301] usb 4-1: No valid video chain found. [ 71.191115][ T301] usb 4-1: USB disconnect, device number 18 [ 71.225947][ T19] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 71.236890][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.244785][ T19] usb 1-1: Product: syz [ 71.249276][ T19] usb 1-1: Manufacturer: syz [ 71.253671][ T19] usb 1-1: SerialNumber: syz [ 71.262709][ T19] usb 1-1: config 0 descriptor?? [ 71.294170][ T343] usb 3-1: USB disconnect, device number 14 [ 71.527654][ T6] lg-g15 0003:046D:C222.0032: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 71.682556][ T2263] syz.3.791[2263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.682660][ T2263] syz.3.791[2263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.729393][ T6] usb 2-1: USB disconnect, device number 18 [ 71.905211][ T343] usb 1-1: USB disconnect, device number 17 [ 71.985274][ T2268] loop2: detected capacity change from 0 to 40427 [ 72.008377][ T2268] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 72.020650][ T2268] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 72.032136][ T2282] loop4: detected capacity change from 0 to 512 [ 72.039409][ T2282] EXT4-fs: Ignoring removed i_version option [ 72.048757][ T2268] F2FS-fs (loop2): invalid crc value [ 72.051733][ T2282] EXT4-fs: Ignoring removed nobh option [ 72.060345][ T2282] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.071275][ T2268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.071848][ T2282] EXT4-fs (loop4): 1 truncate cleaned up [ 72.077633][ T300] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 72.082878][ T2282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.119670][ T2268] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.126956][ T2268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.127641][ T1750] EXT4-fs (loop4): unmounting filesystem. [ 72.153656][ T2268] syz.2.794: attempt to access beyond end of device [ 72.153656][ T2268] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.171912][ T2289] loop4: detected capacity change from 0 to 4096 [ 72.183277][ T2289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.202694][ T1750] EXT4-fs (loop4): unmounting filesystem. [ 72.236894][ T2294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 72.345829][ T300] usb 4-1: Using ep0 maxpacket: 16 [ 72.462989][ T2302] loop4: detected capacity change from 0 to 40427 [ 72.476230][ T2302] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 72.485821][ T2302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 72.496190][ T300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 72.510202][ T2302] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.525864][ T300] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 72.542379][ T300] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 72.554339][ T300] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 72.564399][ T300] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 72.573983][ T300] usb 4-1: config 1 interface 0 has no altsetting 0 [ 72.593090][ T300] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 72.604882][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.612764][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 72.620520][ T2302] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 72.632095][ T2331] device sit0 entered promiscuous mode [ 72.632321][ T2302] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.666322][ T300] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 72.668206][ T2302] syz.4.808: attempt to access beyond end of device [ 72.668206][ T2302] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 72.727586][ T2346] loop2: detected capacity change from 0 to 256 [ 72.759403][ T2348] loop2: detected capacity change from 0 to 128 [ 72.766187][ T2348] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.794000][ T326] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.850212][ T2356] loop2: detected capacity change from 0 to 512 [ 72.866346][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 72.878923][ T300] scsi host1: usb-storage 4-1:1.0 [ 72.893540][ T2356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.906061][ T2356] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038 (0x7fffffff) [ 72.924608][ T2356] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 72.939114][ T2356] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 72.951386][ T2356] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.951386][ T2356] [ 72.962267][ T2356] EXT4-fs (loop2): Total free blocks count 0 [ 72.968592][ T2356] EXT4-fs (loop2): Free/Dirty block details [ 72.974958][ T2356] EXT4-fs (loop2): free_blocks=65280 [ 72.980467][ T2369] overlayfs: missing 'lowerdir' [ 72.985242][ T2356] EXT4-fs (loop2): dirty_blocks=23 [ 72.990216][ T2356] EXT4-fs (loop2): Block reservation details [ 72.996048][ T2356] EXT4-fs (loop2): i_reserved_data_blocks=23 [ 73.006152][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.017159][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.025091][ T2372] __vm_enough_memory: pid: 2372, comm: syz.0.836, no enough memory for the allocation [ 73.027022][ T24] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 73.045689][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.046035][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 73.055526][ T24] usb 2-1: config 0 descriptor?? [ 73.083600][ T19] usb 4-1: USB disconnect, device number 19 [ 73.146323][ T2386] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 73.195485][ T2394] loop2: detected capacity change from 0 to 1024 [ 73.204535][ T2394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.219907][ T2394] EXT4-fs error (device loop2): ext4_get_inode_usage:834: inode #2: comm syz.2.847: corrupted in-inode xattr [ 73.234997][ T1212] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2740: inode #2: comm syz-executor: corrupted in-inode xattr [ 73.250013][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 73.255879][ T300] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 73.366503][ T2404] 9pnet: p9_errstr2errno: server reported unknown error Çi6 [ 73.375820][ T343] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 73.390865][ T2406] input: syz1 as /devices/virtual/input/input22 [ 73.515820][ T300] usb 5-1: Using ep0 maxpacket: 16 [ 73.546392][ T24] hkems 0003:2006:0118.0033: bogus close delimiter [ 73.552955][ T24] hkems 0003:2006:0118.0033: item 0 4 2 10 parsing failed [ 73.560054][ T24] hkems 0003:2006:0118.0033: parse failed [ 73.565670][ T24] hkems: probe of 0003:2006:0118.0033 failed with error -22 [ 73.615825][ T343] usb 1-1: Using ep0 maxpacket: 8 [ 73.656115][ T300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.697179][ T300] usb 5-1: config 0 has no interfaces? [ 74.715856][ T343] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 74.723241][ T343] usb 1-1: can't read configurations, error -71 [ 74.873360][ T19] usb 2-1: USB disconnect, device number 19 [ 74.904264][ T2427] loop2: detected capacity change from 0 to 2048 [ 74.936835][ T2427] Alternate GPT is invalid, using primary GPT. [ 74.944690][ T2427] loop2: p1 p2 p3 [ 75.002945][ T459] udevd[459]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 75.003270][ T319] udevd[319]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 75.015284][ T385] udevd[385]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.052632][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 75.052647][ T28] audit: type=1400 audit(1727722839.482:427): avc: denied { map } for pid=2438 comm="syz.2.866" path="socket:[25406]" dev="sockfs" ino=25406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.092025][ T28] audit: type=1400 audit(1727722839.512:428): avc: denied { read } for pid=2438 comm="syz.2.866" path="socket:[25406]" dev="sockfs" ino=25406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.120144][ T2441] loop2: detected capacity change from 0 to 1024 [ 75.127761][ T2441] EXT4-fs: Ignoring removed nobh option [ 75.133627][ T2441] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.176106][ T2441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.201559][ T28] audit: type=1400 audit(1727722839.632:429): avc: denied { execute } for pid=2440 comm="syz.2.867" path="/106/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.235969][ T1212] EXT4-fs (loop2): unmounting filesystem. [ 75.265856][ T300] usb 5-1: string descriptor 0 read error: -71 [ 75.272191][ T300] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 75.281060][ T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.289991][ T300] usb 5-1: config 0 descriptor?? [ 75.295852][ T301] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 75.305865][ T300] usb 5-1: can't set config #0, error -71 [ 75.314846][ T300] usb 5-1: USB disconnect, device number 15 [ 75.404596][ T28] audit: type=1400 audit(1727722839.832:430): avc: denied { connect } for pid=2452 comm="syz.1.870" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.434178][ T28] audit: type=1400 audit(1727722839.862:431): avc: denied { wake_alarm } for pid=2454 comm="syz.2.872" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.458243][ T28] audit: type=1400 audit(1727722839.862:432): avc: denied { write } for pid=2452 comm="syz.1.870" path="socket:[25501]" dev="sockfs" ino=25501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.482260][ T28] audit: type=1400 audit(1727722839.912:433): avc: denied { create } for pid=2457 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.502807][ T28] audit: type=1400 audit(1727722839.912:434): avc: denied { write } for pid=2457 comm="syz.2.873" path="socket:[25517]" dev="sockfs" ino=25517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.530822][ T28] audit: type=1400 audit(1727722839.912:435): avc: denied { nlmsg_write } for pid=2457 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.535831][ T301] usb 4-1: Using ep0 maxpacket: 16 [ 75.634201][ T28] audit: type=1400 audit(1727722840.062:436): avc: denied { execute } for pid=2468 comm="syz.1.879" path="/204/memory.events" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.675829][ T343] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 75.685925][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.696856][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.706438][ T301] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.719094][ T301] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 75.727962][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.736298][ T301] usb 4-1: config 0 descriptor?? [ 75.775084][ T2472] syz.4.880[2472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.775130][ T2472] syz.4.880[2472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.855896][ T300] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 75.915817][ T343] usb 1-1: Using ep0 maxpacket: 16 [ 76.195867][ T343] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 76.204744][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.212818][ T343] usb 1-1: Product: syz [ 76.217133][ T343] usb 1-1: Manufacturer: syz [ 76.221535][ T343] usb 1-1: SerialNumber: syz [ 76.226771][ T343] r8152-cfgselector 1-1: config 0 descriptor?? [ 76.236564][ T301] koneplus 0003:1E7D:2E22.0034: item fetching failed at offset 0/2 [ 76.244356][ T301] koneplus 0003:1E7D:2E22.0034: parse failed [ 76.250287][ T301] koneplus: probe of 0003:1E7D:2E22.0034 failed with error -22 [ 76.265882][ T300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.451837][ T296] usb 4-1: USB disconnect, device number 20 [ 76.458347][ T300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.469104][ T300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.477042][ T300] usb 3-1: Product: syz [ 76.480985][ T300] usb 3-1: Manufacturer: syz [ 76.485407][ T300] usb 3-1: SerialNumber: syz [ 76.725881][ T343] r8152-cfgselector 1-1: Unknown version 0x0000 [ 76.732157][ T343] r8152-cfgselector 1-1: bad CDC descriptors [ 76.742722][ T2485] loop4: detected capacity change from 0 to 40427 [ 76.751744][ T2485] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 76.756109][ T343] r8152-cfgselector 1-1: Unknown version 0x0000 [ 76.758617][ T2485] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 76.767783][ T343] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 