last executing test programs: 3.945303113s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0) 3.560486223s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r1}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.821615966s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000440), 0x8) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 2.170819036s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x4, &(0x7f0000000280)=0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 2.105021807s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) alarm(0x0) 2.096817897s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000040)={0x0, 0x0, 0x1, '\n'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.977798686s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xed}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f00009b7000/0x2000)=nil, 0x2000, 0x4) read(r1, &(0x7f0000000240)=""/131, 0x83) 1.69172372s ago: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl(r3, 0x0, 0x0) 1.638096038s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x4, &(0x7f0000000280)=0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 1.542508703s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.532154825s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, 0x0, &(0x7f0000000980)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$uac1(0x0, 0xb9, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7, &(0x7f00000002c0)=@string={0x7, 0x3, "4834800f6e"}}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000080), 0x74, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) 1.104064131s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_setup(0x4, &(0x7f0000000280)=0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 914.08109ms ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20014080, &(0x7f00000008c0)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRES32=r3, @ANYRES8=r4, @ANYBLOB="00000000325643fd31736574e995938c382c009cd0aeba477309000000000000004bd39e0378bfe3e990b3c61deade3942b079b5a276e9a30600000000000000b5f8224e2ab8bacfc6987894fb6fac1518c4f1031e702457e9a4d1ea31b2c409ed2eb513071397e87084ec0caf15ae1968d992d188bb86eb331bfab65c2ad10e50a98cf4a69f718c43de1841e25aa247d1a6b805ff0ff0038e71636166358e0df1ce268e823e914e002659572b8589484790cb55bedec7fb84ae86c610d529b7a50111ae8f663c2b545b2137d1a773e30d20807627f298ddfee66a6da84c334bb07729452aaf5468f23f6700dcaef2788ff51c6f16d4065a6f941ca7d32c000000000000001de077353478050004000000000000050000000378f9ae3c3025b79deda97a00000900000000487b50f8118d8bffe7d7ca8380a3ff5d9cd8a26bab9c8809973e060000839319e969207643caebd266aea1da00a3eee7b3e522d1363f262a595daab663799385080131363c00640d11aa6af7c102d11cf7f50a6b649f8576bfc9c16bffdc072c055cf9e022177dc07a697902554fddfe18dcdc43a467f0db6412b77f25ea17793aa5e754628c2bf08a27843d131d697954609c4c2acdcc3c020016ea221bdeac6a2cdb80fc2f76fee712ed689ca11cea3651c0a84aec8e06a4ea9ccc190cf7d8bd43408541533556592fefefaf2ba32bfd5506b50016d91465cead29f5f3d5fac2a34f35478cd3f731164ffe56179aae7ee49e50183650edc70619fa20a1f1fa8df02ecec29dd1a08a05bba26415e118af67352177bd941108dd8b877a2c236071ec3b8790ef38f9ae208b395c2e4e506a9a6c236098051951dc0b2abe1aec383b4a3c368c7177bfeba6be5acb36fed06aca8a9e2cbf301873d06c0b90af01b9f8e86a55d084663fa617", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES64=r1], 0x1, 0x14e5, &(0x7f0000002a80)="$eJzs3Au4jtX2KPAx5pwvi6QvyWUxxxwvX3KZJEkuSXJJkiRJcktIkiQJiUVuSUhC7knuIbmF5H6/hZAkW5IkISHJPI92e9v73z6P/9m7c5xz1vg9z3zM4f3G/MZ8x7fW977fs9b6rsOgKvWqVqzDzPAfwb/+kwYAKQDQFwCuAYAIAEpmK5nt4vFMGtP+sycRf66Hpl7pCsSVJP1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/0zfpvxDp2dZpua+VkX6HfP6fnsn7f/om/U/fpP/pm/Q/fZP+p2/S//8PmH8/Vfqfvkn/0zfpvxDp2ZX+/Pn/nZHx9zN2pev4c8cVfvkJIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEgnzoZLDAD8bX6l6xJCCCGEEEIIIcSfJ2S80hUIIYQQQgghhBDifz8EBRoMRJABMkIKZILMcBVkgashK1wDCbgWssF1kB2uhxyQE3JBbkiFPJAXLBA4YIghH+SHJNwABeBGKAiFoDAUAQ9FoRjcBMXhZigBt0BJuBVKwW1QGspAWSgHt0N5uAMqwJ1QEe6CSlAZqkBVuBuqwT1QHe6FGnAf1IT7oRY8ALXhQagDD0FdeBjqwSNQHx6FBtAQGkFjaPJv5b8IXeAl6ArdIA26Qw94GXpCL+gNfaAvvAL94FXoD6/BABgIg+B1GAxvwBB4E4bCMBgOb8EIGAmjYDSMgbEwDt6G8fAOTIB3YSJMgskwBabCNJgO78EMmAmz4H2YDR/AHJgL82A+LIAPYSEsgsXwESyBj2EpLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCt8AttgO+yAT2En7ILd8Bnsgc9hL3wB++DL/8X8M/8lvyMCAipUaNBgBsyAKZiCmTEzZsEsmBWzYgITmA2z/f3FkgtzYSqmYl7Mi4SEjIz5MB8mMYkFsAAWxIJYGAujR4/FsBgWx5uxBJbAklgSS2EpLI1lsAyWw3JYHstjBayAFbEiVsJKWAWr4N14N96D1bE61sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYCBthE2yCTbEpNsNm2AJbYEtsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yEnfBFfBFfwpewG1ZS3bEH9sCe2BN7Yx/sg69gP3wVX8XXcAAOxEH4Or6Ob+AQPI1DcRgOx+FYXo3EUTgaWY3FcTgOx+N4nIATcCJOwkk4BafiNJyO03EGzsSZ+D7Oxg/wA5yLc3E+LsAFuBAX4WJcjEvwDC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjtvx05SL538Xfoaf4ef4OQ7AfbgP9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP4wk8iSfwFJ7C03gGz+JZPIfn8Dw+n/pN3V2F1g0AdZFRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VqlJVXpVXkSLFKlb5VD6VVElVQBVQBRWowqqw8sqrYqqYKq6KqxKqhCqpblWl1G2qtCqjmvtyqpwqr1r4CupOVVFVVJVUZVVFVVVVVTVVTVVX1VUNVUPVVDVVLfWAqq26Y298SF3sTD01EOurQdhANVSNVGP1Bj6mmqoh2Ew1Vy3UE2oYDsVWqqlvrZ5WbdQobKueVaPxOdVejcUO6gXVUXVSndWLqotq5ruqbmoidlc91BTsqXqp3qqPmoGV1cWOVVGvqQFqoBqkXlfz8Q01RL2phqpharh6S41QI9UoNVqNUWPVOPW2Gq/eURPUu2qimqQmqylqqpqmpqv31Aw1U81S76vZ6gM1R81V89R8tUB9qBaqRQrgI7VEfayWqmVquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpP1Da1Xe1Qn6qdapfarT5Te9Tnaq/6Qu1TX6r96i/qgPpKHVRfq0PqG3VYfauOqO/UUfW9OqZ+UMfVCXVS/ahOqZ/UacS/fhWrX9R59au6oIICjVpprY2OdAadUafoTDqzvkpn0VfrrPoandDX6mz6Op1dX69z6Jw6l86tU3UenVdbTdpp1rHOp/PrpL5BF9A36oK6kC6si2ivi+pi+iZdXN+sS+hbdEl9qy6lb9OldRldVpfTt+vy+g5dQd+pK+q7dCVdWVfRVfXdupq+R1fX9+oa+j5dU9+va+kHdG39oK6jH9J19cO6nn5E19eP6ga6oW6kG+sm+jHdVD+um+nmuoV+QrfUT+pW+indWj+t2+hndFv9rG6nn9Pt9fO6g35Bd9SddGf9q76gg+6qu+k03V330C/rnrqX7q376L76Fd1Pv6r769f0AD1QD9Kv68H6DT1Ev6mH6mF6uH5Lj9Aj9Sg9Wo/RY/U4/bYer9/RE/S7eqKepCfrKXqqnqZ7/77SrP9G/jv/Ir//b8++RW/Vn+hterveoT/VO/UuvVvv1nv0Hr1X79X79D69X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVyf0D/rH/Up/ZM+rc/oM/pnfU6f0+d/Pwdg0CijjTGRyWAymhSTyWQ2V5ks5mqT1VxjEuZak81cZ7Kb600Ok9PkMrlNqslj8hpryDjDJjb5TH6TNDeYAuZGU9AUMoVNEeNNUVPM3PQf51+uviamiWlqmppmpplpYVqYlqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lsOpsupovparqaNJNmepiXTU/Ty/Q2fUxf84rpZ/qZ/qa/GWAGmEFmkBlsBpshZogZaoaa4Wa4GWFGmFFmlBljxphxZpwZb8abCWaCmWgmmslmsplqpprpZrqZYWaYWWaWmW1mmzlmjpln5pkFZoFZaBaaxWaxWWKWmKVmmVlmVpgVZpVZZdaYNWadWWc2mA1mk9lklpqtZqvZZraZHWaH2Wl2mt1mt9lj9pi9Zq/ZZ/aZ/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOWfOmfPmvLlgLly87ItUpCITmShDlCFKiVKizFHmKEuUJcoaZY0SUSLKFmWLskfXRzminFGuKHeUGuWJ8kY2oshFHMVRvih/lIxuiApEN0YFo0JR4ahI5KOiUbHopqh4dHNUIrolKhndGpWKbotKR2WislG56PaofHRHVCG6M6oY3RVViipHVaKq0d1RteieqHp0b1Qjui+qGd0f1YoeiGpHD0Z1ooeiutHDUb3okah+9GjUIGoYNYoaR03+1PVDOJ3zcd/VdrNptrvtYV+2PW0v29v2sX3tK7affdX2t6/ZAXagHWRft4PtG3aIfdMOtcPscPuWHWFH2lF2tB1jx9px9m073r5jJ9h37UQ7yU62U+xUO81Ot+/ZGXamnWXft7PtB3aOnWvn2fl2gf3QLrSL7GL7kV1iP7ZL7TK73K6wK+0qu9qusWvtOrvebrAb7Sa72W6xW+0ndpvdbnfYT+1Ou8vutp/ZPfZzu9d+YffZL+1++xer4Ct70H5tD9lv7GH7rT1iv7NH7ff2mP3BHrcn7En7oz1lf7Kn7Rl71v5sz9lf7Hn7q71gw8WL+4tv72TIUAbKQCmUQpkpM2WhLJSVslKCEpSNslF2yk45KAflolyUSqmUl/LSRUxM+SgfJSlJBagAFaSCVJgKkydPxagYFafiVIJKUEkqSaWoFJWm0lSWytLtdDvdQXfQnXQn3UV3UWWqTFWpKlWjalSdqlMNqkE1qSbVolpUm2pTHapDdaku1aN6VJ/qUwNqQI2oETWhJtSUmlIzakYtqAW1pJbUilpRa2pNbagNtaW21I7aUXtqTx2oA3WkjtSZOlMX6kJdqSulURr1oB7Uk3pSb+pNfakv9aN+1J/60wAaQINoEA2mwTSEhtBQGkbD6S0aQSNpFI2mMTSWxtE4Gk/jaQJNoIk0kSbTZJpKU2k6TacZNINm0SyaTbNpDs2heTSPFtACWkgLaTEtpiW0hJbSUlpOy2klraTVtJrW0lpaT+tpI22kzbSZttJW2kbbaAftoJ20k3bTbtpDe2gv7aV9tI/20346QAfoIB2kQ3SIDtNhOkJH6CgdpWN0jI7TcTpJJ+kUnaLTdJrO0lk6R7/QefqVLlCgFJfJZXZXuSzuapfVXeP+a5zL5XapLo/L66zL4XL+U0zOuYKukCvsijjvirpi7qY/xKVdGVfWlXO3u/LuDlfhD3E1d4+r7u51Ndx9rqq7+5/imu5+V8s94mq7R10d19DVdY1dPfeIq+8edQ1cQ9fINXYt3ZOulXvKtXZPuzbumT/EC90it9atc+vdBrfHfe7Oup/dEfedO+d+cV1dN9fXveL6uVddf/eaG+AG/iEe7t5yI9xIN8qNdmPc2D/Ek90UN9VNc9Pde26Gm/mHeIH70M12i90cN9fNc/N/iy/WtNh95Ja4j91St8wtdyvcSrfKrXZr/l7rCrfJbXZb3G73mdvmtrsd7lO30+36Lb64j73uC7fPfekOu2/dAfeVO+iOukPum9/ii/s76r53x9wP7rg74U66H90p95M77c78tv+Le//R/eouuOCAkRVrNhxxBs7IKZyJM/NVnIWv5qx8DSf4Ws7G13F2vp5zcE7Oxbk5lfNwXrZM7Jg55nycn5N8AxfgG7kgF+LCXIQ9F+VifBMX55u5BN/CJflWLsW3cWkuw2W5HN/O5fkOrsB3ckW+iytxZa7CVflursb3cHW+l2vwfVyT7+da/ADX5ge5Dj/EdflhrsePcH1+lBtwQ27EjbkJP8ZN+XFuxs25BT/BLflJbsVPcWt+mtvwM9yWn+V2/By35+e5A7/AHbkTd+YXuQu/xF25G6dxd+7BL3NP7sW9uQ/35Ve4H7/K/fk1HsADeRC/zoP5DR7Cb/JQHsbD+S0ewSN5FI/mMTyWx/HbPJ7f4Qn8Lk/kSTyZp/BUnsbT+T2ewTN5Fr/Ps/kDnsNzGWA+L+APeSEv4sX8ES/hj3kpL+PlvIJX8ipezWt4La/j9byBN/Im3sxbeCt/wtt4O+/gT3kn7+Ld/Bnv4c95L3/B+/hL3s9/4QP8FR/kr/kQf8OH+Vs+wt/xUf6ej/EPfJxP8En+kU/xT3yaz/BZ/pnP8S98nn/lCxwYYoxVrGMTR3GGOGOcEmeKM8dXxVniq+Os8TVxIr42zhZfF2ePr49zxDnjXHHuODXOE+eNbUyxizmO43xx/jgZ3xAXiG+MC8aF4sJxkdjHReNi8U1x8fjmuER8S1wyvjUuFd8Wl47LxI/cVy6+PS4f3xFXiO+MK8Z3xZXiynGVuGp8d1wtvieuHt8b14jvi0vE98e14gfi2vGDcZ34obhu/HBcL34krh8/GjeIG8aN4sZxk/ixuGn8eNwsbh63iJ+IW8ZPxq3ip+LW8dNxm/iZyx5Pi7vHPeKX45fjEO7V85LzkwuSHyYXJhclFyc/Si5JfpxcmlyWXJ5ckVyZXJVcnVyTXJtcl1yf3JDcmNyU3Jzckgyhakbw6JXX3vjIZ/AZfYrP5DP7q3wWf7XP6q/xCX+tz+av89n99T6Hz+lz+dw+1efxeb315J1nH/t8Pr9P+ht8AX+jL+gL+cK+iPe+qC/mG/smvolv6h/3zXxz38I/4Z/wT/on/VP+Kf+0b+Of8W39s76df86398/75/0LvqPv5Dv7F30X/5Lv6rv5NJ/me/gevqfv6Xv73r6v7+v7+X6+v+/vB/gBfpAf5Af7wX6IH+KH+qF+uB/uR/gRfpQf5cf4MX6cH+fH+/F+gp/gJ/qJfrKf7Kf6qX66n+5n+Bl+lp/lZxec7ef4OX6en+cX+AV+oV/oF/vFfolf4pf6pX65X+5X+pV+tV/t1/q1fr1f7zf6jX6z3+y3+q1+m9/md/gdfqff6Xf73X6P3+P3+r1+n9/n9/v9/oA/4A/6r/0h/40/7L/1R/x3/qj/3h/zP/jj/oQ/6X/0p/xP/rQ/48/6n/05/4s/73/1F3zw4xJvJ8Yn3klMSLybmJiYlJicmJKYmpiWmJ54LzEjMTMxK/F+Ynbig8ScxNzEvMT8xILEh4mFiUWJxYmPEksSHyeWJpYllidWJFYmViVCyLMtDvlC/pAMN4QC4cZQMBQKhUOR4EPRUCzcFIqHm0OJcEsoGW4NpcJtoXQoE8qGR0OD0DA0Co1Dk/BYaBoeD81C89AiPBFahidDq/BUaB2eDm3CM6FteDa0C8+F9uH50CG8EDqGTqFzeDF0CS+FrqFbSAvdQ4/wcugZeoXeoU/oG14J/cKroX94LQwIA8Og8HoYHN4IQ8KbYWgYFoaHt8KIMDKMCqPDmDA2jAtvh/HhnTAhvBsmhklhcpgSpoZpYXp4L8wIM8Os8H6YHT4Ic8LcMC/MDwvCh2FhWBQWh4/CkvBxWBqWheVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gaPgnbwvawI3wadoZdYXf4LOwJn4e94YuwL3wZ9oe/hAPhq3AwfB0OhW/C4fBtOBK+C0fD9+FY+CEcDyfCyfBjOBV+CqfDmXA2/BzOhV/C+fBruCC/syaEEEII8d/S9zLHu/+L/1O/j4vSAODq7bkP/eNxDQAbc/x13kultkwAwNPdOjz0t1GpUlpa2u+PXaohyj8XABKX8jPApXgZtIAnoTU0z/Tbjyr8QS/V6RxfZv3krQCZ/yEnBS7Ff18fbv6X+++lRs6+7PpzAQrmv5RzsdS/xZfWL/E/WT9n08usn+mrcQDN/iEnC1yKL61fDB6HZ6D1Pz1SCCGEEEIIIYT4q16qbLvL3d9evD9PNZdyMsKl+NL9Z/ErUr8QQgghhBBCCCEu77lOnZ96rHXr5u1k8n/jZJe0SSZXZnKFvzEJIYQQQggh/nSXLvqvdCVCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUT69X/iz4ld6T0KIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQV9r/CAAA//+PZSjI") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000380)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1}}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x3214804, &(0x7f0000002c40)=ANY=[@ANYBLOB='check=relaxed,rodir,usefree,dmask=00000000000040000000001,codepage=936,uni_xlate=1,iocharset=maccroatian,nonumtail= ,nonumtail=0,shortname=mixed,allow_utime=00000000000000000000003,shortname=win95,rodir,\x00'], 0x26, 0x336, &(0x7f00000001c0)="$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") r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYBLOB="2c0433005000de295b3acba52ee408021100000150505050"], 0x448}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) r9 = socket(0x0, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001e00050300000000000000", @ANYBLOB="3e9a614a8d6b21525e45e69ce4b4aca3811425c78b24350b82305130d42a679a3e3f14f007cf2fb2b768e6ee522ec359957a2a8aa7ffe8cabf000000000000000000", @ANYRES32, @ANYRES64], 0x24}}, 0x0) 840.446631ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r0}, 0x10) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 649.962621ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) set_robust_list(&(0x7f0000000400), 0x18) 585.42335ms ago: executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 565.909843ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 549.401656ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 528.003409ms ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB='\t'], 0x20}}, 0x0) 443.992202ms ago: executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl(r3, 0x0, 0x0) 272.336478ms ago: executing program 