last executing test programs: 9.775710974s ago: executing program 3 (id=1296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 9.031657437s ago: executing program 3 (id=1306): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 8.234151008s ago: executing program 2 (id=1303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000000180)=""/59, 0x3b) 7.152826603s ago: executing program 2 (id=1304): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 6.805830155s ago: executing program 4 (id=1311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 6.690119563s ago: executing program 0 (id=1313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.542507208s ago: executing program 3 (id=1315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 4.944515378s ago: executing program 1 (id=1316): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 4.694300406s ago: executing program 0 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5}, 0x10) 4.430913736s ago: executing program 2 (id=1318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.235236286s ago: executing program 4 (id=1319): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000700000095000000000000003a93511e3ac3b74d1bcef15f7ca982b46363fe32dab1d26a9553182b7d66b7a5f6c36079477b3346f48915ebf8866f8f36b74e3fd9e8de57947a560eb470889896c456d719e0cd5ea1"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x10, 0x0, 0x0, @link_id}, 0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 3.835040177s ago: executing program 0 (id=1320): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000700)={0x0, @private, @local}, &(0x7f0000000740)=0xc) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r3}, 0x10) preadv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x87, 0x0, 0x0) tkill(r1, 0x7) 3.641025576s ago: executing program 0 (id=1321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 3.624016149s ago: executing program 0 (id=1322): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x23671d1e5e684124, 0x81, {0x81, 0x21, "6b2829083af07a7e55703b6c4d1ba04e73c6c74dbde0af05a68f544d6dd9319c4843040122aa54fa947b3f869f1e3883e1df11dac42e001b0145ed9ca411907484e2ab3a3e014ab51eacda3099ad3e3881fc1473dcbdb8c5902008c931ab639ae3598da3765e4e68404ac429bce8b70395e17e8ae9f471b957ba627f108f57"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 2.975590417s ago: executing program 3 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x487, 0x9, 0x8, 0x2, 0x1, 0xd5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002c40)=ANY=[@ANYRES16=r0, @ANYBLOB="932cf24f3e0e7e38bbd3f6bf4d2a99ea6bd1cdda154bd48b47ea2c1375fd7f9ecf5c886bfac9244a74715378942878c10dd9e26303b0211df5f4fa5e535dc3f7f15d23d4480d59d8f09af4c3b42b1374400d1e048cea80f0a8e784195d7a588f72d6d4eaaa81f4fa37033c91d996dc0a83c9365537e2971594294c61cb174b907b7fb4a75f73deb0580c31c9ab4a5d61242d0ccbfd67d31a307317c1ccb43e239d82f2c1d3db3b55eefde21f", @ANYRES64=r0, @ANYBLOB="43ff303363dbce297f4b8249f4c5c94f150390628b0d09c66ec3c45179664ad6690a4926429d769abe3f70bdbd2e58fee49edb3c0b8d1229dfb104fb3fc05a8cebbaffa22671d15e87647534f8b84b2f2411fc94e3b7b385ecfcac1a7994425321dfc3da80be9a3e424ce67f00195ea432901df5dc61f762da102ace266782b7f1f6b20a54eb717d71e8d15fb33218591e4c9d17757f7b1578cbfc72e97e23a604f5b84e2cece180439201bf5d6aef4e320a9e14f981ac299fa56f7f20ee5bb8ff0bcddd557e4e58e6040c6a511645d1d1787e4faf47d0ccfaf189390cab7956ae9ea71ef299ca6021c8aab552aa2bd5bd7ebe4d", @ANYRESDEC=r1, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r7, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 2.357441171s ago: executing program 1 (id=1324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) 2.099985221s ago: executing program 2 (id=1325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r5, &(0x7f0000000180)=""/59, 0x3b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 2.099548961s ago: executing program 3 (id=1326): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 1.494479842s ago: executing program 1 (id=1327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[], 0xfe44, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r7, &(0x7f0000000000), 0x100000008) r8 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r9 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000480)='./file0/file0\x00') fallocate(r9, 0x0, 0x0, 0x1000f4) write$P9_RSTAT(r9, &(0x7f0000001200)=ANY=[@ANYRESHEX=r5, @ANYRES64, @ANYBLOB="397e940f20700b360bbf166c25d25fafedf8b721c8724e588c12c5f3e7ea618d344535098a46e1c567ef828ccbf06292fcfd64bcf3c081bafe0c99bf9317375bd8f9b5c58417abca2a8a9993bc2ccb58ebcc5ea5cdb098ce9b3820518647e8116adbb10295dbb68d442b28345bc3a977add0f33d858dba67c864f778458283643935e42e1c969e39155737ba205ab00cf60cf9c37a80e02b616eb800b1b2ae13ca1ceb2c5ee60868c6bfab4043864700b881ac4478c8da6a1734fd47488e3e1df14b0b488d7ae81af63ff69fb9b41faccdd9d5cb103cbf", @ANYRES8=r8, @ANYRES32=r3, @ANYRESDEC=r4, @ANYRES16=r2, @ANYBLOB="bb308a344d5d93edc4fb0cfa940ff1e64edb0916689ab08365dd441797342cc17b6d68ac8528eb90617e"], 0x1001) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) socket(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x9e5d) 1.465749147s ago: executing program 4 (id=1328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000001540)={0x0, 0xffffff7f, 0x0}, 0x0) 1.439954001s ago: executing program 4 (id=1329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) 1.430322522s ago: executing program 4 (id=1330): syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz7ttAkEABNDZ+9g+yZJdgiMX4T4sl+MrgYiQAohphirIkdCi+9ACELyXjGZXmtWGhzq0S9Yh2ZaS9Ekty9ka+WrmeClJl0tN6b6Py82YIR9vuz6ft/5ahiR/P1PbvKeMtTbzaJL1qfynPdfTNPa7v99PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5XQMAAP//jJwQkg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xfe44, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x12e, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) symlinkat(&(0x7f0000000180)='./bus\x00', r5, &(0x7f0000000240)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r6 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001240)) linkat(r5, &(0x7f0000000280)='./bus\x00', r5, &(0x7f0000000300)='./file1\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000380)='./file1\x00', r6, &(0x7f0000000340)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') truncate(&(0x7f0000000200)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.25006211s ago: executing program 4 (id=1331): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 1.184439449s ago: executing program 2 (id=1332): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x20000, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d1e1322", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xcc, &(0x7f0000000080)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x15) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r6, &(0x7f0000000180)=""/59, 0x3b) 1.124317808s ago: executing program 3 (id=1333): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x23671d1e5e684124, 0x81, {0x81, 0x21, "6b2829083af07a7e55703b6c4d1ba04e73c6c74dbde0af05a68f544d6dd9319c4843040122aa54fa947b3f869f1e3883e1df11dac42e001b0145ed9ca411907484e2ab3a3e014ab51eacda3099ad3e3881fc1473dcbdb8c5902008c931ab639ae3598da3765e4e68404ac429bce8b70395e17e8ae9f471b957ba627f108f57"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000280)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1a, 0x1a, 0x6, 0x3, 0xc9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x80, 0x0, 0xacfa, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x3, 0x0, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x7, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xb, 0xb, 0x7, 0x7}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x78, 0x5, 0x1, "18d6ea70", "72af561d"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x4, 0x40, 0x48, 0x1, 0xc05}}}, &(0x7f00000009c0)={0x84, &(0x7f0000000580)={0x0, 0xc, 0xe6, "602ad5b96db6533d7cbc28d89fd876e806d5d31b3e7c7a3a8c8dbc52c5cf5d8104c67fe6ba7ac72748d813bdc966625b927b7afba4b04c8b51816ecd050f5d892a4bf1b1163306422871108a256c1c8a91229d2d0e09232cb2a826608aa6b1487ea6f6dc138733456e7c713b84c439862e2371f9b24c37c5f199938bf59540c5f655c96110084a27c12490000d37f19181ddf20f7d2f41506e6127641432df5b8f31adaba68d7a66cc481a5f6fa3d4b92aa3d0571f623dbe8e26e47672ffab5c948dde3b32d71a998732d949d28284349335914c03b41f2e74f1cebfc6a9eb99c9c97d9d760c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000700)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0xb, 0x2, "c0ad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="2617e383d70f"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "bcda"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x70}}) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.086063675s ago: executing program 1 (id=1334): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x5ff) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(0x0, 0x0, 0x0) 974.085421ms ago: executing program 0 (id=1335): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x0, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 274.161558ms ago: executing program 2 (id=1336): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 195.07728ms ago: executing program 1 (id=1337): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000007c0)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 0s ago: executing program 1 (id=1338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0)=""/168, 0xa8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) kernel console output (not intermixed with test programs): 1 because of new feature flag, running e2fsck is recommended [ 200.113508][ T3739] EXT4-fs (loop4): 1 truncate cleaned up [ 200.119056][ T3739] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 200.217058][ T3732] UDC core: couldn't find an available UDC or it's busy: -16 [ 200.224387][ T3732] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.296312][ T6] uclogic 0003:256C:006D.008F: interface is invalid, ignoring [ 200.352202][ T6] usb 3-1: USB disconnect, device number 48 [ 200.696253][ T39] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 200.716378][ T6] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 200.936315][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 200.966462][ T20] uclogic 0003:256C:006D.0090: v1 buttonpad probing failed: -71 [ 200.974296][ T20] uclogic 0003:256C:006D.0090: failed probing parameters: -71 [ 200.981895][ T20] uclogic: probe of 0003:256C:006D.0090 failed with error -71 [ 200.990520][ T20] usb 2-1: USB disconnect, device number 39 [ 201.024460][ T401] usb 1-1: USB disconnect, device number 41 [ 201.056595][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 201.070694][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 201.096254][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 201.105129][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.116592][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.126108][ T39] usb 4-1: config 0 descriptor?? [ 201.137635][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.147708][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 201.156642][ T3748] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 201.166509][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.176848][ T39] hub 4-1:0.0: USB hub found [ 201.184778][ T6] usb 3-1: config 0 descriptor?? [ 201.238325][ T3758] loop4: detected capacity change from 0 to 40427 [ 201.278472][ T3758] F2FS-fs (loop4): invalid crc value [ 201.284691][ T3758] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.322323][ T3758] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.396282][ T39] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 201.500326][ T3764] overlayfs: failed to resolve './file0': -2 [ 201.696320][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 201.702163][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 201.736565][ T39] usb 4-1: USB disconnect, device number 42 [ 201.962776][ T3424] attempt to access beyond end of device [ 201.962776][ T3424] loop4: rw=2049, want=45104, limit=40427 [ 202.385160][ T3776] loop3: detected capacity change from 0 to 40427 [ 202.427260][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0091/input/input34 [ 202.446811][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0091/input/input35 [ 202.471277][ T6] uclogic 0003:256C:006D.0091: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 202.488268][ T3776] F2FS-fs (loop3): invalid crc value [ 202.507631][ T3776] F2FS-fs (loop3): Found nat_bits in checkpoint [ 202.555444][ T3776] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 202.628774][ T39] usb 3-1: USB disconnect, device number 49 [ 202.789389][ T3787] overlayfs: failed to resolve './file0': -2 [ 202.946247][ T401] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 203.110480][ T3681] attempt to access beyond end of device [ 203.110480][ T3681] loop3: rw=2049, want=45104, limit=40427 [ 203.396492][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.425786][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.465214][ T401] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.474464][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.482379][ T3798] loop3: detected capacity change from 0 to 8192 [ 203.486237][ T857] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 203.495988][ T401] usb 2-1: config 0 descriptor?? [ 203.516671][ T3798] loop3: p2 p3 p4 [ 203.520331][ T3798] loop3: p2 start 14935 is beyond EOD, truncated [ 203.526620][ T3798] loop3: p3 size 196608 extends beyond EOD, truncated [ 203.533701][ T3798] loop3: p4 start 4026530307 is beyond EOD, truncated [ 203.577836][ T3798] overlayfs: missing 'lowerdir' [ 203.670112][ T3802] loop3: detected capacity change from 0 to 256 [ 203.813822][ T3805] loop0: detected capacity change from 0 to 1024 [ 203.845676][ T3805] EXT4-fs (loop0): Test dummy encryption mode enabled [ 203.852406][ T3805] EXT4-fs (loop0): Ignoring removed orlov option [ 203.860777][ T3805] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 203.906482][ T857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.917830][ T857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.927657][ T857] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.936984][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.956545][ T30] audit: type=1326 audit(1719416163.268:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3801 comm="syz.3.1103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40cd195ae9 code=0x0 [ 204.075392][ T857] usb 5-1: config 0 descriptor?? [ 204.729270][ T3823] loop3: detected capacity change from 0 to 1024 [ 204.787326][ T3823] EXT4-fs (loop3): Test dummy encryption mode enabled [ 204.793961][ T3823] EXT4-fs (loop3): Ignoring removed orlov option [ 204.807726][ T3823] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 204.846294][ T401] uclogic 0003:256C:006D.0092: interface is invalid, ignoring [ 204.887029][ T3795] netem: change failed [ 205.179019][ T30] audit: type=1326 audit(1719416164.498:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b84bae9 code=0x7ffc0000 [ 205.209191][ T30] audit: type=1326 audit(1719416164.528:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f981b84bae9 code=0x7ffc0000 [ 205.233275][ T30] audit: type=1326 audit(1719416164.528:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981b84bae9 code=0x7ffc0000 [ 205.396578][ T857] uclogic 0003:256C:006D.0093: interface is invalid, ignoring [ 205.656129][ T401] usb 2-1: USB disconnect, device number 40 [ 205.801446][ T3844] loop1: detected capacity change from 0 to 1024 [ 205.866798][ T3844] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.874701][ T3844] EXT4-fs (loop1): Ignoring removed orlov option [ 205.891332][ T3844] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 206.022753][ T3848] loop3: detected capacity change from 0 to 1024 [ 206.032990][ T3848] EXT4-fs (loop3): Test dummy encryption mode enabled [ 206.039830][ T3848] EXT4-fs (loop3): Ignoring removed orlov option [ 206.057698][ T3848] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 206.179895][ T3833] loop2: detected capacity change from 0 to 131072 [ 206.214144][ T3833] F2FS-fs (loop2): Test dummy encryption mode enabled [ 206.222475][ T3833] F2FS-fs (loop2): invalid crc value [ 206.229608][ T3833] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.973744][ T3833] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.994482][ T1100] usb 5-1: USB disconnect, device number 38 [ 207.041807][ T3629] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 207.129629][ T3867] loop4: detected capacity change from 0 to 1024 [ 207.147943][ T3867] EXT4-fs (loop4): Test dummy encryption mode enabled [ 207.154847][ T3867] EXT4-fs (loop4): Ignoring removed orlov option [ 207.172519][ T3867] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 207.266272][ T401] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 207.288943][ T3874] loop4: detected capacity change from 0 to 128 [ 207.466256][ T2667] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 207.636338][ T401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.684287][ T401] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.695462][ T401] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 207.704984][ T401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.717221][ T401] usb 4-1: config 0 descriptor?? [ 207.826299][ T2667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.837073][ T2667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.846923][ T2667] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 207.855786][ T2667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.876872][ T2667] usb 2-1: config 0 descriptor?? [ 207.886070][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.893171][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.900697][ T3880] device bridge_slave_0 entered promiscuous mode [ 207.910094][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.919501][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.926983][ T3880] device bridge_slave_1 entered promiscuous mode [ 207.990936][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.997832][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.004919][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.011725][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.039837][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.048157][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.055387][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.079811][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.088077][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.094925][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.102477][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.110937][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.117813][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.132002][ T3876] loop0: detected capacity change from 0 to 131072 [ 208.149343][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.157344][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.173421][ T3880] device veth0_vlan entered promiscuous mode [ 208.179898][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.191694][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.199807][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.210331][ T3876] F2FS-fs (loop0): Test dummy encryption mode enabled [ 208.228694][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.240530][ T3876] F2FS-fs (loop0): invalid crc value [ 208.253019][ T3876] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.266668][ T3880] device veth1_macvtap entered promiscuous mode [ 208.286802][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.288196][ T3876] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.295148][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.314451][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.322819][ T10] device bridge_slave_1 left promiscuous mode [ 208.328916][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.336321][ T10] device bridge_slave_0 left promiscuous mode [ 208.342263][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.349945][ T10] device veth1_macvtap left promiscuous mode [ 208.355858][ T10] device veth0_vlan left promiscuous mode [ 208.428116][ T3876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 208.436298][ T2667] usbhid 2-1:0.0: can't add hid device: -71 [ 208.442807][ T2667] usbhid: probe of 2-1:0.0 failed with error -71 [ 208.450167][ T2667] usb 2-1: USB disconnect, device number 41 [ 208.458125][ T3862] netem: change failed [ 208.462206][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.476151][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.484706][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.492867][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.519988][ T30] audit: type=1326 audit(1719416167.838:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.2.