76.780940][ T2485] F2FS-fs (loop4): invalid crc value [ 76.789831][ T2485] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.814545][ T2485] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 76.821556][ T2485] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.154998][ T1750] syz-executor: attempt to access beyond end of device [ 77.154998][ T1750] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.445839][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 77.505815][ T296] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 77.595852][ T300] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 77.602093][ T300] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 77.605818][ T343] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 77.695804][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 77.819654][ T300] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 77.827234][ T300] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 77.838227][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 77.851324][ T300] usb 3-1: USB disconnect, device number 15 [ 77.859433][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 77.871105][ T300] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 77.880215][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 77.891030][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.899013][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.910312][ T24] usb 2-1: config 0 descriptor?? [ 77.916665][ T296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.930266][ T2504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.942813][ T296] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.952166][ T24] hub 2-1:0.0: USB hub found [ 77.956666][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.964601][ T591] ================================================================== [ 77.965870][ T343] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 77.972464][ T591] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 77.972496][ T591] Read of size 8 at addr ffff8881286c4cf0 by task kworker/1:5/591 [ 77.972510][ T591] [ 77.982219][ T343] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 77.989652][ T591] CPU: 1 PID: 591 Comm: kworker/1:5 Not tainted 6.1.99-syzkaller-00092-g5162f9a67b7d #0 [ 77.989673][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 77.989683][ T591] Workqueue: events linkwatch_event [ 77.989720][ T591] Call Trace: [ 78.036951][ T591] [ 78.039734][ T591] dump_stack_lvl+0x151/0x1b7 [ 78.044246][ T591] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 78.049535][ T591] ? _printk+0xd1/0x111 [ 78.053533][ T591] ? __virt_addr_valid+0x242/0x2f0 [ 78.058475][ T591] print_report+0x158/0x4e0 [ 78.062811][ T591] ? __virt_addr_valid+0x242/0x2f0 [ 78.067757][ T591] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 78.073834][ T591] ? __list_del_entry_valid+0xa6/0x130 [ 78.079126][ T591] kasan_report+0x13c/0x170 [ 78.083465][ T591] ? __list_del_entry_valid+0xa6/0x130 [ 78.088761][ T591] __asan_report_load8_noabort+0x14/0x20 [ 78.094235][ T591] __list_del_entry_valid+0xa6/0x130 [ 78.099444][ T591] process_one_work+0x4d7/0xcb0 [ 78.104127][ T591] worker_thread+0xa60/0x1260 [ 78.108647][ T591] kthread+0x26d/0x300 [ 78.112543][ T591] ? worker_clr_flags+0x1a0/0x1a0 [ 78.117408][ T591] ? kthread_blkcg+0xd0/0xd0 [ 78.121829][ T591] ret_from_fork+0x1f/0x30 [ 78.126089][ T591] [ 78.128944][ T591] [ 78.131113][ T591] Allocated by task 300: [ 78.135281][ T591] kasan_set_track+0x4b/0x70 [ 78.139706][ T591] kasan_save_alloc_info+0x1f/0x30 [ 78.144653][ T591] __kasan_kmalloc+0x9c/0xb0 [ 78.149079][ T591] __kmalloc_node+0xb4/0x1e0 [ 78.153508][ T591] kvmalloc_node+0x221/0x640 [ 78.157933][ T591] alloc_netdev_mqs+0x8c/0xf90 [ 78.162539][ T591] alloc_etherdev_mqs+0x36/0x40 [ 78.167221][ T591] usbnet_probe+0x207/0x27c0 [ 78.171769][ T591] usb_probe_interface+0x5b6/0xa90 [ 78.176712][ T591] really_probe+0x2b8/0x920 [ 78.181042][ T591] __driver_probe_device+0x1a0/0x310 [ 78.186166][ T591] driver_probe_device+0x54/0x3d0 [ 78.191110][ T591] __device_attach_driver+0x2e3/0x490 [ 78.196318][ T591] bus_for_each_drv+0x183/0x200 [ 78.201004][ T591] __device_attach+0x312/0x510 [ 78.205615][ T591] device_initial_probe+0x1a/0x20 [ 78.210472][ T591] bus_probe_device+0xbe/0x1e0 [ 78.215065][ T591] device_add+0xb60/0xf10 [ 78.219229][ T591] usb_set_configuration+0x190f/0x1e80 [ 78.224532][ T591] usb_generic_driver_probe+0x8b/0x150 [ 78.229822][ T591] usb_probe_device+0x144/0x260 [ 78.234513][ T591] really_probe+0x2b8/0x920 [ 78.238846][ T591] __driver_probe_device+0x1a0/0x310 [ 78.243967][ T591] driver_probe_device+0x54/0x3d0 [ 78.248828][ T591] __device_attach_driver+0x2e3/0x490 [ 78.254034][ T591] bus_for_each_drv+0x183/0x200 [ 78.258721][ T591] __device_attach+0x312/0x510 [ 78.263321][ T591] device_initial_probe+0x1a/0x20 [ 78.268183][ T591] bus_probe_device+0xbe/0x1e0 [ 78.272781][ T591] device_add+0xb60/0xf10 [ 78.276948][ T591] usb_new_device+0xf2f/0x1820 [ 78.281547][ T591] hub_event+0x2db1/0x4830 [ 78.285801][ T591] process_one_work+0x73d/0xcb0 [ 78.290489][ T591] worker_thread+0xa60/0x1260 [ 78.295002][ T591] kthread+0x26d/0x300 [ 78.298905][ T591] ret_from_fork+0x1f/0x30 [ 78.303158][ T591] [ 78.305327][ T591] Freed by task 300: [ 78.309084][ T591] kasan_set_track+0x4b/0x70 [ 78.313485][ T591] kasan_save_free_info+0x2b/0x40 [ 78.318347][ T591] ____kasan_slab_free+0x131/0x180 [ 78.323295][ T591] __kasan_slab_free+0x11/0x20 [ 78.327894][ T591] __kmem_cache_free+0x218/0x3b0 [ 78.332669][ T591] kfree+0x7a/0xf0 [ 78.336235][ T591] kvfree+0x35/0x40 [ 78.339871][ T591] netdev_freemem+0x3f/0x60 [ 78.344211][ T591] netdev_release+0x7f/0xb0 [ 78.348549][ T591] device_release+0x95/0x1c0 [ 78.352976][ T591] kobject_put+0x178/0x260 [ 78.357230][ T591] put_device+0x1f/0x30 [ 78.361221][ T591] free_netdev+0x393/0x480 [ 78.365482][ T591] usbnet_disconnect+0x245/0x390 [ 78.370252][ T591] usb_unbind_interface+0x1fa/0x8c0 [ 78.375287][ T591] device_release_driver_internal+0x53e/0x870 [ 78.381184][ T591] device_release_driver+0x19/0x20 [ 78.386130][ T591] bus_remove_device+0x2fa/0x360 [ 78.390905][ T591] device_del+0x663/0xe90 [ 78.395251][ T591] usb_disable_device+0x380/0x720 [ 78.400114][ T591] usb_disconnect+0x32a/0x890 [ 78.404626][ T591] hub_event+0x1ed8/0x4830 [ 78.408878][ T591] process_one_work+0x73d/0xcb0 [ 78.413578][ T591] worker_thread+0xd71/0x1260 [ 78.418079][ T591] kthread+0x26d/0x300 [ 78.422071][ T591] ret_from_fork+0x1f/0x30 [ 78.426323][ T591] [ 78.428493][ T591] Last potentially related work creation: [ 78.434051][ T591] kasan_save_stack+0x3b/0x60 [ 78.438560][ T591] __kasan_record_aux_stack+0xb4/0xc0 [ 78.443772][ T591] kasan_record_aux_stack_noalloc+0xb/0x10 [ 78.449411][ T591] insert_work+0x56/0x310 [ 78.453587][ T591] __queue_work+0x9b6/0xd70 [ 78.457922][ T591] queue_work_on+0x105/0x170 [ 78.462341][ T591] usbnet_link_change+0xeb/0x100 [ 78.467116][ T591] usbnet_probe+0x1dbe/0x27c0 [ 78.471637][ T591] usb_probe_interface+0x5b6/0xa90 [ 78.476587][ T591] really_probe+0x2b8/0x920 [ 78.480914][ T591] __driver_probe_device+0x1a0/0x310 [ 78.486038][ T591] driver_probe_device+0x54/0x3d0 [ 78.490896][ T591] __device_attach_driver+0x2e3/0x490 [ 78.496107][ T591] bus_for_each_drv+0x183/0x200 [ 78.500789][ T591] __device_attach+0x312/0x510 [ 78.505391][ T591] device_initial_probe+0x1a/0x20 [ 78.510251][ T591] bus_probe_device+0xbe/0x1e0 [ 78.514853][ T591] device_add+0xb60/0xf10 [ 78.519018][ T591] usb_set_configuration+0x190f/0x1e80 [ 78.524310][ T591] usb_generic_driver_probe+0x8b/0x150 [ 78.529606][ T591] usb_probe_device+0x144/0x260 [ 78.534317][ T591] really_probe+0x2b8/0x920 [ 78.538632][ T591] __driver_probe_device+0x1a0/0x310 [ 78.543752][ T591] driver_probe_device+0x54/0x3d0 [ 78.548613][ T591] __device_attach_driver+0x2e3/0x490 [ 78.553820][ T591] bus_for_each_drv+0x183/0x200 [ 78.558507][ T591] __device_attach+0x312/0x510 [ 78.563105][ T591] device_initial_probe+0x1a/0x20 [ 78.567968][ T591] bus_probe_device+0xbe/0x1e0 [ 78.572598][ T591] device_add+0xb60/0xf10 [ 78.576733][ T591] usb_new_device+0xf2f/0x1820 [ 78.581335][ T591] hub_event+0x2db1/0x4830 [ 78.585586][ T591] process_one_work+0x73d/0xcb0 [ 78.590278][ T591] worker_thread+0xa60/0x1260 [ 78.594787][ T591] kthread+0x26d/0x300 [ 78.598692][ T591] ret_from_fork+0x1f/0x30 [ 78.602945][ T591] [ 78.605115][ T591] The buggy address belongs to the object at ffff8881286c4000 [ 78.605115][ T591] which belongs to the cache kmalloc-4k of size 4096 [ 78.619089][ T591] The buggy address is located 3312 bytes inside of [ 78.619089][ T591] 4096-byte region [ffff8881286c4000, ffff8881286c5000) [ 78.632374][ T591] [ 78.634537][ T591] The buggy address belongs to the physical page: [ 78.640802][ T591] page:ffffea0004a1b000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1286c0 [ 78.650853][ T591] head:ffffea0004a1b000 order:3 compound_mapcount:0 compound_pincount:0 [ 78.659011][ T591] flags: 0x4000000000010200(slab|head|zone=1) [ 78.664919][ T591] raw: 4000000000010200 ffffea0004235e00 dead000000000002 ffff888100043380 [ 78.673337][ T591] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 78.681752][ T591] page dumped because: kasan: bad access detected [ 78.688006][ T591] page_owner tracks the page as allocated [ 78.693562][ T591] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 292, tgid 292 (syz-executor), ts 21672955394, free_ts 0 [ 78.713696][ T591] post_alloc_hook+0x213/0x220 [ 78.718291][ T591] prep_new_page+0x1b/0x110 [ 78.722630][ T591] get_page_from_freelist+0x27ea/0x2870 [ 78.728010][ T591] __alloc_pages+0x3a1/0x780 [ 78.732437][ T591] alloc_slab_page+0x6c/0xf0 [ 78.736865][ T591] new_slab+0x90/0x3e0 [ 78.740770][ T591] ___slab_alloc+0x6f9/0xb80 [ 78.745196][ T591] __slab_alloc+0x5d/0xa0 [ 78.749361][ T591] __kmem_cache_alloc_node+0x1af/0x250 [ 78.754659][ T591] kmalloc_trace+0x2a/0xa0 [ 78.758908][ T591] kobject_uevent_env+0x262/0x720 [ 78.763771][ T591] kobject_uevent+0x1f/0x30 [ 78.768108][ T591] net_rx_queue_update_kobjects+0x239/0x4a0 [ 78.773836][ T591] netdev_register_kobject+0x231/0x320 [ 78.779132][ T591] register_netdevice+0xe43/0x1490 [ 78.784079][ T591] register_netdev+0x3c/0x50 [ 78.788505][ T591] page_owner free stack trace missing [ 78.793712][ T591] [ 78.795882][ T591] Memory state around the buggy address: [ 78.801352][ T591] ffff8881286c4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.809249][ T591] ffff8881286c4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.817146][ T591] >ffff8881286c4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.825045][ T591] ^ [ 78.832596][ T591] ffff8881286c4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.840500][ T591] ffff8881286c4d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.848390][ T591] ================================================================== [ 78.856289][ T591] Disabling lock debugging due to kernel taint [ 78.863754][ T296] usb 1-1: config 0 descriptor?? [ 78.935874][ T24] hub 2-1:0.0: 2 ports detected [ 78.955953][ T343] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 78.965185][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.972989][ T343] usb 5-1: Product: syz [ 78.977576][ T343] usb 5-1: Manufacturer: syz [ 78.981979][ T343] usb 5-1: SerialNumber: syz [ 78.986973][ T343] usb 5-1: config 0 descriptor?? [ 79.005895][ T2512] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 79.012974][ T2512] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 79.226997][ T2512] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 79.233952][ T2512] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 79.336680][ T296] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 79.346092][ T296] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 79.606631][ T24] usb 2-1: USB disconnect, device number 20 [ 79.675918][ T343] dm9601: No valid MAC address in EEPROM, using aa:d1:49:a2:54:2c [ 80.016948][ T296] usb 1-1: USB disconnect, device number 20 [ 80.495847][ T343] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 80.505626][ T343] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, aa:d1:49:a2:54:2c [ 80.519512][ T343] usb 5-1: USB disconnect, device number 16 [ 80.525607][ T343] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet