last executing test programs: 13.961205388s ago: executing program 4 (id=381): mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000b00)=""/4096) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 13.138720795s ago: executing program 4 (id=383): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 9.658816157s ago: executing program 4 (id=394): add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800eaff000001000000000081000000181100009208fb4330a5c5eb171a452cc7695b9241eeca26e5de7e559d2e5e0c0c3e0e13fce764ee9615c1b0accc3a3cdd4381e09d3c6672", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90) timer_create(0x7, &(0x7f0000000300)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000500)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9febbb1b86742e4f5f26faf011d44257ef2ec234e1998872a6010018000002000000000c0000667deafa30d5b11428027b8217e47cbbb4d5cc6f4fc35215096e04a579eedef300dd592efbeb52d23d985d1c259be21fbfbc667de0e616c18909593854dba0eafcd5f086a168274c4e7c14409a43bc6bcdcc70104cc99d472e3e55404f6b58e01dc4e4d35a87ebb27ccacd14b2fd07263eb7792cb758bf7f14d8998eb7"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000c30100000000000095e15071e7c34594"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x90) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 9.579730013s ago: executing program 3 (id=396): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@window, @sack_perm, @mss, @window, @timestamp, @mss, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x802, 0x0, 0x6) 8.741154471s ago: executing program 3 (id=400): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@union={0x2, 0x6, 0x0, 0x5, 0x1, 0x6, [{0x7, 0x3}, {0xd, 0x5, 0xf159}, {0xa, 0x5, 0x8}, {0x7, 0x3, 0x15e7}, {0x10, 0x4, 0xffff0001}, {0xd, 0x1, 0x83}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30, 0x30, 0x30, 0x60, 0x2e]}}, &(0x7f0000000680)=""/216, 0x76, 0xd8, 0x1, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r3) write$tun(r4, 0x0, 0x2d) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', 0x0, r4}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.701342975s ago: executing program 3 (id=401): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xbe, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x89, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f17856753d01b00310244243631e819a05df18c7f"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="215aa15bf29ed2ff6f9241ff60693d298a3d41143bfc9091146111b4930c37eddcf542d641b821af229e7d8780d50b6f47fa3e5928555eb4d6d507d92b87b0b01c19c789895e02891afc082bb85a47087f168a6aa2c2bc51a3f3a404a4a1e6e2fbad00d592df65bd2a593f488bf41dbc7ea43fe2554fbe34e4a77f606f35e445aff55aaa19f7ffffffffffffff19bd4739c80c9e6681229c48e0c6de634c35c029c4eb3b4341ffff089416a3d63f08577a303758410658a4ec52e5b778eda9cd1bd8834e145c111690b0da927087e805000000000000008fd8b9bdfbdaa777db54127463a589eed325c34b6459505702f3a45f285c53c1b25bab2eef6324d67ad8d7e247317d80ff3ad9120b4e2294e67de9adaab76fa991571a187cd8f7fbc49bf45d6f8dbf69ef0d765a02ad98e802b1688148a8c017e3af238f82c49bbd8ba542fbfec5693d82158e3216b95656986f9d7eec7244a27dfaf8623fc76943bf142a61d9d6c622dbcac3d324d07be5a5cc88f85a857ff9d45924d5d82a04424d3453c96fafa37d952940f3147d5af234b39c3ff742a2e5300e10ee692a32f5c3321d44eadaa8c44bf9d534b52fe758082299e04f839e529a6d0293bf12770ac948730a0c367e117137c6fd930b1f306138163b7180e111d6926255a71bd227b1d27f2897721e3bda884b0792a81134d8fbc9aafc732b15aee5c9e0a835ac17b457efa36ce1095a3196d278207846ea81172826d49b87aac6e662bb824f16b0b65fc6989395ba022bd6af2f1830375c311bdf55f15d9830564e65dc76e5b7c9a91e857dbcef3909cfd628649337de6ff04a398f4325a430467aee51d7fa12ef61bc0b67d1e18e62754d8a2b65fb", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(&(0x7f0000005280)='./file0\x00', 0x0) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500c9df00000000de54efd337d35285c161c5277edb8ebb15b58f91a5ee2dfc464680aaeda509f80db720be849cfad349052a513d731f3e1ab1616de782ebeab3fad78b022a9488de94c51041787406824c841f2e132d053e63230d79544561215df07865865ca3b1d4cd0ca39c621b8bcb16c583a7d45d18615d25d7189e29edf825cc4555d6357089204333610ca3ad8e0bd555a1a819abd1c3df59e861ad355c8b4c483a06d01b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000380)={0x14, &(0x7f0000000ec0)=ANY=[@ANYBLOB="400dae000000ae06173f3627f5404b6e6b6c7a5fe4db5a83630cce986a9b1b8a213f109c098e8fa8145a0c4d58bc15a92772afcb3cfa4d7e2a7522c1533c1654ae91d1ed9de1c4490488ed11953d195bfb6fd8238a0181bbcfe27e1ecaa79793ff27645914aaafa1312a1815193dcd7af2a7e1384c1c2b6a67239fcc47685367c06d1bfd5e0591667a0e0cde45d7c90c09c32d950001ec07e82416c5f44e5e3746131bdd4e6fc9fcf839363c206f78edd1af"], &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000e00)=ANY=[@ANYBLOB="20159800000084bc90b51cd0cb9125a6e7ba8536532aa552e796d0962066dee140dc9098b68befdd1267ba1f3eb407d3414e36e668228cbb58e6efa2c5fe5a3515d9afcd8dc6ac33773032108a40e2ffcaec4954533204b3e792a25e22f2f6809b1cf6684a798b15c0a0e93352db7d01990f426d36904824d54395d1de1f39c411d16c7ff82b9709c5fa556c756296de1b1eb5c358f36ef7a5742a2f18f4488555dff410dd0000000000000000"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x7, 0x8a, 0x2, 0x3, 0x5, 0x1, 0x80, 0xa455, 0x400, 0xb6, 0xffff, 0x8}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x3bf3}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) 7.913255538s ago: executing program 1 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300)='@', 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r3, &(0x7f0000000400), 0x20000000}, 0x20) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 7.678148968s ago: executing program 0 (id=404): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 7.094129104s ago: executing program 1 (id=405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x5, {0x5, 0x0, "b72916"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.623466153s ago: executing program 4 (id=406): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x5, {0x5, 0x0, "b72916"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.574112668s ago: executing program 3 (id=408): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.865294366s ago: executing program 1 (id=410): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@window, @sack_perm, @mss, @window, @timestamp, @mss, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x802, 0x0, 0x6) 4.629253475s ago: executing program 2 (id=412): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@union={0x2, 0x6, 0x0, 0x5, 0x1, 0x6, [{0x7, 0x3}, {0xd, 0x5, 0xf159}, {0xa, 0x5, 0x8}, {0x7, 0x3, 0x15e7}, {0x10, 0x4, 0xffff0001}, {0xd, 0x1, 0x83}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30, 0x30, 0x30, 0x60, 0x2e]}}, &(0x7f0000000680)=""/216, 0x76, 0xd8, 0x1, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r3) write$tun(r4, 0x0, 0x2d) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', 0x0, r4}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.618660135s ago: executing program 2 (id=413): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x7, &(0x7f0000000000)=@raw=[@ringbuf_query, @exit, @initr0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 4.611441436s ago: executing program 2 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 4.56538982s ago: executing program 4 (id=416): add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800eaff000001000000000081000000181100009208fb4330a5c5eb171a452cc7695b9241eeca26e5de7e559d2e5e0c0c3e0e13fce764ee9615c1b0accc3a3cdd4381e09d3c6672", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90) timer_create(0x7, &(0x7f0000000300)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000500)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9febbb1b86742e4f5f26faf011d44257ef2ec234e1998872a6010018000002000000000c0000667deafa30d5b11428027b8217e47cbbb4d5cc6f4fc35215096e04a579eedef300dd592efbeb52d23d985d1c259be21fbfbc667de0e616c18909593854dba0eafcd5f086a168274c4e7c14409a43bc6bcdcc70104cc99d472e3e55404f6b58e01dc4e4d35a87ebb27ccacd14b2fd07263eb7792cb758bf7f14d8998eb7"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000c30100000000000095e15071e7c34594"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) 4.19428519s ago: executing program 0 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300)='@', 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r3, &(0x7f0000000400), 0x20000000}, 0x20) socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 4.001983046s ago: executing program 1 (id=417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r7, @ANYBLOB="0800040000100000"], 0x40}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', r7}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014001180b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000c00)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)) write$ppp(r1, &(0x7f0000000280)='\x00!', 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.69798199s ago: executing program 2 (id=418): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x5, {0x5, 0x0, "b72916"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.350080258s ago: executing program 3 (id=419): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xbe, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x89, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f17856753d01b00310244243631e819a05df18c7f"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(&(0x7f0000005280)='./file0\x00', 0x0) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500c9df00000000de54efd337d35285c161c5277edb8ebb15b58f91a5ee2dfc464680aaeda509f80db720be849cfad349052a513d731f3e1ab1616de782ebeab3fad78b022a9488de94c51041787406824c841f2e132d053e63230d79544561215df07865865ca3b1d4cd0ca39c621b8bcb16c583a7d45d18615d25d7189e29edf825cc4555d6357089204333610ca3ad8e0bd555a1a819abd1c3df59e861ad355c8b4c483a06d01b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000380)={0x14, &(0x7f0000000ec0)=ANY=[@ANYBLOB="400dae000000ae06173f3627f5404b6e6b6c7a5fe4db5a83630cce986a9b1b8a213f109c098e8fa8145a0c4d58bc15a92772afcb3cfa4d7e2a7522c1533c1654ae91d1ed9de1c4490488ed11953d195bfb6fd8238a0181bbcfe27e1ecaa79793ff27645914aaafa1312a1815193dcd7af2a7e1384c1c2b6a67239fcc47685367c06d1bfd5e0591667a0e0cde45d7c90c09c32d950001ec07e82416c5f44e5e3746131bdd4e6fc9fcf839363c206f78edd1af"], &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000e00)=ANY=[@ANYBLOB="20159800000084bc90b51cd0cb9125a6e7ba8536532aa552e796d0962066dee140dc9098b68befdd1267ba1f3eb407d3414e36e668228cbb58e6efa2c5fe5a3515d9afcd8dc6ac33773032108a40e2ffcaec4954533204b3e792a25e22f2f6809b1cf6684a798b15c0a0e93352db7d01990f426d36904824d54395d1de1f39c411d16c7ff82b9709c5fa556c756296de1b1eb5c358f36ef7a5742a2f18f4488555dff410dd0000000000000000"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x7, 0x8a, 0x2, 0x3, 0x5, 0x1, 0x80, 0xa455, 0x400, 0xb6, 0xffff, 0x8}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x3bf3}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) 3.307094532s ago: executing program 0 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 2.421507274s ago: executing program 0 (id=421): mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1.643969427s ago: executing program 2 (id=422): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.593364461s ago: executing program 2 (id=423): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x5, {0x5, 0x0, "b72916"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.563834283s ago: executing program 0 (id=424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x7, &(0x7f0000000000)=@raw=[@ringbuf_query, @exit, @initr0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.531329015s ago: executing program 4 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x5, {0x5, 0x0, "b72916"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.119732609s ago: executing program 0 (id=425): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 816.973133ms ago: executing program 1 (id=427): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@window, @sack_perm, @mss, @window, @timestamp, @mss, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x802, 0x0, 0x6) 180.539396ms ago: executing program 3 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 0s ago: executing program 1 (id=429): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@union={0x2, 0x6, 0x0, 0x5, 0x1, 0x6, [{0x7, 0x3}, {0xd, 0x5, 0xf159}, {0xa, 0x5, 0x8}, {0x7, 0x3, 0x15e7}, {0x10, 0x4, 0xffff0001}, {0xd, 0x1, 0x83}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30, 0x30, 0x30, 0x60, 0x2e]}}, &(0x7f0000000680)=""/216, 0x76, 0xd8, 0x1, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r3) write$tun(r4, 0x0, 0x2d) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', 0x0, r4}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): 53.719797][ T292] usb 1-1: Using ep0 maxpacket: 32 [ 53.750789][ T515] logitech-hidpp-device 0003:046D:C086.000E: item fetching failed at offset 2/5 [ 53.760786][ T515] logitech-hidpp-device 0003:046D:C086.000E: hidpp_probe:parse failed [ 53.768758][ T515] logitech-hidpp-device: probe of 0003:046D:C086.000E failed with error -22 [ 53.811062][ T26] logitech-hidpp-device 0003:046D:C086.000F: item fetching failed at offset 2/5 [ 53.820139][ T26] logitech-hidpp-device 0003:046D:C086.000F: hidpp_probe:parse failed [ 53.828189][ T26] logitech-hidpp-device: probe of 0003:046D:C086.000F failed with error -22 [ 53.839859][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.850585][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.860314][ T292] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.869104][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.877502][ T292] usb 1-1: config 0 descriptor?? [ 53.920286][ T292] hub 1-1:0.0: USB hub found [ 53.951392][ T26] usb 2-1: USB disconnect, device number 8 [ 54.021733][ T6] usb 5-1: USB disconnect, device number 11 [ 54.089901][ T325] usbhid 4-1:0.0: can't add hid device: -71 [ 54.095642][ T325] usbhid: probe of 4-1:0.0 failed with error -71 [ 54.102515][ T325] usb 4-1: USB disconnect, device number 11 [ 55.699781][ T325] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 55.959799][ T325] usb 3-1: Using ep0 maxpacket: 32 [ 56.009792][ T6] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 56.079855][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.090668][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.100280][ T325] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 56.109311][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.117698][ T325] usb 3-1: config 0 descriptor?? [ 56.160365][ T325] hub 3-1:0.0: USB hub found [ 56.279804][ T292] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 56.393147][ T796] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.401834][ T796] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 56.413266][ T796] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.438876][ T292] usbhid 1-1:0.0: can't add hid device: -71 [ 56.444802][ T292] usbhid: probe of 1-1:0.0 failed with error -71 [ 56.469916][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.480055][ T292] usb 1-1: USB disconnect, device number 9 [ 56.486830][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.504579][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 56.513486][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.522140][ T6] usb 5-1: config 0 descriptor?? [ 56.639811][ T325] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 56.719794][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 56.979830][ T325] usbhid 3-1:0.0: can't add hid device: -71 [ 56.985625][ T325] usbhid: probe of 3-1:0.0 failed with error -71 [ 57.000922][ T6] logitech-hidpp-device 0003:046D:C086.0010: item fetching failed at offset 2/5 [ 57.010016][ T6] logitech-hidpp-device 0003:046D:C086.0010: hidpp_probe:parse failed [ 57.018009][ T6] logitech-hidpp-device: probe of 0003:046D:C086.0010 failed with error -22 [ 57.020156][ T325] usb 3-1: USB disconnect, device number 9 [ 57.079833][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.090580][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.100080][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 57.109027][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.148044][ T26] usb 2-1: config 0 descriptor?? [ 57.204392][ T6] usb 5-1: USB disconnect, device number 12 [ 57.529794][ T405] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 57.630963][ T26] logitech-hidpp-device 0003:046D:C086.0011: item fetching failed at offset 2/5 [ 57.640175][ T26] logitech-hidpp-device 0003:046D:C086.0011: hidpp_probe:parse failed [ 57.648269][ T26] logitech-hidpp-device: probe of 0003:046D:C086.0011 failed with error -22 [ 57.855578][ T26] usb 2-1: USB disconnect, device number 9 [ 58.047148][ T823] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 