last executing test programs: 11.492629382s ago: executing program 4 (id=1514): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030400000004"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 11.394791487s ago: executing program 0 (id=1515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 8.736841136s ago: executing program 4 (id=1522): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8.261630849s ago: executing program 0 (id=1525): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x5ff) sendfile(0xffffffffffffffff, r0, 0x0, 0xe065) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f00000003c0)={0x29, 0x1}) open(0x0, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)=0x0) ioprio_get$uid(0x3, r7) 7.824592577s ago: executing program 4 (id=1528): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @local}, &(0x7f0000000740)=0xc) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r2 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) getdents64(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0x1, 0xffff8000, 0x2304, r0, 0x3f, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x6}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000001c0000000000000000000071122d000000000095000000000000001290aa8f3e4f48eaf057b13841784965fb7d411ba4fb75b64ecdf88e3429351336fdd51fc5d358cbb7b6a3bf715d8600a5500a7991ec6f747f64bbfd3e7484a99b79eb56041d9a17e13cd06ef8a29c00199d175b9c4b411b795f48f86c24f8a4af79f096ff357b25c8d54a2820d87b491ae56a1ff015652e0b408f27600ec826ba8b3684c105490af027698a949b519340d497118b717ec468f7567131583787dd5a8d3e9e6adffc8f0c4a8cddee9529fe9b8b4501271f8163d45fbf8050f8de9762"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = gettid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r6, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x87, 0x0, 0x0) tkill(r5, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r4}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) 7.651845143s ago: executing program 4 (id=1530): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x23671d1e5e684124, 0x81, {0x81, 0x21, "6b2829083af07a7e55703b6c4d1ba04e73c6c74dbde0af05a68f544d6dd9319c4843040122aa54fa947b3f869f1e3883e1df11dac42e001b0145ed9ca411907484e2ab3a3e014ab51eacda3099ad3e3881fc1473dcbdb8c5902008c931ab639ae3598da3765e4e68404ac429bce8b70395e17e8ae9f471b957ba627f108f57"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 6.765697709s ago: executing program 1 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x487, 0x9, 0x8, 0x2, 0x1, 0xd5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002c40)=ANY=[@ANYRES16=r0, @ANYBLOB="932cf24f3e0e7e38bbd3f6bf4d2a99ea6bd1cdda154bd48b47ea2c1375fd7f9ecf5c886bfac9244a74715378942878c10dd9e26303b0211df5f4fa5e535dc3f7f15d23d4480d59d8f09af4c3b42b1374400d1e048cea80f0a8e784195d7a588f72d6d4eaaa81f4fa37033c91d996dc0a83c9365537e2971594294c61cb174b907b7fb4a75f73deb0580c31c9ab4a5d61242d0ccbfd67d31a307317c1ccb43e239d82f2c1d3db3b55eefde21f", @ANYRES64=r0, @ANYBLOB="43ff303363dbce297f4b8249f4c5c94f150390628b0d09c66ec3c45179664ad6690a4926429d769abe3f70bdbd2e58fee49edb3c0b8d1229dfb104fb3fc05a8cebbaffa22671d15e87647534f8b84b2f2411fc94e3b7b385ecfcac1a7994425321dfc3da80be9a3e424ce67f00195ea432901df5dc61f762da102ace266782b7f1f6b20a54eb717d71e8d15fb33218591e4c9d17757f7b1578cbfc72e97e23a604f5b84e2cece180439201bf5d6aef4e320a9e14f981ac299fa56f7f20ee5bb8ff0bcddd557e4e58e6040c6a511645d1d1787e4faf47d0ccfaf189390cab7956ae9ea71ef299ca6021c8aab552aa2bd5bd7ebe4d", @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r7, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 6.666613244s ago: executing program 0 (id=1535): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.85193367s ago: executing program 1 (id=1536): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000095000000000000003a93511e3ac3b74d1bcef15f7ca982b46363fe32dab1d26a9553182b7d66b7a5f6c36079477b3346f48915ebf8866f8f36b74e3fd9e8de57947a560eb470889896c456d719e0cd5ea1"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x10, 0x0, 0x0, @link_id}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f00000003c0)=""/203, 0xcb, 0x0, &(0x7f0000000080)=""/19, 0x13}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 5.824959534s ago: executing program 2 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x487, 0x9, 0x8, 0x2, 0x1, 0xd5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002c40)=ANY=[@ANYRES16=r0, @ANYBLOB="932cf24f3e0e7e38bbd3f6bf4d2a99ea6bd1cdda154bd48b47ea2c1375fd7f9ecf5c886bfac9244a74715378942878c10dd9e26303b0211df5f4fa5e535dc3f7f15d23d4480d59d8f09af4c3b42b1374400d1e048cea", @ANYRES64=r0, @ANYBLOB="43ff303363dbce297f4b8249f4c5c94f150390628b0d09c66ec3c45179664ad6690a4926429d769abe3f70bdbd2e58fee49edb3c0b8d1229dfb104fb3fc05a8cebbaffa22671d15e87647534f8b84b2f2411fc94e3b7b385ecfcac1a7994425321dfc3da80be9a3e424ce67f00195ea432901df5dc61f762da102ace266782b7f1f6b20a54eb717d71e8d15fb33218591e4c9d17757f7b1578cbfc72e97e23a604f5b84e2cece180439201bf5d6aef4e320a9e14f981ac299fa56f7f20ee5bb8ff0bcddd557e4e58e6040c6a511645d1d1787e4faf47d0ccfaf189390cab7956ae9ea71ef299ca6021c8aab552aa2bd5bd7ebe4d", @ANYRESDEC=r1, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r7, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 5.268698119s ago: executing program 3 (id=1538): syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz7ttAkEABNDZ+9g+yZJdgiMX4T4sl+MrgYiQAohphirIkdCi+9ACELyXjGZXmtWGhzq0S9Yh2ZaS9Ekty9ka+WrmeClJl0tN6b6Py82YIR9vuz6ft/5ahiR/P1PbvKeMtTbzaJL1qfynPdfTNPa7v99PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5XQMAAP//jJwQkg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x12e, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) symlinkat(&(0x7f0000000180)='./bus\x00', r7, &(0x7f0000000240)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r8 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001240)) linkat(r7, &(0x7f0000000280)='./bus\x00', r7, &(0x7f0000000300)='./file1\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000380)='./file1\x00', r8, &(0x7f0000000340)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') truncate(&(0x7f0000000200)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.043020335s ago: executing program 3 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000000180)=""/59, 0x3b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 4.946976239s ago: executing program 2 (id=1540): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 4.621505679s ago: executing program 4 (id=1541): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 4.107144878s ago: executing program 3 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.457601218s ago: executing program 0 (id=1543): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000240)={[{@nodelalloc}, {@errors_remount}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f00000007c0)="$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") open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xd8, 0x37f, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 3.251803769s ago: executing program 3 (id=1544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000000180)=""/59, 0x3b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 2.941441047s ago: executing program 1 (id=1545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000c40)={@val, @val={0x0, 0x3}, @x25}, 0x11) 2.901052444s ago: executing program 1 (id=1546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) 2.565699755s ago: executing program 0 (id=1547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xcc, &(0x7f0000000080)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000000180)=""/59, 0x3b) 2.452581073s ago: executing program 3 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) 2.176915555s ago: executing program 2 (id=1549): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000007c0)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 2.095959798s ago: executing program 2 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000c40)={@val, @val={0x0, 0x3}, @x25}, 0x11) 2.048794325s ago: executing program 2 (id=1551): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x23671d1e5e684124, 0x81, {0x81, 0x21, "6b2829083af07a7e55703b6c4d1ba04e73c6c74dbde0af05a68f544d6dd9319c4843040122aa54fa947b3f869f1e3883e1df11dac42e001b0145ed9ca411907484e2ab3a3e014ab51eacda3099ad3e3881fc1473dcbdb8c5902008c931ab639ae3598da3765e4e68404ac429bce8b70395e17e8ae9f471b957ba627f108f57"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 2.026609708s ago: executing program 1 (id=1552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000000180)=""/59, 0x3b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 1.869680633s ago: executing program 4 (id=1553): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.605357223s ago: executing program 0 (id=1554): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.518595756s ago: executing program 3 (id=1555): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 1.089956992s ago: executing program 1 (id=1556): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000095000000000000003a93511e3ac3b74d1bcef15f7ca982b46363fe32dab1d26a9553182b7d66b7a5f6c36079477b3346f48915ebf8866f8f36b74e3fd9e8de57947a560eb470889896c456d719e0cd5ea1"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x10, 0x0, 0x0, @link_id}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=1557): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x23671d1e5e684124, 0x81, {0x81, 0x21, "6b2829083af07a7e55703b6c4d1ba04e73c6c74dbde0af05a68f544d6dd9319c4843040122aa54fa947b3f869f1e3883e1df11dac42e001b0145ed9ca411907484e2ab3a3e014ab51eacda3099ad3e3881fc1473dcbdb8c5902008c931ab639ae3598da3765e4e68404ac429bce8b70395e17e8ae9f471b957ba627f108f57"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): ng state [ 238.954428][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.961774][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.969781][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.976635][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.988734][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.996742][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.026412][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.038842][ T4251] device veth0_vlan entered promiscuous mode [ 239.047777][ T309] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00A5/input/input98 [ 239.055267][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.073993][ T309] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00A5/input/input99 [ 239.091928][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.101468][ T309] uclogic 0003:256C:006D.00A5: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 239.109420][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.149705][ T4251] device veth1_macvtap entered promiscuous mode [ 239.159780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.159804][ T4258] loop0: detected capacity change from 0 to 256 [ 239.179692][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.188378][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.213667][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.249404][ T309] usb 3-1: USB disconnect, device number 41 [ 239.272536][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.376394][ T295] uclogic 0003:256C:006D.00A6: v1 buttonpad probing failed: -71 [ 239.390602][ T295] uclogic 0003:256C:006D.00A6: failed probing parameters: -71 [ 239.398545][ T295] uclogic: probe of 0003:256C:006D.00A6 failed with error -71 [ 239.406775][ T295] usb 2-1: USB disconnect, device number 43 [ 239.440057][ T340] device bridge_slave_1 left promiscuous mode [ 239.446679][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.457473][ T340] device bridge_slave_0 left promiscuous mode [ 239.463676][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.473103][ T30] audit: type=1326 audit(1719416378.954:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.0.1140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f389d3ae9 code=0x0 [ 239.495827][ T340] device veth1_macvtap left promiscuous mode [ 239.501744][ T340] device veth0_vlan left promiscuous mode [ 239.657896][ T314] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 240.036340][ T63] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 240.046975][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.146140][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.156757][ T314] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.167674][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.178316][ T314] usb 5-1: config 0 descriptor?? [ 240.194610][ T4275] loop0: detected capacity change from 0 to 512 [ 240.276677][ T4275] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.298202][ T4275] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 240.312866][ T4275] EXT4-fs (loop0): 1 truncate cleaned up [ 240.318392][ T4275] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 240.422322][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 240.476380][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.492230][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.496404][ T350] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 240.510002][ T63] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.527001][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.542696][ T63] usb 3-1: config 0 descriptor?? [ 240.657045][ T314] keytouch 0003:0926:3333.00A7: fixing up Keytouch IEC report descriptor [ 240.670998][ T314] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00A7/input/input100 [ 240.736660][ T4284] loop1: detected capacity change from 0 to 512 [ 240.767390][ T350] usb 4-1: Using ep0 maxpacket: 32 [ 240.770441][ T314] keytouch 0003:0926:3333.00A7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 240.797482][ T4284] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.827899][ T4284] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 240.842466][ T4284] EXT4-fs (loop1): 1 truncate cleaned up [ 240.848225][ T4284] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 240.863381][ T309] usb 5-1: USB disconnect, device number 44 [ 240.916417][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 240.927936][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 240.939045][ T350] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 240.948166][ T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.957279][ T350] usb 4-1: config 0 descriptor?? [ 240.986324][ T4277] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 241.016854][ T350] hub 4-1:0.0: USB hub found [ 241.257727][ T350] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 241.334808][ T4288] loop1: detected capacity change from 0 to 131072 [ 241.416906][ T4288] F2FS-fs (loop1): Test dummy encryption mode enabled [ 241.424683][ T4288] F2FS-fs (loop1): invalid crc value [ 241.438356][ T4288] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.471922][ T4297] loop4: detected capacity change from 0 to 8192 [ 241.474150][ T4288] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 241.496720][ T4288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 241.516583][ T4297] loop4: p2 p3 p4 [ 241.520578][ T4297] loop4: p2 start 14935 is beyond EOD, truncated [ 241.526868][ T4297] loop4: p3 size 196608 extends beyond EOD, truncated [ 241.534085][ T4297] loop4: p4 start 4026530307 is beyond EOD, truncated [ 241.546340][ T350] usbhid 4-1:0.0: can't add hid device: -71 [ 241.552143][ T350] usbhid: probe of 4-1:0.0 failed with error -71 [ 241.593639][ T4062] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 241.603196][ T350] usb 4-1: USB disconnect, device number 40 [ 241.617790][ T4297] overlayfs: missing 'lowerdir' [ 241.841702][ T63] uclogic 0003:256C:006D.00A8: failed retrieving Huion