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 208.559730][ T30] audit: type=1326 audit(1719416167.838:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.2.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 208.603265][ T30] audit: type=1326 audit(1719416167.868:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.2.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 208.628256][ T3432] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 208.649575][ T30] audit: type=1326 audit(1719416167.868:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.2.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 208.652010][ T3899] loop2: detected capacity change from 0 to 1024 [ 208.691248][ T30] audit: type=1326 audit(1719416167.868:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.2.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 208.780044][ T3899] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.787393][ T3899] EXT4-fs (loop2): Ignoring removed orlov option [ 208.807210][ T3899] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 209.083265][ T401] usb 4-1: string descriptor 0 read error: -71 [ 209.106260][ T401] uclogic 0003:256C:006D.0094: failed retrieving string descriptor #200: -71 [ 209.115634][ T401] uclogic 0003:256C:006D.0094: failed retrieving pen parameters: -71 [ 209.123994][ T401] uclogic 0003:256C:006D.0094: failed probing pen v2 parameters: -71 [ 209.132535][ T401] uclogic 0003:256C:006D.0094: failed probing parameters: -71 [ 209.140094][ T401] uclogic: probe of 0003:256C:006D.0094 failed with error -71 [ 209.148430][ T401] usb 4-1: USB disconnect, device number 43 [ 209.156223][ T857] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 209.458640][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.465630][ T3915] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.473722][ T3915] device bridge_slave_0 entered promiscuous mode [ 209.480864][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.488612][ T3915] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.496448][ T3915] device bridge_slave_1 entered promiscuous mode [ 209.511786][ T3921] loop4: detected capacity change from 0 to 1024 [ 209.568392][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.575271][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.582372][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.589143][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.607241][ T3921] EXT4-fs (loop4): Test dummy encryption mode enabled [ 209.611045][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.619702][ T3921] EXT4-fs (loop4): Ignoring removed orlov option [ 209.627606][ T2667] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.629050][ T3921] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 209.662662][ T2667] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.682744][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.691256][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.698137][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.705645][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.715843][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.722723][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.732569][ T10] device bridge_slave_1 left promiscuous mode [ 209.738846][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.746120][ T10] device bridge_slave_0 left promiscuous mode [ 209.752200][ T857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.752328][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.763093][ T857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.779488][ T857] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.794623][ T10] device veth1_macvtap left promiscuous mode [ 209.800648][ T10] device veth0_vlan left promiscuous mode [ 209.817045][ T857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.917476][ T857] usb 3-1: config 0 descriptor?? [ 210.040545][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.051264][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.145780][ T30] audit: type=1326 audit(1719416169.458:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9142e97ae9 code=0x7ffc0000 [ 210.173147][ T30] audit: type=1326 audit(1719416169.458:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f9142e97ae9 code=0x7ffc0000 [ 210.180272][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.198502][ T30] audit: type=1326 audit(1719416169.458:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3931 comm="syz.1.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9142e97ae9 code=0x7ffc0000 [ 210.229423][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.238682][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.245899][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.253444][ T3915] device veth0_vlan entered promiscuous mode [ 210.263612][ T3915] device veth1_macvtap entered promiscuous mode [ 210.282877][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.291260][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.300201][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.337547][ T3938] loop0: detected capacity change from 0 to 128 [ 210.371555][ T3939] loop3: detected capacity change from 0 to 1024 [ 210.407668][ T3939] EXT4-fs (loop3): Test dummy encryption mode enabled [ 210.414391][ T3939] EXT4-fs (loop3): Ignoring removed orlov option [ 210.423184][ T3939] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 210.466234][ T398] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 210.650325][ T3903] netem: change failed [ 210.836297][ T398] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 210.849412][ T398] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 210.858334][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.867084][ T398] usb 2-1: config 0 descriptor?? [ 210.906728][ T398] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 211.016209][ T1193] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 211.146331][ T857] uclogic 0003:256C:006D.0095: interface is invalid, ignoring [ 211.406316][ T1193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.417143][ T1193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.426702][ T1193] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 211.435527][ T1193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.447522][ T1193] usb 5-1: config 0 descriptor?? [ 211.736297][ T6] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 211.893271][ T1100] usb 3-1: USB disconnect, device number 50 [ 211.929506][ T3960] loop2: detected capacity change from 0 to 8192 [ 211.956623][ T3960] loop2: p2 p3 p4 [ 211.960295][ T3960] loop2: p2 start 14935 is beyond EOD, truncated [ 211.966557][ T3960] loop2: p3 size 196608 extends beyond EOD, truncated [ 211.973584][ T3960] loop2: p4 start 4026530307 is beyond EOD, truncated [ 211.996420][ T1193] usbhid 5-1:0.0: can't add hid device: -71 [ 212.002321][ T1193] usbhid: probe of 5-1:0.0 failed with error -71 [ 212.009518][ T1193] usb 5-1: USB disconnect, device number 39 [ 212.025615][ T3960] overlayfs: missing 'lowerdir' [ 212.116367][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.127204][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.137068][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.145898][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.154710][ T6] usb 4-1: config 0 descriptor?? [ 212.696248][ T1193] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 212.856252][ T20] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 213.076329][ T1193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.086537][ T1193] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.096806][ T1193] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.105663][ T1193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.114516][ T1193] usb 1-1: config 0 descriptor?? [ 213.157658][ T30] audit: type=1326 audit(1719416172.478:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 213.181297][ T6] usb 4-1: string descriptor 0 read error: -71 [ 213.181480][ T30] audit: type=1326 audit(1719416172.478:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 213.210682][ T30] audit: type=1326 audit(1719416172.478:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 213.210724][ T6] uclogic 0003:256C:006D.0096: failed retrieving string descriptor #200: -71 [ 213.242831][ T6] uclogic 0003:256C:006D.0096: failed retrieving pen parameters: -71 [ 213.243036][ T30] audit: type=1326 audit(1719416172.478:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 213.250902][ T6] uclogic 0003:256C:006D.0096: failed probing pen v2 parameters: -71 [ 213.282095][ T30] audit: type=1326 audit(1719416172.508:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3981 comm="syz.2.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 213.305290][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.316131][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.325918][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 213.328756][ T3984] loop2: detected capacity change from 0 to 128 [ 213.335235][ T6] uclogic 0003:256C:006D.0096: failed probing parameters: -71 [ 213.348252][ T6] uclogic: probe of 0003:256C:006D.0096 failed with error -71 [ 213.355636][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.364928][ T6] usb 4-1: USB disconnect, device number 44 [ 213.371991][ T20] usb 5-1: config 0 descriptor?? [ 213.390279][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 213.607152][ T1100] usb 2-1: USB disconnect, device number 42 [ 214.016313][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 214.022143][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 214.028950][ T20] usb 5-1: USB disconnect, device number 40 [ 214.066221][ T1100] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 214.426611][ T1100] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 214.439619][ T1100] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.449113][ T1100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.459348][ T1100] usb 2-1: config 0 descriptor?? [ 214.497951][ T1100] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 214.662070][ T4001] loop3: detected capacity change from 0 to 512 [ 214.705770][ T4001] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.753999][ T4001] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 214.769751][ T4001] EXT4-fs (loop3): 1 truncate cleaned up [ 214.775400][ T4001] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 214.946267][ T398] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 215.377722][ T1100] usb 1-1: USB disconnect, device number 42 [ 215.506284][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.518275][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.528117][ T398] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.537173][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.556632][ T398] usb 5-1: config 0 descriptor?? [ 215.667415][ T30] audit: type=1326 audit(1719416174.988:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cd195ae9 code=0x7ffc0000 [ 215.690890][ T30] audit: type=1326 audit(1719416174.988:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cd195ae9 code=0x7ffc0000 [ 215.719690][ T30] audit: type=1326 audit(1719416174.988:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f40cd195ae9 code=0x7ffc0000 [ 215.743408][ T30] audit: type=1326 audit(1719416174.988:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cd195ae9 code=0x7ffc0000 [ 215.766732][ T30] audit: type=1326 audit(1719416174.988:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.3.1166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cd195ae9 code=0x7ffc0000 [ 215.801851][ T20] usb 2-1: USB disconnect, device number 43 [ 215.973360][ T1100] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 216.110017][ T4025] loop3: detected capacity change from 0 to 131072 [ 216.206950][ T4025] F2FS-fs (loop3): Test dummy encryption mode enabled [ 216.214735][ T4025] F2FS-fs (loop3): invalid crc value [ 216.221349][ T4025] F2FS-fs (loop3): Found nat_bits in checkpoint [ 216.236364][ T20] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 216.247064][ T4025] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 216.257988][ T4025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1167'. [ 216.276278][ T401] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 216.299196][ T3681] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 216.336289][ T1100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.347223][ T1100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.357335][ T1100] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 216.366254][ T1100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.374942][ T1100] usb 1-1: config 0 descriptor?? [ 216.609204][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.616070][ T4040] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.623532][ T4040] device bridge_slave_0 entered promiscuous mode [ 216.630431][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.630678][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.641243][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.648205][ T401] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.658059][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 216.679374][ T4040] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.686737][ T4040] device bridge_slave_1 entered promiscuous mode [ 216.692964][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.700807][ T401] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 216.713674][ T401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.716830][ T20] usb 2-1: config 0 descriptor?? [ 216.726087][ T401] usb 3-1: config 0 descriptor?? [ 216.762469][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.769414][ T4040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.776526][ T4040] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.783289][ T4040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.791074][ T401] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 216.816249][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.823599][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.832876][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.841644][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.849546][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.864195][ T4040] device veth0_vlan entered promiscuous mode [ 216.870663][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.878850][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.886726][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.893923][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.905463][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.914605][ T4040] device veth1_macvtap entered promiscuous mode [ 216.925527][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.938482][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.976300][ T398] uclogic 0003:256C:006D.0097: failed retrieving Huion firmware version: -71 [ 216.985129][ T398] uclogic 0003:256C:006D.0097: failed probing parameters: -71 [ 216.992609][ T398] uclogic: probe of 0003:256C:006D.0097 failed with error -71 [ 217.005134][ T398] usb 5-1: USB disconnect, device number 41 [ 217.426285][ T1100] usb 1-1: string descriptor 0 read error: -71 [ 217.446605][ T1100] uclogic 0003:256C:006D.0098: failed retrieving string descriptor #200: -71 [ 217.455333][ T1100] uclogic 0003:256C:006D.0098: failed retrieving pen parameters: -71 [ 217.463450][ T1100] uclogic 0003:256C:006D.0098: failed probing pen v2 parameters: -71 [ 217.471631][ T1100] uclogic 0003:256C:006D.0098: failed probing parameters: -71 [ 217.479050][ T1100] uclogic: probe of 0003:256C:006D.0098 failed with error -71 [ 217.519427][ T1100] usb 1-1: USB disconnect, device number 43 [ 217.643076][ T4053] overlayfs: failed to resolve './file0': -2 [ 217.666776][ T10] device bridge_slave_1 left promiscuous mode [ 217.673777][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.681865][ T10] device bridge_slave_0 left promiscuous mode [ 217.687949][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.697091][ T10] device veth1_macvtap left promiscuous mode [ 217.702945][ T10] device veth0_vlan left promiscuous mode [ 217.907340][ T4056] loop0: detected capacity change from 0 to 512 [ 217.966635][ T4056] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.987972][ T30] audit: type=1326 audit(1719416177.308:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cfd96ae9 code=0x7ffc0000 [ 217.988481][ T4056] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 218.026598][ T4056] EXT4-fs (loop0): 1 truncate cleaned up [ 218.032157][ T4056] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 218.032368][ T30] audit: type=1326 audit(1719416177.348:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cfd96ae9 code=0x7ffc0000 [ 218.068364][ T30] audit: type=1326 audit(1719416177.368:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f96cfd96ae9 code=0x7ffc0000 [ 218.095788][ T30] audit: type=1326 audit(1719416177.368:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cfd96ae9 code=0x7ffc0000 [ 218.119272][ T30] audit: type=1326 audit(1719416177.368:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.3.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cfd96ae9 code=0x7ffc0000 [ 218.156259][ T20] uclogic 0003:256C:006D.0099: v1 buttonpad probing failed: -71 [ 218.163830][ T20] uclogic 0003:256C:006D.0099: failed probing parameters: -71 [ 218.172374][ T20] uclogic: probe of 0003:256C:006D.0099 failed with error -71 [ 218.185040][ T20] usb 2-1: USB disconnect, device number 44 [ 218.516582][ T4069] loop4: detected capacity change from 0 to 40427 [ 218.568240][ T4069] F2FS-fs (loop4): invalid crc value [ 218.574387][ T4069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 218.596760][ T4069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.802905][ T4080] overlayfs: failed to resolve './file0': -2 [ 219.062531][ T4082] loop3: detected capacity change from 0 to 8192 [ 219.099647][ T4082] loop3: p2 p3 p4 [ 219.126386][ T4082] loop3: p2 start 14935 is beyond EOD, truncated [ 219.133082][ T4082] loop3: p3 size 196608 extends beyond EOD, truncated [ 219.183931][ T4082] loop3: p4 start 4026530307 is beyond EOD, truncated [ 219.216480][ T100] loop3: p2 p3 p4 [ 219.220441][ T3424] attempt to access beyond end of device [ 219.220441][ T3424] loop4: rw=2049, want=45104, limit=40427 [ 219.325876][ T100] loop3: p2 start 14935 is beyond EOD, truncated [ 219.389075][ T100] loop3: p3 size 196608 extends beyond EOD, truncated [ 219.447632][ T4087] overlayfs: missing 'lowerdir' [ 219.474395][ T100] loop3: p4 start 4026530307 is beyond EOD, truncated [ 219.538734][ T39] usb 3-1: USB disconnect, device number 51 [ 219.746060][ T4078] loop1: detected capacity change from 0 to 131072 [ 219.817153][ T4078] F2FS-fs (loop1): Test dummy encryption mode enabled [ 219.824884][ T4078] F2FS-fs (loop1): invalid crc value [ 219.831508][ T4078] F2FS-fs (loop1): Found nat_bits in checkpoint [ 219.867407][ T4078] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 219.880101][ T4078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1181'. [ 220.008141][ T2667] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 220.015727][ T39] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 220.053063][ T3189] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 220.336246][ T598] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 220.436283][ T2667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.447246][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.458210][ T2667] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.468028][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.477707][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.486616][ T2667] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.495530][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.503387][ T2667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.511941][ T2667] usb 4-1: config 0 descriptor?? [ 220.517009][ T39] usb 3-1: config 0 descriptor?? [ 220.696273][ T598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.707061][ T598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.717253][ T598] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.726110][ T598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.737115][ T598] usb 1-1: config 0 descriptor?? [ 220.742460][ T4118] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.749604][ T4118] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.757073][ T4118] device bridge_slave_0 entered promiscuous mode [ 220.764059][ T4118] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.771035][ T4118] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.779112][ T4118] device bridge_slave_1 entered promiscuous mode [ 220.830388][ T4118] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.837289][ T4118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.844335][ T4118] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.851144][ T4118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.879784][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.898201][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.916403][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.919712][ T4125] loop4: detected capacity change from 0 to 8192 [ 220.923717][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.936976][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.945012][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.953021][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.959866][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.967582][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.975729][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.976617][ T4125] loop4: p2 p3 p4 [ 220.983802][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.987631][ T4125] loop4: p2 start 14935 is beyond EOD, truncated [ 220.993914][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.000550][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.007669][ T4125] loop4: p3 size 196608 extends beyond EOD, truncated [ 221.017879][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.024031][ T4125] loop4: p4 start 4026530307 is beyond EOD, truncated [ 221.029565][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.043616][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.070852][ T4118] device veth0_vlan entered promiscuous mode [ 221.079185][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.087984][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.096433][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.104255][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.114269][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.121810][ T1100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.130806][ T4125] overlayfs: missing 'lowerdir' [ 221.146250][ T4118] device veth1_macvtap entered promiscuous mode [ 221.157828][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.165767][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.174217][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 221.179591][ T329] udevd[329]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 221.191551][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.204341][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.212546][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.221117][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.406746][ T313] device bridge_slave_1 left promiscuous mode [ 221.412676][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.419989][ T313] device bridge_slave_0 left promiscuous mode [ 221.425986][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.433836][ T313] device veth1_macvtap left promiscuous mode [ 221.440428][ T313] device veth0_vlan left promiscuous mode [ 221.496371][ T291] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 221.506276][ T398] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 221.516446][ T2667] usb 4-1: string descriptor 0 read error: -71 [ 221.536329][ T39] usb 3-1: string descriptor 0 read error: -71 [ 221.542700][ T2667] uclogic 0003:256C:006D.009B: failed retrieving string descriptor #200: -71 [ 221.551409][ T2667] uclogic 0003:256C:006D.009B: failed retrieving pen parameters: -71 [ 221.559546][ T39] uclogic 0003:256C:006D.009A: failed retrieving string descriptor #200: -71 [ 221.568238][ T2667] uclogic 0003:256C:006D.009B: failed probing pen v2 parameters: -71 [ 221.576215][ T39] uclogic 0003:256C:006D.009A: failed retrieving pen parameters: -71 [ 221.584079][ T2667] uclogic 0003:256C:006D.009B: failed probing parameters: -71 [ 221.591424][ T39] uclogic 0003:256C:006D.009A: failed probing pen v2 parameters: -71 [ 221.599465][ T2667] uclogic: probe of 0003:256C:006D.009B failed with error -71 [ 221.606798][ T39] uclogic 0003:256C:006D.009A: failed probing parameters: -71 [ 221.614041][ T39] uclogic: probe of 0003:256C:006D.009A failed with error -71 [ 221.622246][ T2667] usb 4-1: USB disconnect, device number 45 [ 221.630201][ T39] usb 3-1: USB disconnect, device number 52 [ 221.866352][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.866420][ T398] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.877333][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.888737][ T398] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.896662][ T291] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.909606][ T398] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.918163][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.928115][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.936397][ T291] usb 5-1: config 0 descriptor?? [ 221.948463][ T398] usb 2-1: config 0 descriptor?? [ 221.986755][ T398] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 222.038399][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 222.038415][ T30] audit: type=1326 audit(1719416181.358:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 222.067879][ T30] audit: type=1326 audit(1719416181.358:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 222.099202][ T30] audit: type=1326 audit(1719416181.358:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 222.123266][ T30] audit: type=1326 audit(1719416181.358:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 222.124603][ T4137] loop2: detected capacity change from 0 to 256 [ 222.146764][ T30] audit: type=1326 audit(1719416181.358:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x7ffc0000 [ 222.175972][ T598] uclogic 0003:256C:006D.009C: v1 buttonpad probing failed: -71 [ 222.183944][ T598] uclogic 0003:256C:006D.009C: failed probing parameters: -71 [ 222.191439][ T598] uclogic: probe of 0003:256C:006D.009C failed with error -71 [ 222.199974][ T598] usb 1-1: USB disconnect, device number 44 [ 222.261315][ T4130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 222.274982][ T4140] loop3: detected capacity change from 0 to 512 [ 222.381592][ T30] audit: type=1326 audit(1719416181.698:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f69110ae9 code=0x0 [ 222.440595][ T4140] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.486878][ T4140] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 222.501832][ T4140] EXT4-fs (loop3): 1 truncate cleaned up [ 222.507347][ T4140] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 222.858874][ T4151] loop0: detected capacity change from 0 to 1024 [ 222.909536][ T4151] EXT4-fs (loop0): Test dummy encryption mode enabled [ 222.916541][ T4151] EXT4-fs (loop0): Ignoring removed orlov option [ 222.998572][ T4151] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 223.274837][ T4164] loop0: detected capacity change from 0 to 8192 [ 223.317606][ T4164] loop0: p2 p3 p4 [ 223.321809][ T4164] loop0: p2 start 14935 is beyond EOD, truncated [ 223.328384][ T4164] loop0: p3 size 196608 extends beyond EOD, truncated [ 223.433913][ T4164] loop0: p4 start 4026530307 is beyond EOD, truncated [ 223.456425][ T291] uclogic 0003:256C:006D.009D: failed retrieving Huion firmware version: -71 [ 223.525116][ T4164] overlayfs: missing 'lowerdir' [ 223.527315][ T291] uclogic 0003:256C:006D.009D: failed probing parameters: -71 [ 223.538175][ T291] uclogic: probe of 0003:256C:006D.009D failed with error -71 [ 223.547567][ T291] usb 5-1: USB disconnect, device number 42 [ 223.656313][ T598] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 223.906247][ T398] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 223.953601][ T30] audit: type=1326 audit(1719416183.268:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87b48ae9 code=0x7ffc0000 [ 223.976913][ T30] audit: type=1326 audit(1719416183.268:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87b48ae9 code=0x7ffc0000 [ 224.000946][ T30] audit: type=1326 audit(1719416183.268:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fea87b48ae9 code=0x7ffc0000 [ 224.024604][ T30] audit: type=1326 audit(1719416183.268:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea87b48ae9 code=0x7ffc0000 [ 224.102708][ T4175] loop3: detected capacity change from 0 to 128 [ 224.146346][ T598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.157216][ T598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.170612][ T598] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 224.179916][ T598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.223376][ T598] usb 3-1: config 0 descriptor?? [ 224.251795][ T20] usb 2-1: USB disconnect, device number 45 [ 224.316341][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.329102][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.349534][ T398] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 224.365339][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.380427][ T398] usb 1-1: config 0 descriptor?? [ 224.703242][ T4173] loop4: detected capacity change from 0 to 131072 [ 224.736245][ T20] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 224.786833][ T4173] F2FS-fs (loop4): Test dummy encryption mode enabled [ 224.794818][ T4173] F2FS-fs (loop4): invalid crc value [ 224.801746][ T4173] F2FS-fs (loop4): Found nat_bits in checkpoint [ 224.823553][ T4173] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 224.863520][ T3424] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 225.086389][ T398] usb 1-1: string descriptor 0 read error: -71 [ 225.334705][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.345671][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.355214][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 225.364177][ T398] uclogic 0003:256C:006D.009F: failed retrieving string descriptor #200: -71 [ 225.372840][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.380649][ T398] uclogic 0003:256C:006D.009F: failed retrieving pen parameters: -71 [ 225.388571][ T598] uclogic 0003:256C:006D.009E: failed retrieving string descriptor #200: -71 [ 225.397647][ T598] uclogic 0003:256C:006D.009E: failed retrieving pen parameters: -71 [ 225.405901][ T20] usb 2-1: config 0 descriptor?? [ 225.410736][ T398] uclogic 0003:256C:006D.009F: failed probing pen v2 parameters: -71 [ 225.418592][ T598] uclogic 0003:256C:006D.009E: failed probing pen v2 parameters: -71 [ 225.426539][ T398] uclogic 0003:256C:006D.009F: failed probing parameters: -71 [ 225.433763][ T598] uclogic 0003:256C:006D.009E: failed probing parameters: -71 [ 225.442535][ T398] uclogic: probe of 0003:256C:006D.009F failed with error -71 [ 225.450792][ T398] usb 1-1: USB disconnect, device number 45 [ 225.456587][ T598] uclogic: probe of 0003:256C:006D.009E failed with error -71 [ 225.465610][ T598] usb 3-1: USB disconnect, device number 53 [ 225.518625][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.525625][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.532996][ T4194] device bridge_slave_0 entered promiscuous mode [ 225.541150][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.548036][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.555124][ T4194] device bridge_slave_1 entered promiscuous mode [ 225.633481][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.640463][ T4194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.647883][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.654648][ T4194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.673563][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.683237][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.692228][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.709869][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.718389][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.725240][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.759104][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.767580][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.774437][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.814154][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.937697][ T2667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.148122][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.161981][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 227.659652][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 227.669813][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 227.686310][ T20] uclogic 0003:256C:006D.00A0: failed retrieving Huion firmware version: -71 [ 227.691059][ T4194] device veth0_vlan entered promiscuous mode [ 227.696278][ T20] uclogic 0003:256C:006D.00A0: failed probing parameters: -71 [ 227.712083][ T20] uclogic: probe of 0003:256C:006D.00A0 failed with error -71 [ 227.727343][ T20] usb 2-1: USB disconnect, device number 46 [ 227.738991][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.749145][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.761884][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.771775][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.797301][ T4194] device veth1_macvtap entered promiscuous mode [ 227.820170][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.828081][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.836722][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.886678][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.906885][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.995776][ T313] device bridge_slave_1 left promiscuous mode [ 228.005046][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.027193][ T313] device bridge_slave_0 left promiscuous mode [ 228.046466][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.068901][ T313] device veth1_macvtap left promiscuous mode [ 228.090270][ T313] device veth0_vlan left promiscuous mode [ 228.106221][ T20] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 228.156197][ T26] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 228.242792][ T4227] loop4: detected capacity change from 0 to 40427 [ 228.336809][ T4227] F2FS-fs (loop4): invalid crc value [ 228.358686][ T4227] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.382373][ T4227] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.425807][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 228.483880][ T4234] overlayfs: failed to resolve './file0': -2 [ 228.506329][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.517393][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.526998][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 228.535830][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.546276][ T20] usb 2-1: config 0 descriptor?? [ 228.546421][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 228.562086][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 228.573012][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 228.581805][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.590626][ T26] usb 1-1: config 0 descriptor?? [ 228.606290][ T4225] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 228.629219][ T26] hub 1-1:0.0: USB hub found [ 229.326739][ T4194] attempt to access beyond end of device [ 229.326739][ T4194] loop4: rw=2049, want=45104, limit=40427 [ 229.338154][ T26] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 229.396888][ T4241] loop3: detected capacity change from 0 to 128 [ 229.656352][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 229.662606][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 229.697207][ T26] usb 1-1: USB disconnect, device number 46 [ 229.716220][ T598] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 230.076427][ T598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.087332][ T598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.097576][ T598] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 230.106760][ T598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.115141][ T598] usb 5-1: config 0 descriptor?? [ 230.376247][ T26] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 230.393830][ T4256] loop3: detected capacity change from 0 to 40427 [ 230.464607][ T4256] F2FS-fs (loop3): invalid crc value [ 230.481627][ T4256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 230.496302][ T20] uclogic 0003:256C:006D.00A1: v1 buttonpad probing failed: -71 [ 230.514004][ T20] uclogic 0003:256C:006D.00A1: failed probing parameters: -71 [ 230.521359][ T20] uclogic: probe of 0003:256C:006D.00A1 failed with error -71 [ 230.537498][ T20] usb 2-1: USB disconnect, device number 47 [ 230.552085][ T4256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 230.782584][ T4263] overlayfs: failed to resolve './file0': -2 [ 230.836397][ T4243] UDC core: couldn't find an available UDC or it's busy: -16 [ 230.856693][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.877253][ T4243] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.894820][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.905157][ T26] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 230.914266][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.926324][ T26] usb 1-1: config 0 descriptor?? [ 231.031615][ T4258] loop2: detected capacity change from 0 to 131072 [ 231.081509][ T4258] F2FS-fs (loop2): Test dummy encryption mode enabled [ 231.090452][ T4258] F2FS-fs (loop2): invalid crc value [ 231.097837][ T4258] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.164196][ T4258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.181360][ T4040] attempt to access beyond end of device [ 231.181360][ T4040] loop3: rw=2049, want=45104, limit=40427 [ 231.362434][ T3880] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 231.555249][ T4277] loop3: detected capacity change from 0 to 8192 [ 231.577044][ T4277] loop3: p2 p3 p4 [ 231.580760][ T4277] loop3: p2 start 14935 is beyond EOD, truncated [ 231.587208][ T4277] loop3: p3 size 196608 extends beyond EOD, truncated [ 231.594380][ T4277] loop3: p4 start 4026530307 is beyond EOD, truncated [ 231.680446][ T4277] overlayfs: missing 'lowerdir' [ 231.736281][ T598] uclogic 0003:256C:006D.00A2: v1 buttonpad probing failed: -71 [ 231.743904][ T598] uclogic 0003:256C:006D.00A2: failed probing parameters: -71 [ 231.751449][ T598] uclogic: probe of 0003:256C:006D.00A2 failed with error -71 [ 231.763715][ T598] usb 5-1: USB disconnect, device number 43 [ 231.815182][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.822095][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.829397][ T4280] device bridge_slave_0 entered promiscuous mode [ 231.836659][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.843526][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.850851][ T4280] device bridge_slave_1 entered promiscuous mode [ 231.894486][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.901372][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.908465][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.915224][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.939818][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.948101][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.955373][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.996104][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.999054][ T4289] loop1: detected capacity change from 0 to 128 [ 232.005122][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.018200][ T598] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.025026][ T598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.032416][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.040489][ T598] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.047348][ T598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.054523][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.057567][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00A3/input/input36 [ 232.062563][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.073819][ T4264] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 232.093648][ T4280] device veth0_vlan entered promiscuous mode [ 232.110998][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00A3/input/input37 [ 232.118235][ T4280] device veth1_macvtap entered promiscuous mode [ 232.126506][ T26] uclogic 0003:256C:006D.00A3: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 232.142431][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.151680][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.160490][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.168744][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.176064][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.183819][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.266064][ T4292] loop4: detected capacity change from 0 to 8192 [ 232.300368][ T398] usb 1-1: USB disconnect, device number 47 [ 232.315756][ T4292] loop4: p2 p3 p4 [ 232.320257][ T4292] loop4: p2 start 14935 is beyond EOD, truncated [ 232.329250][ T4292] loop4: p3 size 196608 extends beyond EOD, truncated [ 232.336450][ T4292] loop4: p4 start 4026530307 is beyond EOD, truncated [ 232.526575][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.558377][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.568479][ T4264] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 232.578667][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.579683][ T4300] overlayfs: missing 'lowerdir' [ 232.606406][ T4264] usb 4-1: config 0 descriptor?? [ 232.877066][ T1284] device bridge_slave_1 left promiscuous mode [ 232.883085][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.890860][ T1284] device bridge_slave_0 left promiscuous mode [ 232.896902][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.904768][ T1284] device veth1_macvtap left promiscuous mode [ 232.910694][ T1284] device veth0_vlan left promiscuous mode [ 232.976276][ T2667] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 233.103267][ T4310] loop2: detected capacity change from 0 to 512 [ 233.132339][ T4310] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.148417][ T4310] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 233.163215][ T4310] EXT4-fs (loop2): 1 truncate cleaned up [ 233.169045][ T4310] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 233.270145][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 233.270161][ T30] audit: type=1326 audit(1719416192.588:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bed393ae9 code=0x7ffc0000 [ 233.307281][ T30] audit: type=1326 audit(1719416192.588:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f3bed393ae9 code=0x7ffc0000 [ 233.331138][ T4264] usb 4-1: string descriptor 0 read error: -71 [ 233.337621][ T30] audit: type=1326 audit(1719416192.588:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bed393ae9 code=0x7ffc0000 [ 233.352331][ T4312] loop0: detected capacity change from 0 to 40427 [ 233.361212][ T2667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.377918][ T2667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.388137][ T2667] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 233.397172][ T4264] uclogic 0003:256C:006D.00A4: failed retrieving string descriptor #200: -71 [ 233.405842][ T4264] uclogic 0003:256C:006D.00A4: failed retrieving pen parameters: -71 [ 233.414024][ T2667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.421992][ T4264] uclogic 0003:256C:006D.00A4: failed probing pen v2 parameters: -71 [ 233.422165][ T4312] F2FS-fs (loop0): invalid crc value [ 233.430363][ T4264] uclogic 0003:256C:006D.00A4: failed probing parameters: -71 [ 233.442724][ T2667] usb 5-1: config 0 descriptor?? [ 233.447952][ T4264] uclogic: probe of 0003:256C:006D.00A4 failed with error -71 [ 233.448593][ T4312] F2FS-fs (loop0): Found nat_bits in checkpoint [ 233.457033][ T4264] usb 4-1: USB disconnect, device number 46 [ 233.501142][ T4312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 233.586273][ T398] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 233.604828][ T4322] overlayfs: failed to resolve './file0': -2 [ 233.832707][ T4329] loop3: detected capacity change from 0 to 128 [ 233.981462][ T3915] attempt to access beyond end of device [ 233.981462][ T3915] loop0: rw=2049, want=45104, limit=40427 [ 234.016343][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.037356][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.057341][ T398] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 234.066744][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.078071][ T398] usb 2-1: config 0 descriptor?? [ 234.356235][ T598] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 234.537200][ T20] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 234.736363][ T598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.747335][ T598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.757001][ T598] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.765880][ T598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.774403][ T598] usb 3-1: config 0 descriptor?? [ 234.866454][ T2667] uclogic 0003:256C:006D.00A5: v1 buttonpad probing failed: -71 [ 234.874112][ T2667] uclogic 0003:256C:006D.00A5: failed probing parameters: -71 [ 234.882296][ T2667] uclogic: probe of 0003:256C:006D.00A5 failed with error -71 [ 234.893063][ T2667] usb 5-1: USB disconnect, device number 44 [ 234.896263][ T20] usb 1-1: not running at top speed; connect to a high speed hub [ 234.986297][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 235.022893][ T4333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 235.046332][ T398] usb 2-1: string descriptor 0 read error: -71 [ 235.066280][ T398] uclogic 0003:256C:006D.00A6: failed retrieving string descriptor #200: -71 [ 235.074921][ T398] uclogic 0003:256C:006D.00A6: failed retrieving pen parameters: -71 [ 235.082910][ T398] uclogic 0003:256C:006D.00A6: failed probing pen v2 parameters: -71 [ 235.090862][ T398] uclogic 0003:256C:006D.00A6: failed probing parameters: -71 [ 235.098223][ T398] uclogic: probe of 0003:256C:006D.00A6 failed with error -71 [ 235.107415][ T398] usb 2-1: USB disconnect, device number 48 [ 235.126310][ T63] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 235.166307][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.175181][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.183080][ T20] usb 1-1: Product: 颚ㇵ䮭ﲮੵꩡ뺗ힴ䶠麵鰇ﱊ㍚ꍶ倝粷漐㹝鯲迬紾뭋㠚協Ꞃ㫓癨′䄾¡ꟸ围餆櫧峈䅦螻殯䚉浪굁᷆䰅ᇗ硳⬍⓫鯔줞ẁꀸ몬甛 [ 235.201245][ T20] usb 1-1: Manufacturer: 봨籍䝢蠚讀ꁵ巠鹯궟仃剣釮 [ 235.209053][ T20] usb 1-1: SerialNumber: ࠇ [ 235.266830][ T598] keytouch 0003:0926:3333.00A7: fixing up Keytouch IEC report descriptor [ 235.275970][ T598] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00A7/input/input38 [ 235.363431][ T598] keytouch 0003:0926:3333.00A7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 235.503908][ T857] usb 3-1: USB disconnect, device number 54 [ 235.552083][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.716396][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.726094][ T63] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.735084][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.736287][ T20] cdc_ncm 1-1:1.0: bind() failure [ 235.744025][ T63] usb 4-1: config 0 descriptor?? [ 235.752793][ T20] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 235.759873][ T20] cdc_ncm 1-1:1.1: bind() failure [ 235.768165][ T20] usb 1-1: USB disconnect, device number 48 [ 236.176656][ T4356] overlayfs: failed to resolve './file0': -2 [ 236.343172][ T4364] loop4: detected capacity change from 0 to 128 [ 236.463846][ T4366] loop4: detected capacity change from 0 to 512 [ 236.471854][ T4366] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.488066][ T4366] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 236.502700][ T4366] EXT4-fs (loop4): 1 truncate cleaned up [ 236.508201][ T4366] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 236.576215][ T26] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 236.887667][ T63] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00A8/input/input39 [ 236.917509][ T63] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00A8/input/input40 [ 236.936272][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.957284][ T63] uclogic 0003:256C:006D.00A8: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 236.969382][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.987416][ T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 237.006315][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.025233][ T26] usb 3-1: config 0 descriptor?? [ 237.089180][ T398] usb 4-1: USB disconnect, device number 47 [ 237.453510][ T4370] loop1: detected capacity change from 0 to 131072 [ 237.511487][ T4382] loop4: detected capacity change from 0 to 8192 [ 237.518603][ T4370] F2FS-fs (loop1): Test dummy encryption mode enabled [ 237.526042][ T4370] F2FS-fs (loop1): invalid crc value [ 237.532647][ T4370] F2FS-fs (loop1): Found nat_bits in checkpoint [ 237.553764][ T329] loop4: p2 p3 p4 [ 237.556596][ T4370] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 237.557674][ T329] loop4: p2 start 14935 is beyond EOD, truncated [ 237.570907][ T329] loop4: p3 size 196608 extends beyond EOD, truncated [ 237.577952][ T329] loop4: p4 start 4026530307 is beyond EOD, truncated [ 237.585424][ T100] loop4: p2 p3 p4 [ 237.589160][ T100] loop4: p2 start 14935 is beyond EOD, truncated [ 237.595299][ T100] loop4: p3 size 196608 extends beyond EOD, truncated [ 237.602540][ T100] loop4: p4 start 4026530307 is beyond EOD, truncated [ 237.610288][ T4382] loop4: p2 p3 p4 [ 237.613908][ T4382] loop4: p2 start 14935 is beyond EOD, truncated [ 237.620069][ T4382] loop4: p3 size 196608 extends beyond EOD, truncated [ 237.636713][ T4382] loop4: p4 start 4026530307 is beyond EOD, truncated [ 237.677950][ T4118] F2FS-fs (loop1): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 237.695593][ T100] loop4: p2 p3 p4 [ 237.699656][ T100] loop4: p2 start 14935 is beyond EOD, truncated [ 237.705814][ T100] loop4: p3 size 196608 extends beyond EOD, truncated [ 237.721875][ T100] loop4: p4 start 4026530307 is beyond EOD, truncated [ 237.798395][ T4382] overlayfs: missing 'lowerdir' [ 237.799433][ T26] usb 3-1: string descriptor 0 read error: -71 [ 237.827827][ T26] uclogic 0003:256C:006D.00A9: failed retrieving string descriptor #200: -71 [ 237.837060][ T26] uclogic 0003:256C:006D.00A9: failed retrieving pen parameters: -71 [ 237.845163][ T26] uclogic 0003:256C:006D.00A9: failed probing pen v2 parameters: -71 [ 237.853654][ T26] uclogic 0003:256C:006D.00A9: failed probing parameters: -71 [ 237.861336][ T26] uclogic: probe of 0003:256C:006D.00A9 failed with error -71 [ 237.872736][ T26] usb 3-1: USB disconnect, device number 55 [ 238.075141][ T329] udevd[329]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 238.106605][ T329] udevd[329]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 238.140557][ T329] udevd[329]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 238.152356][ T4400] loop0: detected capacity change from 0 to 128 [ 238.372111][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.376209][ T598] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 238.379019][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.393774][ T4403] device bridge_slave_0 entered promiscuous mode [ 