58.056446][ T823] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 58.068203][ T823] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 58.149857][ T405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.160590][ T405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.170145][ T405] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 58.178961][ T405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.187625][ T405] usb 4-1: config 0 descriptor?? [ 58.766675][ T405] logitech-hidpp-device 0003:046D:C086.0012: item fetching failed at offset 2/5 [ 58.776316][ T405] logitech-hidpp-device 0003:046D:C086.0012: hidpp_probe:parse failed [ 58.784633][ T405] logitech-hidpp-device: probe of 0003:046D:C086.0012 failed with error -22 [ 58.892902][ T405] usb 4-1: USB disconnect, device number 12 [ 59.079805][ T26] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 59.330153][ T840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 59.338708][ T840] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 59.350157][ T840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 59.372838][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 59.490020][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.511461][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.534696][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 59.543637][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.553649][ T26] usb 5-1: config 0 descriptor?? [ 59.595045][ T26] hub 5-1:0.0: USB hub found [ 60.615102][ T869] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 60.623694][ T869] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 60.635148][ T869] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 60.699831][ T325] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.759805][ T308] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 60.999820][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 61.059872][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.070684][ T325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.080346][ T325] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 61.089253][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.097588][ T325] usb 1-1: config 0 descriptor?? [ 61.120081][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.130791][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.141038][ T308] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.149938][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.158155][ T308] usb 2-1: config 0 descriptor?? [ 61.200379][ T308] hub 2-1:0.0: USB hub found [ 62.621190][ T325] logitech-hidpp-device 0003:046D:C086.0013: item fetching failed at offset 2/5 [ 62.630492][ T325] logitech-hidpp-device 0003:046D:C086.0013: hidpp_probe:parse failed [ 62.639840][ T26] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 62.651497][ T325] logitech-hidpp-device: probe of 0003:046D:C086.0013 failed with error -22 [ 62.749824][ T26] usbhid 5-1:0.0: can't add hid device: -71 [ 62.755635][ T26] usbhid: probe of 5-1:0.0 failed with error -71 [ 62.766109][ T894] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 62.774635][ T894] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 62.786003][ T894] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 62.795698][ T26] usb 5-1: USB disconnect, device number 13 [ 62.821387][ T325] usb 1-1: USB disconnect, device number 10 [ 62.879801][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.179794][ T292] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 63.269812][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.280566][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.290080][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 63.298938][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.307311][ T6] usb 3-1: config 0 descriptor?? [ 63.450435][ T292] usb 4-1: device descriptor read/64, error -71 [ 63.609820][ T308] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 64.149985][ T308] usbhid 2-1:0.0: can't add hid device: -71 [ 64.156155][ T308] usbhid: probe of 2-1:0.0 failed with error -71 [ 64.159220][ T6] logitech-hidpp-device 0003:046D:C086.0014: item fetching failed at offset 2/5 [ 64.184115][ T6] logitech-hidpp-device 0003:046D:C086.0014: hidpp_probe:parse failed [ 64.192171][ T6] logitech-hidpp-device: probe of 0003:046D:C086.0014 failed with error -22 [ 64.220013][ T308] usb 2-1: USB disconnect, device number 10 [ 64.259834][ T292] usb 4-1: device descriptor read/64, error -71 [ 64.325134][ T324] usb 3-1: USB disconnect, device number 10 [ 64.488977][ T914] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 64.499881][ T914] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 64.512487][ T914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 64.579798][ T292] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 64.849799][ T292] usb 4-1: device descriptor read/64, error -71 [ 65.486773][ T292] usb 4-1: device descriptor read/64, error -71 [ 65.649880][ T292] usb usb4-port1: attempt power cycle [ 65.946112][ T656] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 66.199815][ T656] usb 5-1: Using ep0 maxpacket: 32 [ 66.250086][ T325] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 66.467027][ T292] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 66.489905][ T656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.501012][ T656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.511008][ T656] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 66.520335][ T656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.538778][ T656] usb 5-1: config 0 descriptor?? [ 66.580771][ T292] usb 4-1: Using ep0 maxpacket: 32 [ 66.594803][ T656] hub 5-1:0.0: USB hub found [ 66.840856][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.901215][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.911961][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.921713][ T292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.931419][ T325] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 66.949446][ T292] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 66.958356][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.966132][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.974656][ T325] usb 3-1: config 0 descriptor?? [ 66.980493][ T292] usb 4-1: config 0 descriptor?? [ 67.181567][ T292] hub 4-1:0.0: USB hub found [ 67.473179][ T967] overlayfs: missing 'lowerdir' [ 67.518435][ T325] logitech-hidpp-device 0003:046D:C086.0015: item fetching failed at offset 2/5 [ 67.527861][ T325] logitech-hidpp-device 0003:046D:C086.0015: hidpp_probe:parse failed [ 67.536628][ T325] logitech-hidpp-device: probe of 0003:046D:C086.0015 failed with error -22 [ 67.588104][ T969] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 67.596716][ T969] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 67.608222][ T969] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 67.691015][ T325] usb 3-1: USB disconnect, device number 11 [ 68.619811][ T656] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 68.679980][ T957] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 68.729812][ T656] usbhid 5-1:0.0: can't add hid device: -71 [ 69.022584][ T656] usbhid: probe of 5-1:0.0 failed with error -71 [ 69.049961][ T656] usb 5-1: USB disconnect, device number 14 [ 69.137279][ T957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.148474][ T957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.160338][ T292] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 70.186106][ T957] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 70.195189][ T957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.396195][ T1019] overlayfs: missing 'lowerdir' [ 70.408654][ T957] usb 2-1: config 0 descriptor?? [ 70.449852][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 70.460173][ T292] usbhid 4-1:0.0: can't add hid device: -71 [ 70.466366][ T292] usbhid: probe of 4-1:0.0 failed with error -71 [ 70.472745][ T1021] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 70.481310][ T1021] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 70.493698][ T1021] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 70.510187][ T292] usb 4-1: USB disconnect, device number 15 [ 70.689796][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 70.809819][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.820563][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.830211][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.839087][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.847791][ T20] usb 1-1: config 0 descriptor?? [ 70.859804][ T405] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 70.890363][ T20] hub 1-1:0.0: USB hub found [ 70.891883][ T957] logitech-hidpp-device 0003:046D:C086.0016: item fetching failed at offset 2/5 [ 70.903983][ T957] logitech-hidpp-device 0003:046D:C086.0016: hidpp_probe:parse failed [ 70.911982][ T957] logitech-hidpp-device: probe of 0003:046D:C086.0016 failed with error -22 [ 71.095994][ T63] usb 2-1: USB disconnect, device number 11 [ 71.109953][ T20] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 71.129907][ T405] usb 5-1: device descriptor read/64, error -71 [ 71.629864][ T957] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 71.669798][ T405] usb 5-1: device descriptor read/64, error -71 [ 71.679922][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 71.685660][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 71.727381][ T20] usb 1-1: USB disconnect, device number 11 [ 71.986861][ T957] usb 4-1: Using ep0 maxpacket: 32 [ 72.149821][ T957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.160602][ T957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.170098][ T957] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.179302][ T957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.187946][ T957] usb 4-1: config 0 descriptor?? [ 72.211987][ T405] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 72.263299][ T957] hub 4-1:0.0: USB hub found [ 72.329820][ T350] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 72.622226][ T350] usb 3-1: Using ep0 maxpacket: 32 [ 72.800212][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.811291][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.944652][ T350] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.955159][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.985039][ T405] usb 5-1: device descriptor read/64, error -71 [ 72.998165][ T350] usb 3-1: config 0 descriptor?? [ 73.040364][ T350] hub 3-1:0.0: USB hub found [ 73.259818][ T350] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 73.282252][ T1059] overlayfs: missing 'lowerdir' [ 73.449867][ T405] usb 5-1: device descriptor read/64, error -71 [ 73.516503][ T1062] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 73.525416][ T1062] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 73.537313][ T1062] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 73.569914][ T405] usb usb5-port1: attempt power cycle [ 73.979847][ T350] usbhid 3-1:0.0: can't add hid device: -71 [ 73.985668][ T350] usbhid: probe of 3-1:0.0 failed with error -71 [ 74.020024][ T350] usb 3-1: USB disconnect, device number 12 [ 74.397015][ T957] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 74.519831][ T957] usbhid 4-1:0.0: can't add hid device: -71 [ 74.526445][ T957] usbhid: probe of 4-1:0.0 failed with error -71 [ 74.646358][ T1096] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.655085][ T1096] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 74.679786][ T405] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 74.770061][ T957] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 74.910044][ T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.946522][ T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.956298][ T405] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 74.976637][ T405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.987482][ T405] usb 5-1: config 0 descriptor?? [ 75.009861][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 75.031362][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.038224][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.045445][ T1098] device bridge_slave_0 entered promiscuous mode [ 75.052152][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.058969][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.066267][ T1098] device bridge_slave_1 entered promiscuous mode [ 75.117233][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.124088][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.131194][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.137955][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.157275][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.164707][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.172450][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.190776][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.198655][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.205515][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.212676][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.220648][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.227465][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.235599][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.243365][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.258387][ T957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.269343][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.277331][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.284862][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.292735][ T1098] device veth0_vlan entered promiscuous mode [ 75.304430][ T1098] device veth1_macvtap entered promiscuous mode [ 75.310601][ T20] usb 3-1: device descriptor read/64, error -71 [ 75.317159][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.327689][ T957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.338595][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.471633][ T405] logitech-hidpp-device 0003:046D:C086.0017: item fetching failed at offset 2/5 [ 75.482089][ T405] logitech-hidpp-device 0003:046D:C086.0017: hidpp_probe:parse failed [ 75.490253][ T405] logitech-hidpp-device: probe of 0003:046D:C086.0017 failed with error -22 [ 75.510454][ T10] device bridge_slave_1 left promiscuous mode [ 75.513185][ T1111] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.516397][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.524892][ T1111] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 75.543259][ T10] device bridge_slave_0 left promiscuous mode [ 75.549218][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.549794][ T1111] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 75.564787][ T10] device veth1_macvtap left promiscuous mode [ 75.570730][ T10] device veth0_vlan left promiscuous mode [ 75.686401][ T405] usb 5-1: USB disconnect, device number 17 [ 75.759822][ T63] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 75.767227][ T20] usb 3-1: device descriptor read/64, error -71 [ 76.029955][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 76.049813][ T20] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 76.160277][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.171067][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.180660][ T63] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 76.189535][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.198165][ T63] usb 2-1: config 0 descriptor?? [ 76.250373][ T63] hub 2-1:0.0: USB hub found [ 76.329797][ T20] usb 3-1: device descriptor read/64, error -71 [ 77.172811][ T20] usb 3-1: device descriptor read/64, error -71 [ 77.299902][ T20] usb usb3-port1: attempt power cycle [ 77.459786][ T405] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 77.499993][ T292] usb 4-1: USB disconnect, device number 16 [ 77.951255][ T1147] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 77.959949][ T1147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 78.009799][ T405] usb 1-1: Using ep0 maxpacket: 32 [ 78.373096][ T405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.383897][ T405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.393775][ T405] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 78.402874][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.431089][ T405] usb 1-1: config 0 descriptor?? [ 78.481030][ T405] hub 1-1:0.0: USB hub found [ 78.579864][ T63] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 79.639960][ T405] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 79.669804][ T63] usbhid 2-1:0.0: can't add hid device: -71 [ 79.675566][ T63] usbhid: probe of 2-1:0.0 failed with error -71 [ 79.760035][ T63] usb 2-1: USB disconnect, device number 12 [ 80.450086][ T656] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 80.509837][ T405] usbhid 1-1:0.0: can't add hid device: -71 [ 80.515693][ T405] usbhid: probe of 1-1:0.0 failed with error -71 [ 80.560141][ T405] usb 1-1: USB disconnect, device number 12 [ 80.709762][ T656] usb 5-1: Using ep0 maxpacket: 32 [ 80.819802][ T63] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 80.839865][ T656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.850577][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 80.858007][ T656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.867709][ T656] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 80.876586][ T656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.885222][ T656] usb 5-1: config 0 descriptor?? [ 80.940363][ T656] hub 5-1:0.0: USB hub found [ 81.109780][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 81.279967][ T1200] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.288749][ T1200] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 81.379533][ T656] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 81.419858][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.430868][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.440434][ T63] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 81.449378][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.457725][ T63] usb 3-1: config 0 descriptor?? [ 81.469840][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.480639][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.490242][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.499082][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.508100][ T6] usb 2-1: config 0 descriptor?? [ 81.550380][ T6] hub 2-1:0.0: USB hub found [ 81.749817][ T656] usbhid 5-1:0.0: can't add hid device: -71 [ 81.755612][ T656] usbhid: probe of 5-1:0.0 failed with error -71 [ 81.790013][ T656] usb 5-1: USB disconnect, device number 18 [ 81.993642][ T63] logitech-hidpp-device 0003:046D:C086.0018: item fetching failed at offset 2/5 [ 82.008419][ T63] logitech-hidpp-device 0003:046D:C086.0018: hidpp_probe:parse failed [ 82.016645][ T63] logitech-hidpp-device: probe of 0003:046D:C086.0018 failed with error -22 [ 82.183733][ T656] usb 3-1: USB disconnect, device number 16 [ 82.209784][ T292] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 82.479809][ T292] usb 1-1: Using ep0 maxpacket: 32 [ 82.649823][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.660633][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.670509][ T292] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.679439][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.691142][ T292] usb 1-1: config 0 descriptor?? [ 82.773119][ T26] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 82.784107][ T292] hub 1-1:0.0: USB hub found [ 82.999892][ T292] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 83.453015][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 83.629827][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.639861][ T26] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.648665][ T26] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 83.657883][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.669678][ T26] usb 5-1: config 0 descriptor?? [ 83.709808][ T6] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 83.829850][ T292] usbhid 1-1:0.0: can't add hid device: -71 [ 83.835691][ T292] usbhid: probe of 1-1:0.0 failed with error -71 [ 83.840511][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 83.849319][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 83.870037][ T292] usb 1-1: USB disconnect, device number 13 [ 83.880152][ T6] usb 2-1: USB disconnect, device number 13 [ 83.882942][ T1230] loop1: detected capacity change from 0 to 40427 [ 83.960088][ T1230] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 83.967812][ T1230] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.977200][ T1230] F2FS-fs (loop1): invalid crc value [ 83.986010][ T1230] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.009814][ T20] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 84.024446][ T1230] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.031382][ T1230] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.249761][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 84.369860][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.383924][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.401230][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.422649][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.434062][ T20] usb 3-1: config 0 descriptor?? [ 84.470646][ T20] hub 3-1:0.0: USB hub found [ 85.296792][ T350] usb 5-1: USB disconnect, device number 19 [ 85.338282][ T1260] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 85.346431][ T1260] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 85.411035][ T1261] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 85.419582][ T1261] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 85.430986][ T1261] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 85.519783][ T957] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 85.799803][ T957] usb 1-1: Using ep0 maxpacket: 32 [ 85.930105][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.940984][ T957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.950483][ T957] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.959367][ T957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.967936][ T957] usb 1-1: config 0 descriptor?? [ 86.030778][ T957] hub 1-1:0.0: USB hub found [ 86.249923][ T957] hub 1-1:0.0: 1 port detected [ 86.589815][ T6] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 86.664624][ T1274] loop3: detected capacity change from 0 to 40427 [ 86.760059][ T1274] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 86.767700][ T1274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 86.776625][ T1274] F2FS-fs (loop3): invalid crc value [ 86.785318][ T1274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.825776][ T1274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 86.829836][ T20] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 86.833051][ T1274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.840300][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 86.949851][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 86.955645][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 86.988191][ T350] usb 1-1: USB disconnect, device number 14 [ 86.994132][ T957] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 87.390333][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.401702][ T20] usb 3-1: USB disconnect, device number 17 [ 87.408109][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.418182][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.427168][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.435848][ T6] usb 2-1: config 0 descriptor?? [ 87.480254][ T6] hub 2-1:0.0: USB hub found [ 87.829820][ T6] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 87.899824][ T20] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 87.939988][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 87.946082][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 87.990379][ T6] usb 2-1: USB disconnect, device number 14 [ 88.069819][ T350] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 88.139769][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 88.247749][ T1297] loop0: detected capacity change from 0 to 40427 [ 88.259959][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.270248][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.285819][ T1297] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 88.293489][ T1297] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.299106][ T20] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 88.302894][ T1297] F2FS-fs (loop0): invalid crc value [ 88.310528][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.330466][ T1297] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.523876][ T1297] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.531350][ T1297] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.579988][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.601152][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.639332][ T350] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 88.642654][ T20] usb 5-1: config 0 descriptor?? [ 88.665528][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.681845][ T350] usb 3-1: config 0 descriptor?? [ 88.701797][ T20] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 88.961978][ T656] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 89.180990][ T350] logitech-hidpp-device 0003:046D:C086.0019: item fetching failed at offset 2/5 [ 89.189997][ T350] logitech-hidpp-device 0003:046D:C086.0019: hidpp_probe:parse failed [ 89.198081][ T1316] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 89.199809][ T656] usb 2-1: Using ep0 maxpacket: 16 [ 89.206605][ T1316] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 89.222932][ T1316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.226264][ T1317] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 89.231046][ T350] logitech-hidpp-device: probe of 0003:046D:C086.0019 failed with error -22 [ 89.247615][ T1317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.329827][ T656] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.339889][ T656] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 89.348674][ T656] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 89.357607][ T656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.366195][ T656] usb 2-1: config 0 descriptor?? [ 89.381622][ T20] usb 3-1: USB disconnect, device number 18 [ 89.616458][ T350] usb 2-1: USB disconnect, device number 15 [ 90.289390][ T350] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 90.434427][ T656] usb 5-1: USB disconnect, device number 20 [ 90.789830][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.800806][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.810421][ T350] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 90.819485][ T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.828009][ T350] usb 1-1: config 0 descriptor?? [ 90.957976][ T1340] loop2: detected capacity change from 0 to 40427 [ 91.041409][ T1340] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 91.049026][ T1340] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 91.057772][ T1340] F2FS-fs (loop2): invalid crc value [ 91.064075][ T1340] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.070340][ T656] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 91.100065][ T1340] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 91.106906][ T1340] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.179781][ T20] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 91.309793][ T656] usb 5-1: Using ep0 maxpacket: 32 [ 91.357123][ T350] logitech-hidpp-device 0003:046D:C086.001A: item fetching failed at offset 2/5 [ 91.366367][ T350] logitech-hidpp-device 0003:046D:C086.001A: hidpp_probe:parse failed [ 91.374386][ T350] logitech-hidpp-device: probe of 0003:046D:C086.001A failed with error -22 [ 91.585368][ T350] usb 1-1: USB disconnect, device number 15 [ 91.617769][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 91.622757][ T656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.633438][ T656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.642978][ T656] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.651823][ T656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.670053][ T656] usb 5-1: config 0 descriptor?? [ 91.710391][ T656] hub 5-1:0.0: USB hub found [ 91.749829][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.763723][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.773786][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 91.782817][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.791191][ T20] usb 4-1: config 0 descriptor?? [ 91.830266][ T20] hub 4-1:0.0: USB hub found [ 91.929849][ T656] hub 5-1:0.0: 1 port detected [ 92.073329][ T292] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 92.154060][ T20] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 92.389802][ T292] usb 3-1: Using ep0 maxpacket: 32 [ 92.430626][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 92.436464][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 92.469975][ T20] usb 4-1: USB disconnect, device number 17 [ 92.479840][ T26] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 92.539848][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.550753][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.560380][ T292] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.569176][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.577683][ T292] usb 3-1: config 0 descriptor?? [ 92.620287][ T292] hub 3-1:0.0: USB hub found [ 92.633033][ T6] usb 5-1: USB disconnect, device number 21 [ 92.640057][ T656] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 92.759533][ T1365] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 92.767665][ T1365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 92.829945][ T292] hub 3-1:0.0: 1 port detected [ 92.929818][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.940618][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.976423][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 92.985720][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.020398][ T26] usb 2-1: config 0 descriptor?? [ 93.090078][ T1368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.098590][ T1368] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 93.110023][ T1368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.155677][ T1370] loop4: detected capacity change from 0 to 512 [ 93.397955][ T1372] FAULT_INJECTION: forcing a failure. [ 93.397955][ T1372] name failslab, interval 1, probability 0, space 0, times 1 [ 93.410468][ T1372] CPU: 1 PID: 1372 Comm: syz.4.293 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 93.420016][ T1372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 93.429918][ T1372] Call Trace: [ 93.433031][ T1372] [ 93.435895][ T1372] dump_stack_lvl+0x151/0x1b7 [ 93.440414][ T1372] ? io_uring_drop_tctx_refs+0x190/0x190 [ 93.445899][ T1372] dump_stack+0x15/0x17 [ 93.449868][ T1372] should_fail+0x3c6/0x510 [ 93.454122][ T1372] __should_failslab+0xa4/0xe0 [ 93.458719][ T1372] should_failslab+0x9/0x20 [ 93.463059][ T1372] slab_pre_alloc_hook+0x37/0xd0 [ 93.467831][ T1372] __kmalloc+0x6d/0x270 [ 93.471824][ T1372] ? kvmalloc_node+0x1f0/0x4d0 [ 93.476424][ T1372] kvmalloc_node+0x1f0/0x4d0 [ 93.480853][ T1372] ? vm_mmap+0xb0/0xb0 [ 93.484759][ T1372] ? __kasan_kmalloc+0x9/0x10 [ 93.489271][ T1372] ? kmem_cache_alloc_trace+0x115/0x210 [ 93.494649][ T1372] ? alloc_fdtable+0xaf/0x2a0 [ 93.499166][ T1372] alloc_fdtable+0xeb/0x2a0 [ 93.503504][ T1372] dup_fd+0x759/0xb00 [ 93.507319][ T1372] ? lockref_get+0xb4/0x110 [ 93.511663][ T1372] ksys_unshare+0x4a0/0xa00 [ 93.516000][ T1372] ? unshare_fd+0x240/0x240 [ 93.520360][ T1372] ? __kasan_check_read+0x11/0x20 [ 93.525198][ T1372] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 93.530682][ T1372] __x64_sys_unshare+0x38/0x40 [ 93.535267][ T1372] do_syscall_64+0x3d/0xb0 [ 93.539522][ T1372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 93.545257][ T1372] RIP: 0033:0x7f6be83fcbd9 [ 93.549502][ T1372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.568940][ T1372] RSP: 002b:00007f6be763c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.577186][ T1372] RAX: ffffffffffffffda RBX: 00007f6be858b110 RCX: 00007f6be83fcbd9 [ 93.585086][ T1372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 93.592900][ T1372] RBP: 00007f6be763c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.600706][ T1372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.608519][ T1372] R13: 000000000000006e R14: 00007f6be858b110 R15: 00007ffeef44dcd8 [ 93.616335][ T1372] [ 93.652662][ T26] logitech-hidpp-device 0003:046D:C086.001B: item fetching failed at offset 2/5 [ 93.665121][ T26] logitech-hidpp-device 0003:046D:C086.001B: hidpp_probe:parse failed [ 93.674155][ T292] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 93.680815][ T26] logitech-hidpp-device: probe of 0003:046D:C086.001B failed with error -22 [ 93.692942][ T26] usb 3-1: USB disconnect, device number 19 [ 93.859586][ T292] usb 2-1: USB disconnect, device number 16 [ 93.979610][ T30] audit: type=1400 audit(1720345646.190:351): avc: denied { ioctl } for pid=1383 comm="syz.3.296" path="socket:[17351]" dev="sockfs" ino=17351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.013212][ T30] audit: type=1400 audit(1720345646.190:352): avc: denied { setopt } for pid=1383 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.115607][ T30] audit: type=1400 audit(1720345646.190:353): avc: denied { write } for pid=1383 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.149751][ T30] audit: type=1400 audit(1720345646.190:354): avc: denied { read } for pid=1383 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.170338][ T30] audit: type=1400 audit(1720345646.190:355): avc: denied { bind } for pid=1383 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.869779][ T26] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 95.761438][ T1410] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 95.770259][ T1410] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 95.778569][ T1410] overlayfs: missing 'lowerdir' [ 95.805000][ T350] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 95.966158][ T1412] loop2: detected capacity change from 0 to 40427 [ 96.029802][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.040635][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.050374][ T350] usb 1-1: Using ep0 maxpacket: 32 [ 96.055332][ T1412] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.063829][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 96.072717][ T1412] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.080984][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.101883][ T26] usb 2-1: config 0 descriptor?? [ 96.185872][ T1412] F2FS-fs (loop2): invalid crc value [ 96.259987][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.281532][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.315358][ T350] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.343812][ T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.353041][ T1412] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.372273][ T350] usb 1-1: config 0 descriptor?? [ 96.406246][ T1412] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.413332][ T1412] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.423996][ T350] hub 1-1:0.0: USB hub found [ 96.690383][ T515] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 96.703164][ T26] logitech-hidpp-device 0003:046D:C086.001C: item fetching failed at offset 2/5 [ 96.712829][ T26] logitech-hidpp-device 0003:046D:C086.001C: hidpp_probe:parse failed [ 96.721227][ T26] logitech-hidpp-device: probe of 0003:046D:C086.001C failed with error -22 [ 96.769793][ T350] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 96.832960][ T1432] loop3: detected capacity change from 0 to 512 [ 96.861368][ T26] usb 2-1: USB disconnect, device number 17 [ 96.889883][ T350] usbhid 1-1:0.0: can't add hid device: -71 [ 96.895734][ T350] usbhid: probe of 1-1:0.0 failed with error -71 [ 96.930018][ T350] usb 1-1: USB disconnect, device number 16 [ 96.947434][ T30] audit: type=1400 audit(1720345649.160:356): avc: denied { read write } for pid=1435 comm="syz.2.309" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 96.970550][ T515] usb 5-1: Using ep0 maxpacket: 16 [ 96.975572][ T30] audit: type=1400 audit(1720345649.160:357): avc: denied { open } for pid=1435 comm="syz.2.309" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 97.117882][ T515] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.131123][ T515] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 97.140316][ T515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.148734][ T515] usb 5-1: config 0 descriptor?? [ 97.189829][ T656] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 97.190386][ T515] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 97.439767][ T656] usb 4-1: Using ep0 maxpacket: 32 [ 97.569830][ T656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.580592][ T656] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.590377][ T656] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 97.599316][ T656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.613553][ T656] usb 4-1: config 0 descriptor?? [ 97.663842][ T656] hub 4-1:0.0: USB hub found [ 97.869871][ T656] hub 4-1:0.0: 1 port detected [ 98.274478][ T1457] FAULT_INJECTION: forcing a failure. [ 98.274478][ T1457] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.287482][ T1457] CPU: 1 PID: 1457 Comm: syz.0.316 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 98.297031][ T1457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.306931][ T1457] Call Trace: [ 98.310057][ T1457] [ 98.312833][ T1457] dump_stack_lvl+0x151/0x1b7 [ 98.317470][ T1457] ? io_uring_drop_tctx_refs+0x190/0x190 [ 98.322941][ T1457] ? __kasan_check_write+0x14/0x20 [ 98.327883][ T1457] ? skb_set_owner_w+0x24b/0x3c0 [ 98.332664][ T1457] dump_stack+0x15/0x17 [ 98.336649][ T1457] should_fail+0x3c6/0x510 [ 98.340920][ T1457] should_fail_usercopy+0x1a/0x20 [ 98.345765][ T1457] _copy_from_iter+0x22f/0xdc0 [ 98.350370][ T1457] ? copy_mc_pipe_to_iter+0x760/0x760 [ 98.355569][ T1457] ? xfrm_lookup_with_ifid+0x1b49/0x20d0 [ 98.361040][ T1457] ? __check_object_size+0x2ec/0x3d0 [ 98.366159][ T1457] rawv6_send_hdrinc+0x7b6/0x1270 [ 98.371026][ T1457] ? rawv6_probe_proto_opt+0x320/0x320 [ 98.376310][ T1457] ? ip6_dst_lookup_flow+0x13a/0x170 [ 98.381532][ T1457] ? memcpy+0x56/0x70 [ 98.385337][ T1457] ? ip6_dst_lookup_tail+0x12f0/0x12f0 [ 98.390633][ T1457] ? avc_has_perm_noaudit+0x2dd/0x430 [ 98.395844][ T1457] ? stack_trace_save+0x1c0/0x1c0 [ 98.400701][ T1457] rawv6_sendmsg+0x160e/0x2100 [ 98.405302][ T1457] ? compat_rawv6_ioctl+0x10/0x10 [ 98.410166][ T1457] ? __kasan_check_write+0x14/0x20 [ 98.415113][ T1457] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 98.420405][ T1457] ? selinux_socket_sendmsg+0x243/0x340 [ 98.425786][ T1457] ? inet_send_prepare+0x5e/0x4a0 [ 98.430644][ T1457] inet_sendmsg+0xa1/0xc0 [ 98.434810][ T1457] ? inet_send_prepare+0x4a0/0x4a0 [ 98.439760][ T1457] sock_write_iter+0x39b/0x530 [ 98.444356][ T1457] ? sock_read_iter+0x480/0x480 [ 98.449045][ T1457] ? iov_iter_init+0x53/0x190 [ 98.453556][ T1457] vfs_write+0xd5d/0x1110 [ 98.457721][ T1457] ? kmem_cache_free+0x2c3/0x2e0 [ 98.462511][ T1457] ? file_end_write+0x1c0/0x1c0 [ 98.467185][ T1457] ? __fdget_pos+0x209/0x3a0 [ 98.471608][ T1457] ? ksys_write+0x77/0x2c0 [ 98.475861][ T1457] ksys_write+0x199/0x2c0 [ 98.480033][ T1457] ? __ia32_sys_read+0x90/0x90 [ 98.484627][ T1457] ? debug_smp_processor_id+0x17/0x20 [ 98.489840][ T1457] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 98.495736][ T1457] __x64_sys_write+0x7b/0x90 [ 98.500164][ T1457] do_syscall_64+0x3d/0xb0 [ 98.504418][ T1457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.510144][ T1457] RIP: 0033:0x7fe82a629bd9 [ 98.514397][ T1457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.533861][ T1457] RSP: 002b:00007fe8298ab048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.542083][ T1457] RAX: ffffffffffffffda RBX: 00007fe82a7b7f60 RCX: 00007fe82a629bd9 [ 98.549896][ T1457] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000006 [ 98.557704][ T1457] RBP: 00007fe8298ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.565514][ T1457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.573330][ T1457] R13: 000000000000000b R14: 00007fe82a7b7f60 R15: 00007ffc63063138 [ 98.581141][ T1457] [ 98.701235][ T1463] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.709949][ T1463] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 98.718138][ T1463] overlayfs: missing 'lowerdir' [ 99.404102][ T405] usb 4-1: USB disconnect, device number 18 [ 99.417262][ T656] usb 5-1: USB disconnect, device number 22 [ 99.423400][ T20] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 99.983919][ T1468] loop2: detected capacity change from 0 to 40427 [ 100.015867][ T1472] loop0: detected capacity change from 0 to 40427 [ 100.039800][ T20] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 100.049205][ T1468] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 100.056950][ T1468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.067055][ T1472] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 100.075169][ T1472] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.086623][ T1468] F2FS-fs (loop2): invalid crc value [ 100.096046][ T1472] F2FS-fs (loop0): invalid crc value [ 100.101841][ T1468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.102634][ T1472] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.144658][ T1468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.152791][ T1468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.164287][ T1472] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.171199][ T1472] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.282274][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 100.359819][ T405] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 100.409864][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.420665][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.430266][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.440968][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.450121][ T20] usb 2-1: config 0 descriptor?? [ 100.490386][ T20] hub 2-1:0.0: USB hub found [ 100.589842][ T6] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 100.619774][ T405] usb 4-1: Using ep0 maxpacket: 32 [ 100.799931][ T405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.822972][ T405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.842833][ T405] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.861833][ T405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.880502][ T405] usb 4-1: config 0 descriptor?? [ 100.921676][ T405] hub 4-1:0.0: USB hub found [ 100.929978][ T20] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 100.949836][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.960989][ T1500] FAULT_INJECTION: forcing a failure. [ 100.960989][ T1500] name failslab, interval 1, probability 0, space 0, times 0 [ 100.961034][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.983305][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 100.992303][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.001274][ T6] usb 5-1: config 0 descriptor?? [ 101.006245][ T1500] CPU: 0 PID: 1500 Comm: syz.0.327 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 101.015854][ T1500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 101.025749][ T1500] Call Trace: [ 101.028873][ T1500] [ 101.031652][ T1500] dump_stack_lvl+0x151/0x1b7 [ 101.036164][ T1500] ? io_uring_drop_tctx_refs+0x190/0x190 [ 101.041635][ T1500] dump_stack+0x15/0x17 [ 101.045626][ T1500] should_fail+0x3c6/0x510 [ 101.049882][ T1500] __should_failslab+0xa4/0xe0 [ 101.054481][ T1500] ? __alloc_skb+0xbe/0x550 [ 101.058816][ T1500] should_failslab+0x9/0x20 [ 101.063154][ T1500] slab_pre_alloc_hook+0x37/0xd0 [ 101.067929][ T1500] ? __alloc_skb+0xbe/0x550 [ 101.072270][ T1500] kmem_cache_alloc+0x44/0x200 [ 101.076871][ T1500] ? wait_for_completion_killable_timeout+0x10/0x10 [ 101.083297][ T1500] __alloc_skb+0xbe/0x550 [ 101.087459][ T1500] netlink_dump+0x1eb/0xd10 [ 101.091800][ T1500] ? kmem_cache_free+0x2c3/0x2e0 [ 101.096573][ T1500] ? refcount_inc+0x80/0x80 [ 101.100912][ T1500] ? consume_skb+0xb4/0x250 [ 101.105251][ T1500] netlink_recvmsg+0x69d/0x1190 [ 101.109941][ T1500] ? netlink_sendmsg+0xd20/0xd20 [ 101.114710][ T1500] ? arch_stack_walk+0xf3/0x140 [ 101.119401][ T1500] ? security_socket_recvmsg+0x87/0xb0 [ 101.124696][ T1500] ? netlink_sendmsg+0xd20/0xd20 [ 101.129467][ T1500] ____sys_recvmsg+0x286/0x530 [ 101.134068][ T1500] ? __sys_recvmsg_sock+0x50/0x50 [ 101.138935][ T1500] ? import_iovec+0xe5/0x120 [ 101.143358][ T1500] ___sys_recvmsg+0x1ec/0x690 [ 101.147866][ T1500] ? __sys_recvmsg+0x260/0x260 [ 101.152473][ T1500] ? __fdget+0x1bc/0x240 [ 101.156546][ T1500] ? do_recvmmsg+0x160/0x8b0 [ 101.160972][ T1500] do_recvmmsg+0x36b/0x8b0 [ 101.165310][ T1500] ? __sys_recvmmsg+0x270/0x270 [ 101.170084][ T1500] ? __kasan_check_write+0x14/0x20 [ 101.175031][ T1500] ? mutex_unlock+0xb2/0x260 [ 101.179460][ T1500] ? __kasan_check_write+0x14/0x20 [ 101.184408][ T1500] __x64_sys_recvmmsg+0x195/0x240 [ 101.189266][ T1500] ? do_recvmmsg+0x8b0/0x8b0 [ 101.193705][ T1500] ? debug_smp_processor_id+0x17/0x20 [ 101.198899][ T1500] ? exit_to_user_mode_prepare+0x39/0xa0 [ 101.204409][ T1500] do_syscall_64+0x3d/0xb0 [ 101.208621][ T1500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 101.214346][ T1500] RIP: 0033:0x7fe82a629bd9 [ 101.218611][ T1500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.238128][ T1500] RSP: 002b:00007fe8298ab048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 101.246372][ T1500] RAX: ffffffffffffffda RBX: 00007fe82a7b7f60 RCX: 00007fe82a629bd9 [ 101.254187][ T1500] RDX: 0000000000000300 RSI: 0000000020001640 RDI: 0000000000000008 [ 101.261994][ T1500] RBP: 00007fe8298ab0a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.269806][ T1500] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001 [ 101.277616][ T1500] R13: 000000000000000b R14: 00007fe82a7b7f60 R15: 00007ffc63063138 [ 101.285432][ T1500] [ 101.309820][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 101.315675][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 101.370720][ T20] usb 2-1: USB disconnect, device number 18 [ 101.574298][ T1505] loop0: detected capacity change from 0 to 256 [ 101.638922][ T30] audit: type=1400 audit(1720345653.850:358): avc: denied { mount } for pid=1504 comm="syz.0.328" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 101.663698][ T1504] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 101.683739][ T30] audit: type=1400 audit(1720345653.900:359): avc: denied { unmount } for pid=1098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 101.782506][ T6] logitech-hidpp-device 0003:046D:C086.001D: item fetching failed at offset 2/5 [ 101.792896][ T6] logitech-hidpp-device 0003:046D:C086.001D: hidpp_probe:parse failed [ 101.801197][ T6] logitech-hidpp-device: probe of 0003:046D:C086.001D failed with error -22 [ 101.825039][ T1517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 101.833621][ T1517] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 101.841802][ T1517] overlayfs: missing 'lowerdir' [ 102.123563][ T350] usb 5-1: USB disconnect, device number 23 [ 102.796934][ T1533] loop2: detected capacity change from 0 to 40427 [ 102.881155][ T1533] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 102.890870][ T1533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 102.909264][ T1533] F2FS-fs (loop2): invalid crc value [ 102.921688][ T1533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.960102][ T1540] loop0: detected capacity change from 0 to 40427 [ 102.967857][ T1533] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 102.974770][ T1533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.010258][ T1540] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 103.031917][ T1540] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 103.043508][ T1540] F2FS-fs (loop0): invalid crc value [ 103.050291][ T1540] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.159632][ T1540] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 103.166575][ T1540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.169873][ T405] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 103.189800][ T292] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 103.289789][ T405] usbhid 4-1:0.0: can't add hid device: -71 [ 103.295614][ T405] usbhid: probe of 4-1:0.0 failed with error -71 [ 103.379773][ T350] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 103.510044][ T405] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 103.549866][ T405] usb 4-1: device reset changed ep0 maxpacket size! [ 103.556538][ T405] usb 4-1: USB disconnect, device number 19 [ 103.589839][ T292] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.601257][ T292] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 103.860166][ T350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.920931][ T350] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 103.949984][ T292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.958932][ T292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.966853][ T292] usb 5-1: Product: syz [ 103.979935][ T292] usb 5-1: Manufacturer: syz [ 103.984412][ T292] usb 5-1: SerialNumber: syz [ 104.099771][ T405] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 104.129974][ T350] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.138876][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.146663][ T350] usb 2-1: Product: syz [ 104.150678][ T350] usb 2-1: Manufacturer: syz [ 104.155060][ T350] usb 2-1: SerialNumber: syz [ 104.259764][ T309] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 104.459854][ T405] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.470685][ T405] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 104.619899][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.630661][ T309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.640244][ T405] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.649087][ T405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.657044][ T309] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 104.666009][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.673830][ T405] usb 4-1: Product: syz [ 104.677783][ T405] usb 4-1: Manufacturer: syz [ 104.682579][ T405] usb 4-1: SerialNumber: syz [ 104.687181][ T309] usb 1-1: config 0 descriptor?? [ 104.749845][ T6] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 104.989843][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 105.090658][ T1545] loop4: detected capacity change from 0 to 16 [ 105.109823][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.119823][ T6] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.128570][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.137853][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.140383][ T1545] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.152608][ T6] usb 3-1: config 0 descriptor?? [ 105.159672][ T1545] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 105.171179][ T309] hid-led 0003:27B8:01ED.001E: item fetching failed at offset 3/5 [ 105.187192][ T30] audit: type=1400 audit(1720345657.400:360): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.201607][ T309] hid-led: probe of 0003:27B8:01ED.001E failed with error -22 [ 105.209047][ T30] audit: type=1400 audit(1720345657.400:361): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.238336][ T292] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 105.239786][ T30] audit: type=1400 audit(1720345657.400:362): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 105.244563][ T292] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 105.265710][ T1554] loop1: detected capacity change from 0 to 16 [ 105.271919][ T292] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 105.370137][ T1554] erofs: (device loop1): mounted with root inode @ nid 36. [ 105.378005][ T1554] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 105.398937][ T6] usb 1-1: USB disconnect, device number 17 [ 105.462952][ T350] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 105.470500][ T292] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 105.480514][ T350] cdc_ncm 2-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 105.487674][ T350] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 105.653096][ T957] usb 5-1: USB disconnect, device number 24 [ 105.661051][ T350] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 105.671049][ T957] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 105.821945][ T1558] loop3: detected capacity change from 0 to 16 [ 105.898109][ T309] usb 2-1: USB disconnect, device number 19 [ 105.904063][ T309] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 105.921328][ T1558] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.934027][ T1558] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 105.999811][ T405] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 106.007122][ T405] cdc_ncm 4-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 106.015911][ T405] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 106.221163][ T405] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 106.240212][ T6] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 106.441134][ T20] usb 4-1: USB disconnect, device number 20 [ 106.459810][ T20] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 106.479765][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 106.484742][ T309] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 106.609810][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.620980][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.630624][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.639426][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.648078][ T6] usb 1-1: config 0 descriptor?? [ 106.690462][ T6] hub 1-1:0.0: USB hub found [ 106.739769][ T309] usb 5-1: Using ep0 maxpacket: 32 [ 106.859809][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.870562][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.880225][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.889098][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.896953][ T6] hub 1-1:0.0: 1 port detected [ 106.902027][ T309] usb 5-1: config 0 descriptor?? [ 106.940257][ T309] hub 5-1:0.0: USB hub found [ 107.359807][ T309] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 107.459822][ T309] usbhid 5-1:0.0: can't add hid device: -71 [ 107.465615][ T309] usbhid: probe of 5-1:0.0 failed with error -71 [ 107.499954][ T309] usb 5-1: USB disconnect, device number 25 [ 107.577280][ T20] usb 3-1: USB disconnect, device number 20 [ 107.601449][ T405] usb 1-1: USB disconnect, device number 18 [ 107.609820][ T6] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 107.690222][ T1704] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.698717][ T1704] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 107.706822][ T1704] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.974231][ T1706] loop4: detected capacity change from 0 to 40427 [ 108.080109][ T1706] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 108.087731][ T1706] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 108.096586][ T1706] F2FS-fs (loop4): invalid crc value [ 108.103133][ T1706] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.174536][ T1706] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 108.181473][ T1706] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.119765][ T957] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 109.209800][ T350] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 109.249782][ T405] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 109.509885][ T957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.520877][ T957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.530466][ T957] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 109.539260][ T957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.547784][ T957] usb 4-1: config 0 descriptor?? [ 109.599845][ T350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.609812][ T405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.610631][ T350] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 109.621552][ T405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.633977][ T292] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 109.643630][ T405] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 109.659743][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.668114][ T405] usb 1-1: config 0 descriptor?? [ 109.749803][ T20] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 109.829829][ T350] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.838744][ T350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.846526][ T350] usb 5-1: Product: syz [ 109.850632][ T350] usb 5-1: Manufacturer: syz [ 109.854998][ T350] usb 5-1: SerialNumber: syz [ 109.899823][ T292] usb 3-1: Using ep0 maxpacket: 32 [ 109.989799][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 110.010828][ T957] logitech-hidpp-device 0003:046D:C086.001F: item fetching failed at offset 2/5 [ 110.019907][ T957] logitech-hidpp-device 0003:046D:C086.001F: hidpp_probe:parse failed [ 110.027870][ T957] logitech-hidpp-device: probe of 0003:046D:C086.001F failed with error -22 [ 110.036443][ T292] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.047078][ T292] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.055873][ T292] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.064709][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.073026][ T292] usb 3-1: config 0 descriptor?? [ 110.109869][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.120606][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.132513][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.141446][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.150877][ T405] logitech-hidpp-device 0003:046D:C086.0020: item fetching failed at offset 2/5 [ 110.159964][ T20] usb 2-1: config 0 descriptor?? [ 110.164855][ T405] logitech-hidpp-device 0003:046D:C086.0020: hidpp_probe:parse failed [ 110.172857][ T405] logitech-hidpp-device: probe of 0003:046D:C086.0020 failed with error -22 [ 110.200254][ T20] hub 2-1:0.0: USB hub found [ 110.211604][ T292] usb 4-1: USB disconnect, device number 21 [ 110.368705][ T405] usb 1-1: USB disconnect, device number 19 [ 110.619835][ T20] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 110.719809][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 110.725623][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 110.759961][ T20] usb 2-1: USB disconnect, device number 20 [ 110.982014][ T1731] loop4: detected capacity change from 0 to 16 [ 111.061726][ T1731] erofs: (device loop4): mounted with root inode @ nid 36. [ 111.086482][ T1731] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 111.119834][ T350] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 111.126385][ T350] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 111.147370][ T350] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 111.319775][ T292] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 111.341166][ T350] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 111.379837][ T405] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 111.551944][ T957] usb 5-1: USB disconnect, device number 26 [ 111.559986][ T957] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 111.619753][ T405] usb 2-1: Using ep0 maxpacket: 32 [ 111.698303][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.710640][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.720492][ T292] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 111.729327][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.737944][ T292] usb 1-1: config 0 descriptor?? [ 111.739821][ T405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.755963][ T405] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.766110][ T1780] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 111.774726][ T1780] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 111.774763][ T405] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 111.782905][ T1780] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 111.791665][ T405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.811269][ T405] usb 2-1: config 0 descriptor?? [ 111.852081][ T405] hub 2-1:0.0: USB hub found [ 112.069815][ T405] hub 2-1:0.0: 1 port detected [ 112.230819][ T292] logitech-hidpp-device 0003:046D:C086.0021: item fetching failed at offset 2/5 [ 112.239899][ T292] logitech-hidpp-device 0003:046D:C086.0021: hidpp_probe:parse failed [ 112.247877][ T292] logitech-hidpp-device: probe of 0003:046D:C086.0021 failed with error -22 [ 112.431975][ T6] usb 1-1: USB disconnect, device number 20 [ 112.440668][ T292] usb 3-1: USB disconnect, device number 21 [ 112.942693][ T405] usb 2-1: USB disconnect, device number 21 [ 112.959787][ T6] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 113.619785][ T515] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 113.699748][ T6] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 113.949765][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 113.991613][ T1813] loop4: detected capacity change from 0 to 40427 [ 113.999827][ T515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.010555][ T515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.020105][ T515] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 114.029096][ T515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.037578][ T515] usb 3-1: config 0 descriptor?? [ 114.061869][ T1813] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 114.069407][ T1813] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.069842][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.088049][ T1813] F2FS-fs (loop4): invalid crc value [ 114.093404][ T1813] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.094148][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.109058][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.117893][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.128952][ T6] usb 4-1: config 0 descriptor?? [ 114.135506][ T1813] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.142430][ T1813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.172613][ T6] hub 4-1:0.0: USB hub found [ 114.535849][ T515] logitech-hidpp-device 0003:046D:C086.0022: item fetching failed at offset 2/5 [ 114.547616][ T515] logitech-hidpp-device 0003:046D:C086.0022: hidpp_probe:parse failed [ 114.556499][ T515] logitech-hidpp-device: probe of 0003:046D:C086.0022 failed with error -22 [ 114.729766][ T350] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 114.740014][ T405] usb 3-1: USB disconnect, device number 22 [ 114.923226][ T1829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.931866][ T1829] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 114.940063][ T1829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 115.120502][ T350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.131283][ T350] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 115.309825][ T350] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.318755][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.326546][ T350] usb 2-1: Product: syz [ 115.330706][ T350] usb 2-1: Manufacturer: syz [ 115.335127][ T350] usb 2-1: SerialNumber: syz [ 115.979782][ T957] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 116.229770][ T957] usb 5-1: Using ep0 maxpacket: 32 [ 116.319828][ T1528] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 116.379800][ T515] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 116.387235][ T957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.397110][ T957] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.405875][ T957] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.414840][ T957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.423264][ T957] usb 5-1: config 0 descriptor?? [ 116.450615][ T1822] loop1: detected capacity change from 0 to 16 [ 116.480938][ T1822] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.497071][ T1822] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 116.509814][ T6] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 116.569826][ T350] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 116.576196][ T350] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 116.584645][ T350] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 116.639796][ T515] usb 3-1: Using ep0 maxpacket: 32 [ 116.659798][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 116.665611][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 116.700332][ T6] usb 4-1: USB disconnect, device number 22 [ 116.739855][ T1528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.750680][ T1528] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.760304][ T1528] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 116.769192][ T1528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.792143][ T350] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 116.802238][ T515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.834672][ T515] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.857490][ T515] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.874410][ T515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.898238][ T515] usb 3-1: config 0 descriptor?? [ 116.901453][ T1528] usb 1-1: config 0 descriptor?? [ 116.940279][ T515] hub 3-1:0.0: USB hub found [ 116.996432][ T957] usb 2-1: USB disconnect, device number 22 [ 117.002683][ T957] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 117.159827][ T515] hub 3-1:0.0: 1 port detected [ 117.411120][ T1528] logitech-hidpp-device 0003:046D:C086.0023: item fetching failed at offset 2/5 [ 117.421170][ T1528] logitech-hidpp-device 0003:046D:C086.0023: hidpp_probe:parse failed [ 117.429210][ T1528] logitech-hidpp-device: probe of 0003:046D:C086.0023 failed with error -22 [ 117.638469][ T1528] usb 1-1: USB disconnect, device number 21 [ 118.130740][ T957] usb 3-1: USB disconnect, device number 23 [ 118.149844][ T515] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 119.152751][ T6] usb 5-1: USB disconnect, device number 27 [ 119.214998][ T1895] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 119.223538][ T1895] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 119.231614][ T1895] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 119.469770][ T292] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 119.569771][ T957] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 119.819766][ T957] usb 3-1: Using ep0 maxpacket: 32 [ 119.849808][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.860917][ T292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.870559][ T292] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 119.879438][ T292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.887866][ T292] usb 1-1: config 0 descriptor?? [ 119.949823][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.960798][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.970545][ T957] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.979608][ T957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.993131][ T957] usb 3-1: config 0 descriptor?? [ 120.032353][ T957] hub 3-1:0.0: USB hub found [ 120.391395][ T292] logitech-hidpp-device 0003:046D:C086.0024: item fetching failed at offset 2/5 [ 120.399778][ T1528] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 120.401084][ T292] logitech-hidpp-device 0003:046D:C086.0024: hidpp_probe:parse failed [ 120.416673][ T292] logitech-hidpp-device: probe of 0003:046D:C086.0024 failed with error -22 [ 120.582263][ T6] usb 1-1: USB disconnect, device number 22 [ 120.769849][ T1528] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.780598][ T1528] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 120.989848][ T1528] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.001027][ T1528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.008898][ T1528] usb 4-1: Product: syz [ 121.013143][ T1528] usb 4-1: Manufacturer: syz [ 121.018804][ T1528] usb 4-1: SerialNumber: syz [ 121.409766][ T6] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 121.649765][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 121.769808][ T6] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.779817][ T6] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.788610][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.797479][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.805872][ T6] usb 1-1: config 0 descriptor?? [ 122.019773][ T292] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 122.140676][ T1915] loop3: detected capacity change from 0 to 16 [ 122.190005][ T1915] erofs: (device loop3): mounted with root inode @ nid 36. [ 122.208093][ T1915] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 122.279877][ T1528] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 122.286370][ T1528] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 122.293611][ T1528] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 122.441795][ T957] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 122.469764][ T6] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 122.491285][ T1528] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 122.530012][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.541228][ T292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.552178][ T292] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 122.645880][ T957] usbhid 3-1:0.0: can't add hid device: -71 [ 122.653089][ T957] usbhid: probe of 3-1:0.0 failed with error -71 [ 122.659615][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.709285][ T1528] usb 4-1: USB disconnect, device number 23 [ 122.715325][ T1528] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 122.726167][ T957] usb 3-1: USB disconnect, device number 24 [ 122.732476][ T292] usb 2-1: config 0 descriptor?? [ 123.019813][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.031803][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.041424][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 123.050218][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.058715][ T6] usb 5-1: config 0 descriptor?? [ 123.238233][ T292] logitech-hidpp-device 0003:046D:C086.0025: item fetching failed at offset 2/5 [ 123.275229][ T292] logitech-hidpp-device 0003:046D:C086.0025: hidpp_probe:parse failed [ 123.283670][ T292] logitech-hidpp-device: probe of 0003:046D:C086.0025 failed with error -22 [ 123.398226][ T1944] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 123.406784][ T1944] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 123.414823][ T1944] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.434578][ T292] usb 2-1: USB disconnect, device number 23 [ 123.540697][ T6] logitech-hidpp-device 0003:046D:C086.0026: item fetching failed at offset 2/5 [ 123.549897][ T6] logitech-hidpp-device 0003:046D:C086.0026: hidpp_probe:parse failed [ 123.557897][ T6] logitech-hidpp-device: probe of 0003:046D:C086.0026 failed with error -22 [ 123.566456][ T1528] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 123.741547][ T6] usb 5-1: USB disconnect, device number 28 [ 123.809764][ T1528] usb 4-1: Using ep0 maxpacket: 32 [ 123.929807][ T1528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.940684][ T1528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.951429][ T1528] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.960421][ T1528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.973695][ T1528] usb 4-1: config 0 descriptor?? [ 124.012931][ T1528] hub 4-1:0.0: USB hub found [ 124.214409][ T292] usb 1-1: USB disconnect, device number 23 [ 124.229793][ T1528] hub 4-1:0.0: 1 port detected [ 124.293322][ T1956] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.300670][ T1956] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.307903][ T1956] device bridge_slave_0 entered promiscuous mode [ 124.314748][ T1956] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.321659][ T1956] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.328933][ T1956] device bridge_slave_1 entered promiscuous mode [ 124.385894][ T1956] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.392801][ T1956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.399880][ T1956] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.406633][ T1956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.433196][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.440874][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.447890][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.470939][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.479025][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.488820][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.495671][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.502838][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.510956][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.517782][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.525014][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.532751][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.544570][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.552547][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.559923][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.568305][ T1956] device veth0_vlan entered promiscuous mode [ 124.583117][ T1956] device veth1_macvtap entered promiscuous mode [ 124.590141][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.601058][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.614217][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.729832][ T309] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 124.955895][ T350] usb 4-1: USB disconnect, device number 24 [ 124.959817][ T405] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 124.999780][ T309] usb 5-1: device descriptor read/64, error -71 [ 125.089822][ T1528] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 125.270442][ T482] device bridge_slave_1 left promiscuous mode [ 125.276388][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.283973][ T482] device bridge_slave_0 left promiscuous mode [ 125.289988][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.297502][ T482] device veth1_macvtap left promiscuous mode [ 125.303545][ T482] device veth0_vlan left promiscuous mode [ 125.329777][ T1528] usb 2-1: Using ep0 maxpacket: 32 [ 125.389824][ T309] usb 5-1: device descriptor read/64, error -71 [ 125.396036][ T405] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 125.449857][ T1528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.460595][ T1528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.470178][ T1528] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.490767][ T1528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.501663][ T1528] usb 2-1: config 0 descriptor?? [ 125.540535][ T1528] hub 2-1:0.0: USB hub found [ 125.818383][ T350] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 125.823276][ T309] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 125.939784][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.955793][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.965703][ T405] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 125.974718][ T405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.987784][ T405] usb 3-1: config 0 descriptor?? [ 126.099778][ T309] usb 5-1: device descriptor read/64, error -71 [ 126.189810][ T350] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.200575][ T350] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 126.391388][ T350] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.400608][ T350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.408812][ T350] usb 4-1: Product: syz [ 126.454805][ T350] usb 4-1: Manufacturer: syz [ 126.459345][ T350] usb 4-1: SerialNumber: syz [ 126.470863][ T405] logitech-hidpp-device 0003:046D:C086.0027: item fetching failed at offset 2/5 [ 126.479940][ T405] logitech-hidpp-device 0003:046D:C086.0027: hidpp_probe:parse failed [ 126.488032][ T405] logitech-hidpp-device: probe of 0003:046D:C086.0027 failed with error -22 [ 126.496644][ T309] usb 5-1: device descriptor read/64, error -71 [ 126.515256][ T1986] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.523910][ T1986] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 126.531978][ T1986] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.619833][ T309] usb usb5-port1: attempt power cycle [ 126.672161][ T405] usb 3-1: USB disconnect, device number 25 [ 127.029764][ T309] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 127.199854][ T309] usb 5-1: device descriptor read/8, error -71 [ 127.328026][ T1997] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.334891][ T1997] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.342279][ T1997] device bridge_slave_0 entered promiscuous mode [ 127.348864][ T1997] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.355815][ T1997] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.363011][ T1997] device bridge_slave_1 entered promiscuous mode [ 127.409955][ T309] usb 5-1: device descriptor read/8, error -71 [ 127.415849][ T1997] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.422824][ T1997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.429922][ T1997] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.436703][ T1997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.456299][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.464091][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.469786][ T957] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 127.478399][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.490374][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.498338][ T515] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.505191][ T515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.512435][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.520475][ T515] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.527297][ T515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.539604][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.553341][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.561492][ T1976] loop3: detected capacity change from 0 to 16 [ 127.567595][ T1997] device veth0_vlan entered promiscuous mode [ 127.574272][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.580215][ T1976] erofs: (device loop3): mounted with root inode @ nid 36. [ 127.582768][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.597097][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.597761][ T1976] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 127.604933][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.627543][ T1997] device veth1_macvtap entered promiscuous mode [ 127.635001][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.659792][ T350] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 127.660616][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.666364][ T350] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 127.675179][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.688719][ T350] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 127.891771][ T350] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 127.909879][ T309] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 127.919853][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.936195][ T957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.939885][ T1528] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 127.946151][ T957] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 127.963557][ T8] device bridge_slave_1 left promiscuous mode [ 127.969494][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.969861][ T405] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 127.984272][ T8] device bridge_slave_0 left promiscuous mode [ 127.990228][ T957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.998428][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.006243][ T957] usb 3-1: config 0 descriptor?? [ 128.012267][ T8] device veth1_macvtap left promiscuous mode [ 128.018115][ T8] device veth0_vlan left promiscuous mode [ 128.059808][ T1528] usbhid 2-1:0.0: can't add hid device: -71 [ 128.065709][ T1528] usbhid: probe of 2-1:0.0 failed with error -71 [ 128.100199][ T1528] usb 2-1: USB disconnect, device number 24 [ 128.111240][ T20] usb 4-1: USB disconnect, device number 25 [ 128.117198][ T20] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 128.129997][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.140945][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.151035][ T309] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 128.160108][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.172708][ T309] usb 5-1: config 0 descriptor?? [ 128.219776][ T405] usb 1-1: Using ep0 maxpacket: 32 [ 128.339802][ T405] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.349781][ T405] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.358455][ T405] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 128.367408][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.376031][ T405] usb 1-1: config 0 descriptor?? [ 128.470906][ T957] logitech-hidpp-device 0003:046D:C086.0028: item fetching failed at offset 2/5 [ 128.479976][ T957] logitech-hidpp-device 0003:046D:C086.0028: hidpp_probe:parse failed [ 128.488040][ T957] logitech-hidpp-device: probe of 0003:046D:C086.0028 failed with error -22 [ 128.651004][ T309] logitech-hidpp-device 0003:046D:C086.0029: item fetching failed at offset 2/5 [ 128.660249][ T309] logitech-hidpp-device 0003:046D:C086.0029: hidpp_probe:parse failed [ 128.668260][ T309] logitech-hidpp-device: probe of 0003:046D:C086.0029 failed with error -22 [ 128.712305][ T405] usb 3-1: USB disconnect, device number 26 [ 128.781473][ T309] usb 1-1: USB disconnect, device number 24 [ 228.829696][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 228.836138][ C0] rcu: 0-...!: (10000 ticks this GP) idle=e89/1/0x4000000000000000 softirq=12880/12880 fqs=0 last_accelerate: bcd3/e3e3 dyntick_enabled: 1 [ 228.850187][ C0] (t=10000 jiffies g=13337 q=118) [ 228.855130][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g13337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 228.867278][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=4754 [ 228.874918][ C0] rcu: rcu_preempt kthread starved for 10000 jiffies! g13337 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 228.886112][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 228.895920][ C0] rcu: RCU grace-period kthread stack dump: [ 228.901657][ C0] task:rcu_preempt state:I stack:28288 pid: 14 ppid: 2 flags:0x00004000 [ 228.910680][ C0] Call Trace: [ 228.913806][ C0] [ 228.916579][ C0] __schedule+0xccc/0x1590 [ 228.921439][ C0] ? __sched_text_start+0x8/0x8 [ 228.926123][ C0] ? __kasan_check_write+0x14/0x20 [ 228.931073][ C0] schedule+0x11f/0x1e0 [ 228.935066][ C0] schedule_timeout+0x18c/0x370 [ 228.939753][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 228.944784][ C0] ? console_conditional_schedule+0x30/0x30 [ 228.950517][ C0] ? update_process_times+0x200/0x200 [ 228.955720][ C0] ? prepare_to_swait_event+0x308/0x320 [ 228.961102][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 228.965719][ C0] ? debug_smp_processor_id+0x17/0x20 [ 228.970908][ C0] ? __note_gp_changes+0x4ab/0x920 [ 228.975854][ C0] ? rcu_gp_init+0xc30/0xc30 [ 228.980283][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 228.985402][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 228.989833][ C0] rcu_gp_kthread+0xa4/0x350 [ 228.994255][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 228.999031][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 229.003543][ C0] ? __kasan_check_read+0x11/0x20 [ 229.008401][ C0] ? __kthread_parkme+0xb2/0x200 [ 229.013176][ C0] kthread+0x421/0x510 [ 229.017090][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 229.021595][ C0] ? kthread_blkcg+0xd0/0xd0 [ 229.026021][ C0] ret_from_fork+0x1f/0x30 [ 229.030279][ C0] [ 229.033146][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 229.039312][ C0] NMI backtrace for cpu 0 [ 229.043466][ C0] CPU: 0 PID: 2038 Comm: syz.1.429 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 229.053099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 229.062992][ C0] Call Trace: [ 229.066118][ C0] [ 229.068826][ C0] dump_stack_lvl+0x151/0x1b7 [ 229.073323][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 229.078794][ C0] dump_stack+0x15/0x17 [ 229.082783][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 229.087574][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 229.093544][ C0] ? panic+0x751/0x751 [ 229.097451][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 229.103351][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 229.109168][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 229.115068][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 229.120919][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 229.126916][ C0] ? rcu_check_gp_kthread_expired_fqs_timer+0x18e/0x230 [ 229.133678][ C0] print_cpu_stall+0x310/0x5f0 [ 229.138282][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 229.143316][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 229.149302][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 229.154335][ C0] update_process_times+0x198/0x200 [ 229.159372][ C0] tick_sched_timer+0x188/0x240 [ 229.164056][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 229.169437][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 229.174474][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 229.179422][ C0] ? clockevents_program_event+0x22f/0x300 [ 229.185059][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 229.190963][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 229.195741][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 229.201462][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 229.206931][ C0] [ 229.209713][ C0] [ 229.212484][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 229.218307][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 229.223076][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 229.242513][ C0] RSP: 0018:ffffc900009465e0 EFLAGS: 00000246 [ 229.248415][ C0] RAX: 0000000000000003 RBX: 1ffff92000128cc0 RCX: ffffffff8154fbbf [ 229.256225][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888113e02d98 [ 229.264036][ C0] RBP: ffffc90000946690 R08: dffffc0000000000 R09: ffffed10227c05b4 [ 229.271847][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 229.279663][ C0] R13: ffff888113e02d98 R14: 0000000000000003 R15: 1ffff92000128cc4 [ 229.287472][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 229.293549][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 229.299538][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 229.304484][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 229.310559][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 229.316460][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 229.322712][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 229.327485][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 229.332517][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 229.337812][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 229.342845][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 229.348239][ C0] bpf_trace_run4+0x13f/0x270 [ 229.352742][ C0] ? bpf_trace_run3+0x250/0x250 [ 229.357431][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 229.362721][ C0] __alloc_pages+0x3cb/0x8f0 [ 229.367147][ C0] ? prep_new_page+0x110/0x110 [ 229.371746][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 229.377224][ C0] ? stack_trace_save+0x113/0x1c0 [ 229.382076][ C0] __stack_depot_save+0x38d/0x470 [ 229.386936][ C0] stack_depot_save+0xe/0x10 [ 229.391362][ C0] save_stack+0x104/0x1e0 [ 229.395526][ C0] ? __reset_page_owner+0x190/0x190 [ 229.400563][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 229.405336][ C0] ? prep_new_page+0x1b/0x110 [ 229.410113][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 229.415666][ C0] ? __alloc_pages+0x27e/0x8f0 [ 229.420266][ C0] ? __stack_depot_save+0x38d/0x470 [ 229.425629][ C0] ? kasan_set_track+0x5d/0x70 [ 229.430334][ C0] ? kasan_set_free_info+0x23/0x40 [ 229.435281][ C0] ? ____kasan_slab_free+0x126/0x160 [ 229.440399][ C0] ? __kasan_slab_free+0x11/0x20 [ 229.445173][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 229.450554][ C0] ? kfree+0xc8/0x220 [ 229.454374][ C0] ? sock_map_unref+0x352/0x4d0 [ 229.459059][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 229.464356][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 229.469907][ C0] ? bpf_trace_run4+0x13f/0x270 [ 229.474604][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 229.480068][ C0] ? stack_depot_save+0xe/0x10 [ 229.484664][ C0] ? save_stack+0x11a/0x1e0 [ 229.489002][ C0] __set_page_owner+0x28/0x2e0 [ 229.493605][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 229.498810][ C0] post_alloc_hook+0x1a3/0x1b0 [ 229.503428][ C0] prep_new_page+0x1b/0x110 [ 229.507749][ C0] get_page_from_freelist+0x3550/0x35d0 [ 229.513130][ C0] ? __kasan_check_write+0x14/0x20 [ 229.518080][ C0] ? lruvec_init+0x150/0x150 [ 229.522699][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 229.527291][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 229.532322][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 229.537182][ C0] __alloc_pages+0x27e/0x8f0 [ 229.541611][ C0] ? prep_new_page+0x110/0x110 [ 229.546210][ C0] ? stack_trace_save+0x113/0x1c0 [ 229.551071][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 229.556018][ C0] __stack_depot_save+0x38d/0x470 [ 229.560900][ C0] ? kfree+0xc8/0x220 [ 229.564696][ C0] kasan_set_track+0x5d/0x70 [ 229.569122][ C0] ? kasan_set_track+0x4b/0x70 [ 229.573720][ C0] ? kasan_set_free_info+0x23/0x40 [ 229.578668][ C0] ? ____kasan_slab_free+0x126/0x160 [ 229.583790][ C0] ? __kasan_slab_free+0x11/0x20 [ 229.588562][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 229.593943][ C0] ? kfree+0xc8/0x220 [ 229.597762][ C0] ? sock_map_unref+0x352/0x4d0 [ 229.602448][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 229.607744][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 229.613299][ C0] ? bpf_trace_run4+0x13f/0x270 [ 229.617985][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 229.623567][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 229.628160][ C0] ? __get_free_pages+0x10/0x30 [ 229.632848][ C0] ? pgd_alloc+0x21/0x2c0 [ 229.637011][ C0] ? mm_init+0x5c7/0x970 [ 229.641090][ C0] ? copy_mm+0x1e3/0x13e0 [ 229.645259][ C0] ? copy_process+0x1149/0x3290 [ 229.649947][ C0] ? kernel_clone+0x21e/0x9e0 [ 229.654456][ C0] ? __x64_sys_clone+0x23f/0x290 [ 229.659243][ C0] ? do_syscall_64+0x3d/0xb0 [ 229.663659][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 229.669576][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 229.674334][ C0] kasan_set_free_info+0x23/0x40 [ 229.679109][ C0] ____kasan_slab_free+0x126/0x160 [ 229.684056][ C0] __kasan_slab_free+0x11/0x20 [ 229.688659][ C0] slab_free_freelist_hook+0xbd/0x190 [ 229.693862][ C0] ? sock_map_unref+0x352/0x4d0 [ 229.698548][ C0] kfree+0xc8/0x220 [ 229.702197][ C0] sock_map_unref+0x352/0x4d0 [ 229.706709][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 229.711827][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 229.717208][ C0] bpf_trace_run4+0x13f/0x270 [ 229.721721][ C0] ? bpf_trace_run3+0x250/0x250 [ 229.726409][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 229.731702][ C0] __alloc_pages+0x3cb/0x8f0 [ 229.736130][ C0] ? prep_new_page+0x110/0x110 [ 229.740729][ C0] ? pcpu_alloc+0xda0/0x13e0 [ 229.745155][ C0] __get_free_pages+0x10/0x30 [ 229.749672][ C0] pgd_alloc+0x21/0x2c0 [ 229.753661][ C0] mm_init+0x5c7/0x970 [ 229.757565][ C0] copy_mm+0x1e3/0x13e0 [ 229.761559][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 229.766157][ C0] ? copy_signal+0x610/0x610 [ 229.770584][ C0] ? __kasan_check_write+0x14/0x20 [ 229.775533][ C0] ? __init_rwsem+0xd6/0x1c0 [ 229.779959][ C0] ? copy_signal+0x4e3/0x610 [ 229.784384][ C0] copy_process+0x1149/0x3290 [ 229.788900][ C0] ? fd_install+0x144/0x250 [ 229.793239][ C0] ? bpf_link_settle+0xc0/0x150 [ 229.797923][ C0] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 229.802872][ C0] ? map_freeze+0x370/0x370 [ 229.807211][ C0] kernel_clone+0x21e/0x9e0 [ 229.811551][ C0] ? create_io_thread+0x1e0/0x1e0 [ 229.816410][ C0] ? security_bpf+0x82/0xb0 [ 229.820750][ C0] __x64_sys_clone+0x23f/0x290 [ 229.825350][ C0] ? __do_sys_vfork+0x130/0x130 [ 229.830036][ C0] ? switch_fpu_return+0x1ed/0x3d0 [ 229.834985][ C0] ? __kasan_check_read+0x11/0x20 [ 229.839845][ C0] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 229.845312][ C0] do_syscall_64+0x3d/0xb0 [ 229.849566][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 229.855292][ C0] RIP: 0033:0x7f9a8c6bcbd9 [ 229.859560][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.878985][ C0] RSP: 002b:00007f9a8b93dff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 229.887234][ C0] RAX: ffffffffffffffda RBX: 00007f9a8c84af60 RCX: 00007f9a8c6bcbd9 [ 229.895043][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 229.902861][ C0] RBP: 00007f9a8c72baa1 R08: 0000000000000000 R09: 0000000000000000 [ 229.910676][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 229.918475][ C0] R13: 000000000000000b R14: 00007f9a8c84af60 R15: 00007fffb39eb618 [ 229.926289][ C0] [ 229.929172][ C0] NMI backtrace for cpu 0 [ 229.933406][ C0] CPU: 0 PID: 2038 Comm: syz.1.429 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 229.943072][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 229.952934][ C0] Call Trace: [ 229.956058][ C0] [ 229.958748][ C0] dump_stack_lvl+0x151/0x1b7 [ 229.963263][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 229.968729][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 229.973415][ C0] dump_stack+0x15/0x17 [ 229.977407][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 229.982182][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 229.988779][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 229.994073][ C0] ? __kasan_check_write+0x14/0x20 [ 229.999028][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 230.003708][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 230.009608][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 230.015421][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 230.021323][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 230.027051][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 230.032001][ C0] print_cpu_stall+0x315/0x5f0 [ 230.036599][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 230.041634][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 230.047622][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 230.052657][ C0] update_process_times+0x198/0x200 [ 230.057692][ C0] tick_sched_timer+0x188/0x240 [ 230.062377][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 230.067761][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 230.072794][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 230.077737][ C0] ? clockevents_program_event+0x22f/0x300 [ 230.083385][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 230.089286][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 230.094058][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 230.099786][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 230.105251][ C0] [ 230.108027][ C0] [ 230.110805][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 230.116620][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 230.121394][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 230.140838][ C0] RSP: 0018:ffffc900009465e0 EFLAGS: 00000246 [ 230.146736][ C0] RAX: 0000000000000003 RBX: 1ffff92000128cc0 RCX: ffffffff8154fbbf [ 230.154547][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888113e02d98 [ 230.162359][ C0] RBP: ffffc90000946690 R08: dffffc0000000000 R09: ffffed10227c05b4 [ 230.170174][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 230.178003][ C0] R13: ffff888113e02d98 R14: 0000000000000003 R15: 1ffff92000128cc4 [ 230.185794][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 230.191871][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 230.197862][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 230.202804][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 230.208880][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 230.214782][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 230.221032][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 230.225803][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 230.230842][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 230.236135][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 230.241166][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 230.246548][ C0] bpf_trace_run4+0x13f/0x270 [ 230.251062][ C0] ? bpf_trace_run3+0x250/0x250 [ 230.255749][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 230.261042][ C0] __alloc_pages+0x3cb/0x8f0 [ 230.265469][ C0] ? prep_new_page+0x110/0x110 [ 230.270070][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 230.275535][ C0] ? stack_trace_save+0x113/0x1c0 [ 230.280410][ C0] __stack_depot_save+0x38d/0x470 [ 230.285256][ C0] stack_depot_save+0xe/0x10 [ 230.289687][ C0] save_stack+0x104/0x1e0 [ 230.293848][ C0] ? __reset_page_owner+0x190/0x190 [ 230.298883][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 230.303656][ C0] ? prep_new_page+0x1b/0x110 [ 230.308168][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 230.313724][ C0] ? __alloc_pages+0x27e/0x8f0 [ 230.318322][ C0] ? __stack_depot_save+0x38d/0x470 [ 230.323356][ C0] ? kasan_set_track+0x5d/0x70 [ 230.327956][ C0] ? kasan_set_free_info+0x23/0x40 [ 230.332905][ C0] ? ____kasan_slab_free+0x126/0x160 [ 230.338025][ C0] ? __kasan_slab_free+0x11/0x20 [ 230.342798][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 230.348178][ C0] ? kfree+0xc8/0x220 [ 230.352002][ C0] ? sock_map_unref+0x352/0x4d0 [ 230.356686][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 230.361980][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 230.367552][ C0] ? bpf_trace_run4+0x13f/0x270 [ 230.372221][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 230.378062][ C0] ? stack_depot_save+0xe/0x10 [ 230.382659][ C0] ? save_stack+0x11a/0x1e0 [ 230.387000][ C0] __set_page_owner+0x28/0x2e0 [ 230.391603][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 230.396806][ C0] post_alloc_hook+0x1a3/0x1b0 [ 230.401407][ C0] prep_new_page+0x1b/0x110 [ 230.405771][ C0] get_page_from_freelist+0x3550/0x35d0 [ 230.411128][ C0] ? __kasan_check_write+0x14/0x20 [ 230.416078][ C0] ? lruvec_init+0x150/0x150 [ 230.420504][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 230.425102][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 230.430138][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 230.435014][ C0] __alloc_pages+0x27e/0x8f0 [ 230.439423][ C0] ? prep_new_page+0x110/0x110 [ 230.444026][ C0] ? stack_trace_save+0x113/0x1c0 [ 230.448888][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 230.453828][ C0] __stack_depot_save+0x38d/0x470 [ 230.458696][ C0] ? kfree+0xc8/0x220 [ 230.462519][ C0] kasan_set_track+0x5d/0x70 [ 