3: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, &(0x7f0000000740), &(0x7f0000000780)='%pi6 \x00'}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)='\\', 0x1}], 0x1}}], 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x2, 0x0) 261.08805ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000340)=""/63, 0x3f}], 0x1) 238.603173ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 223.059816ms ago: executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 206.950259ms ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000c00)="108aaa952ab5a1e8e2fa7353fb2cd8d9fe3ef522c69ef90b731f2f8bd20b74cde3a0a37c36e4f42c13bfcf09196d44516a5470fc7dd494c25e811229f541ddd09207df9e31621e4706af71aa471c4c61557d8af6a0df3234ccda48467942ee993cce79dc0aa6ce7d2b8330c79b1bbc493944f3b4f79828eb1d62f5da99d9c38c5fb86f10c8a3e3cdc3e13441797d5cf69abf8d4dc48edbde5e966a87f980a72ce0c616aeb29412070d6cd56f38c6018f3f01c8862dff0bf2c2aafcd3b5c5efe94d0750dd976c5021dae14e050ab95532868ba8183369f976cc94adf6d1a62343", 0xe0}], 0x1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 183.050552ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 129.10841ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r2) 119.045182ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x14c, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private}, {0x0, 0x2, @private}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO]}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x14c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x10100) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000640)=""/214) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) tee(r5, r6, 0xaf5, 0x0) 51.886112ms ago: executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) keyctl$update(0x2, r0, &(0x7f0000000340)="1d", 0x1) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 0s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0x100000530) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0x2, r5, &(0x7f00000002c0)=0x5, 0x101, 0x0) stat(0x0, 0x0) kernel console output (not intermixed with test programs): duct=c314, bcdDevice= 0.40 [ 606.689878][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.698429][ T20] usb 1-1: config 0 descriptor?? [ 606.718930][T16572] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 606.739380][ T20] hub 1-1:0.0: USB hub found [ 606.778994][T14703] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 606.788888][ T1048] usb 3-1: Using ep0 maxpacket: 16 [ 606.798909][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 606.908994][ T1048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.919987][ T1048] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.928971][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 606.932677][ T1048] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 606.943723][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 606.963591][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 606.969647][ T1048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.972586][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.988881][ T330] usb 4-1: config 0 descriptor?? [ 606.994007][ T1048] usb 3-1: config 0 descriptor?? [ 607.008938][T16595] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 607.018986][T14703] usb 5-1: Using ep0 maxpacket: 16 [ 607.029377][ T330] hub 4-1:0.0: USB hub found [ 607.039057][ T20] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 607.139022][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 607.144870][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 607.179221][ T20] usb 1-1: USB disconnect, device number 60 [ 607.258962][ T330] hub 4-1:0.0: 2 ports detected [ 607.259013][T14703] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 607.272570][T14703] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 607.281372][T14703] usb 5-1: Product: syz [ 607.285371][T14703] usb 5-1: Manufacturer: syz [ 607.290351][T14703] r8152-cfgselector 5-1: config 0 descriptor?? [ 607.482857][ T1048] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00BC/input/input115 [ 607.517855][T16624] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 607.563802][ T1048] microsoft 0003:045E:07DA.00BC: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 607.768935][T14703] r8152-cfgselector 5-1: Unknown version 0x0000 [ 607.775158][T14703] r8152-cfgselector 5-1: bad CDC descriptors [ 607.798907][T14703] r8152-cfgselector 5-1: Unknown version 0x0000 [ 607.806992][T14703] r8152-cfgselector 5-1: USB disconnect, device number 73 [ 607.883188][ T26] usb 3-1: USB disconnect, device number 74 [ 608.268912][ T1048] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 608.508877][ T1048] usb 2-1: Using ep0 maxpacket: 32 [ 608.628949][ T1048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 608.639982][ T20] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 608.647427][ T1048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 608.658374][ T1048] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 608.667446][ T1048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.675987][ T1048] usb 2-1: config 0 descriptor?? [ 608.678878][ T26] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 608.699057][T16649] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 608.719361][ T1048] hub 2-1:0.0: USB hub found [ 608.878926][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 608.918933][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 608.979054][ T1048] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 609.039077][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 609.050128][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 609.061078][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 609.069984][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.078281][ T26] usb 3-1: config 0 descriptor?? [ 609.079078][ T1048] usbhid 2-1:0.0: can't add hid device: -71 [ 609.088793][ T1048] usbhid: probe of 2-1:0.0 failed with error -71 [ 609.099001][T16657] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 609.118965][ T20] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 609.119387][ T26] hub 3-1:0.0: USB hub found [ 609.128545][ T1048] usb 2-1: USB disconnect, device number 83 [ 609.138027][ T20] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 609.146289][ T20] usb 1-1: Product: syz [ 609.150756][ T20] usb 1-1: Manufacturer: syz [ 609.155657][ T20] r8152-cfgselector 1-1: config 0 descriptor?? [ 609.219073][ T330] usb 4-1: USB disconnect, device number 65 [ 609.349056][ T26] hub 3-1:0.0: 2 ports detected [ 609.603849][T16686] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 609.638917][ T20] r8152-cfgselector 1-1: Unknown version 0x0000 [ 609.645096][ T20] r8152-cfgselector 1-1: bad CDC descriptors [ 609.668972][ T20] r8152-cfgselector 1-1: Unknown version 0x0000 [ 609.675710][ T20] r8152-cfgselector 1-1: USB disconnect, device number 61 [ 610.378906][ T20] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 610.438952][ T60] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 610.618876][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 610.678886][ T26] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 610.686365][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 610.739036][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 610.750068][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 610.760975][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 610.769812][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.778104][ T20] usb 4-1: config 0 descriptor?? [ 610.788950][ T330] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 610.798932][T16713] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 610.808999][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 610.819392][ T20] hub 4-1:0.0: USB hub found [ 610.820687][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 610.836012][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 610.844886][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.853278][ T60] usb 1-1: config 0 descriptor?? [ 610.869062][T16717] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 610.889274][ T60] hub 1-1:0.0: USB hub found [ 610.938871][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 611.069000][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 611.078930][ T20] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 611.080262][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 611.099034][ T60] hub 1-1:0.0: 2 ports detected [ 611.103754][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 611.112570][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.121119][ T26] usb 5-1: config 0 descriptor?? [ 611.139011][T16722] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 611.168970][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.180129][ T26] hub 5-1:0.0: USB hub found [ 611.184638][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.194155][ T330] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 611.203595][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.212027][ T330] usb 2-1: config 0 descriptor?? [ 611.299038][ T1669] usb 3-1: USB disconnect, device number 75 [ 611.378985][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 611.379000][ T26] hub 5-1:0.0: 2 ports detected [ 611.389482][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 611.419282][ T20] usb 4-1: USB disconnect, device number 66 [ 611.679794][ T330] lg-g15 0003:046D:C222.00BD: unknown main item tag 0x0 [ 611.686604][ T330] lg-g15 0003:046D:C222.00BD: unknown main item tag 0x0 [ 611.693396][ T330] lg-g15 0003:046D:C222.00BD: item fetching failed at offset 8/11 [ 611.701100][ T330] lg-g15: probe of 0003:046D:C222.00BD failed with error -22 [ 611.880156][ T348] usb 2-1: USB disconnect, device number 84 [ 612.138969][ T330] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 612.378898][ T348] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 612.386660][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 612.419421][ T20] usb 1-1: USB disconnect, device number 62 [ 612.439185][ T60] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 612.509104][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 612.520313][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 612.531299][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 612.540512][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.548794][ T330] usb 4-1: config 0 descriptor?? [ 612.569048][T16741] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 612.589368][ T330] hub 4-1:0.0: USB hub found [ 612.638933][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 612.808930][ T1048] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 612.849807][ T330] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 612.889034][ T348] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 612.897958][ T348] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 612.905846][ T348] usb 3-1: Product: syz [ 612.909839][ T348] usb 3-1: Manufacturer: syz [ 612.914827][ T348] r8152-cfgselector 3-1: config 0 descriptor?? [ 613.048942][ T1048] usb 2-1: Using ep0 maxpacket: 32 [ 613.159030][ T330] usbhid 4-1:0.0: can't add hid device: -71 [ 613.164083][T16779] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 613.165337][ T330] usbhid: probe of 4-1:0.0 failed with error -71 [ 613.175086][ T1048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 613.191770][ T1048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 613.203316][ T1048] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 613.212397][ T1048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.220983][ T330] usb 4-1: USB disconnect, device number 67 [ 613.222027][ T1048] usb 2-1: config 0 descriptor?? [ 613.248969][T16761] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 613.269270][ T1048] hub 2-1:0.0: USB hub found [ 613.418956][ T348] r8152-cfgselector 3-1: Unknown version 0x0000 [ 613.425155][ T348] r8152-cfgselector 3-1: bad CDC descriptors [ 613.448926][ T348] r8152-cfgselector 3-1: Unknown version 0x0000 [ 613.455475][ T348] r8152-cfgselector 3-1: USB disconnect, device number 76 [ 613.528939][ T1048] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 613.828942][ T1048] usbhid 2-1:0.0: can't add hid device: -71 [ 613.834743][ T1048] usbhid: probe of 2-1:0.0 failed with error -71 [ 613.840913][T15601] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 613.879746][ T1048] usb 2-1: USB disconnect, device number 85 [ 614.198982][T15601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.209922][T15601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.219507][T15601] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 614.228302][T15601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.229049][ T26] usb 5-1: reset high-speed USB device number 74 using dummy_hcd [ 614.244526][T15601] usb 4-1: config 0 descriptor?? [ 614.278959][ T26] usb 5-1: device reset changed ep0 maxpacket size! [ 614.285679][ T60] usb 5-1: USB disconnect, device number 74 [ 614.388904][ T1048] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 614.438872][ T60] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 614.518930][T14703] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 614.628918][ T1048] usb 1-1: Using ep0 maxpacket: 32 [ 614.718938][T16820] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.729763][T15601] lg-g15 0003:046D:C222.00BE: unknown main item tag 0x0 [ 614.736563][T15601] lg-g15 0003:046D:C222.00BE: unknown main item tag 0x0 [ 614.744251][T15601] lg-g15 0003:046D:C222.00BE: item fetching failed at offset 8/11 [ 614.752051][ T1048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 614.763222][T14703] usb 2-1: Using ep0 maxpacket: 32 [ 614.768291][T15601] lg-g15: probe of 0003:046D:C222.00BE failed with error -22 [ 614.775560][ T1048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 614.787225][ T1048] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 614.796234][ T1048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.804696][ T1048] usb 1-1: config 0 descriptor?? [ 614.828951][T16805] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 614.838987][ T60] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 614.849485][ T1048] hub 1-1:0.0: USB hub found [ 614.850094][ T60] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 614.865544][ T60] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 614.874573][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.878970][T14703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 614.893565][T14703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 614.904686][T14703] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 614.913733][T14703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.918995][T16788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 614.922223][T14703] usb 2-1: config 0 descriptor?? [ 614.930555][ T330] usb 4-1: USB disconnect, device number 68 [ 614.948938][T16807] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 614.969493][T14703] hub 2-1:0.0: USB hub found [ 615.108967][ T1048] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 615.189061][T14703] hub 2-1:0.0: 2 ports detected [ 615.409214][ T1048] usbhid 1-1:0.0: can't add hid device: -71 [ 615.415495][ T1048] usbhid: probe of 1-1:0.0 failed with error -71 [ 615.449133][ T1048] usb 1-1: USB disconnect, device number 63 [ 615.709004][ T20] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 615.958915][ T1048] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 616.069945][ T20] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 616.080096][ T20] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 616.088959][ T20] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 616.097776][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.198902][ T1048] usb 3-1: Using ep0 maxpacket: 32 [ 616.318957][ T1048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 616.329974][ T1048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 616.341086][ T1048] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 616.341314][ T26] usb 4-1: USB disconnect, device number 69 [ 616.350038][ T1048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.364047][ T1048] usb 3-1: config 0 descriptor?? [ 616.388969][T16831] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 616.413240][ T1048] hub 3-1:0.0: USB hub found [ 616.668933][ T1048] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 616.969335][ T1048] usbhid 3-1:0.0: can't add hid device: -71 [ 616.975089][ T1048] usbhid: probe of 3-1:0.0 failed with error -71 [ 616.978941][ T60] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 616.988684][ T60] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input116 [ 616.999757][ T60] usb 5-1: USB disconnect, device number 75 [ 617.019530][ T1048] usb 3-1: USB disconnect, device number 77 [ 617.140585][T15601] usb 2-1: USB disconnect, device number 86 [ 617.558936][ T60] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 617.778950][ T3015] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 617.928927][ T26] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 617.958908][ T60] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 617.969474][ T60] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 617.978461][ T60] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 617.987435][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.178918][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 618.183960][ T3015] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 618.194991][ T3015] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 618.205968][ T3015] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 618.214884][ T3015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.239018][T16908] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 618.246216][ T60] usb 5-1: USB disconnect, device number 76 [ 618.318933][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 618.330079][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 618.340979][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 618.349863][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.358331][ T26] usb 2-1: config 0 descriptor?? [ 618.388943][T16925] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 618.409244][ T26] hub 2-1:0.0: USB hub found [ 618.658933][ T26] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 618.960208][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 618.965988][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 619.009325][ T26] usb 2-1: USB disconnect, device number 87 [ 619.054338][ T60] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 619.308874][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 619.458967][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 619.470158][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 619.481131][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 619.489952][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.498385][ T60] usb 3-1: config 0 descriptor?? [ 619.519005][T16961] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 619.539217][ T60] hub 3-1:0.0: USB hub found [ 619.708884][ T1048] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 619.749032][ T60] hub 3-1:0.0: 2 ports detected [ 620.068955][ T1048] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 620.079672][ T1048] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 620.092595][ T1048] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 620.101565][ T1048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.149601][ T1048] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 620.288920][ T3015] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 620.296250][ T3015] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input117 [ 620.306490][ T3015] usb 1-1: USB disconnect, device number 64 [ 620.350127][ T26] usb 2-1: USB disconnect, device number 88 [ 621.023035][T17051] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.089375][T15601] usb 3-1: USB disconnect, device number 78 [ 621.109025][ T60] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 621.348895][ T1048] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 621.708948][ T1048] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 621.728889][ T1048] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 621.743679][ T1048] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 621.753021][ T1048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.799667][ T1048] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 622.000481][ T3015] usb 4-1: USB disconnect, device number 70 [ 622.258881][ T60] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 622.475247][T17133] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.528886][T15601] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 622.648955][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.660347][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.670217][ T60] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 622.679312][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.688547][ T60] usb 1-1: config 0 descriptor?? [ 622.769081][T15601] usb 2-1: Using ep0 maxpacket: 32 [ 622.888969][T15601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 622.900541][T15601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 622.911456][T15601] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 622.920261][T15601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.928900][T15601] usb 2-1: config 0 descriptor?? [ 622.948970][T17131] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 622.969257][T15601] hub 2-1:0.0: USB hub found [ 623.028901][T14703] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 623.078867][ T20] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 623.188945][T15601] hub 2-1:0.0: 2 ports detected [ 623.199874][ T60] itetech 0003:06CB:73F5.00BF: unbalanced collection at end of report description [ 623.209053][ T60] itetech: probe of 0003:06CB:73F5.00BF failed with error -22 [ 623.318942][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 623.389220][T14703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.400246][T14703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.410781][T14703] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 623.413885][ T26] usb 1-1: USB disconnect, device number 65 [ 623.420002][T14703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.433937][T14703] usb 5-1: config 0 descriptor?? [ 623.439085][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 623.450241][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 623.461343][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 623.470390][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.478990][ T20] usb 4-1: config 0 descriptor?? [ 623.498939][T17148] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 623.519253][ T20] hub 4-1:0.0: USB hub found [ 623.778945][ T20] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 623.878932][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 623.884812][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 623.919148][ T20] usb 4-1: USB disconnect, device number 71 [ 623.930138][T14703] itetech 0003:06CB:73F5.00C0: unbalanced collection at end of report description [ 623.939441][T14703] itetech: probe of 0003:06CB:73F5.00C0 failed with error -22 [ 624.132166][ T3015] usb 5-1: USB disconnect, device number 77 [ 624.228884][ T60] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 624.338918][T15601] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 624.488958][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 624.519481][ T1048] usb 2-1: USB disconnect, device number 89 [ 624.538929][ T20] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 624.578960][T15601] usb 3-1: Using ep0 maxpacket: 32 [ 624.618961][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 624.630099][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 624.641344][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 624.651048][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.659686][ T60] usb 1-1: config 0 descriptor?? [ 624.689028][T17163] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 624.699253][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 624.710414][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 624.719537][ T60] hub 1-1:0.0: USB hub found [ 624.721629][T15601] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 624.735068][T15601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.743710][T15601] usb 3-1: config 0 descriptor?? [ 624.758990][T17169] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 624.779270][T15601] hub 3-1:0.0: USB hub found [ 624.938920][ T3015] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 624.979014][ T60] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 625.038935][T15601] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 625.189005][ T3015] usb 5-1: Using ep0 maxpacket: 32 [ 625.268964][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 625.274767][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 625.308881][ T26] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 625.316637][ T60] usb 1-1: USB disconnect, device number 66 [ 625.322542][ T3015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 625.334087][ T3015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 625.338946][T15601] usbhid 3-1:0.0: can't add hid device: -71 [ 625.345688][ T3015] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 625.350977][T15601] usbhid: probe of 3-1:0.0 failed with error -71 [ 625.359825][ T3015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.374977][ T3015] usb 5-1: config 0 descriptor?? [ 625.389610][T15601] usb 3-1: USB disconnect, device number 79 [ 625.398974][T17180] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 625.419218][ T3015] hub 5-1:0.0: USB hub found [ 625.668563][T17193] loop3: detected capacity change from 0 to 2048 [ 625.689065][ T3015] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 625.708974][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.719876][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.729371][ T26] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 625.737603][T17193] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 625.738160][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.739036][ T26] usb 2-1: config 0 descriptor?? [ 625.752659][T17193] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 625.775902][T17193] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 625.788207][T17193] EXT4-fs (loop3): This should not happen!! Data will be lost [ 625.788207][T17193] [ 625.797740][T17193] EXT4-fs (loop3): Total free blocks count 0 [ 625.803556][T17193] EXT4-fs (loop3): Free/Dirty block details [ 625.809486][T17193] EXT4-fs (loop3): free_blocks=2415919104 [ 625.815206][T17193] EXT4-fs (loop3): dirty_blocks=16 [ 625.820190][T17193] EXT4-fs (loop3): Block reservation details [ 625.825999][T17193] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 625.978903][ T60] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 625.998947][ T3015] usbhid 5-1:0.0: can't add hid device: -71 [ 626.004742][ T3015] usbhid: probe of 5-1:0.0 failed with error -71 [ 626.049816][ T3015] usb 5-1: USB disconnect, device number 78 [ 626.148882][T15601] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 626.168940][ T348] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 626.229919][ T26] itetech 0003:06CB:73F5.00C1: unbalanced collection at end of report description [ 626.239094][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 626.244314][ T26] itetech: probe of 0003:06CB:73F5.00C1 failed with error -22 [ 626.368972][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 626.380024][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 626.391021][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 626.400132][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.408647][ T60] usb 1-1: config 0 descriptor?? [ 626.422372][T17207] loop4: detected capacity change from 0 to 2048 [ 626.428962][T17195] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 626.439126][ T1048] usb 2-1: USB disconnect, device number 90 [ 626.450932][ T60] hub 1-1:0.0: USB hub found [ 626.460460][T17207] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.473787][T17207] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 626.488474][T17207] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 626.500559][T17207] EXT4-fs (loop4): This should not happen!! Data will be lost [ 626.500559][T17207] [ 626.510202][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.510209][T17207] EXT4-fs (loop4): Total free blocks count 0 [ 626.510227][T17207] EXT4-fs (loop4): Free/Dirty block details [ 626.510238][T17207] EXT4-fs (loop4): free_blocks=2415919104 [ 626.520979][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.526872][T17207] EXT4-fs (loop4): dirty_blocks=16 [ 626.532556][T15601] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 626.538036][T17207] EXT4-fs (loop4): Block reservation details [ 626.547686][T15601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.552595][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.561836][T17207] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 626.567305][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.575249][T15601] usb 3-1: config 0 descriptor?? [ 626.585720][ T348] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 626.614863][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.623923][ T348] usb 4-1: config 0 descriptor?? [ 626.709128][ T60] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 626.808910][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 626.814737][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 626.849367][ T60] usb 1-1: USB disconnect, device number 67 [ 626.938878][ T26] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 627.070227][T15601] itetech 0003:06CB:73F5.00C2: unbalanced collection at end of report description [ 627.079480][T15601] itetech: probe of 0003:06CB:73F5.00C2 failed with error -22 [ 627.188960][ T348] usbhid 4-1:0.0: can't add hid device: -71 [ 627.194782][ T348] usbhid: probe of 4-1:0.0 failed with error -71 [ 627.200945][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 627.206796][ T348] usb 4-1: USB disconnect, device number 72 [ 627.276149][T15601] usb 3-1: USB disconnect, device number 80 [ 627.328914][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 627.340465][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 627.351528][ T26] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 627.360483][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.368973][ T26] usb 5-1: config 0 descriptor?? [ 627.388967][T17214] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 627.409497][ T26] hub 5-1:0.0: USB hub found [ 627.618984][ T26] hub 5-1:0.0: 2 ports detected [ 628.068906][T15601] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 628.078894][ T1048] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 628.278909][ T20] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 628.308874][T15601] usb 3-1: Using ep0 maxpacket: 32 [ 628.428940][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 628.440121][ T1048] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 628.451885][ T4744] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 628.459228][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 628.470419][ T1048] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 628.481480][T15601] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 628.490430][ T1048] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 628.499303][T15601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.507371][ T1048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.515485][T15601] usb 3-1: config 0 descriptor?? [ 628.539037][T17232] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 628.539089][T17230] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 628.559403][T15601] hub 3-1:0.0: USB hub found [ 628.638955][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.649689][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.659343][ T20] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 628.668319][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.676861][ T20] usb 1-1: config 0 descriptor?? [ 628.818943][T15601] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 628.828914][ T4744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.839675][ T4744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.849199][ T4744] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 628.858020][ T4744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.866382][ T4744] usb 4-1: config 0 descriptor?? [ 628.939128][ T348] usb 5-1: USB disconnect, device number 79 [ 628.958892][ T26] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 629.118919][T15601] usbhid 3-1:0.0: can't add hid device: -71 [ 629.124762][T15601] usbhid: probe of 3-1:0.0 failed with error -71 [ 629.159712][ T20] itetech 0003:06CB:73F5.00C3: unbalanced collection at end of report description [ 629.169453][T15601] usb 3-1: USB disconnect, device number 81 [ 629.175728][ T20] itetech: probe of 0003:06CB:73F5.00C3 failed with error -22 [ 629.349828][ T4744] lg-g15 0003:046D:C222.00C4: unknown main item tag 0x0 [ 629.356616][ T4744] lg-g15 0003:046D:C222.00C4: unknown main item tag 0x0 [ 629.363689][ T4744] lg-g15 0003:046D:C222.00C4: item fetching failed at offset 8/11 [ 629.368075][ T348] usb 1-1: USB disconnect, device number 68 [ 629.371467][ T4744] lg-g15: probe of 0003:046D:C222.00C4 failed with error -22 [ 629.552837][ T4744] usb 4-1: USB disconnect, device number 73 [ 630.018902][ T1048] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 630.026419][ T1048] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input118 [ 630.158873][ T4744] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 630.434627][T17257] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 630.558867][ T4744] usb 1-1: Using ep0 maxpacket: 32 [ 630.678946][ T4744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 630.690049][ T1048] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 630.697483][ T4744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 630.708457][ T4744] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 630.717524][ T4744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.725918][ T4744] usb 1-1: config 0 descriptor?? [ 630.748929][T17249] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 630.769312][ T4744] hub 1-1:0.0: USB hub found [ 631.001900][ T20] usb 2-1: USB disconnect, device number 91 [ 631.029114][ T4744] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 631.058928][ T1048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.069855][ T1048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.079456][ T1048] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 631.088454][ T1048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.097264][ T1048] usb 3-1: config 0 descriptor?? [ 631.129017][ T4744] usbhid 1-1:0.0: can't add hid device: -71 [ 631.134808][ T4744] usbhid: probe of 1-1:0.0 failed with error -71 [ 631.169330][ T4744] usb 1-1: USB disconnect, device number 69 [ 631.238867][T15601] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 631.315312][T17268] loop4: detected capacity change from 0 to 2048 [ 631.370886][T17268] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 631.384547][T17268] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 631.399296][T17268] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 631.411337][T17268] EXT4-fs (loop4): This should not happen!! Data will be lost [ 631.411337][T17268] [ 631.418885][ T20] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 631.420783][T17268] EXT4-fs (loop4): Total free blocks count 0 [ 631.433962][T17268] EXT4-fs (loop4): Free/Dirty block details [ 631.439733][T17268] EXT4-fs (loop4): free_blocks=2415919104 [ 631.445209][T17268] EXT4-fs (loop4): dirty_blocks=16 [ 631.450169][T17268] EXT4-fs (loop4): Block reservation details [ 631.455971][T17268] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 631.599044][T15601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.609882][T15601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.619818][T15601] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 631.628657][T15601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.638915][ T1048] usbhid 3-1:0.0: can't add hid device: -71 [ 631.644677][ T1048] usbhid: probe of 3-1:0.0 failed with error -71 [ 631.659120][T15601] usb 4-1: config 0 descriptor?? [ 631.664538][ T1048] usb 3-1: USB disconnect, device number 82 [ 631.778904][ T20] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.788964][ T20] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 631.797816][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.819024][ T20] usb 2-1: config 0 descriptor?? [ 631.859189][ T20] usb 2-1: bad CDC descriptors [ 631.863911][ T20] cdc_acm 2-1:0.0: Zero length descriptor references [ 631.870323][ T20] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 632.064241][ T20] usb 2-1: USB disconnect, device number 92 [ 632.139845][T15601] itetech 0003:06CB:73F5.00C5: unbalanced collection at end of report description [ 632.149011][T15601] itetech: probe of 0003:06CB:73F5.00C5 failed with error -22 [ 632.342824][ T20] usb 4-1: USB disconnect, device number 74 [ 632.348876][ T1048] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 632.543080][T17288] loop4: detected capacity change from 0 to 40427 [ 632.579974][T17288] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 632.587766][T17288] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 632.653266][T17288] F2FS-fs (loop4): Found nat_bits in checkpoint [ 632.674479][T17288] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 632.685566][T17288] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 632.692629][T17288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 632.709055][ T1048] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 632.722222][ T1048] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 632.736834][ T1048] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 632.745894][ T1048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.789396][ T1048] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 632.901999][T17307] loop4: detected capacity change from 0 to 256 [ 632.933357][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 632.933373][ T30] audit: type=1400 audit(1717363747.874:5105): avc: denied { mounton } for pid=17306 comm="syz-executor.4" path="/root/syzkaller-testdir1024870187/syzkaller.zh7O2Y/174/file1/file0" dev="loop4" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 632.933891][T17307] incfs: Can't find or create .incomplete dir in ./file0 [ 632.974756][T17307] incfs: mount failed -28 [ 632.990061][ T1048] usb 3-1: USB disconnect, device number 83 [ 633.418692][T17316] loop3: detected capacity change from 0 to 256 [ 633.500530][T17320] loop1: detected capacity change from 0 to 2048 [ 633.905400][T17338] loop1: detected capacity change from 0 to 256 [ 633.930894][T17340] loop4: detected capacity change from 0 to 256 [ 633.958034][T17338] incfs: Can't find or create .incomplete dir in ./file0 [ 633.966455][T17338] incfs: mount failed -28 [ 633.973709][T17340] incfs: Can't find or create .incomplete dir in ./file0 [ 633.986410][T17340] incfs: mount failed -28 [ 634.230434][T17314] loop0: detected capacity change from 0 to 131072 [ 634.270884][T17314] F2FS-fs (loop0): invalid crc value [ 634.293362][T17314] F2FS-fs (loop0): Found nat_bits in checkpoint [ 634.397517][T17314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 634.417374][T17314] fscrypt (loop0, inode 8): Error -61 getting encryption context [ 634.694737][T17358] loop2: detected capacity change from 0 to 256 [ 634.773668][T17370] loop3: detected capacity change from 0 to 256 [ 634.803681][T17374] loop2: detected capacity change from 0 to 256 [ 634.814395][T17370] incfs: Can't find or create .incomplete dir in ./file0 [ 634.823754][T17370] incfs: mount failed -28 [ 634.834664][T17374] incfs: Can't find or create .incomplete dir in ./file0 [ 634.843652][T17374] incfs: mount failed -28 [ 634.963571][T17385] SELinux: Context *sS,>"ƞ s/ t㠣|6, mDQjTp}Ԕ^)AВߞ1bGqGLaU}24HFyB 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 637.460211][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 637.481147][ T348] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 637.490337][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.499742][ T348] usb 2-1: config 0 descriptor?? [ 637.518896][T17454] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 637.531336][T17490] device pim6reg1 entered promiscuous mode [ 637.540493][ T348] hub 2-1:0.0: USB hub found [ 637.592844][T17495] syz-executor.0[17495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.592896][T17495] syz-executor.0[17495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 637.647318][T17503] device pim6reg1 entered promiscuous mode [ 637.749142][ T348] hub 2-1:0.0: 2 ports detected [ 637.772534][T17509] loop2: detected capacity change from 0 to 2048 [ 637.800187][T17509] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 637.814525][T17509] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 638.038898][ T20] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 638.150359][T17536] device pim6reg1 entered promiscuous mode [ 638.428988][ T20] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 638.444069][ T20] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 638.455345][ T20] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 638.464340][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.502118][T17510] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 638.641842][T17532] loop2: detected capacity change from 0 to 131072 [ 639.263127][T17588] loop2: detected capacity change from 0 to 2048 [ 639.311688][T17588] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 639.326707][T17588] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 639.709351][T14703] usb 2-1: USB disconnect, device number 93 [ 639.870080][T17629] loop3: detected capacity change from 0 to 2048 [ 639.899992][T17629] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 639.914911][T17629] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 639.988977][ T20] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 639.996893][ T20] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input120 [ 640.099427][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 640.099443][ T30] audit: type=1400 audit(1717363755.044:5120): avc: denied { write } for pid=17638 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 640.522968][T17663] loop3: detected capacity change from 0 to 2048 [ 640.570356][T17663] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 640.584217][T17663] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 640.623336][ T30] audit: type=1400 audit(1717363755.564:5121): avc: denied { mount } for pid=17669 comm="syz-executor.4" name="/" dev="ramfs" ino=88409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 640.719578][ T30] audit: type=1400 audit(1717363755.664:5122): avc: denied { unmount } for pid=14924 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 640.973786][ T26] usb 1-1: USB disconnect, device number 71 [ 641.018861][ T348] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 641.188919][ T60] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 641.278870][ T348] usb 4-1: Using ep0 maxpacket: 32 [ 641.519023][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 641.524188][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 641.535636][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 641.547110][ T348] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 641.556522][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.566121][ T348] usb 4-1: config 0 descriptor?? [ 641.588953][T17678] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 641.619225][ T348] hub 4-1:0.0: USB hub found [ 641.658981][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.669053][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.679809][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 641.689248][ T60] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 641.698653][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.788928][ T60] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 641.797813][ T60] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 641.805739][ T60] usb 5-1: Manufacturer: syz [ 641.810790][ T60] usb 5-1: config 0 descriptor?? [ 641.829011][ T348] hub 4-1:0.0: 2 ports detected [ 641.905171][T17707] loop0: detected capacity change from 0 to 16 [ 641.949934][T17707] erofs: (device loop0): mounted with root inode @ nid 36. [ 641.959856][ T48] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 642.120367][T17725] bpf_get_probe_write_proto: 18 callbacks suppressed [ 642.120385][T17725] syz-executor.1[17725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.126945][T17725] syz-executor.1[17725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 642.288863][ T20] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 642.538994][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 642.658947][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 642.670308][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 642.681587][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 642.690651][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.700885][ T20] usb 1-1: config 0 descriptor?? [ 642.719158][T17712] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 642.740604][ T20] hub 1-1:0.0: USB hub found [ 642.999129][ T20] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 643.508913][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 643.514930][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 643.539258][T17759] syz-executor.2[17759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.539324][T17759] syz-executor.2[17759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.551203][ T20] usb 1-1: USB disconnect, device number 72 [ 643.878914][T17733] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 643.899818][T15601] usb 4-1: USB disconnect, device number 75 [ 643.927941][ T348] usb 5-1: USB disconnect, device number 80 [ 644.149613][T17733] usb 3-1: Using ep0 maxpacket: 16 [ 644.268966][T17733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.282104][T17733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 644.295092][T17733] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 644.304016][T17733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.312620][T17733] usb 3-1: config 0 descriptor?? [ 644.349166][ T348] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 644.728873][ T348] usb 5-1: Using ep0 maxpacket: 32 [ 644.848975][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 644.860121][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 644.871220][ T348] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 644.880541][ T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.889338][ T348] usb 5-1: config 0 descriptor?? [ 644.908919][T17789] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 644.929298][ T348] hub 5-1:0.0: USB hub found [ 645.002920][T17733] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00C7/input/input121 [ 645.097334][T17733] microsoft 0003:045E:07DA.00C7: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 645.188908][ T348] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 645.198877][T15601] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 645.252021][T17863] loop1: detected capacity change from 0 to 512 [ 645.300873][T17863] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 645.313226][T17863] ext4 filesystem being mounted at /root/syzkaller-testdir2741396954/syzkaller.8IGklu/514/file0 supports timestamps until 2038 (0x7fffffff) [ 645.331394][ T30] audit: type=1400 audit(1717363760.274:5123): avc: denied { setattr } for pid=17862 comm="syz-executor.1" path="/root/syzkaller-testdir2741396954/syzkaller.8IGklu/514/file0/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 645.378188][T17863] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #19: comm syz-executor.1: corrupted inode contents [ 645.390804][T17863] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #19: comm syz-executor.1: mark_inode_dirty error [ 645.402817][T17863] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #19: comm syz-executor.1: corrupted inode contents [ 645.403320][ T60] usb 3-1: USB