firmware version: -71 [ 241.850410][ T63] uclogic 0003:256C:006D.00A8: failed probing parameters: -71 [ 241.857766][ T63] uclogic: probe of 0003:256C:006D.00A8 failed with error -71 [ 241.869528][ T63] usb 3-1: USB disconnect, device number 42 [ 242.080701][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.092153][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.099834][ T4309] device bridge_slave_0 entered promiscuous mode [ 242.107933][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.114768][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.118212][ T4314] loop0: detected capacity change from 0 to 8192 [ 242.122224][ T4309] device bridge_slave_1 entered promiscuous mode [ 242.157484][ T4314] loop0: p2 p3 p4 [ 242.161468][ T4314] loop0: p2 start 14935 is beyond EOD, truncated [ 242.167866][ T4314] loop0: p3 size 196608 extends beyond EOD, truncated [ 242.175096][ T4314] loop0: p4 start 4026530307 is beyond EOD, truncated [ 242.185253][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.192132][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.199235][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.206005][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.226112][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.233385][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.255283][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.256985][ T4314] overlayfs: missing 'lowerdir' [ 242.271316][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.276278][ T314] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 242.279488][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.299023][ T4317] loop2: detected capacity change from 0 to 512 [ 242.299288][ T2261] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.311954][ T2261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.319133][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.327647][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.335616][ T2261] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.342340][ T4317] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.342471][ T2261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.366567][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.372802][ T4317] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 242.374468][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.399409][ T4317] EXT4-fs (loop2): 1 truncate cleaned up [ 242.404900][ T4317] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 242.405797][ T4309] device veth0_vlan entered promiscuous mode [ 242.429929][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.439713][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.450144][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.458582][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.468760][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.476732][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.490410][ T4309] device veth1_macvtap entered promiscuous mode [ 242.497659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.504869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.512446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.513554][ T4324] loop0: detected capacity change from 0 to 1024 [ 242.520737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.546630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.552410][ T4326] loop2: detected capacity change from 0 to 128 [ 242.577761][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.580006][ T4328] loop1: detected capacity change from 0 to 256 [ 242.585958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.616598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.624652][ T4324] EXT4-fs (loop0): Test dummy encryption mode enabled [ 242.632282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.632827][ T4324] EXT4-fs (loop0): Ignoring removed orlov option [ 242.642305][ T4330] loop4: detected capacity change from 0 to 512 [ 242.673846][ T4324] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 242.765082][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.766328][ T4330] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.776384][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.794859][ T314] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 242.805828][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.816739][ T314] usb 4-1: config 0 descriptor?? [ 242.836975][ T4330] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 242.880240][ T30] audit: type=1326 audit(1719416382.354:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.1.1156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6276e7bae9 code=0x0 [ 242.923521][ T4330] EXT4-fs (loop4): 1 truncate cleaned up [ 242.936478][ T4330] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 243.076520][ T63] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 243.338049][ T340] device bridge_slave_1 left promiscuous mode [ 243.345625][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.365159][ T340] device bridge_slave_0 left promiscuous mode [ 243.371521][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.383060][ T340] device veth1_macvtap left promiscuous mode [ 243.388965][ T340] device veth0_vlan left promiscuous mode [ 243.440709][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.452879][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.462960][ T63] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 243.504799][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.515131][ T63] usb 1-1: config 0 descriptor?? [ 243.549842][ T4344] loop2: detected capacity change from 0 to 8192 [ 243.557388][ T4348] loop1: detected capacity change from 0 to 512 [ 243.567880][ T4344] loop2: p2 p3 p4 [ 243.571486][ T4344] loop2: p2 start 14935 is beyond EOD, truncated [ 243.577676][ T4344] loop2: p3 size 196608 extends beyond EOD, truncated [ 243.584502][ T4344] loop2: p4 start 4026530307 is beyond EOD, truncated [ 243.591971][ T4348] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.607743][ T4348] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 243.622187][ T4348] EXT4-fs (loop1): 1 truncate cleaned up [ 243.627681][ T4348] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 243.641633][ T100] loop2: p2 p3 p4 [ 243.645243][ T100] loop2: p2 start 14935 is beyond EOD, truncated [ 243.651410][ T100] loop2: p3 size 196608 extends beyond EOD, truncated [ 243.666714][ T100] loop2: p4 start 4026530307 is beyond EOD, truncated [ 243.723355][ T4344] overlayfs: missing 'lowerdir' [ 243.806423][ T295] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 243.826075][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 244.006335][ T314] uclogic 0003:256C:006D.00A9: failed retrieving string descriptor #200: -71 [ 244.018356][ T314] uclogic 0003:256C:006D.00A9: failed retrieving pen parameters: -71 [ 244.026626][ T314] uclogic 0003:256C:006D.00A9: failed probing pen v2 parameters: -71 [ 244.034579][ T314] uclogic 0003:256C:006D.00A9: failed probing parameters: -71 [ 244.042274][ T314] uclogic: probe of 0003:256C:006D.00A9 failed with error -71 [ 244.054523][ T314] usb 4-1: USB disconnect, device number 41 [ 244.076272][ T295] usb 5-1: Using ep0 maxpacket: 32 [ 244.216322][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 244.227317][ T295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 244.238262][ T295] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 244.247090][ T295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.255517][ T295] usb 5-1: config 0 descriptor?? [ 244.276315][ T4346] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 244.297129][ T295] hub 5-1:0.0: USB hub found [ 244.506315][ T295] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 244.536044][ T4360] loop3: detected capacity change from 0 to 8192 [ 244.576516][ T4360] loop3: p2 p3 p4 [ 244.580151][ T4360] loop3: p2 start 14935 is beyond EOD, truncated [ 244.586520][ T4360] loop3: p3 size 196608 extends beyond EOD, truncated [ 244.593859][ T4360] loop3: p4 start 4026530307 is beyond EOD, truncated [ 244.706430][ T39] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 244.715373][ T4360] overlayfs: missing 'lowerdir' [ 244.795609][ T4368] loop2: detected capacity change from 0 to 128 [ 244.806394][ T295] usbhid 5-1:0.0: can't add hid device: -71 [ 244.812131][ T295] usbhid: probe of 5-1:0.0 failed with error -71 [ 244.846711][ T295] usb 5-1: USB disconnect, device number 45 [ 245.057668][ T63] uclogic 0003:256C:006D.00AA: v1 buttonpad probing failed: -71 [ 245.065137][ T63] uclogic 0003:256C:006D.00AA: failed probing parameters: -71 [ 245.072534][ T63] uclogic: probe of 0003:256C:006D.00AA failed with error -71 [ 245.080510][ T63] usb 1-1: USB disconnect, device number 40 [ 245.186361][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.197158][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.206719][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.215552][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.224309][ T39] usb 2-1: config 0 descriptor?? [ 245.237572][ T4376] loop4: detected capacity change from 0 to 256 [ 245.452309][ T30] audit: type=1326 audit(1719416384.924:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4375 comm="syz.4.1174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f693d469ae9 code=0x0 [ 245.992869][ T4388] loop2: detected capacity change from 0 to 40427 [ 246.097913][ T4388] F2FS-fs (loop2): invalid crc value [ 246.104934][ T4388] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.129332][ T4388] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.149157][ T4394] loop4: detected capacity change from 0 to 512 [ 246.192292][ T63] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 246.207189][ T4394] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.228350][ T4394] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 246.242768][ T4394] EXT4-fs (loop4): 1 truncate cleaned up [ 246.248392][ T4394] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 246.326120][ T4399] overlayfs: failed to resolve './file0': -2 [ 246.621965][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.639869][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.649818][ T39] uclogic 0003:256C:006D.00AB: failed retrieving Huion firmware version: -71 [ 246.660072][ T39] uclogic 0003:256C:006D.00AB: failed probing parameters: -71 [ 246.667689][ T63] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 246.676773][ T39] uclogic: probe of 0003:256C:006D.00AB failed with error -71 [ 246.688701][ T39] usb 2-1: USB disconnect, device number 44 [ 246.695402][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.724874][ T63] usb 4-1: config 0 descriptor?? [ 246.773089][ T3454] attempt to access beyond end of device [ 246.773089][ T3454] loop2: rw=2049, want=45104, limit=40427 [ 246.775833][ T4404] loop0: detected capacity change from 0 to 512 [ 246.843375][ T4404] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 246.857747][ T4404] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 246.872300][ T4404] EXT4-fs (loop0): 1 truncate cleaned up [ 246.877765][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 246.970472][ T4409] loop2: detected capacity change from 0 to 8192 [ 247.026492][ T4409] loop2: p2 p3 p4 [ 247.030177][ T4409] loop2: p2 start 14935 is beyond EOD, truncated [ 247.041754][ T4409] loop2: p3 size 196608 extends beyond EOD, truncated [ 247.054266][ T4409] loop2: p4 start 4026530307 is beyond EOD, truncated [ 247.148254][ T4409] overlayfs: missing 'lowerdir' [ 247.322057][ T4417] loop2: detected capacity change from 0 to 8192 [ 247.339200][ T4422] loop1: detected capacity change from 0 to 128 [ 247.370563][ T4417] loop2: p2 p3 p4 [ 247.376361][ T4417] loop2: p2 start 14935 is beyond EOD, truncated [ 247.382575][ T4417] loop2: p3 size 196608 extends beyond EOD, truncated [ 247.391656][ T4417] loop2: p4 start 4026530307 is beyond EOD, truncated [ 247.416783][ T100] loop2: p2 p3 p4 [ 247.550345][ T100] loop2: p2 start 14935 is beyond EOD, truncated [ 247.561138][ T100] loop2: p3 size 196608 extends beyond EOD, truncated [ 247.603167][ T100] loop2: p4 start 4026530307 is beyond EOD, truncated [ 247.700553][ T4417] overlayfs: missing 'lowerdir' [ 248.066392][ T63] uclogic 0003:256C:006D.00AC: failed retrieving string descriptor #100: -71 [ 248.075379][ T63] uclogic 0003:256C:006D.00AC: failed retrieving pen parameters: -71 [ 248.083655][ T63] uclogic 0003:256C:006D.00AC: failed probing pen v1 parameters: -71 [ 248.097226][ T63] uclogic 0003:256C:006D.00AC: failed probing parameters: -71 [ 248.118333][ T63] uclogic: probe of 0003:256C:006D.00AC failed with error -71 [ 248.118904][ T4436] loop0: detected capacity change from 0 to 256 [ 248.126551][ T63] usb 4-1: USB disconnect, device number 42 [ 248.195919][ T4437] overlayfs: failed to resolve './file0': -2 [ 248.536277][ T30] audit: type=1326 audit(1719416388.004:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.0.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f389d3ae9 code=0x0 [ 248.759788][ T4450] incfs: Backing dir is not set, filesystem can't be mounted. [ 248.776319][ T63] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 248.784491][ T4450] incfs: mount failed -2 [ 248.837918][ T4452] loop3: detected capacity change from 0 to 8192 [ 248.886578][ T4452] loop3: p2 p3 p4 [ 248.890602][ T4452] loop3: p2 start 14935 is beyond EOD, truncated [ 248.897057][ T4452] loop3: p3 size 196608 extends beyond EOD, truncated [ 248.904268][ T4452] loop3: p4 start 4026530307 is beyond EOD, truncated [ 248.942221][ T4452] overlayfs: missing 'lowerdir' [ 248.981699][ T4454] loop2: detected capacity change from 0 to 40427 [ 249.062723][ T4454] F2FS-fs (loop2): invalid crc value [ 249.087135][ T4454] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.150688][ T4454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.166480][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.200884][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.306662][ T63] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 249.316918][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.342500][ T63] usb 2-1: config 0 descriptor?? [ 249.695111][ T4466] overlayfs: failed to resolve './file0': -2 [ 249.916603][ T3454] attempt to access beyond end of device [ 249.916603][ T3454] loop2: rw=2049, want=45104, limit=40427 [ 249.999064][ T4458] loop3: detected capacity change from 0 to 40427 [ 250.051412][ T4458] F2FS-fs (loop3): invalid crc value [ 250.060717][ T4458] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.136309][ T4458] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 250.351243][ T4477] overlayfs: failed to resolve './file0': -2 [ 250.468621][ T4447] UDC core: couldn't find an available UDC or it's busy: -16 [ 250.488198][ T4447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.536399][ T4251] attempt to access beyond end of device [ 250.536399][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 250.656272][ T309] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 250.704023][ T4481] loop3: detected capacity change from 0 to 128 [ 250.756646][ T4461] loop4: detected capacity change from 0 to 131072 [ 250.784262][ T4461] F2FS-fs (loop4): Test dummy encryption mode enabled [ 250.796935][ T4461] F2FS-fs (loop4): invalid crc value [ 250.806402][ T4461] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.832430][ T4461] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.843584][ T4461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1198'. [ 250.880114][ T3231] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 