230.467474][ C0] ? kasan_set_track+0x4b/0x70 [ 230.472145][ C0] ? kasan_set_free_info+0x23/0x40 [ 230.477215][ C0] ? ____kasan_slab_free+0x126/0x160 [ 230.482565][ C0] ? __kasan_slab_free+0x11/0x20 [ 230.487466][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 230.492845][ C0] ? kfree+0xc8/0x220 [ 230.496680][ C0] ? sock_map_unref+0x352/0x4d0 [ 230.501350][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 230.506646][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 230.512215][ C0] ? bpf_trace_run4+0x13f/0x270 [ 230.516886][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 230.522366][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 230.526954][ C0] ? __get_free_pages+0x10/0x30 [ 230.531642][ C0] ? pgd_alloc+0x21/0x2c0 [ 230.535808][ C0] ? mm_init+0x5c7/0x970 [ 230.539888][ C0] ? copy_mm+0x1e3/0x13e0 [ 230.544053][ C0] ? copy_process+0x1149/0x3290 [ 230.548738][ C0] ? kernel_clone+0x21e/0x9e0 [ 230.553251][ C0] ? __x64_sys_clone+0x23f/0x290 [ 230.558024][ C0] ? do_syscall_64+0x3d/0xb0 [ 230.562450][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.568358][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 230.573127][ C0] kasan_set_free_info+0x23/0x40 [ 230.577901][ C0] ____kasan_slab_free+0x126/0x160 [ 230.582859][ C0] __kasan_slab_free+0x11/0x20 [ 230.587448][ C0] slab_free_freelist_hook+0xbd/0x190 [ 230.592657][ C0] ? sock_map_unref+0x352/0x4d0 [ 230.597341][ C0] kfree+0xc8/0x220 [ 230.600988][ C0] sock_map_unref+0x352/0x4d0 [ 230.605500][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 230.610622][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 230.616001][ C0] bpf_trace_run4+0x13f/0x270 [ 230.620514][ C0] ? bpf_trace_run3+0x250/0x250 [ 230.625203][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 230.630497][ C0] __alloc_pages+0x3cb/0x8f0 [ 230.635010][ C0] ? prep_new_page+0x110/0x110 [ 230.639610][ C0] ? pcpu_alloc+0xda0/0x13e0 [ 230.644038][ C0] __get_free_pages+0x10/0x30 [ 230.648549][ C0] pgd_alloc+0x21/0x2c0 [ 230.652541][ C0] mm_init+0x5c7/0x970 [ 230.656447][ C0] copy_mm+0x1e3/0x13e0 [ 230.660440][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 230.665041][ C0] ? copy_signal+0x610/0x610 [ 230.669467][ C0] ? __kasan_check_write+0x14/0x20 [ 230.674430][ C0] ? __init_rwsem+0xd6/0x1c0 [ 230.678839][ C0] ? copy_signal+0x4e3/0x610 [ 230.683265][ C0] copy_process+0x1149/0x3290 [ 230.687778][ C0] ? fd_install+0x144/0x250 [ 230.692118][ C0] ? bpf_link_settle+0xc0/0x150 [ 230.696805][ C0] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 230.701753][ C0] ? map_freeze+0x370/0x370 [ 230.706092][ C0] kernel_clone+0x21e/0x9e0 [ 230.710437][ C0] ? create_io_thread+0x1e0/0x1e0 [ 230.715292][ C0] ? security_bpf+0x82/0xb0 [ 230.719633][ C0] __x64_sys_clone+0x23f/0x290 [ 230.724233][ C0] ? __do_sys_vfork+0x130/0x130 [ 230.728918][ C0] ? switch_fpu_return+0x1ed/0x3d0 [ 230.733867][ C0] ? __kasan_check_read+0x11/0x20 [ 230.738726][ C0] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 230.744194][ C0] do_syscall_64+0x3d/0xb0 [ 230.748445][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.754175][ C0] RIP: 0033:0x7f9a8c6bcbd9 [ 230.758441][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.777870][ C0] RSP: 002b:00007f9a8b93dff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 230.786112][ C0] RAX: ffffffffffffffda RBX: 00007f9a8c84af60 RCX: 00007f9a8c6bcbd9 [ 230.793931][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 230.801734][ C0] RBP: 00007f9a8c72baa1 R08: 0000000000000000 R09: 0000000000000000 [ 230.809547][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.817357][ C0] R13: 000000000000000b R14: 00007f9a8c84af60 R15: 00007fffb39eb618 [ 230.825174][ C0] [ 265.092153][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 143s! [syz.1.429:2037] [ 265.100137][ C1] Modules linked in: [ 265.103869][ C1] CPU: 1 PID: 2037 Comm: syz.1.429 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 265.113503][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 265.123396][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 265.128181][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.148050][ C1] RSP: 0000:ffffc90000e77480 EFLAGS: 00000246 [ 265.153946][ C1] RAX: 0000000000000001 RBX: 1ffff920001cee94 RCX: 1ffffffff0d1aa9c [ 265.161843][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 265.169661][ C1] RBP: ffffc90000e77530 R08: dffffc0000000000 R09: ffffed103ee2715b [ 265.177552][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.185366][ C1] R13: ffff8881f7138ad4 R14: 0000000000000001 R15: 1ffff920001cee98 [ 265.193351][ C1] FS: 000055555700c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 265.202217][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.208635][ C1] CR2: 00007f9a8b91dd58 CR3: 000000012668b000 CR4: 00000000003506a0 [ 265.216459][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.224263][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.232069][ C1] Call Trace: [ 265.235197][ C1] [ 265.237888][ C1] ? show_regs+0x58/0x60 [ 265.241965][ C1] ? watchdog_timer_fn+0x4b1/0x5f0 [ 265.246910][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 265.252032][ C1] ? __hrtimer_run_queues+0x41a/0xad0 [ 265.257241][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 265.262186][ C1] ? clockevents_program_event+0x22f/0x300 [ 265.267828][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 265.273733][ C1] ? hrtimer_interrupt+0x40c/0xaa0 [ 265.278682][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 265.284580][ C1] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 265.290225][ C1] [ 265.292999][ C1] [ 265.295776][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 265.301766][ C1] ? kvm_wait+0x147/0x180 [ 265.305929][ C1] ? asm_common_interrupt+0x27/0x40 [ 265.310988][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 265.315915][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 265.321829][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 265.327404][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.333616][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 265.338389][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.343430][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 265.348717][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 265.353754][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 265.359136][ C1] bpf_trace_run4+0x13f/0x270 [ 265.363646][ C1] ? bpf_trace_run3+0x250/0x250 [ 265.368335][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.373627][ C1] __alloc_pages+0x3cb/0x8f0 [ 265.378052][ C1] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 265.384305][ C1] ? prep_new_page+0x110/0x110 [ 265.388904][ C1] ? __anon_vma_prepare+0x3a4/0x430 [ 265.393936][ C1] handle_pte_fault+0xea0/0x24d0 [ 265.398724][ C1] ? fault_around_bytes_set+0xc0/0xc0 [ 265.403921][ C1] do_handle_mm_fault+0x1ea9/0x23a0 [ 265.408956][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 265.413732][ C1] ? down_read_trylock+0x1f9/0x300 [ 265.418674][ C1] ? __init_rwsem+0x1c0/0x1c0 [ 265.423187][ C1] ? vmacache_find+0x21f/0x4d0 [ 265.427787][ C1] ? __find_vma+0x30/0x150 [ 265.432057][ C1] exc_page_fault+0x3b5/0x830 [ 265.436560][ C1] asm_exc_page_fault+0x27/0x30 [ 265.441237][ C1] RIP: 0033:0x7f9a8c6743c6 [ 265.445498][ C1] Code: 8d 3c 30 4c 89 de 4c 89 54 24 38 e8 e4 88 04 00 4c 8b 54 24 38 85 c0 0f 85 57 01 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 38 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 265.464933][ C1] RSP: 002b:00007fffb39eb5c0 EFLAGS: 00010246 [ 265.470837][ C1] RAX: 00007f9a8b8fd000 RBX: 00007f9a8b91d6c0 RCX: 00007f9a8c6bcc97 [ 265.478645][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f9a8b91d6c0 [ 265.486458][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 265.494268][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffb39eb810 [ 265.502079][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 265.509898][ C1] [ 265.512756][ C1] Sending NMI from CPU 1 to CPUs 0: [ 265.517824][ C0] NMI backtrace for cpu 0 [ 265.517839][ C0] CPU: 0 PID: 2038 Comm: syz.1.429 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 265.517858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 265.517869][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 265.517892][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 265.517907][ C0] RSP: 0018:ffffc900009465e0 EFLAGS: 00000246 [ 265.517923][ C0] RAX: 0000000000000003 RBX: 1ffff92000128cc0 RCX: ffffffff8154fbbf [ 265.517936][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888113e02d98 [ 265.517949][ C0] RBP: ffffc90000946690 R08: dffffc0000000000 R09: ffffed10227c05b4 [ 265.517962][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 265.517974][ C0] R13: ffff888113e02d98 R14: 0000000000000003 R15: 1ffff92000128cc4 [ 265.517987][ C0] FS: 00007f9a8b93e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 265.518003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.518016][ C0] CR2: 0000000000000000 CR3: 000000012668b000 CR4: 00000000003506b0 [ 265.518031][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.518041][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.518052][ C0] Call Trace: [ 265.518058][ C0] [ 265.518064][ C0] ? show_regs+0x58/0x60 [ 265.518082][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 265.518103][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 265.518124][ C0] ? kvm_wait+0x147/0x180 [ 265.518139][ C0] ? kvm_wait+0x147/0x180 [ 265.518155][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 265.518174][ C0] ? nmi_handle+0xa8/0x280 [ 265.518192][ C0] ? kvm_wait+0x147/0x180 [ 265.518207][ C0] ? default_do_nmi+0x69/0x160 [ 265.518226][ C0] ? exc_nmi+0xaf/0x120 [ 265.518242][ C0] ? end_repeat_nmi+0x16/0x31 [ 265.518261][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.518282][ C0] ? kvm_wait+0x147/0x180 [ 265.518298][ C0] ? kvm_wait+0x147/0x180 [ 265.518314][ C0] ? kvm_wait+0x147/0x180 [ 265.518329][ C0] [ 265.518334][ C0] [ 265.518340][ C0] ? asm_common_interrupt+0x27/0x40 [ 265.518356][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 265.518374][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 265.518394][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 265.518415][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 265.518437][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 265.518457][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 265.518476][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 265.518498][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 265.518517][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 265.518532][ C0] bpf_trace_run4+0x13f/0x270 [ 265.518551][ C0] ? bpf_trace_run3+0x250/0x250 [ 265.518572][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.518591][ C0] __alloc_pages+0x3cb/0x8f0 [ 265.518610][ C0] ? prep_new_page+0x110/0x110 [ 265.518629][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.518649][ C0] ? stack_trace_save+0x113/0x1c0 [ 265.518669][ C0] __stack_depot_save+0x38d/0x470 [ 265.518687][ C0] stack_depot_save+0xe/0x10 [ 265.518702][ C0] save_stack+0x104/0x1e0 [ 265.518718][ C0] ? __reset_page_owner+0x190/0x190 [ 265.518734][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 265.518751][ C0] ? prep_new_page+0x1b/0x110 [ 265.518769][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 265.518788][ C0] ? __alloc_pages+0x27e/0x8f0 [ 265.518805][ C0] ? __stack_depot_save+0x38d/0x470 [ 265.518820][ C0] ? kasan_set_track+0x5d/0x70 [ 265.518843][ C0] ? kasan_set_free_info+0x23/0x40 [ 265.518860][ C0] ? ____kasan_slab_free+0x126/0x160 [ 265.518877][ C0] ? __kasan_slab_free+0x11/0x20 [ 265.518893][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 265.518914][ C0] ? kfree+0xc8/0x220 [ 265.518930][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.518948][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 265.518967][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 265.518980][ C0] ? bpf_trace_run4+0x13f/0x270 [ 265.518998][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.519016][ C0] ? stack_depot_save+0xe/0x10 [ 265.519031][ C0] ? save_stack+0x11a/0x1e0 [ 265.519047][ C0] __set_page_owner+0x28/0x2e0 [ 265.519063][ C0] ? kernel_init_free_pages+0xda/0xf0 [ 265.519082][ C0] post_alloc_hook+0x1a3/0x1b0 [ 265.519101][ C0] prep_new_page+0x1b/0x110 [ 265.519118][ C0] get_page_from_freelist+0x3550/0x35d0 [ 265.519137][ C0] ? __kasan_check_write+0x14/0x20 [ 265.519162][ C0] ? lruvec_init+0x150/0x150 [ 265.519183][ C0] ? __alloc_pages+0x8f0/0x8f0 [ 265.519202][ C0] ? __alloc_pages_bulk+0xe40/0xe40 [ 265.519220][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 265.519240][ C0] __alloc_pages+0x27e/0x8f0 [ 265.519258][ C0] ? prep_new_page+0x110/0x110 [ 265.519277][ C0] ? stack_trace_save+0x113/0x1c0 [ 265.519295][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 265.519313][ C0] __stack_depot_save+0x38d/0x470 [ 265.519330][ C0] ? kfree+0xc8/0x220 [ 265.519347][ C0] kasan_set_track+0x5d/0x70 [ 265.519362][ C0] ? kasan_set_track+0x4b/0x70 [ 265.519377][ C0] ? kasan_set_free_info+0x23/0x40 [ 265.519395][ C0] ? ____kasan_slab_free+0x126/0x160 [ 265.519411][ C0] ? __kasan_slab_free+0x11/0x20 [ 265.519427][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 265.519447][ C0] ? kfree+0xc8/0x220 [ 265.519464][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.519481][ C0] ? sock_hash_delete_elem+0x274/0x2f0 [ 265.519500][ C0] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 265.519513][ C0] ? bpf_trace_run4+0x13f/0x270 [ 265.519531][ C0] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.519548][ C0] ? __alloc_pages+0x3cb/0x8f0 [ 265.519565][ C0] ? __get_free_pages+0x10/0x30 [ 265.519583][ C0] ? pgd_alloc+0x21/0x2c0 [ 265.519598][ C0] ? mm_init+0x5c7/0x970 [ 265.519615][ C0] ? copy_mm+0x1e3/0x13e0 [ 265.519633][ C0] ? copy_process+0x1149/0x3290 [ 265.519655][ C0] ? kernel_clone+0x21e/0x9e0 [ 265.519673][ C0] ? __x64_sys_clone+0x23f/0x290 [ 265.519691][ C0] ? do_syscall_64+0x3d/0xb0 [ 265.519707][ C0] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.519730][ C0] ? post_alloc_hook+0x1a3/0x1b0 [ 265.519749][ C0] kasan_set_free_info+0x23/0x40 [ 265.519766][ C0] ____kasan_slab_free+0x126/0x160 [ 265.519784][ C0] __kasan_slab_free+0x11/0x20 [ 265.519799][ C0] slab_free_freelist_hook+0xbd/0x190 [ 265.519820][ C0] ? sock_map_unref+0x352/0x4d0 [ 265.519842][ C0] kfree+0xc8/0x220 [ 265.519860][ C0] sock_map_unref+0x352/0x4d0 [ 265.519880][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 265.519900][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x738 [ 265.519913][ C0] bpf_trace_run4+0x13f/0x270 [ 265.519932][ C0] ? bpf_trace_run3+0x250/0x250 [ 265.519952][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 265.519970][ C0] __alloc_pages+0x3cb/0x8f0 [ 265.519988][ C0] ? prep_new_page+0x110/0x110 [ 265.520006][ C0] ? pcpu_alloc+0xda0/0x13e0 [ 265.520027][ C0] __get_free_pages+0x10/0x30 [ 265.520045][ C0] pgd_alloc+0x21/0x2c0 [ 265.520060][ C0] mm_init+0x5c7/0x970 [ 265.520078][ C0] copy_mm+0x1e3/0x13e0 [ 265.520097][ C0] ? _raw_spin_lock+0xa4/0x1b0 [ 265.520117][ C0] ? copy_signal+0x610/0x610 [ 265.520135][ C0] ? __kasan_check_write+0x14/0x20 [ 265.520152][ C0] ? __init_rwsem+0xd6/0x1c0 [ 265.520169][ C0] ? copy_signal+0x4e3/0x610 [ 265.520188][ C0] copy_process+0x1149/0x3290 [ 265.520208][ C0] ? fd_install+0x144/0x250 [ 265.520224][ C0] ? bpf_link_settle+0xc0/0x150 [ 265.520242][ C0] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 265.520261][ C0] ? map_freeze+0x370/0x370 [ 265.520278][ C0] kernel_clone+0x21e/0x9e0 [ 265.520297][ C0] ? create_io_thread+0x1e0/0x1e0 [ 265.520316][ C0] ? security_bpf+0x82/0xb0 [ 265.520333][ C0] __x64_sys_clone+0x23f/0x290 [ 265.520353][ C0] ? __do_sys_vfork+0x130/0x130 [ 265.520371][ C0] ? switch_fpu_return+0x1ed/0x3d0 [ 265.520391][ C0] ? __kasan_check_read+0x11/0x20 [ 265.520409][ C0] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 265.520427][ C0] do_syscall_64+0x3d/0xb0 [ 265.520443][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 265.520461][ C0] RIP: 0033:0x7f9a8c6bcbd9 [ 265.520476][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.520490][ C0] RSP: 002b:00007f9a8b93dff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 265.520507][ C0] RAX: ffffffffffffffda RBX: 00007f9a8c84af60 RCX: 00007f9a8c6bcbd9 [ 265.520520][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 265.520531][ C0] RBP: 00007f9a8c72baa1 R08: 0000000000000000 R09: 0000000000000000 [ 265.520542][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 265.520553][ C0] R13: 000000000000000b R14: 00007f9a8c84af60 R15: 00007fffb39eb618 [ 265.520567][ C0]