disconnect, device number 84 [ 645.415377][T17863] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2954: inode #19: comm syz-executor.1: mark_inode_dirty error [ 645.433127][T17863] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2957: inode #19: comm syz-executor.1: mark inode dirty (error -117) [ 645.446315][T17863] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 645.468952][T15601] usb 4-1: Using ep0 maxpacket: 32 [ 645.478949][ T348] usbhid 5-1:0.0: can't add hid device: -71 [ 645.484887][ T348] usbhid: probe of 5-1:0.0 failed with error -71 [ 645.519234][ T348] usb 5-1: USB disconnect, device number 81 [ 645.618912][T15601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 645.642329][T15601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 645.656012][T15601] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 645.665027][T15601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.675774][T15601] usb 4-1: config 0 descriptor?? [ 645.698939][T17855] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 645.719315][T15601] hub 4-1:0.0: USB hub found [ 645.852322][T17886] loop1: detected capacity change from 0 to 2048 [ 645.889675][T17886] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 645.908736][T17886] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 645.938937][T15601] hub 4-1:0.0: 2 ports detected [ 645.954047][T17893] loop2: detected capacity change from 0 to 512 [ 645.992149][T17893] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 646.004398][T17893] ext4 filesystem being mounted at /root/syzkaller-testdir1233709552/syzkaller.MRdXnh/572/file0 supports timestamps until 2038 (0x7fffffff) [ 646.076865][T17893] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #19: comm syz-executor.2: corrupted inode contents [ 646.089330][T17893] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #19: comm syz-executor.2: mark_inode_dirty error [ 646.101182][T17893] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #19: comm syz-executor.2: corrupted inode contents [ 646.113945][T17893] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #19: comm syz-executor.2: mark_inode_dirty error [ 646.126609][T17893] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #19: comm syz-executor.2: mark inode dirty (error -117) [ 646.139986][T17893] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 646.378971][ T20] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 646.508883][ T348] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 646.628966][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 646.748879][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 646.758913][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 646.770020][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 646.780953][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 646.789815][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.798373][ T20] usb 5-1: config 0 descriptor?? [ 646.815020][T17925] loop0: detected capacity change from 0 to 2048 [ 646.821314][T17921] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 646.839924][T17925] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 646.849369][ T20] hub 5-1:0.0: USB hub found [ 646.858060][T17925] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 646.868965][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.892736][ T348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 646.905570][ T348] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 646.914452][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.922980][ T348] usb 3-1: config 0 descriptor?? [ 647.108913][ T20] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 647.228900][ T354] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 647.402628][ T348] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00C8/input/input122 [ 647.418930][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 647.424769][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 647.459374][ T20] usb 5-1: USB disconnect, device number 82 [ 647.468863][ T354] usb 1-1: Using ep0 maxpacket: 32 [ 647.480368][ T348] microsoft 0003:045E:07DA.00C8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 647.599009][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 647.610045][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 647.621015][ T354] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 647.629869][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.638143][ T354] usb 1-1: config 0 descriptor?? [ 647.658963][T17929] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 647.679628][ T354] hub 1-1:0.0: USB hub found [ 647.804239][T15601] usb 3-1: USB disconnect, device number 85 [ 647.879507][ T20] usb 4-1: USB disconnect, device number 76 [ 647.998989][ T354] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 648.098892][ T354] usbhid 1-1:0.0: can't add hid device: -71 [ 648.104674][ T354] usbhid: probe of 1-1:0.0 failed with error -71 [ 648.149134][ T354] usb 1-1: USB disconnect, device number 73 [ 648.389498][T17954] loop3: detected capacity change from 0 to 512 [ 648.430732][T17954] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 648.443030][T17954] ext4 filesystem being mounted at /root/syzkaller-testdir2835823246/syzkaller.vvDo0h/927/file0 supports timestamps until 2038 (0x7fffffff) [ 648.491243][T17954] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #19: comm syz-executor.3: corrupted inode contents [ 648.503451][T17954] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #19: comm syz-executor.3: mark_inode_dirty error [ 648.515337][T17954] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #19: comm syz-executor.3: corrupted inode contents [ 648.527751][T17954] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2954: inode #19: comm syz-executor.3: mark_inode_dirty error [ 648.530367][T17964] syz-executor.0[17964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.540124][T17954] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2957: inode #19: comm syz-executor.3: mark inode dirty (error -117) [ 648.540320][T17964] syz-executor.0[17964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 648.556345][T17954] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 648.698842][ T20] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 648.814318][T17975] device veth0_vlan left promiscuous mode [ 648.822564][T17975] device veth0_vlan entered promiscuous mode [ 649.089002][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 649.175532][T17981] device veth0_vlan left promiscuous mode [ 649.183526][T17981] device veth0_vlan entered promiscuous mode [ 649.378946][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 649.390024][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 649.401923][ T20] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 649.410920][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.418858][ T60] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 649.419513][ T20] usb 3-1: config 0 descriptor?? [ 649.448959][T17958] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 649.479840][ T20] hub 3-1:0.0: USB hub found [ 649.658902][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 649.729039][ T20] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 649.748893][ T3015] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 649.778928][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.789864][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.802534][ T60] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.827837][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.836702][ T60] usb 4-1: config 0 descriptor?? [ 649.988853][ T3015] usb 1-1: Using ep0 maxpacket: 32 [ 650.028901][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 650.034738][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 650.079950][ T20] usb 3-1: USB disconnect, device number 86 [ 650.108903][ T348] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 650.116411][ T3015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 650.127283][ T3015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 650.138307][ T3015] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 650.147276][ T3015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.155732][ T3015] usb 1-1: config 0 descriptor?? [ 650.178915][T17983] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 650.199299][ T3015] hub 1-1:0.0: USB hub found [ 650.322809][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00C9/input/input123 [ 650.358928][ T348] usb 5-1: Using ep0 maxpacket: 16 [ 650.400097][ T60] microsoft 0003:045E:07DA.00C9: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 650.418932][ T3015] hub 1-1:0.0: 2 ports detected [ 650.461208][T17992] syz-executor.2[17992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.461262][T17992] syz-executor.2[17992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.478935][ T348] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 650.508510][T17994] syz-executor.2[17994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.508566][T17994] syz-executor.2[17994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.658974][ T348] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 650.679859][ T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.687658][ T348] usb 5-1: Product: syz [ 650.691745][ T348] usb 5-1: Manufacturer: syz [ 650.696074][ T348] usb 5-1: SerialNumber: syz [ 650.701348][ T348] usb 5-1: config 0 descriptor?? [ 650.722651][ T20] usb 4-1: USB disconnect, device number 77 [ 650.740010][ T348] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 650.751992][ T348] usb 5-1: Detected FT232RL [ 651.018856][ T4744] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 651.168939][ T348] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 651.188913][ T348] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 651.195899][ T348] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 651.204368][ T348] usb 5-1: USB disconnect, device number 83 [ 651.210805][ T348] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 651.220056][ T348] ftdi_sio 5-1:0.0: device disconnected [ 651.412899][T18012] device veth0_vlan left promiscuous mode [ 651.420743][T18012] device veth0_vlan entered promiscuous mode [ 651.558985][ T4744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.570320][ T4744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.580227][ T4744] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 651.589080][ T4744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.597325][ T4744] usb 3-1: config 0 descriptor?? [ 652.088969][T15601] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 652.106071][T18022] syz-executor.3[18022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.106148][T18022] syz-executor.3[18022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.148933][ T4744] usbhid 3-1:0.0: can't add hid device: -71 [ 652.166562][ T4744] usbhid: probe of 3-1:0.0 failed with error -71 [ 652.177301][ T4744] usb 3-1: USB disconnect, device number 87 [ 652.358834][T15601] usb 5-1: Using ep0 maxpacket: 32 [ 652.479111][T15601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 652.490123][T15601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 652.501054][T15601] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 652.509412][ T348] usb 1-1: USB disconnect, device number 74 [ 652.509858][T15601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.523898][T15601] usb 5-1: config 0 descriptor?? [ 652.538940][T18016] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 652.559359][T15601] hub 5-1:0.0: USB hub found [ 652.829014][T15601] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 653.157511][T18047] device veth0_vlan left promiscuous mode [ 653.163593][T18047] device veth0_vlan entered promiscuous mode [ 653.170393][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 653.178764][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 653.187322][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 653.212361][T18051] loop3: detected capacity change from 0 to 2048 [ 653.239825][T18051] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 