251.246323][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.257171][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.267127][ T309] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.276023][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.291170][ T309] usb 3-1: config 0 descriptor?? [ 251.326317][ T63] uclogic 0003:256C:006D.00AD: v1 buttonpad probing failed: -71 [ 251.342402][ T63] uclogic 0003:256C:006D.00AD: failed probing parameters: -71 [ 251.349992][ T63] uclogic: probe of 0003:256C:006D.00AD failed with error -71 [ 251.359956][ T63] usb 2-1: USB disconnect, device number 45 [ 251.495046][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.501979][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.509160][ T4497] device bridge_slave_0 entered promiscuous mode [ 251.515763][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.522723][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.529893][ T4497] device bridge_slave_1 entered promiscuous mode [ 251.585582][ T4497] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.592450][ T4497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.599584][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.606427][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.631245][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.639476][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.647087][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.662621][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.672730][ T2261] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.679587][ T2261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.687042][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.695019][ T2261] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.701870][ T2261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.719610][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.963972][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.977694][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.989757][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.011411][ T4506] loop0: detected capacity change from 0 to 8192 [ 252.020519][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.054924][ T4511] overlayfs: missing 'lowerdir' [ 252.079573][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.081928][ T4506] loop0: p2 p3 p4 [ 252.088302][ T4497] device veth0_vlan entered promiscuous mode [ 252.091350][ T4506] loop0: p2 start 14935 is beyond EOD, truncated [ 252.102776][ T4506] loop0: p3 size 196608 extends beyond EOD, truncated [ 252.110922][ T4506] loop0: p4 start 4026530307 is beyond EOD, truncated [ 252.118315][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.125527][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.135122][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.143383][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.152563][ T4497] device veth1_macvtap entered promiscuous mode [ 252.169031][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.176834][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.184902][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.194269][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.202991][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.224488][ T312] udevd[312]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 252.258563][ T312] udevd[312]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 252.377470][ T824] device bridge_slave_1 left promiscuous mode [ 252.383465][ T824] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.390749][ T824] device bridge_slave_0 left promiscuous mode [ 252.396776][ T824] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.404323][ T824] device veth1_macvtap left promiscuous mode [ 252.410247][ T824] device veth0_vlan left promiscuous mode [ 252.466286][ T295] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 252.566309][ T309] uclogic 0003:256C:006D.00AE: failed retrieving Huion firmware version: -71 [ 252.574992][ T309] uclogic 0003:256C:006D.00AE: failed probing parameters: -71 [ 252.589359][ T309] uclogic: probe of 0003:256C:006D.00AE failed with error -71 [ 252.610586][ T309] usb 3-1: USB disconnect, device number 43 [ 252.836418][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.847325][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.857130][ T295] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 252.866008][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.874874][ T295] usb 1-1: config 0 descriptor?? [ 253.025792][ T4526] loop1: detected capacity change from 0 to 512 [ 253.057102][ T4526] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.105217][ T4530] loop4: detected capacity change from 0 to 128 [ 253.118640][ T4526] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 253.133229][ T4526] EXT4-fs (loop1): 1 truncate cleaned up [ 253.202990][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 253.317385][ T4532] loop2: detected capacity change from 0 to 40427 [ 253.382785][ T4532] F2FS-fs (loop2): invalid crc value [ 253.408582][ T4532] F2FS-fs (loop2): Found nat_bits in checkpoint [ 253.501412][ T4532] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 253.796298][ T350] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 253.859162][ T4547] overlayfs: failed to resolve './file0': -2 [ 254.010011][ T3454] attempt to access beyond end of device [ 254.010011][ T3454] loop2: rw=2049, want=45104, limit=40427 [ 254.087644][ T295] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00AF/input/input101 [ 254.095831][ T4554] loop4: detected capacity change from 0 to 8192 [ 254.108549][ T295] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00AF/input/input102 [ 254.123025][ T295] uclogic 0003:256C:006D.00AF: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 254.150921][ T4554] loop4: p2 p3 p4 [ 254.154720][ T4554] loop4: p2 start 14935 is beyond EOD, truncated [ 254.160946][ T4554] loop4: p3 size 196608 extends beyond EOD, truncated [ 254.176734][ T4554] loop4: p4 start 4026530307 is beyond EOD, truncated [ 254.221962][ T4554] overlayfs: missing 'lowerdir' [ 254.233112][ T4556] loop2: detected capacity change from 0 to 8192 [ 254.266504][ T4556] loop2: p2 p3 p4 [ 254.270132][ T4556] loop2: p2 start 14935 is beyond EOD, truncated [ 254.276325][ T4556] loop2: p3 size 196608 extends beyond EOD, truncated [ 254.283629][ T4556] loop2: p4 start 4026530307 is beyond EOD, truncated [ 254.290607][ T435] usb 1-1: USB disconnect, device number 41 [ 254.306302][ T314] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 254.356658][ T100] loop2: p2 p3 p4 [ 254.357803][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.360274][ T100] loop2: p2 start 14935 is beyond EOD, truncated [ 254.377767][ T100] loop2: p3 size 196608 extends beyond EOD, truncated [ 254.384382][ T350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.384826][ T100] loop2: p4 start 4026530307 is beyond EOD, truncated [ 254.402175][ T350] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.411270][ T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.620073][ T4562] overlayfs: missing 'lowerdir' [ 254.651677][ T350] usb 4-1: config 0 descriptor?? [ 254.706376][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.717318][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.726834][ T314] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.735640][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.743984][ T314] usb 2-1: config 0 descriptor?? [ 254.760786][ T4564] loop2: detected capacity change from 0 to 256 [ 254.996687][ T30] audit: type=1326 audit(1719416394.474:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.2.1225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f81345ae9 code=0x0 [ 255.186290][ T295] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 255.458910][ T4551] UDC core: couldn't find an available UDC or it's busy: -16 [ 255.466692][ T4551] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 255.746065][ T4577] loop2: detected capacity change from 0 to 40427 [ 255.752419][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.763432][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.769785][ T4577] F2FS-fs (loop2): invalid crc value [ 255.773210][ T295] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 255.779584][ T4577] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.786955][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.810783][ T295] usb 1-1: config 0 descriptor?? [ 255.816194][ T4577] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.984406][ T4581] overlayfs: failed to resolve './file0': -2 [ 256.136345][ T350] uclogic 0003:256C:006D.00B0: v1 buttonpad probing failed: -71 [ 256.144167][ T350] uclogic 0003:256C:006D.00B0: failed probing parameters: -71 [ 256.152963][ T350] uclogic: probe of 0003:256C:006D.00B0 failed with error -71 [ 256.166986][ T350] usb 4-1: USB disconnect, device number 43 [ 256.236363][ T314] uclogic 0003:256C:006D.00B1: v1 buttonpad probing failed: -71 [ 256.243926][ T314] uclogic 0003:256C:006D.00B1: failed probing parameters: -71 [ 256.251508][ T314] uclogic: probe of 0003:256C:006D.00B1 failed with error -71 [ 256.263227][ T314] usb 2-1: USB disconnect, device number 46 [ 256.268154][ T4584] loop4: detected capacity change from 0 to 40427 [ 256.357818][ T4584] F2FS-fs (loop4): invalid crc value [ 256.365019][ T4584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 256.386983][ T4584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 256.642813][ T4588] overlayfs: failed to resolve './file0': -2 [ 256.691516][ T3454] attempt to access beyond end of device [ 256.691516][ T3454] loop2: rw=2049, want=45104, limit=40427 [ 256.833226][ T4591] loop3: detected capacity change from 0 to 128 [ 257.035541][ T4497] attempt to access beyond end of device [ 257.035541][ T4497] loop4: rw=2049, want=45104, limit=40427 [ 257.116322][ T295] uclogic 0003:256C:006D.00B2: failed retrieving Huion firmware version: -71 [ 257.125481][ T4595] loop1: detected capacity change from 0 to 40427 [ 257.131762][ T314] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 257.131836][ T295] uclogic 0003:256C:006D.00B2: failed probing parameters: -71 [ 257.155146][ T295] uclogic: probe of 0003:256C:006D.00B2 failed with error -71 [ 257.166859][ T295] usb 1-1: USB disconnect, device number 42 [ 257.212679][ T4595] F2FS-fs (loop1): invalid crc value [ 257.221188][ T4595] F2FS-fs (loop1): Found nat_bits in checkpoint [ 257.296171][ T4595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 257.540611][ T4606] overlayfs: failed to resolve './file0': -2 [ 257.552849][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.569980][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.587707][ T314] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.604150][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.617353][ T314] usb 3-1: config 0 descriptor?? [ 257.982417][ T4615] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 257.996706][ T4309] attempt to access beyond end of device [ 257.996706][ T4309] loop1: rw=2049, want=45104, limit=40427 [ 258.004184][ T4615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 258.133956][ T4618] loop3: detected capacity change from 0 to 256 [ 258.387918][ T30] audit: type=1326 audit(1719416397.854:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4617 comm="syz.3.1239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d1e300ae9 code=0x0 [ 258.638538][ T4628] loop4: detected capacity change from 0 to 512 [ 258.639712][ T4630] loop0: detected capacity change from 0 to 512 [ 258.689464][ T4630] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.706966][ T4628] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 258.734695][ T4630] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 258.735413][ T4628] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 258.763507][ T4630] EXT4-fs (loop0): 1 truncate cleaned up [ 258.763748][ T4628] EXT4-fs (loop4): 1 truncate cleaned up [ 258.774547][ T4628] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 258.782336][ T4630] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 259.186539][ T314] uclogic 0003:256C:006D.00B3: failed retrieving string descriptor #100: -71 [ 259.205309][ T314] uclogic 0003:256C:006D.00B3: failed retrieving pen parameters: -71 [ 259.223534][ T314] uclogic 0003:256C:006D.00B3: failed probing pen v1 parameters: -71 [ 259.233614][ T314] uclogic 0003:256C:006D.00B3: failed probing parameters: -71 [ 259.247496][ T314] uclogic: probe of 0003:256C:006D.00B3 failed with error -71 [ 259.259172][ T314] usb 3-1: USB disconnect, device number 44 [ 259.375651][ T4644] loop3: detected capacity change from 0 to 8192 [ 259.416528][ T4644] loop3: p2 p3 p4 [ 259.420184][ T4644] loop3: p2 start 14935 is beyond EOD, truncated [ 259.431513][ T4644] loop3: p3 size 196608 extends beyond EOD, truncated [ 259.440467][ T4644] loop3: p4 start 4026530307 is beyond EOD, truncated [ 259.507312][ T4644] overlayfs: missing 'lowerdir' [ 259.566299][ T63] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 259.597634][ T4650] loop3: detected capacity change from 0 to 128 [ 259.806792][ T20] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 259.946517][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.964404][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.974096][ T63] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.983075][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.993230][ T63] usb 2-1: config 0 descriptor?? [ 260.216329][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.227048][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.236820][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 260.245676][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.254085][ T20] usb 5-1: config 0 descriptor?? [ 261.080213][ T4674] loop2: detected capacity change from 0 to 40427 [ 261.177964][ T4674] F2FS-fs (loop2): invalid crc value [ 261.184293][ T4674] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.206988][ T4674] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.385083][ T4680] overlayfs: failed to resolve './file0': -2 [ 261.516468][ T63] uclogic 0003:256C:006D.00B4: v1 buttonpad probing failed: -71 [ 261.530638][ T63] uclogic 0003:256C:006D.00B4: failed probing parameters: -71 [ 261.548168][ T63] uclogic: probe of 0003:256C:006D.00B4 failed with error -71 [ 261.568381][ T63] usb 2-1: USB disconnect, device number 47 [ 261.586605][ T20] uclogic 0003:256C:006D.00B5: failed retrieving Huion firmware version: -71 [ 261.598782][ T20] uclogic 0003:256C:006D.00B5: failed probing parameters: -71 [ 261.606064][ T20] uclogic: probe of 0003:256C:006D.00B5 failed with error -71 [ 261.615172][ T20] usb 5-1: USB disconnect, device number 46 [ 261.646049][ T3454] attempt to access beyond end of device [ 261.646049][ T3454] loop2: rw=2049, want=45104, limit=40427 [ 261.730616][ T4686] loop3: detected capacity change from 0 to 8192 [ 261.732706][ T4688] loop0: detected capacity change from 0 to 8192 [ 261.756553][ T4688] loop0: p2 p3 p4 [ 261.756565][ T4686] loop3: p2 p3 p4 [ 261.756641][ T4686] loop3: p2 start 14935 is beyond EOD, [ 261.760177][ T4688] loop0: p2 start 14935 is beyond EOD, [ 261.764026][ T4686] truncated [ 261.777679][ T4686] loop3: p3 size 196608 extends beyond EOD, truncated [ 261.785216][ T4688] truncated [ 261.791036][ T4688] loop0: p3 size 196608 extends beyond EOD, truncated [ 261.794236][ T4690] loop2: detected capacity change from 0 to 512 [ 261.798076][ T4686] loop3: p4 start 4026530307 is beyond EOD, truncated [ 261.804189][ T4688] loop0: p4 start 4026530307 is beyond EOD, truncated [ 261.856730][ T4688] overlayfs: missing 'lowerdir' [ 261.876631][ T4690] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.882793][ T100] loop3: p2 p3 p4 [ 261.890366][ T4686] overlayfs: missing 'lowerdir' [ 261.895260][ T100] loop3: p2 start 14935 is beyond EOD, truncated [ 261.901748][ T100] loop3: p3 size 196608 extends beyond EOD, truncated [ 261.908205][ T4690] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 261.922901][ T100] loop3: p4 start 4026530307 is beyond EOD, truncated [ 261.923551][ T4690] EXT4-fs (loop2): 1 truncate cleaned up [ 261.934996][ T4690] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 262.043170][ T4697] loop0: detected capacity change from 0 to 512 [ 262.397895][ T4697] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.454980][ T312] udevd[312]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 262.498330][ T4697] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 262.515515][ T4697] EXT4-fs (loop0): 1 truncate cleaned up [ 262.521173][ T4697] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 262.806289][ T350] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 262.972673][ T4717] loop1: detected capacity change from 0 to 256 [ 263.125196][ T4722] overlayfs: missing 'lowerdir' [ 263.326452][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.339431][ T30] audit: type=1326 audit(1719416402.814:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.1.