653.254252][T18051] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000008000000,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 653.278206][T15601] usbhid 5-1:0.0: can't add hid device: -71 [ 653.284292][T15601] usbhid: probe of 5-1:0.0 failed with error -71 [ 653.319433][T15601] usb 5-1: USB disconnect, device number 84 [ 653.609029][ T348] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 653.759167][T18089] overlayfs: failed to resolve './file0': -2 [ 653.898880][ T60] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 653.968917][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.981631][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.991263][ T348] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 654.000326][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.008703][ T348] usb 4-1: config 0 descriptor?? [ 654.072426][T18118] overlayfs: failed to resolve './file0': -2 [ 654.138847][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 654.169194][T15601] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 654.258975][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 654.273591][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 654.284641][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 654.293788][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.303901][ T60] usb 3-1: config 0 descriptor?? [ 654.328893][T18081] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 654.349815][ T60] hub 3-1:0.0: USB hub found [ 654.418882][T15601] usb 5-1: Using ep0 maxpacket: 32 [ 654.549096][ T348] usbhid 4-1:0.0: can't add hid device: -71 [ 654.554980][ T348] usbhid: probe of 4-1:0.0 failed with error -71 [ 654.561804][ T348] usb 4-1: USB disconnect, device number 78 [ 654.568918][T15601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 654.573970][ T60] hub 3-1:0.0: 2 ports detected [ 654.585444][T15601] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 654.596504][T15601] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 654.605446][T15601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.613960][T15601] usb 5-1: config 0 descriptor?? [ 654.638226][T18157] syz-executor.0[18157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.638277][T18157] syz-executor.0[18157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.649923][T18109] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 654.679942][T15601] hub 5-1:0.0: USB hub found [ 654.708924][T18159] syz-executor.0[18159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 654.708982][T18159] syz-executor.0[18159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.159097][T15601] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 655.458916][T15601] usbhid 5-1:0.0: can't add hid device: -71 [ 655.464737][T15601] usbhid: probe of 5-1:0.0 failed with error -71 [ 655.499142][T15601] usb 5-1: USB disconnect, device number 85 [ 655.696571][T18177] : renamed from pim6reg1 [ 655.742989][T18185] syz-executor.3[18185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.743069][T18185] syz-executor.3[18185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.756814][T18185] syz-executor.3[18185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.756907][T18186] syz-executor.0[18186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.768953][T18185] syz-executor.3[18185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.780381][T18186] syz-executor.0[18186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.168879][ T4744] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 656.198899][ T3015] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 656.548939][ T4744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.559722][ T3015] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 656.559757][ T3015] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 656.571079][ T4744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.591757][ T4744] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 656.600761][ T4744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.602813][ T3015] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 656.609346][ T4744] usb 5-1: config 0 descriptor?? [ 656.617557][ T3015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.649086][ T60] usb 3-1: USB disconnect, device number 88 [ 656.654958][T18201] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 656.665707][ T30] audit: type=1326 audit(1717363771.604:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.690764][ T30] audit: type=1326 audit(1717363771.604:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.714941][ T30] audit: type=1326 audit(1717363771.604:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.739119][ T30] audit: type=1326 audit(1717363771.604:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.763104][ T30] audit: type=1326 audit(1717363771.604:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.787123][ T30] audit: type=1326 audit(1717363771.604:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.811112][ T30] audit: type=1326 audit(1717363771.604:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.835265][ T30] audit: type=1326 audit(1717363771.604:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.859205][ T30] audit: type=1326 audit(1717363771.604:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 656.883038][ T30] audit: type=1326 audit(1717363771.604:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43d637ee9 code=0x7ffc0000 [ 657.189124][ T4744] usbhid 5-1:0.0: can't add hid device: -71 [ 657.195438][ T4744] usbhid: probe of 5-1:0.0 failed with error -71 [ 657.202580][ T4744] usb 5-1: USB disconnect, device number 86 [ 657.418869][ T316] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 657.668853][ T316] usb 3-1: Using ep0 maxpacket: 32 [ 657.819105][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 657.831138][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 657.845801][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 657.855415][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.865639][ T316] usb 3-1: config 0 descriptor?? [ 657.887699][T18242] loop4: detected capacity change from 0 to 1024 [ 657.898915][T18220] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 657.929288][ T316] hub 3-1:0.0: USB hub found [ 657.934009][T18242] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 657.945521][T18242] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,dioread_lock,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 657.971627][T18242] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor.4: corrupted in-inode xattr [ 657.984508][T18242] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 657.998177][T18242] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #2: comm syz-executor.4: corrupted in-inode xattr [ 658.104533][T18255] overlayfs: failed to resolve './file0': -2 [ 658.158954][ T3015] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 658.166593][ T3015] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input124 [ 658.178915][ T316] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 658.388915][ T1669] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 658.498927][ T316] usbhid 3-1:0.0: can't add hid device: -71 [ 658.504789][ T316] usbhid: probe of 3-1:0.0 failed with error -71 [ 658.539218][ T316] usb 3-1: USB disconnect, device number 89 [ 658.628881][ T1669] usb 5-1: Using ep0 maxpacket: 16 [ 658.748986][ T1669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.759771][ T1669] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.772387][ T1669] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 658.781262][ T1669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.790323][ T1669] usb 5-1: config 0 descriptor?? [ 658.974876][T18274] loop2: detected capacity change from 0 to 1024 [ 659.019848][T18274] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 659.031215][T18274] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,dioread_lock,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 659.059422][T18274] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor.2: corrupted in-inode xattr [ 659.073096][T18274] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #2: comm syz-executor.2: corrupted in-inode xattr [ 659.142148][ T3015] usb 1-1: USB disconnect, device number 75 [ 659.272826][ T1669] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00CA/input/input125 [ 659.348843][ T316] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 659.354757][ T1669] microsoft 0003:045E:07DA.00CA: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 659.448848][ T26] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 659.638896][ T316] usb 4-1: device descriptor read/64, error -71 [ 659.671940][ T4744] usb 5-1: USB disconnect, device number 87 [ 659.692547][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 659.707788][T18295] loop0: detected capacity change from 0 to 512 [ 659.761086][T18295] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 659.769154][T18295] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 659.777761][T18295] EXT4-fs (loop0): 1 truncate cleaned up [ 659.783364][T18295] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,noauto_da_alloc,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 659.805280][T18295] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 4: comm syz-executor.0: lblock 0 mapped to illegal pblock 4 (length 1) [ 659.819515][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 659.830520][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 659.841701][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 659.850609][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.859258][ T26] usb 3-1: config 0 descriptor?? [ 659.878929][T18290] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 659.899466][ T26] hub 3-1:0.0: USB hub found [ 660.048835][ T316] usb 4-1: device descriptor read/64, error -71 [ 660.158962][ T26] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 660.188110][T18304] loop4: detected capacity change from 0 to 512 [ 660.230555][T18304] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 660.241560][T18304] ext4 filesystem being mounted at /root/syzkaller-testdir1024870187/syzkaller.zh7O2Y/250/file0 supports timestamps until 2038 (0x7fffffff) [ 660.258879][T18304] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz-executor.4: corrupted inode contents [ 660.271109][T18304] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz-executor.4: mark_inode_dirty error [ 660.282878][T18304] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz-executor.4: corrupted inode contents [ 660.295113][T18304] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz-executor.4: mark_inode_dirty error [ 660.328866][ T316] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 660.458961][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 660.464766][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 660.499137][ T26] usb 3-1: USB disconnect, device number 90 [ 660.608852][ T316] usb 4-1: device descriptor read/64, error -71 [ 660.638847][ T3015] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 661.009092][ T3015] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 661.021300][ T3015] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 661.032882][ T3015] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 661.042163][ T3015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.068915][T18309] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 661.118884][ T316] usb 4-1: device descriptor read/64, error -71 [ 661.238985][ T316] usb usb4-port1: attempt power cycle [ 661.668851][ T316] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 661.858989][ T316] usb 4-1: device descriptor read/8, error -71 [ 662.098893][ T316] usb 4-1: device descriptor read/8, error -71 [ 662.548886][ T3015] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 662.556296][ T3015] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input126 [ 662.944481][T18373] loop3: detected capacity change from 0 to 128 [ 662.988912][ T3015] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 663.068974][ T4744] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 663.228863][ T3015] usb 