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6276e7bae9 code=0x0 [ 263.342286][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.422638][ T350] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.444310][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.468329][ T350] usb 5-1: config 0 descriptor?? [ 263.745863][ T4728] loop3: detected capacity change from 0 to 40427 [ 263.804242][ T4734] loop2: detected capacity change from 0 to 512 [ 263.830000][ T4728] F2FS-fs (loop3): invalid crc value [ 263.853431][ T4728] F2FS-fs (loop3): Found nat_bits in checkpoint [ 263.876286][ T4728] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 263.906928][ T4734] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 263.940909][ T4734] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 263.950901][ T4740] loop1: detected capacity change from 0 to 8192 [ 263.955442][ T4734] EXT4-fs (loop2): 1 truncate cleaned up [ 263.967658][ T4734] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 263.981290][ T4740] loop1: p2 p3 p4 [ 263.985566][ T4740] loop1: p2 start 14935 is beyond EOD, truncated [ 263.994306][ T4740] loop1: p3 size 196608 extends beyond EOD, truncated [ 264.028170][ T4740] loop1: p4 start 4026530307 is beyond EOD, truncated [ 264.065714][ T4745] overlayfs: failed to resolve './file0': -2 [ 264.146503][ T63] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 264.227447][ T4740] overlayfs: missing 'lowerdir' [ 264.266994][ T4251] attempt to access beyond end of device [ 264.266994][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 264.340318][ T4749] overlayfs: missing 'workdir' [ 264.416365][ T350] usb 5-1: string descriptor 0 read error: -71 [ 264.428564][ T4753] loop1: detected capacity change from 0 to 512 [ 264.436708][ T350] uclogic 0003:256C:006D.00B6: failed retrieving string descriptor #200: -71 [ 264.451459][ T350] uclogic 0003:256C:006D.00B6: failed retrieving pen parameters: -71 [ 264.475848][ T350] uclogic 0003:256C:006D.00B6: failed probing pen v2 parameters: -71 [ 264.484529][ T4755] loop3: detected capacity change from 0 to 512 [ 264.490699][ T350] uclogic 0003:256C:006D.00B6: failed probing parameters: -71 [ 264.499219][ T4753] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.515131][ T350] uclogic: probe of 0003:256C:006D.00B6 failed with error -71 [ 264.527674][ T350] usb 5-1: USB disconnect, device number 47 [ 264.536390][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.540332][ T4753] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 264.561708][ T4753] EXT4-fs (loop1): 1 truncate cleaned up [ 264.568440][ T4753] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 264.568511][ T4755] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.570890][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.608401][ T4755] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 264.623018][ T4755] EXT4-fs (loop3): 1 truncate cleaned up [ 264.628971][ T4755] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 264.696268][ T63] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 264.769178][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.847684][ T63] usb 1-1: config 0 descriptor?? [ 265.056506][ T4763] loop2: detected capacity change from 0 to 512 [ 265.087656][ T4763] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.108324][ T4763] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 265.122958][ T4763] EXT4-fs (loop2): 1 truncate cleaned up [ 265.128852][ T4763] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 265.333837][ T4774] loop1: detected capacity change from 0 to 256 [ 265.607957][ T30] audit: type=1326 audit(1719416405.084:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4773 comm="syz.1.1279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6276e7bae9 code=0x0 [ 265.963910][ T4783] loop4: detected capacity change from 0 to 256 [ 266.277205][ T30] audit: type=1326 audit(1719416405.754:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.1283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a66549ae9 code=0x0 [ 266.386263][ T39] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 266.416389][ T63] uclogic 0003:256C:006D.00B7: v1 buttonpad probing failed: -71 [ 266.423863][ T63] uclogic 0003:256C:006D.00B7: failed probing parameters: -71 [ 266.447799][ T63] uclogic: probe of 0003:256C:006D.00B7 failed with error -71 [ 266.472319][ T63] usb 1-1: USB disconnect, device number 43 [ 266.559093][ T4795] loop1: detected capacity change from 0 to 40427 [ 266.638011][ T4795] F2FS-fs (loop1): invalid crc value [ 266.644249][ T4795] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.668219][ T4795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 266.786394][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.840769][ T4802] overlayfs: failed to resolve './file0': -2 [ 266.866867][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.890801][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 266.900022][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.946047][ T39] usb 3-1: config 0 descriptor?? [ 267.009808][ T4805] loop3: detected capacity change from 0 to 8192 [ 267.013173][ T4807] loop4: detected capacity change from 0 to 512 [ 267.026616][ T4805] loop3: p2 p3 p4 [ 267.030195][ T4805] loop3: p2 start 14935 is beyond EOD, truncated [ 267.036406][ T4805] loop3: p3 size 196608 extends beyond EOD, truncated [ 267.043363][ T4805] loop3: p4 start 4026530307 is beyond EOD, truncated [ 267.060976][ T4807] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.063819][ T4811] loop0: detected capacity change from 0 to 512 [ 267.092089][ T4811] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 267.115027][ T4807] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 267.134175][ T4811] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 267.152601][ T4811] EXT4-fs (loop0): 1 truncate cleaned up [ 267.158815][ T4807] EXT4-fs (loop4): 1 truncate cleaned up [ 267.161375][ T4811] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 267.183305][ T4807] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 267.202688][ T4309] attempt to access beyond end of device [ 267.202688][ T4309] loop1: rw=2049, want=45104, limit=40427 [ 267.228222][ T4805] overlayfs: missing 'lowerdir' [ 267.439131][ T4819] loop3: detected capacity change from 0 to 8192 [ 267.508089][ T4819] loop3: p2 p3 p4 [ 267.513468][ T4819] loop3: p2 start 14935 is beyond EOD, truncated [ 267.521350][ T4819] loop3: p3 size 196608 extends beyond EOD, truncated [ 267.528854][ T4819] loop3: p4 start 4026530307 is beyond EOD, truncated [ 267.615474][ T4819] overlayfs: missing 'lowerdir' [ 267.899540][ T4841] loop3: detected capacity change from 0 to 256 [ 268.068196][ T30] audit: type=1326 audit(1719416407.544:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.3.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d1e300ae9 code=0x0 [ 268.156283][ T982] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 268.166636][ T39] uclogic 0003:256C:006D.00B8: failed retrieving string descriptor #100: -71 [ 268.177050][ T39] uclogic 0003:256C:006D.00B8: failed retrieving pen parameters: -71 [ 268.185066][ T39] uclogic 0003:256C:006D.00B8: failed probing pen v1 parameters: -71 [ 268.194391][ T39] uclogic 0003:256C:006D.00B8: failed probing parameters: -71 [ 268.202030][ T39] uclogic: probe of 0003:256C:006D.00B8 failed with error -71 [ 268.210831][ T39] usb 3-1: USB disconnect, device number 45 [ 268.356283][ T659] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 268.516319][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.527073][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.536581][ T982] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 268.545402][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.554155][ T982] usb 5-1: config 0 descriptor?? [ 268.682405][ T4850] loop2: detected capacity change from 0 to 8192 [ 268.716349][ T659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.726573][ T4850] loop2: p2 p3 p4 [ 268.727120][ T659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.731155][ T4850] loop2: p2 start 14935 is beyond EOD, [ 268.740450][ T659] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 268.742716][ T4850] truncated [ 268.745835][ T659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.754812][ T4850] loop2: p3 size 196608 extends beyond EOD, [ 268.758499][ T659] usb 1-1: config 0 descriptor?? [ 268.766090][ T4850] truncated [ 268.782982][ T4850] loop2: p4 start 4026530307 is beyond EOD, truncated [ 268.801984][ T100] loop2: p2 p3 p4 [ 268.805595][ T100] loop2: p2 start 14935 is beyond EOD, truncated [ 268.811774][ T100] loop2: p3 size 196608 extends beyond EOD, truncated [ 268.818809][ T100] loop2: p4 start 4026530307 is beyond EOD, truncated [ 268.852573][ T4850] overlayfs: missing 'lowerdir' [ 268.923081][ T4856] loop3: detected capacity change from 0 to 8192 [ 268.930814][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 268.946274][ T39] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 268.953985][ T4856] loop3: p2 p3 p4 [ 268.958344][ T4856] loop3: p2 start 14935 is beyond EOD, truncated [ 268.964549][ T4856] loop3: p3 size 196608 extends beyond EOD, truncated [ 268.971734][ T4856] loop3: p4 start 4026530307 is beyond EOD, truncated [ 268.990295][ T100] loop3: p2 p3 p4 [ 268.993950][ T100] loop3: p2 start 14935 is beyond EOD, truncated [ 269.000147][ T100] loop3: p3 size 196608 extends beyond EOD, truncated [ 269.008241][ T100] loop3: p4 start 4026530307 is beyond EOD, truncated [ 269.062109][ T4856] overlayfs: missing 'lowerdir' [ 269.096490][ T4858] loop2: detected capacity change from 0 to 40427 [ 269.186277][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 269.197963][ T4858] F2FS-fs (loop2): invalid crc value [ 269.207409][ T4858] F2FS-fs (loop2): Found nat_bits in checkpoint [ 269.229166][ T4858] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 269.306307][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 269.317431][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 269.328517][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 269.337429][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.346664][ T39] usb 2-1: config 0 descriptor?? [ 269.410714][ T4866] overlayfs: failed to resolve './file0': -2 [ 269.497442][ T4852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 269.507841][ T39] hub 2-1:0.0: USB hub found [ 269.726440][ T39] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 269.796537][ T3454] attempt to access beyond end of device [ 269.796537][ T3454] loop2: rw=2049, want=45104, limit=40427 [ 270.016350][ T982] uclogic 0003:256C:006D.00B9: v1 buttonpad probing failed: -71 [ 270.024306][ T659] uclogic 0003:256C:006D.00BA: failed retrieving Huion firmware version: -71 [ 270.033096][ T982] uclogic 0003:256C:006D.00B9: failed probing parameters: -71 [ 270.040496][ T659] uclogic 0003:256C:006D.00BA: failed probing parameters: -71 [ 270.048284][ T982] uclogic: probe of 0003:256C:006D.00B9 failed with error -71 [ 270.056290][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 270.062109][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 270.068753][ T982] usb 5-1: USB disconnect, device number 48 [ 270.075274][ T659] uclogic: probe of 0003:256C:006D.00BA failed with error -71 [ 270.086736][ T659] usb 1-1: USB disconnect, device number 44 [ 270.106522][ T39] usb 2-1: USB disconnect, device number 48 [ 270.124508][ T4878] loop2: detected capacity change from 0 to 512 [ 270.149251][ T4878] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 270.172534][ T4878] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 270.187866][ T4878] EXT4-fs (loop2): 1 truncate cleaned up [ 270.193324][ T4878] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 270.534085][ T4891] loop4: detected capacity change from 0 to 256 [ 270.854470][ T4897] loop4: detected capacity change from 0 to 8192 [ 270.866903][ T4897] loop4: p2 p3 p4 [ 270.870565][ T4897] loop4: p2 start 14935 is beyond EOD, truncated [ 270.876805][ T4897] loop4: p3 size 196608 extends beyond EOD, truncated [ 270.883716][ T4897] loop4: p4 start 4026530307 is beyond EOD, truncated [ 270.930425][ T4897] overlayfs: missing 'lowerdir' [ 271.134584][ T4905] overlayfs: missing 'lowerdir' [ 271.408373][ T4911] loop3: detected capacity change from 0 to 40427 [ 271.490951][ T4911] F2FS-fs (loop3): invalid crc value [ 271.501580][ T4911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 271.503072][ T4921] loop1: detected capacity change from 0 to 256 [ 271.527738][ T4911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 271.698460][ T4926] overlayfs: failed to resolve './file0': -2 [ 271.788189][ T4924] loop1: detected capacity change from 0 to 8192 [ 271.837194][ T4924] loop1: p2 p3 p4 [ 271.851518][ T4924] loop1: p2 start 14935 is beyond EOD, truncated [ 271.862565][ T4924] loop1: p3 size 196608 extends beyond EOD, truncated [ 271.862808][ T4928] loop0: detected capacity change from 0 to 256 [ 271.876042][ T4924] loop1: p4 start 4026530307 is beyond EOD, truncated [ 271.985684][ T4931] loop2: detected capacity change from 0 to 8192 [ 271.999927][ T4924] overlayfs: missing 'lowerdir' [ 272.016618][ T4931] loop2: p2 p3 p4 [ 272.020301][ T4931] loop2: p2 start 14935 is beyond EOD, truncated [ 272.026697][ T4931] loop2: p3 size 196608 extends beyond EOD, truncated [ 272.033654][ T4931] loop2: p4 start 4026530307 is beyond EOD, truncated [ 272.041833][ T100] loop2: p2 p3 p4 [ 272.045476][ T100] loop2: p2 start 14935 is beyond EOD, truncated [ 272.051724][ T100] loop2: p3 size 196608 extends beyond EOD, truncated [ 272.288751][ T30] audit: type=1326 audit(1719416411.594:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4927 comm="syz.0.1329" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f389d3ae9 code=0x0 [ 272.312429][ T100] loop2: p4 start 4026530307 is beyond EOD, truncated [ 272.319279][ T4251] attempt to access beyond end of device [ 272.319279][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 272.336548][ T4936] loop4: detected capacity change from 0 to 512 [ 272.353172][ T4938] loop1: detected capacity change from 0 to 512 [ 272.397610][ T4936] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.407499][ T4931] overlayfs: missing 'lowerdir' [ 272.412678][ T4938] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.448725][ T4938] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 272.463176][ T4936] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 272.467064][ T4938] EXT4-fs (loop1): 1 truncate cleaned up [ 272.483550][ T4936] EXT4-fs (loop4): 1 truncate cleaned up [ 272.489725][ T4938] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 272.493882][ T4936] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 272.523698][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 273.572627][ T4965] loop3: detected capacity change from 0 to 256 [ 273.604116][ T4963] loop2: detected capacity change from 0 to 8192 [ 273.631069][ T4963] loop2: p2 p3 p4 [ 273.640961][ T4963] loop2: p2 start 14935 is beyond EOD, truncated [ 273.656281][ T4963] loop2: p3 size 196608 extends beyond EOD, truncated [ 273.676516][ T4963] loop2: p4 start 4026530307 is beyond EOD, truncated [ 273.697302][ T4967] loop0: detected capacity change from 0 to 8192 [ 273.726599][ T4967] loop0: p2 p3 p4 [ 273.730496][ T4967] loop0: p2 start 14935 is beyond EOD, truncated [ 273.736729][ T4967] loop0: p3 size 196608 extends beyond EOD, truncated [ 273.750785][ T4967] loop0: p4 start 4026530307 is beyond EOD, truncated [ 273.801348][ T4963] overlayfs: missing 'lowerdir' [ 273.847750][ T4967] overlayfs: missing 'lowerdir' [ 273.938796][ T4974] loop3: detected capacity change from 0 to 40427 [ 274.039943][ T4974] F2FS-fs (loop3): invalid crc value [ 274.060658][ T4974] F2FS-fs (loop3): Found nat_bits in checkpoint [ 274.102987][ T4974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 274.332867][ T4993] overlayfs: failed to resolve './file0': -2 [ 274.349765][ T39] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 274.444206][ T4992] loop4: detected capacity change from 0 to 8192 [ 274.482681][ T4992] loop4: p2 p3 p4 [ 274.486488][ T4992] loop4: p2 start 14935 is beyond EOD, truncated [ 274.492907][ T4992] loop4: p3 size 196608 extends beyond EOD, truncated [ 274.501741][ T4992] loop4: p4 start 4026530307 is beyond EOD, truncated [ 274.599438][ T4992] overlayfs: missing 'lowerdir' [ 274.629676][ T4251] attempt to access beyond end of device [ 274.629676][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 274.806337][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.824323][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.870481][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 274.949174][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.042313][ T39] usb 3-1: config 0 descriptor?? [ 275.077718][ T5009] loop0: detected capacity change from 0 to 256 [ 275.127907][ T30] audit: type=1326 audit(1719416414.604:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.1353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f389d3ae9 code=0x0 [ 275.191791][ T5007] loop3: detected capacity change from 0 to 40427 [ 275.277897][ T5007] F2FS-fs (loop3): invalid crc value [ 275.285145][ T5007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 275.310762][ T5007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 275.463659][ T5015] overlayfs: failed to resolve './file0': -2 [ 275.497763][ T5017] loop1: detected capacity change from 0 to 256 [ 275.683935][ T30] audit: type=1326 audit(1719416415.154:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5016 comm="syz.1.1355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6276e7bae9 code=0x0 [ 275.909121][ T4251] attempt to access beyond end of device [ 275.909121][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 275.923061][ T350] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 276.080923][ T5030] loop3: detected capacity change from 0 to 8192 [ 276.107121][ T5030] loop3: p2 p3 p4 [ 276.111705][ T5030] loop3: p2 start 14935 is beyond EOD, truncated [ 276.119284][ T5030] loop3: p3 size 196608 extends beyond EOD, truncated [ 276.126187][ T5030] loop3: p4 start 4026530307 is beyond EOD, truncated [ 276.208462][ T5030] overlayfs: missing 'lowerdir' [ 276.266327][ T39] uclogic 0003:256C:006D.00BB: failed retrieving string descriptor #100: -71 [ 276.274960][ T39] uclogic 0003:256C:006D.00BB: failed retrieving pen parameters: -71 [ 276.282865][ T39] uclogic 0003:256C:006D.00BB: failed probing pen v1 parameters: -71 [ 276.290787][ T39] uclogic 0003:256C:006D.00BB: failed probing parameters: -71 [ 276.298782][ T39] uclogic: probe of 0003:256C:006D.00BB failed with error -71 [ 276.306414][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.306944][ T39] usb 3-1: USB disconnect, device number 46 [ 276.326107][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.336656][ T350] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 276.351189][ T5035] loop3: detected capacity change from 0 to 512 [ 276.370276][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.379120][ T350] usb 5-1: config 0 descriptor?? [ 276.387372][ T5035] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 276.416000][ T5035] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 276.432732][ T5035] EXT4-fs (loop3): 1 truncate cleaned up [ 276.438240][ T5035] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 277.036469][ T982] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 277.153258][ T5056] loop0: detected capacity change from 0 to 256 [ 277.269899][ T30] audit: type=1326 audit(1719416416.744:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.0.1368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f389d3ae9 code=0x0 [ 277.382812][ T5058] loop3: detected capacity change from 0 to 40427 [ 277.397354][ T5058] F2FS-fs (loop3): invalid crc value [ 277.403560][ T5058] F2FS-fs (loop3): Found nat_bits in checkpoint [ 277.406440][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.409764][ T350] usb 5-1: string descriptor 0 read error: -71 [ 277.430522][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.446335][ T350] uclogic 0003:256C:006D.00BC: failed retrieving string descriptor #200: -71 [ 277.450413][ T982] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 277.458059][ T350] uclogic 0003:256C:006D.00BC: failed retrieving pen parameters: -71 [ 277.478066][ T350] uclogic 0003:256C:006D.00BC: failed probing pen v2 parameters: -71 [ 277.478185][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.487538][ T350] uclogic 0003:256C:006D.00BC: failed probing parameters: -71 [ 277.496554][ T5067] loop1: detected capacity change from 0 to 8192 [ 277.501815][ T350] uclogic: probe of 0003:256C:006D.00BC failed with error -71 [ 277.508068][ T982] usb 3-1: config 0 descriptor?? [ 277.519646][ T5058] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 277.527692][ T350] usb 5-1: USB disconnect, device number 49 [ 277.556662][ T5067] loop1: p2 p3 p4 [ 277.560362][ T5067] loop1: p2 start 14935 is beyond EOD, truncated [ 277.566665][ T5067] loop1: p3 size 196608 extends beyond EOD, truncated [ 277.573720][ T5067] loop1: p4 start 4026530307 is beyond EOD, truncated [ 277.593395][ T100] loop1: p2 p3 p4 [ 277.597102][ T100] loop1: p2 start 14935 is beyond EOD, truncated [ 277.603241][ T100] loop1: p3 size 196608 extends beyond EOD, truncated [ 277.610516][ T100] loop1: p4 start 4026530307 is beyond EOD, truncated [ 277.721002][ T5072] overlayfs: failed to resolve './file0': -2 [ 277.844212][ T5073] overlayfs: missing 'lowerdir' [ 277.980223][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 278.055406][ T5078] loop0: detected capacity change from 0 to 8192 [ 278.112837][ T4251] attempt to access beyond end of device [ 278.112837][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 278.126881][ T5078] loop0: p2 p3 p4 [ 278.134112][ T5078] loop0: p2 start 14935 is beyond EOD, truncated [ 278.151365][ T5078] loop0: p3 size 196608 extends beyond EOD, truncated [ 278.172896][ T5078] loop0: p4 start 4026530307 is beyond EOD, truncated [ 278.309575][ T5078] overlayfs: missing 'lowerdir' [ 278.356296][ T350] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 278.373522][ T5086] loop3: detected capacity change from 0 to 1024 [ 278.443915][ T5086] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.448970][ T5092] loop0: detected capacity change from 0 to 512 [ 278.451746][ T5086] EXT4-fs (loop3): Ignoring removed orlov option [ 278.464324][ T5086] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 278.507126][ T5092] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.528079][ T5092] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 278.542691][ T5092] EXT4-fs (loop0): 1 truncate cleaned up [ 278.548204][ T5092] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 278.706368][ T982] uclogic 0003:256C:006D.00BD: interface is invalid, ignoring [ 278.866337][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.886373][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.895926][ T350] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 278.926257][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.935504][ T350] usb 5-1: config 0 descriptor?? [ 279.156270][ T982] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 279.466351][ T295] usb 3-1: USB disconnect, device number 47 [ 279.546526][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.571090][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.607983][ T982] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 279.626254][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.641828][ T5114] loop2: detected capacity change from 0 to 8192 [ 279.644644][ T982] usb 2-1: config 0 descriptor?? [ 279.696621][ T5114] loop2: p2 p3 p4 [ 279.700267][ T5114] loop2: p2 start 14935 is beyond EOD, truncated [ 279.706463][ T5114] loop2: p3 size 196608 extends beyond EOD, truncated [ 279.713378][ T5114] loop2: p4 start 4026530307 is beyond EOD, truncated [ 279.720070][ T20] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 279.798592][ T5114] overlayfs: missing 'lowerdir' [ 279.846372][ T350] usb 5-1: string descriptor 0 read error: -71 [ 279.868038][ T312] udevd[312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 279.876340][ T350] uclogic 0003:256C:006D.00BE: failed retrieving string descriptor #200: -71 [ 279.886556][ T350] uclogic 0003:256C:006D.00BE: failed retrieving pen parameters: -71 [ 279.894777][ T350] uclogic 0003:256C:006D.00BE: failed probing pen v2 parameters: -71 [ 279.902916][ T350] uclogic 0003:256C:006D.00BE: failed probing parameters: -71 [ 279.910219][ T350] uclogic: probe of 0003:256C:006D.00BE failed with error -71 [ 279.918351][ T350] usb 5-1: USB disconnect, device number 50 [ 280.126455][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.137474][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.147068][ T20] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 280.155859][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.164297][ T20] usb 4-1: config 0 descriptor?? [ 280.206960][ T295] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 280.539907][ T5132] loop0: detected capacity change from 0 to 40427 [ 280.540670][ T5130] loop4: detected capacity change from 0 to 40427 [ 280.588661][ T5130] F2FS-fs (loop4): invalid crc value [ 280.595393][ T5132] F2FS-fs (loop0): invalid crc value [ 280.599724][ T5130] F2FS-fs (loop4): Found nat_bits in checkpoint [ 280.605805][ T5132] F2FS-fs (loop0): Found nat_bits in checkpoint [ 280.606848][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.640960][ T5132] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 280.644082][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.664296][ T295] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 280.673347][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.684994][ T295] usb 3-1: config 0 descriptor?? [ 280.694882][ T5130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 281.519702][ T5138] overlayfs: failed to resolve './file0': -2 [ 281.527981][ T5141] overlayfs: failed to resolve './file0': -2 [ 281.586336][ T982] uclogic 0003:256C:006D.00BF: failed retrieving Huion firmware version: -71 [ 281.594980][ T982] uclogic 0003:256C:006D.00BF: failed probing parameters: -71 [ 281.602262][ T982] uclogic: probe of 0003:256C:006D.00BF failed with error -71 [ 281.610604][ T982] usb 2-1: USB disconnect, device number 49 [ 281.691248][ T2158] attempt to access beyond end of device [ 281.691248][ T2158] loop0: rw=2049, want=45104, limit=40427 [ 281.691475][ T4497] attempt to access beyond end of device [ 281.691475][ T4497] loop4: rw=2049, want=45104, limit=40427 [ 282.347522][ T295] usb 3-1: string descriptor 0 read error: -71 [ 282.366377][ T20] uclogic 0003:256C:006D.00C0: v1 buttonpad probing failed: -71 [ 282.373887][ T295] uclogic 0003:256C:006D.00C1: failed retrieving string descriptor #200: -71 [ 282.382545][ T20] uclogic 0003:256C:006D.00C0: failed probing parameters: -71 [ 282.389762][ T295] uclogic 0003:256C:006D.00C1: failed retrieving pen parameters: -71 [ 282.397662][ T20] uclogic: probe of 0003:256C:006D.00C0 failed with error -71 [ 282.404927][ T295] uclogic 0003:256C:006D.00C1: failed probing pen v2 parameters: -71 [ 282.413464][ T295] uclogic 0003:256C:006D.00C1: failed probing parameters: -71 [ 282.421097][ T20] usb 4-1: USB disconnect, device number 44 [ 282.428076][ T295] uclogic: probe of 0003:256C:006D.00C1 failed with error -71 [ 282.436512][ T295] usb 3-1: USB disconnect, device number 48 [ 282.825616][ T5161] loop0: detected capacity change from 0 to 8192 [ 283.077842][ T5161] loop0: p2 p3 p4 [ 283.083477][ T5161] loop0: p2 start 14935 is beyond EOD, truncated [ 283.100988][ T5161] loop0: p3 size 196608 extends beyond EOD, truncated [ 283.108032][ T5161] loop0: p4 start 4026530307 is beyond EOD, truncated [ 283.147301][ T5161] overlayfs: missing 'lowerdir' [ 283.402206][ T5177] loop3: detected capacity change from 0 to 40427 [ 283.419096][ T5186] overlayfs: failed to resolve './file0': -2 [ 283.520474][ T5177] F2FS-fs (loop3): invalid crc value [ 283.543859][ T5177] F2FS-fs (loop3): Found nat_bits in checkpoint [ 283.565572][ T5184] loop0: detected capacity change from 0 to 40427 [ 283.654959][ T5177] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 283.685325][ T5184] F2FS-fs (loop0): invalid crc value [ 283.718751][ T5184] F2FS-fs (loop0): Found nat_bits in checkpoint [ 283.787214][ T5184] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 284.092178][ T5198] overlayfs: failed to resolve './file0': -2 [ 284.296396][ T4251] attempt to access beyond end of device [ 284.296396][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 284.319620][ T5201] loop2: detected capacity change from 0 to 512 [ 284.421861][ T5204] overlayfs: failed to resolve './file0': -2 [ 284.437410][ T5201] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.470672][ T5201] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 284.485266][ T5201] EXT4-fs (loop2): 1 truncate cleaned up [ 284.491991][ T5201] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 284.737794][ T2158] attempt to access beyond end of device [ 284.737794][ T2158] loop0: rw=2049, want=45104, limit=40427 [ 284.790288][ T350] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 285.376367][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.396277][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.405965][ T350] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 285.424133][ T5229] loop3: detected capacity change from 0 to 8192 [ 285.426250][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.438770][ T350] usb 2-1: config 0 descriptor?? [ 285.454518][ T5229] loop3: p2 p3 p4 [ 285.464678][ T5229] loop3: p2 start 14935 is beyond EOD, truncated [ 285.471384][ T5229] loop3: p3 size 196608 extends beyond EOD, truncated [ 285.480663][ T5229] loop3: p4 start 4026530307 is beyond EOD, truncated [ 285.504078][ T5225] loop0: detected capacity change from 0 to 40427 [ 285.530550][ T5225] F2FS-fs (loop0): invalid crc value [ 285.543878][ T5225] F2FS-fs (loop0): Found nat_bits in checkpoint [ 285.573783][ T5225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 285.587732][ T5229] overlayfs: missing 'lowerdir' [ 285.890467][ T5242] overlayfs: failed to resolve './file0': -2 [ 286.617028][ T2158] attempt to access beyond end of device [ 286.617028][ T2158] loop0: rw=2049, want=45104, limit=40427 [ 286.813074][ T5256] overlayfs: missing 'workdir' [ 286.883253][ T5203] UDC core: couldn't find an available UDC or it's busy: -16 [ 286.938111][ T5203] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 287.004118][ T5258] overlayfs: failed to resolve './file0': -2 [ 287.484917][ T5260] loop0: detected capacity change from 0 to 40427 [ 287.559697][ T5260] F2FS-fs (loop0): invalid crc value [ 287.572161][ T5260] F2FS-fs (loop0): Found nat_bits in checkpoint [ 287.599246][ T5260] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 287.906317][ T350] uclogic 0003:256C:006D.00C2: v1 buttonpad probing failed: -71 [ 287.913821][ T350] uclogic 0003:256C:006D.00C2: failed probing parameters: -71 [ 287.921314][ T350] uclogic: probe of 0003:256C:006D.00C2 failed with error -71 [ 287.929837][ T350] usb 2-1: USB disconnect, device number 50 [ 287.996424][ T5278] overlayfs: failed to resolve './file0': -2 [ 288.129151][ T5274] loop4: detected capacity change from 0 to 40427 [ 288.153867][ T2158] attempt to access beyond end of device [ 288.153867][ T2158] loop0: rw=2049, want=45104, limit=40427 [ 288.172526][ T5274] F2FS-fs (loop4): invalid crc value [ 288.179041][ T5274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 288.213131][ T5274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 288.464335][ T5288] overlayfs: failed to resolve './file0': -2 [ 288.702465][ T4497] attempt to access beyond end of device [ 288.702465][ T4497] loop4: rw=2049, want=45104, limit=40427 [ 288.723413][ T5292] loop2: detected capacity change from 0 to 8192 [ 288.732679][ T5286] overlayfs: missing 'lowerdir' [ 288.791970][ T5292] loop2: p2 p3 p4 [ 288.795976][ T5292] loop2: p2 start 14935 is beyond EOD, truncated [ 288.803295][ T5292] loop2: p3 size 196608 extends beyond EOD, truncated [ 288.810599][ T5292] loop2: p4 start 4026530307 is beyond EOD, truncated [ 289.115924][ T5292] overlayfs: missing 'lowerdir' [ 289.126545][ T5304] loop1: detected capacity change from 0 to 512 [ 289.217283][ T5304] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 289.437296][ T5304] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 289.452171][ T5304] EXT4-fs (loop1): 1 truncate cleaned up [ 289.457993][ T5304] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 289.749828][ T5320] overlayfs: missing 'lowerdir' [ 290.383092][ T5323] overlayfs: failed to resolve './file0': -2 [ 290.442128][ T5328] loop2: detected capacity change from 0 to 8192 [ 290.486563][ T5328] loop2: p2 p3 p4 [ 290.490583][ T5328] loop2: p2 start 14935 is beyond EOD, truncated [ 290.497128][ T5328] loop2: p3 size 196608 extends beyond EOD, truncated [ 290.504228][ T5328] loop2: p4 start 4026530307 is beyond EOD, truncated [ 290.557205][ T100] loop2: p2 p3 p4 [ 290.560891][ T100] loop2: p2 start 14935 is beyond EOD, truncated [ 290.567438][ T100] loop2: p3 size 196608 extends beyond EOD, truncated [ 290.574505][ T100] loop2: p4 start 4026530307 is beyond EOD, truncated [ 290.606257][ T338] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 290.613680][ T5074] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 290.714933][ T5328] overlayfs: missing 'lowerdir' [ 290.789469][ T350] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 290.858525][ T5338] loop2: detected capacity change from 0 to 512 [ 290.946582][ T5338] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.967831][ T5338] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 290.976346][ T5074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.986587][ T5338] EXT4-fs (loop2): 1 truncate cleaned up [ 290.992713][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.998652][ T5338] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 291.008995][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.031284][ T5074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.040800][ T5074] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.049625][ T5074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.057457][ T338] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.076616][ T5074] usb 1-1: config 0 descriptor?? [ 291.085445][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.101552][ T338] usb 5-1: config 0 descriptor?? [ 291.324947][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.346996][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.356605][ T350] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.365424][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.373917][ T350] usb 2-1: config 0 descriptor?? [ 292.026297][ T26] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 292.056777][ T5331] UDC core: couldn't find an available UDC or it's busy: -16 [ 292.064007][ T5331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.086333][ T5074] usb 1-1: string descriptor 0 read error: -71 [ 292.106304][ T5074] uclogic 0003:256C:006D.00C3: failed retrieving string descriptor #200: -71 [ 292.114904][ T5074] uclogic 0003:256C:006D.00C3: failed retrieving pen parameters: -71 [ 292.122785][ T5074] uclogic 0003:256C:006D.00C3: failed probing pen v2 parameters: -71 [ 292.130723][ T5074] uclogic 0003:256C:006D.00C3: failed probing parameters: -71 [ 292.137991][ T5074] uclogic: probe of 0003:256C:006D.00C3 failed with error -71 [ 292.146872][ T5074] usb 1-1: USB disconnect, device number 45 [ 292.267732][ T338] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00C4/input/input103 [ 292.286668][ T338] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00C4/input/input104 [ 292.312234][ T338] uclogic 0003:256C:006D.00C4: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 292.396326][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.407254][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.417022][ T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 292.425788][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.440437][ T26] usb 3-1: config 0 descriptor?? [ 292.469364][ T5074] usb 5-1: USB disconnect, device number 51 [ 292.766104][ T5362] overlayfs: missing 'lowerdir' [ 292.816460][ T350] uclogic 0003:256C:006D.00C5: v1 buttonpad probing failed: -71 [ 292.828029][ T350] uclogic 0003:256C:006D.00C5: failed probing parameters: -71 [ 292.836369][ T350] uclogic: probe of 0003:256C:006D.00C5 failed with error -71 [ 292.929839][ T350] usb 2-1: USB disconnect, device number 51 [ 293.203799][ T5369] loop3: detected capacity change from 0 to 512 [ 293.276668][ T5369] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 293.298426][ T5369] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 293.312993][ T5369] EXT4-fs (loop3): 1 truncate cleaned up [ 293.318742][ T5369] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 293.706710][ T5381] overlayfs: missing 'workdir' [ 293.886336][ T5074] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 293.926393][ T26] uclogic 0003:256C:006D.00C6: v1 buttonpad probing failed: -71 [ 293.934178][ T26] uclogic 0003:256C:006D.00C6: failed probing parameters: -71 [ 293.941594][ T26] uclogic: probe of 0003:256C:006D.00C6 failed with error -71 [ 293.949746][ T26] usb 3-1: USB disconnect, device number 49 [ 294.246344][ T5074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.266293][ T5074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.286011][ T5074] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 294.305172][ T5074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.326553][ T5074] usb 2-1: config 0 descriptor?? [ 294.358009][ T5390] loop3: detected capacity change from 0 to 40427 [ 294.376448][ T5390] F2FS-fs (loop3): invalid crc value [ 294.382626][ T5390] F2FS-fs (loop3): Found nat_bits in checkpoint [ 294.437443][ T5390] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.438484][ T5385] loop4: detected capacity change from 0 to 131072 [ 294.517431][ T5385] F2FS-fs (loop4): Test dummy encryption mode enabled [ 294.531850][ T5385] F2FS-fs (loop4): invalid crc value [ 294.565044][ T5385] F2FS-fs (loop4): Found nat_bits in checkpoint [ 294.601434][ T5385] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 294.682331][ T5404] overlayfs: failed to resolve './file0': -2 [ 294.774574][ T5398] loop0: detected capacity change from 0 to 40427 [ 294.788400][ T5398] F2FS-fs (loop0): invalid crc value [ 294.794659][ T5398] F2FS-fs (loop0): Found nat_bits in checkpoint [ 294.831103][ T4497] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 294.840314][ T5398] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 294.848031][ T20] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 295.045593][ T5409] overlayfs: failed to resolve './file0': -2 [ 295.163202][ T4251] attempt to access beyond end of device [ 295.163202][ T4251] loop3: rw=2049, want=45104, limit=40427 [ 295.363387][ T2158] attempt to access beyond end of device [ 295.363387][ T2158] loop0: rw=2049, want=45104, limit=40427 [ 295.397114][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.408147][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.408450][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.424560][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.432050][ T5412] device bridge_slave_0 entered promiscuous mode [ 295.438886][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.445804][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.452893][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 295.455381][ T5412] device bridge_slave_1 entered promiscuous mode [ 295.467563][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.478853][ T20] usb 3-1: config 0 descriptor?? [ 295.497642][ T5074] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C7/input/input105 [ 295.516891][ T5074] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C7/input/input106 [ 295.541892][ T5074] uclogic 0003:256C:006D.00C7: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 295.581457][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.588409][ T5412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.595483][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.602284][ T5412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.630472][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.638051][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.645108][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.655319][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.665294][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.672152][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.682280][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.690636][ T2261] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.697497][ T2261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.698806][ T26] usb 2-1: USB disconnect, device number 52 [ 295.717664][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.725568][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.743379][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.753138][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.767785][ T5412] device veth0_vlan entered promiscuous mode [ 295.773881][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.781743][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.791671][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.798928][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.809391][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.817347][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.831348][ T5412] device veth1_macvtap entered promiscuous mode [ 295.841412][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.849283][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.857456][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.884372][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.893996][ T5426] loop4: detected capacity change from 0 to 256 [ 295.900495][ T2261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.020152][ T30] audit: type=1326 audit(1719416435.494:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5425 comm="syz.4.1466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefc3687ae9 code=0x0 [ 296.157260][ T2004] device bridge_slave_1 left promiscuous mode [ 296.163232][ T2004] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.170670][ T2004] device bridge_slave_0 left promiscuous mode [ 296.176713][ T2004] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.185152][ T2004] device veth1_macvtap left promiscuous mode [ 296.191147][ T2004] device veth0_vlan left promiscuous mode [ 296.252055][ T5430] loop1: detected capacity change from 0 to 8192 [ 296.278141][ T5430] loop1: p2 p3 p4 [ 296.281795][ T5430] loop1: p2 start 14935 is beyond EOD, truncated [ 296.288096][ T5430] loop1: p3 size 196608 extends beyond EOD, truncated [ 296.295076][ T5430] loop1: p4 start 4026530307 is beyond EOD, truncated [ 296.333454][ T5432] loop3: detected capacity change from 0 to 512 [ 296.357471][ T5430] overlayfs: missing 'lowerdir' [ 296.418286][ T5432] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 296.444201][ T5432] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 296.464530][ T5432] EXT4-fs (loop3): 1 truncate cleaned up [ 296.471073][ T5432] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 297.690979][ T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00C8/input/input107 [ 297.754158][ T20] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00C8/input/input108 [ 297.803797][ T20] uclogic 0003:256C:006D.00C8: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 297.835335][ T5453] overlayfs: missing 'lowerdir' [ 297.841803][ T20] usb 3-1: USB disconnect, device number 50 [ 297.938378][ T5462] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 297.947002][ T5462] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 297.955031][ T5462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 298.030352][ T5458] loop0: detected capacity change from 0 to 8192 [ 298.082686][ T5458] loop0: p2 p3 p4 [ 298.088426][ T5458] loop0: p2 start 14935 is beyond EOD, truncated [ 298.094631][ T5458] loop0: p3 size 196608 extends beyond EOD, truncated [ 298.101953][ T5458] loop0: p4 start 4026530307 is beyond EOD, truncated [ 298.136258][ T350] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 298.178343][ T5458] overlayfs: missing 'lowerdir' [ 298.356346][ T348] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 298.506371][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.517098][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.527021][ T350] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.535901][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.549024][ T350] usb 2-1: config 0 descriptor?? [ 298.768182][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.778923][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.788472][ T348] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.797291][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.805857][ T348] usb 4-1: config 0 descriptor?? [ 298.916319][ T5074] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 299.029226][ T5477] loop4: detected capacity change from 0 to 8192 [ 299.066537][ T5477] loop4: p2 p3 p4 [ 299.070135][ T5477] loop4: p2 start 14935 is beyond EOD, truncated [ 299.076416][ T5477] loop4: p3 size 196608 extends beyond EOD, truncated [ 299.083491][ T5477] loop4: p4 start 4026530307 is beyond EOD, truncated [ 299.151579][ T5479] loop0: detected capacity change from 0 to 512 [ 299.167749][ T5477] overlayfs: missing 'lowerdir' [ 299.226606][ T5479] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 299.229585][ T5450] UDC core: couldn't find an available UDC or it's busy: -16 [ 299.243181][ T5450] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 299.262509][ T5479] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 299.276832][ T5074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.277104][ T5479] EXT4-fs (loop0): 1 truncate cleaned up [ 299.287673][ T5074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.287706][ T5074] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 299.295912][ T5479] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 299.302868][ T5074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.362131][ T5074] usb 3-1: config 0 descriptor?? [ 299.526300][ T26] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 299.886435][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.897211][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.906716][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 299.915529][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.923987][ T26] usb 5-1: config 0 descriptor?? [ 299.927589][ T348] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00CA/input/input109 [ 299.945933][ T348] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00CA/input/input110 [ 299.960660][ T348] uclogic 0003:256C:006D.00CA: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 300.086358][ T350] uclogic 0003:256C:006D.00C9: v1 buttonpad probing failed: -71 [ 300.093905][ T350] uclogic 0003:256C:006D.00C9: failed probing parameters: -71 [ 300.101156][ T350] uclogic: probe of 0003:256C:006D.00C9 failed with error -71 [ 300.109603][ T350] usb 2-1: USB disconnect, device number 53 [ 300.140668][ T435] usb 4-1: USB disconnect, device number 45 [ 300.566372][ T5074] uclogic 0003:256C:006D.00CB: interface is invalid, ignoring [ 300.726905][ T5493] overlayfs: missing 'lowerdir' [ 301.361080][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00CC/input/input111 [ 301.373783][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00CC/input/input112 [ 301.386271][ T26] uclogic 0003:256C:006D.00CC: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 301.406464][ T350] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 301.598756][ T26] usb 5-1: USB disconnect, device number 52 [ 301.705153][ T2261] usb 3-1: USB disconnect, device number 51 [ 301.725227][ T5512] loop3: detected capacity change from 0 to 512 [ 301.736533][ T5512] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 301.761236][ T5512] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 301.775865][ T5512] EXT4-fs (loop3): 1 truncate cleaned up [ 301.781719][ T5512] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 301.936397][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.947181][ T350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.957852][ T350] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 301.966919][ T350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.975462][ T350] usb 2-1: config 0 descriptor?? [ 302.466263][ T20] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 302.846580][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.857350][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.866860][ T20] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 302.875677][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.884423][ T20] usb 1-1: config 0 descriptor?? [ 302.896324][ T26] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 302.903945][ T435] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 302.966335][ T350] usb 2-1: string descriptor 0 read error: -71 [ 302.996373][ T350] uclogic 0003:256C:006D.00CD: failed retrieving string descriptor #200: -71 [ 303.005196][ T350] uclogic 0003:256C:006D.00CD: failed retrieving pen parameters: -71 [ 303.013378][ T350] uclogic 0003:256C:006D.00CD: failed probing pen v2 parameters: -71 [ 303.021400][ T350] uclogic 0003:256C:006D.00CD: failed probing parameters: -71 [ 303.028783][ T350] uclogic: probe of 0003:256C:006D.00CD failed with error -71 [ 303.036951][ T350] usb 2-1: USB disconnect, device number 54 [ 303.146300][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 303.266363][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.277224][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 303.288153][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.297711][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 303.308662][ T435] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 303.317516][ T26] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.326620][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.334609][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.342663][ T435] usb 4-1: config 0 descriptor?? [ 303.347434][ T5074] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 303.355382][ T26] usb 3-1: config 0 descriptor?? [ 303.376367][ T5528] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 303.396705][ T26] hub 3-1:0.0: USB hub found [ 303.637818][ T26] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 303.726529][ T5074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.737326][ T5074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.746830][ T5074] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 303.755653][ T5074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.764352][ T5074] usb 5-1: config 0 descriptor?? [ 303.926289][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 303.932060][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 303.966654][ T26] usb 3-1: USB disconnect, device number 52 [ 304.217325][ T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00CE/input/input113 [ 304.229957][ T20] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00CE/input/input114 [ 304.244841][ T20] uclogic 0003:256C:006D.00CE: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 304.353131][ T5542] loop2: detected capacity change from 0 to 512 [ 304.396697][ T5542] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.408007][ T5542] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 304.422529][ T26] usb 1-1: USB disconnect, device number 46 [ 304.422591][ T5542] EXT4-fs (loop2): 1 truncate cleaned up [ 304.433767][ T5542] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 304.451499][ T5533] UDC core: couldn't find an available UDC or it's busy: -16 [ 304.459545][ T5533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 304.632182][ T435] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00CF/input/input115 [ 304.660302][ T435] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00CF/input/input116 [ 304.705223][ T435] uclogic 0003:256C:006D.00CF: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 304.845447][ T435] usb 4-1: USB disconnect, device number 46 [ 305.296299][ T5074] uclogic 0003:256C:006D.00D0: v1 buttonpad probing failed: -71 [ 305.303796][ T5074] uclogic 0003:256C:006D.00D0: failed probing parameters: -71 [ 305.311264][ T5074] uclogic: probe of 0003:256C:006D.00D0 failed with error -71 [ 305.321908][ T5074] usb 5-1: USB disconnect, device number 53 [ 305.526418][ T435] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 305.536864][ T5560] loop2: detected capacity change from 0 to 512 [ 305.543879][ T5560] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.557818][ T5560] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 305.572317][ T5560] EXT4-fs (loop2): 1 truncate cleaned up [ 305.577991][ T5560] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 305.896374][ T435] usb 2-1: not running at top speed; connect to a high speed hub [ 305.976417][ T435] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 306.156335][ T435] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.168343][ T435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.186299][ T435] usb 2-1: Product: 颚ㇵ䮭ﲮੵꩡ뺗ힴ䶠麵鰇ﱊ㍚ꍶ倝粷漐㹝鯲迬紾뭋㠚協Ꞃ㫓癨′䄾¡ꟸ围餆櫧峈䅦螻殯䚉浪굁᷆䰅ᇗ硳⬍⓫鯔줞ẁꀸ몬甛 [ 306.230133][ T435] usb 2-1: Manufacturer: 봨籍䝢蠚讀ꁵ巠鹯궟仃剣釮 [ 306.238192][ T435] usb 2-1: SerialNumber: ࠇ [ 306.294261][ T5576] loop0: detected capacity change from 0 to 40427 [ 306.338205][ T5576] F2FS-fs (loop0): invalid crc value [ 306.344315][ T5576] F2FS-fs (loop0): Found nat_bits in checkpoint [ 306.372929][ T5576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 306.527839][ T5583] overlayfs: failed to resolve './file1': -2 [ 306.626512][ T435] cdc_ncm 2-1:1.0: bind() failure [ 306.631900][ T435] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 306.638530][ T435] cdc_ncm 2-1:1.1: bind() failure [ 306.644160][ T435] usb 2-1: USB disconnect, device number 55 [ 306.833915][ T20] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 306.947394][ T2158] attempt to access beyond end of device [ 306.947394][ T2158] loop0: rw=2049, want=45104, limit=40427 [ 307.126391][ T350] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 307.226357][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.237171][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.246808][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.255652][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.264396][ T20] usb 3-1: config 0 descriptor?? [ 307.306303][ T5074] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 307.356289][ T348] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 307.438070][ T5596] loop3: detected capacity change from 0 to 512 [ 307.486647][ T5596] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 307.496485][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.507397][ T5596] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 307.507918][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.522726][ T5596] EXT4-fs (loop3): 1 truncate cleaned up [ 307.531864][ T350] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.545704][ T5596] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 307.546246][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.572886][ T350] usb 5-1: config 0 descriptor?? [ 307.786485][ T5074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.797610][ T5074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.807705][ T5074] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.817193][ T5074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.825618][ T5074] usb 1-1: config 0 descriptor?? [ 307.846360][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.857163][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.866906][ T348] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.875761][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.884053][ T348] usb 2-1: config 0 descriptor?? [ 308.354663][ T5605] loop3: detected capacity change from 0 to 512 [ 308.446925][ T5605] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.467910][ T5605] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 308.482331][ T5605] EXT4-fs (loop3): 1 truncate cleaned up [ 308.487853][ T5605] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 308.656416][ T20] uclogic 0003:256C:006D.00D1: v1 buttonpad probing failed: -71 [ 308.663976][ T20] uclogic 0003:256C:006D.00D1: failed probing parameters: -71 [ 308.671256][ T20] uclogic: probe of 0003:256C:006D.00D1 failed with error -71 [ 308.679832][ T20] usb 3-1: USB disconnect, device number 53 [ 308.936364][ T350] uclogic 0003:256C:006D.00D2: failed retrieving Huion firmware version: -71 [ 308.945036][ T350] uclogic 0003:256C:006D.00D2: failed probing parameters: -71 [ 308.952360][ T350] uclogic: probe of 0003:256C:006D.00D2 failed with error -71 [ 308.960717][ T350] usb 5-1: USB disconnect, device number 54 [ 309.007367][ T5074] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00D3/input/input117 [ 309.020464][ T5074] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00D3/input/input118 [ 309.033056][ T5074] uclogic 0003:256C:006D.00D3: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 309.307256][ T5074] usb 1-1: USB disconnect, device number 47 [ 309.516939][ T348] uclogic 0003:256C:006D.00D4: v1 buttonpad probing failed: -71 [ 309.524599][ T348] uclogic 0003:256C:006D.00D4: failed probing parameters: -71 [ 309.531967][ T348] uclogic: probe of 0003:256C:006D.00D4 failed with error -71 [ 309.540375][ T348] usb 2-1: USB disconnect, device number 56 [ 310.002905][ T5626] loop2: detected capacity change from 0 to 512 [ 310.027388][ T5626] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.048437][ T5626] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 310.068519][ T5626] EXT4-fs (loop2): 1 truncate cleaned up [ 310.074084][ T5626] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 310.262496][ T5634] loop1: detected capacity change from 0 to 8192 [ 310.342790][ T5634] loop1: p2 p3 p4 [ 310.349494][ T5634] loop1: p2 start 14935 is beyond EOD, truncated [ 310.355863][ T5634] loop1: p3 size 196608 extends beyond EOD, truncated [ 310.406499][ T5634] loop1: p4 start 4026530307 is beyond EOD, truncated [ 310.519315][ T5632] loop0: detected capacity change from 0 to 40427 [ 310.548438][ T5634] overlayfs: missing 'lowerdir' [ 310.599126][ T5632] F2FS-fs (loop0): invalid crc value [ 310.605145][ T5632] F2FS-fs (loop0): Found nat_bits in checkpoint [ 310.635406][ T5641] loop1: detected capacity change from 0 to 512 [ 310.642414][ T5632] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 310.645493][ T312] udevd[312]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 310.650086][ T5641] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.680724][ T5641] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 310.695914][ T5641] EXT4-fs (loop1): 1 truncate cleaned up [ 310.704584][ T5641] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 310.756515][ T5074] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 311.507834][ T5654] overlayfs: failed to resolve './file1': -2 [ 311.687506][ T2158] attempt to access beyond end of device [ 311.687506][ T2158] loop0: rw=2049, want=45104, limit=40427 [ 311.716249][ T20] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 311.736465][ T5074] usb 4-1: not running at top speed; connect to a high speed hub [ 312.018007][ T5074] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 312.186384][ T5074] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.195278][ T5074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.203083][ T5074] usb 4-1: Product: 颚ㇵ䮭ﲮੵꩡ뺗ힴ䶠麵鰇ﱊ㍚ꍶ倝粷漐㹝鯲迬紾뭋㠚協Ꞃ㫓癨′䄾¡ꟸ围餆櫧峈䅦螻殯䚉浪굁᷆䰅ᇗ硳⬍⓫鯔줞ẁꀸ몬甛 [ 312.221352][ T5074] usb 4-1: Manufacturer: 봨籍䝢蠚讀ꁵ巠鹯궟仃剣釮 [ 312.229120][ T5074] usb 4-1: SerialNumber: ࠇ [ 312.286286][ T348] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 312.396380][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 312.409095][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 312.418007][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.426268][ T20] usb 5-1: config 0 descriptor?? [ 312.466853][ T20] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 312.565753][ T5074] cdc_ncm 4-1:1.0: bind() failure [ 312.571460][ T5074] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 312.578134][ T5074] cdc_ncm 4-1:1.1: bind() failure [ 312.583569][ T5074] usb 4-1: USB disconnect, device number 47 [ 312.776538][ T435] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 312.796339][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.807084][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.816603][ T348] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 312.825424][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.834063][ T348] usb 1-1: config 0 descriptor?? [ 313.108131][ T5680] loop3: detected