1-1: Using ep0 maxpacket: 8 [ 663.348928][ T3015] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 663.356983][ T3015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.366902][ T3015] usb 1-1: config 0 has no interface number 0 [ 663.372756][ T3015] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 663.381622][ T3015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.389904][ T3015] usb 1-1: config 0 descriptor?? [ 663.448908][ T4744] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 663.457082][ T316] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 663.464671][ T4744] usb 3-1: config 0 has no interface number 0 [ 663.531348][ T3015] usb 5-1: USB disconnect, device number 88 [ 663.538832][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 663.539363][T18382] bpf_get_probe_write_proto: 6 callbacks suppressed [ 663.539379][T18382] syz-executor.4[18382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 663.553602][T18382] syz-executor.4[18382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 663.628931][ T4744] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=8d.4e [ 663.630030][ T60] usb 1-1: USB disconnect, device number 76 [ 663.640769][ T4744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.663121][ T4744] usb 3-1: Product: syz [ 663.667015][ T4744] usb 3-1: Manufacturer: syz [ 663.671578][ T4744] usb 3-1: SerialNumber: syz [ 663.676593][ T4744] usb 3-1: config 0 descriptor?? [ 663.828904][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.839736][ T316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.849322][ T316] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 663.858224][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.866551][ T316] usb 4-1: config 0 descriptor?? [ 663.932699][ T60] usb 3-1: USB disconnect, device number 91 [ 664.339588][ T316] sony 0003:054C:0268.00CB: unbalanced collection at end of report description [ 664.348513][ T316] sony 0003:054C:0268.00CB: parse failed [ 664.353994][ T316] sony: probe of 0003:054C:0268.00CB failed with error -22 [ 664.540866][ T316] usb 4-1: USB disconnect, device number 83 [ 664.958894][T15601] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 664.987623][T18416] syz-executor.0[18416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 664.987687][T18416] syz-executor.0[18416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.198827][T15601] usb 3-1: Using ep0 maxpacket: 32 [ 665.338913][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 665.354074][T15601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 665.373411][T15601] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 665.386106][T15601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.400988][T15601] usb 3-1: config 0 descriptor?? [ 665.419199][T18412] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 665.439295][T15601] hub 3-1:0.0: USB hub found [ 665.445166][T18439] loop3: detected capacity change from 0 to 128 [ 665.573333][T18444] syz-executor.4[18444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.573420][T18444] syz-executor.4[18444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.918879][T15601] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 666.049152][T15601] usbhid 3-1:0.0: can't add hid device: -71 [ 666.055030][T15601] usbhid: probe of 3-1:0.0 failed with error -71 [ 666.099109][T15601] usb 3-1: USB disconnect, device number 92 [ 666.205257][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 666.205272][ T30] audit: type=1400 audit(1717363781.144:5137): avc: denied { mount } for pid=18458 comm="syz-executor.0" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 666.234277][T18459] proc: Unknown parameter './bus/../file0' [ 666.234293][ T30] audit: type=1400 audit(1717363781.174:5138): avc: denied { remount } for pid=18458 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 666.271987][ T30] audit: type=1400 audit(1717363781.204:5139): avc: denied { unmount } for pid=15234 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 667.258859][ T60] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 667.276491][T18516] loop4: detected capacity change from 0 to 512 [ 667.290944][ T30] audit: type=1400 audit(1717363782.234:5140): avc: denied { remount } for pid=18515 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 667.291011][T18516] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 667.320974][T18516] SELinux: security_context_str_to_sid(system_u) failed for (dev fuse, type fuse) errno=-22 [ 667.332821][T18518] syz-executor.2[18518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 667.332871][T18518] syz-executor.2[18518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 667.399875][T18526] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 667.424884][ T30] audit: type=1400 audit(1717363782.364:5141): avc: denied { mount } for pid=18525 comm="syz-executor.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 667.447292][ T30] audit: type=1400 audit(1717363782.364:5142): avc: denied { mounton } for pid=18525 comm="syz-executor.4" path="/root/syzkaller-testdir1024870187/syzkaller.zh7O2Y/271/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 667.509463][ T30] audit: type=1400 audit(1717363782.454:5143): avc: denied { unmount } for pid=14924 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 667.529462][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 667.648898][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 667.659943][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 667.671131][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 667.680017][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.688323][ T60] usb 4-1: config 0 descriptor?? [ 667.709144][T18493] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 667.729307][ T60] hub 4-1:0.0: USB hub found [ 668.000379][T18548] syz-executor.2[18548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.000451][T18548] syz-executor.2[18548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.071332][T18556] tmpfs: Unsupported parameter 'mpol' [ 668.145337][T18559] loop2: detected capacity change from 0 to 1024 [ 668.181823][T18559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 668.208987][ T60] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 668.308886][ T60] usbhid 4-1:0.0: can't add hid device: -71 [ 668.314798][ T60] usbhid: probe of 4-1:0.0 failed with error -71 [ 668.349103][ T60] usb 4-1: USB disconnect, device number 84 [ 668.368842][T15601] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 668.523936][T18564] loop4: detected capacity change from 0 to 512 [ 668.610548][ T30] audit: type=1326 audit(1717363783.554:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18563 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f187fd86ee9 code=0x0 [ 668.634116][T15601] usb 1-1: Using ep0 maxpacket: 32 [ 668.712132][ T30] audit: type=1400 audit(1717363783.654:5145): avc: denied { bind } for pid=18563 comm="syz-executor.4" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.740121][ T30] audit: type=1400 audit(1717363783.654:5146): avc: denied { node_bind } for pid=18563 comm="syz-executor.4" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 668.798965][T15601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 668.810034][T15601] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 668.820893][T15601] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 668.829742][T15601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.838080][T15601] usb 1-1: config 0 descriptor?? [ 668.868981][T18558] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 668.889237][T15601] hub 1-1:0.0: USB hub found [ 669.068991][T18578] syz-executor.2[18578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.069046][T18578] syz-executor.2[18578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.158899][T15601] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 669.374125][T18602] syz-executor.4[18602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.374182][T18602] syz-executor.4[18602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.409042][ T3015] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 669.469005][T15601] usbhid 1-1:0.0: can't add hid device: -71 [ 669.474788][T15601] usbhid: probe of 1-1:0.0 failed with error -71 [ 669.509137][T15601] usb 1-1: USB disconnect, device number 77 [ 669.658842][ T3015] usb 3-1: Using ep0 maxpacket: 32 [ 669.778924][ T3015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 669.790095][ T3015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 669.801266][ T3015] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 669.810240][ T3015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.819005][ T3015] usb 3-1: config 0 descriptor?? [ 669.838915][T18590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 669.859357][ T3015] hub 3-1:0.0: USB hub found [ 669.908069][T18633] syz-executor.0[18633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 669.908153][T18633] syz-executor.0[18633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 670.258853][ T20] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 670.338877][ T3015] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 670.438903][ T3015] usbhid 3-1:0.0: can't add hid device: -71 [ 670.444886][ T3015] usbhid: probe of 3-1:0.0 failed with error -71 [ 670.479106][ T3015] usb 3-1: USB disconnect, device number 93 [ 670.518895][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 670.638830][ T26] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 670.638948][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 670.657185][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 670.668133][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 670.676971][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.685346][ T20] usb 5-1: config 0 descriptor?? [ 670.718973][T18650] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 670.739284][ T20] hub 5-1:0.0: USB hub found [ 670.970329][T18687] SELinux: Context *sS,>"ƞ s/ t㠣|6, mDQjTp}Ԕ^)AВߞ1bGqGLaU}24HFyB"ƞ s/ t㠣|6, mDQjTp}Ԕ^)AВߞ1bGqGLaU}24HFyB] schedule+0x118/0x1e0 [ 673.981434][T15234] CPU: 0 PID: 15234 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-00055-g424f92bcbe8f #0 2024/06/02 21:29:48 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 673.991532][T15234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 674.001420][T15234] Call Trace: [ 674.004532][T15234] [ 674.007311][T15234] dump_stack_lvl+0x151/0x1b7 [ 674.011823][T15234] ? schedule+0x118/0x1e0 [ 674.015987][T15234] ? schedule+0x118/0x1e0 [ 674.020158][T15234] ? io_uring_drop_tctx_refs+0x190/0x190 [ 674.025626][T15234] ? schedule+0x118/0x1e0 [ 674.029795][T15234] dump_stack+0x15/0x17 [ 674.033779][T15234] __schedule_bug+0x195/0x260 [ 674.038294][T15234] ? ttwu_queue_wakelist+0x510/0x510 [ 674.043412][T15234] ? kernel_waitid+0x520/0x520 [ 674.048016][T15234] __schedule+0xd19/0x1590 [ 674.052267][T15234] ? __x64_sys_wait4+0x181/0x1e0 [ 674.057042][T15234] ? __sched_text_start+0x8/0x8 [ 674.061734][T15234] schedule+0x11f/0x1e0 [ 674.065721][T15234] exit_to_user_mode_loop+0x4d/0xe0 [ 674.070759][T15234] exit_to_user_mode_prepare+0x5a/0xa0 [ 674.076048][T15234] syscall_exit_to_user_mode+0x26/0x160 [ 674.081430][T15234] do_syscall_64+0x49/0xb0 [ 674.085682][T15234] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 674.091430][T15234] RIP: 0033:0x7fe945e678d3 [ 674.095666][T15234] Code: 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 80 3d 31 e6 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 89 54 24 14 48 [ 674.115191][T15234] RSP: 002b:00007fffdc1653b8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 674.123438][T15234] RAX: 0000000000000000 RBX: 00000000000002bc RCX: 00007fe945e678d3 [ 674.131252][T15234] RDX: 0000000040000001 RSI: 00007fffdc16541c RDI: 00000000ffffffff [ 674.139058][T15234] RBP: 00007fffdc16541c R08: 00007fffdc1b0080 R09: 00007fffdc1b00b0 [ 674.146872][T15234] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 674.154682][T15234] R13: 00000000000a46b7 R14: 00000000000a4677 R15: 0000000000000006 [ 674.162722][T15234] [ 674.258881][ T20] usb 4-1: new high-speed USB device number 85 using dummy_hcd