capacity change from 0 to 8192 [ 313.136371][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.136613][ T5680] loop3: p2 p3 p4 [ 313.147115][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.147152][ T435] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.151222][ T5680] loop3: p2 start 14935 is beyond EOD, [ 313.160511][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.169224][ T5680] truncated [ 313.175229][ T435] usb 2-1: config 0 descriptor?? [ 313.182560][ T5680] loop3: p3 size 196608 extends beyond EOD, truncated [ 313.196991][ T5680] loop3: p4 start 4026530307 is beyond EOD, truncated [ 313.254182][ T5680] overlayfs: missing 'lowerdir' [ 313.676352][ T20] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 313.724865][ T5074] usb 5-1: USB disconnect, device number 55 [ 314.096437][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.107261][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.116921][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 314.125845][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.136356][ T5074] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 314.138774][ T20] usb 3-1: config 0 descriptor?? [ 314.366405][ T435] uclogic 0003:256C:006D.00D6: interface is invalid, ignoring [ 314.426366][ T348] uclogic 0003:256C:006D.00D5: v1 buttonpad probing failed: -71 [ 314.433941][ T348] uclogic 0003:256C:006D.00D5: failed probing parameters: -71 [ 314.441306][ T348] uclogic: probe of 0003:256C:006D.00D5 failed with error -71 [ 314.449327][ T348] usb 1-1: USB disconnect, device number 48 [ 314.516340][ T5074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.527119][ T5074] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.536601][ T5074] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 314.545419][ T5074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.553828][ T5074] usb 5-1: config 0 descriptor?? [ 314.902667][ T5696] loop0: detected capacity change from 0 to 512 [ 314.976590][ T5696] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.988248][ T5696] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 315.003196][ T5696] EXT4-fs (loop0): 1 truncate cleaned up [ 315.008878][ T5696] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 315.360497][ T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00D7/input/input119 [ 315.373284][ T20] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00D7/input/input120 [ 315.393611][ T20] uclogic 0003:256C:006D.00D7: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 315.418057][ T20] usb 2-1: USB disconnect, device number 57 [ 315.489700][ T348] usb 3-1: USB disconnect, device number 54 [ 315.702879][ T5074] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00D8/input/input121 [ 315.788446][ T5074] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.00D8/input/input122 [ 315.812097][ T5074] uclogic 0003:256C:006D.00D8: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 315.900952][ T5074] usb 5-1: USB disconnect, device number 56 [ 316.586305][ T348] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 316.806786][ T20] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 317.010468][ T348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 317.024394][ T348] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.033565][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.043521][ T348] usb 3-1: config 0 descriptor?? [ 317.046546][ T5074] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 317.088328][ T348] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 317.186467][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.197355][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.206985][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.216554][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.224993][ T20] usb 5-1: config 0 descriptor?? [ 317.386367][ T348] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 317.426358][ T5074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.437130][ T5074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.446612][ T5074] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.455451][ T5074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.463874][ T5074] usb 1-1: config 0 descriptor?? [ 317.536321][ T982] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 317.796382][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.807108][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.816661][ T348] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.825459][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.833786][ T348] usb 4-1: config 0 descriptor?? [ 317.896357][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.907090][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.916665][ T982] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 317.925418][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.934777][ T982] usb 2-1: config 0 descriptor?? [ 318.346153][ T350] usb 3-1: USB disconnect, device number 55 [ 441.034845][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [init:5746] [ 441.042384][ C0] Modules linked in: [ 441.046122][ C0] CPU: 0 PID: 5746 Comm: init Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 441.055312][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 441.065213][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 441.069984][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 441.089943][ C0] RSP: 0018:ffffc900009674c0 EFLAGS: 00000246 [ 441.095845][ C0] RAX: 0000000000000001 RBX: 1ffff9200012ce9c RCX: 1ffffffff0d1aa9c [ 441.103655][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7038ad4 [ 441.111466][ C0] RBP: ffffc90000967570 R08: dffffc0000000000 R09: ffffed103ee0715b [ 441.119279][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 441.127091][ C0] R13: ffff8881f7038ad4 R14: 0000000000000001 R15: 1ffff9200012cea0 [ 441.134901][ C0] FS: 00007fba21337380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 441.143673][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.150090][ C0] CR2: 0000001b2d91aff8 CR3: 000000010b946000 CR4: 00000000003506b0 [ 441.157904][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.165714][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.173524][ C0] Call Trace: [ 441.176652][ C0] [ 441.179347][ C0] ? show_regs+0x58/0x60 [ 441.183418][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 441.188366][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 441.193489][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 441.198717][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 441.203642][ C0] ? clockevents_program_event+0x22f/0x300 [ 441.209285][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 441.215184][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 441.220134][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 441.226035][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 441.231676][ C0] [ 441.234452][ C0] [ 441.237231][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.243222][ C0] ? kvm_wait+0x147/0x180 [ 441.247387][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.253375][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 441.258322][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 441.264223][ C0] ? __stack_depot_save+0x34/0x470 [ 441.269174][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 441.275418][ C0] ? vbin_printf+0x1bc0/0x1bc0 [ 441.280021][ C0] ? fput+0x1a/0x20 [ 441.283664][ C0] ? do_filp_open+0x21c/0x460 [ 441.288178][ C0] ? bpf_snprintf+0xa1/0x260 [ 441.292606][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 441.297378][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 441.302414][ C0] ? bpf_snprintf+0x23a/0x260 [ 441.306926][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 441.312220][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 441.317255][ C0] ? security_compute_sid+0x1d7d/0x1f40 [ 441.322635][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x79c [ 441.328017][ C0] bpf_trace_run2+0xec/0x210 [ 441.332444][ C0] ? ebitmap_cmp+0x159/0x1c0 [ 441.336870][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 441.341557][ C0] ? security_compute_sid+0x1d7d/0x1f40 [ 441.346940][ C0] ? security_compute_sid+0x1d7d/0x1f40 [ 441.352319][ C0] __bpf_trace_kfree+0x6f/0x90 [ 441.356922][ C0] ? security_compute_sid+0x1d7d/0x1f40 [ 441.362302][ C0] __traceiter_kfree+0x2a/0x40 [ 441.366902][ C0] ? security_compute_sid+0x1d7d/0x1f40 [ 441.372283][ C0] kfree+0x1f3/0x220 [ 441.376013][ C0] ? policydb_context_isvalid+0x1de/0x430 [ 441.381570][ C0] security_compute_sid+0x1d7d/0x1f40 [ 441.386777][ C0] ? mpi_invm+0x5c8/0x890 [ 441.390944][ C0] ? security_transition_sid+0x90/0x90 [ 441.396244][ C0] ? __kasan_check_read+0x11/0x20 [ 441.401097][ C0] security_transition_sid+0x7d/0x90 [ 441.406222][ C0] selinux_socket_create+0x204/0x330 [ 441.411339][ C0] ? selinux_socket_unix_may_send+0x2f0/0x2f0 [ 441.417241][ C0] ? kmem_cache_free+0x116/0x2e0 [ 441.422015][ C0] security_socket_create+0x77/0xb0 [ 441.427051][ C0] __sock_create+0xd6/0x760 [ 441.431390][ C0] __sys_socket+0x132/0x370 [ 441.435728][ C0] ? sock_create_kern+0x50/0x50 [ 441.440418][ C0] ? debug_smp_processor_id+0x17/0x20 [ 441.445621][ C0] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 441.451526][ C0] __x64_sys_socket+0x7a/0x90 [ 441.456038][ C0] do_syscall_64+0x3d/0xb0 [ 441.460290][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 441.466018][ C0] RIP: 0033:0x7fba21499bd7 [ 441.470275][ C0] Code: 73 01 c3 48 8b 0d 51 c2 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 21 c2 0c 00 f7 d8 64 89 01 48 [ 441.489802][ C0] RSP: 002b:00007ffe8aa52948 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 441.498047][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fba21499bd7 [ 441.505856][ C0] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 441.513675][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 91f8fad31c6fe287 [ 441.521480][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: 00007fba21525bc0 [ 441.529294][ C0] R13: 00007fba21627212 R14: 00007ffe8aa52a78 R15: 0000000000000000 [ 441.537106][ C0] [ 441.539976][ C0] Sending NMI from CPU 0 to CPUs 1: [ 441.545026][ C1] NMI backtrace for cpu 1 [ 441.545035][ C1] CPU: 1 PID: 5737 Comm: syz.3.1555 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 441.545052][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 441.545068][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 441.545087][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 441.545101][ C1] RSP: 0018:ffffc9000113f4c0 EFLAGS: 00000246 [ 441.545114][ C1] RAX: 0000000000000003 RBX: 1ffff92000227e9c RCX: ffffffff8154fbbf [ 441.545126][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810cc3d298 [ 441.545136][ C1] RBP: ffffc9000113f570 R08: dffffc0000000000 R09: ffffed1021987a54 [ 441.545148][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 441.545159][ C1] R13: ffff88810cc3d298 R14: 0000000000000003 R15: 1ffff92000227ea0 [ 441.545170][ C1] FS: 00007f4d1d5826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 441.545184][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.545196][ C1] CR2: 0000000000000000 CR3: 000000012ad78000 CR4: 00000000003506a0 [ 441.545209][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.545219][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.545229][ C1] Call Trace: [ 441.545234][ C1] [ 441.545240][ C1] ? show_regs+0x58/0x60 [ 441.545256][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 441.545275][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 441.545294][ C1] ? kvm_wait+0x147/0x180 [ 441.545308][ C1] ? kvm_wait+0x147/0x180 [ 441.545321][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 441.545338][ C1] ? nmi_handle+0xa8/0x280 [ 441.545354][ C1] ? kvm_wait+0x147/0x180 [ 441.545367][ C1] ? default_do_nmi+0x69/0x160 [ 441.545384][ C1] ? exc_nmi+0xaf/0x120 [ 441.545399][ C1] ? end_repeat_nmi+0x16/0x31 [ 441.545414][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 441.545433][ C1] ? kvm_wait+0x147/0x180 [ 441.545446][ C1] ? kvm_wait+0x147/0x180 [ 441.545460][ C1] ? kvm_wait+0x147/0x180 [ 441.545474][ C1] [ 441.545479][ C1] [ 441.545483][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 441.545499][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 441.545514][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 441.545532][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 441.545551][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 441.545568][ C1] ? vbin_printf+0x1bc0/0x1bc0 [ 441.545583][ C1] ? bpf_snprintf+0xa1/0x260 [ 441.545599][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 441.545616][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 441.545632][ C1] ? bpf_snprintf+0x23a/0x260 [ 441.545647][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 441.545666][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 441.545682][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.545698][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x79c [ 441.545711][ C1] bpf_trace_run2+0xec/0x210 [ 441.545727][ C1] ? memcpy+0x56/0x70 [ 441.545743][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 441.545758][ C1] ? bpf_bprintf_prepare+0x11b4/0x1450 [ 441.545773][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.545789][ C1] ? bstr_printf+0x1020/0x10c0 [ 441.545803][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.545818][ C1] __bpf_trace_kfree+0x6f/0x90 [ 441.545833][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.545848][ C1] __traceiter_kfree+0x2a/0x40 [ 441.545862][ C1] ? sock_map_unref+0x352/0x4d0 [ 441.545877][ C1] kfree+0x1f3/0x220 [ 441.545893][ C1] sock_map_unref+0x352/0x4d0 [ 441.545910][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 441.545926][ C1] ? raw_ioctl+0x1992/0x3510 [ 441.545943][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x79c [ 441.545955][ C1] bpf_trace_run2+0xec/0x210 [ 441.545970][ C1] ? __kasan_check_write+0x14/0x20 [ 441.545985][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 441.546001][ C1] ? raw_ioctl+0x1992/0x3510 [ 441.546016][ C1] ? __kasan_check_write+0x14/0x20 [ 441.546032][ C1] ? raw_ioctl+0x1992/0x3510 [ 441.546048][ C1] __bpf_trace_kfree+0x6f/0x90 [ 441.546067][ C1] ? raw_ioctl+0x1992/0x3510 [ 441.546082][ C1] __traceiter_kfree+0x2a/0x40 [ 441.546095][ C1] ? raw_ioctl+0x1992/0x3510 [ 441.546110][ C1] kfree+0x1f3/0x220 [ 441.546125][ C1] ? __kasan_check_read+0x11/0x20 [ 441.546141][ C1] raw_ioctl+0x1992/0x3510 [ 441.546158][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 441.546175][ C1] ? has_cap_mac_admin+0x3c0/0x3c0 [ 441.546193][ C1] ? selinux_file_ioctl+0x3cc/0x540 [ 441.546215][ C1] ? selinux_file_alloc_security+0x120/0x120 [ 441.546233][ C1] ? __fget_files+0x31e/0x380 [ 441.546249][ C1] ? security_file_ioctl+0x84/0xb0 [ 441.546265][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 441.546281][ C1] __se_sys_ioctl+0x114/0x190 [ 441.546296][ C1] __x64_sys_ioctl+0x7b/0x90 [ 441.546309][ C1] do_syscall_64+0x3d/0xb0 [ 441.546324][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 441.546339][ C1] RIP: 0033:0x7f4d1e3006eb [ 441.546353][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 441.546366][ C1] RSP: 002b:00007f4d1d57ff70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.546380][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4d1e3006eb [ 441.546391][ C1] RDX: 00007f4d1d581000 RSI: 0000000080085502 RDI: 0000000000000003 [ 441.546402][ C1] RBP: 00007f4d1e381746 R08: 0000000000000000 R09: 0000000000000000 [ 441.546411][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 441.546421][ C1] R13: 0000000020000040 R14: 00007f4d1e48efa0 R15: 00007ffd2f8bcfa8 [ 441.546435][ C1]