238.401950][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.412930][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.420246][ T4403] device bridge_slave_1 entered promiscuous mode [ 238.483417][ T4403] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.490296][ T4403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.497406][ T4403] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.504166][ T4403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.529470][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.537349][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.544631][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.600977][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.609455][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.612457][ T4408] loop2: detected capacity change from 0 to 40427 [ 238.616341][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.616528][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.637795][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.644640][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.667207][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.670343][ T4408] F2FS-fs (loop2): invalid crc value [ 238.675424][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.688696][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.697404][ T4408] F2FS-fs (loop2): Found nat_bits in checkpoint [ 238.713701][ T4403] device veth0_vlan entered promiscuous mode [ 238.727088][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.735199][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.742929][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.749886][ T4412] loop3: detected capacity change from 0 to 8192 [ 238.756124][ T4403] device veth1_macvtap entered promiscuous mode [ 238.762731][ T4408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 238.764084][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.779284][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.787861][ T4412] loop3: p2 p3 p4 [ 238.788453][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.791908][ T4412] loop3: p2 start 14935 is beyond EOD, [ 238.799543][ T598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.818484][ T4412] truncated [ 238.821506][ T4412] loop3: p3 size 196608 extends beyond EOD, truncated [ 238.829157][ T598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.841711][ T4412] loop3: p4 start 4026530307 is beyond EOD, truncated [ 238.852067][ T4417] loop1: detected capacity change from 0 to 512 [ 238.862683][ T598] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.885937][ T598] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.894924][ T598] usb 5-1: config 0 descriptor?? [ 238.920932][ T4412] overlayfs: missing 'lowerdir' [ 238.992110][ T4419] overlayfs: failed to resolve './file0': -2 [ 239.031773][ T4417] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.069968][ T4417] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 239.084766][ T4417] EXT4-fs (loop1): 1 truncate cleaned up [ 239.090485][ T4417] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,errors=remount-ro,sysvgroups,. Quota mode: writeback. [ 239.368694][ T1284] device bridge_slave_1 left promiscuous mode [ 239.395707][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.406425][ T1284] device bridge_slave_0 left promiscuous mode [ 239.418907][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.435088][ T1284] device veth1_macvtap left promiscuous mode [ 239.453481][ T1284] device veth0_vlan left promiscuous mode [ 239.476877][ T4280] attempt to access beyond end of device [ 239.476877][ T4280] loop2: rw=2049, want=45104, limit=40427 [ 239.628577][ T598] keytouch 0003:0926:3333.00AA: fixing up Keytouch IEC report descriptor [ 239.658615][ T598] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.00AA/input/input41 [ 239.688091][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 239.763662][ T598] keytouch 0003:0926:3333.00AA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 239.855717][ T598] usb 5-1: USB disconnect, device number 45 [ 240.204203][ T4425] loop3: detected capacity change from 0 to 131072 [ 240.314260][ T4425] F2FS-fs (loop3): Test dummy encryption mode enabled [ 240.356786][ T4425] F2FS-fs (loop3): invalid crc value [ 240.432287][ T4425] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.454848][ T4425] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 240.466395][ T2667] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 240.525161][ T4040] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 240.800698][ T4459] loop4: detected capacity change from 0 to 8192 [ 240.826281][ T2667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.837035][ T2667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.846619][ T2667] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.855439][ T2667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.856502][ T4459] loop4: p2 p3 p4 [ 240.863349][ T63] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 240.876351][ T4459] loop4: p2 start 14935 is beyond EOD, truncated [ 240.885787][ T2667] usb 1-1: config 0 descriptor?? [ 240.890543][ T4459] loop4: p3 size 196608 extends beyond EOD, truncated [ 240.897506][ T4459] loop4: p4 start 4026530307 is beyond EOD, truncated [ 240.987047][ T4459] overlayfs: missing 'lowerdir' [ 240.995735][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.004084][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.011614][ T4461] device bridge_slave_0 entered promiscuous mode [ 241.018969][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.025813][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.033600][ T4461] device bridge_slave_1 entered promiscuous mode [ 241.081352][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.088244][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.095283][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.102103][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.179013][ T857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.188437][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.202489][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.226261][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.231505][ T4471] loop4: detected capacity change from 0 to 1024 [ 241.242949][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.253736][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.265375][ T63] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.270160][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.281125][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.286372][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.307784][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.309509][ T63] usb 3-1: config 0 descriptor?? [ 241.319627][ T4471] EXT4-fs (loop4): Test dummy encryption mode enabled [ 241.327563][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.334422][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.344887][ T4471] EXT4-fs (loop4): Ignoring removed orlov option [ 241.369658][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.381938][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.399223][ T4471] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 241.441923][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 241.450462][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 241.459375][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 241.467329][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 241.475757][ T4461] device veth0_vlan entered promiscuous mode [ 241.484709][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.493183][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.514605][ T4461] device veth1_macvtap entered promiscuous mode [ 241.529743][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.540017][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.563146][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.596812][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.605878][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.614404][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.622765][ T598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.913689][ T63] usbhid 3-1:0.0: can't add hid device: -71 [ 241.922602][ T63] usbhid: probe of 3-1:0.0 failed with error -71 [ 241.936485][ T598] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 241.938629][ T63] usb 3-1: USB disconnect, device number 56 [ 242.061124][ T4477] loop4: detected capacity change from 0 to 131072 [ 242.097936][ T4477] F2FS-fs (loop4): Test dummy encryption mode enabled [ 242.105700][ T4477] F2FS-fs (loop4): invalid crc value [ 242.127843][ T4477] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.137240][ T1284] device bridge_slave_1 left promiscuous mode [ 242.143207][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.150975][ T1284] device bridge_slave_0 left promiscuous mode [ 242.157264][ T2667] uclogic 0003:256C:006D.00AB: interface is invalid, ignoring [ 242.164471][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.170722][ T4477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.208605][ T1284] device veth1_macvtap left promiscuous mode [ 242.214655][ T1284] device veth0_vlan left promiscuous mode [ 242.346271][ T598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.357273][ T598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.368098][ T598] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 242.377553][ T598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.430064][ T598] usb 4-1: config 0 descriptor?? [ 243.711256][ T398] usb 1-1: USB disconnect, device number 49 [ 243.780891][ T4507] loop0: detected capacity change from 0 to 8192 [ 243.796309][ T444] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 243.819076][ T4512] loop1: detected capacity change from 0 to 1024 [ 243.829097][ T4507] loop0: p2 p3 p4 [ 243.832737][ T4507] loop0: p2 start 14935 is beyond EOD, truncated [ 243.839860][ T4507] loop0: p3 size 196608 extends beyond EOD, truncated [ 243.847104][ T4507] loop0: p4 start 4026530307 is beyond EOD, truncated [ 243.872877][ T4512] EXT4-fs (loop1): Test dummy encryption mode enabled [ 243.886636][ T4512] EXT4-fs (loop1): Ignoring removed orlov option [ 243.899680][ T4512] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 243.939339][ T4507] overlayfs: missing 'lowerdir' [ 244.146207][ T857] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 244.316492][ T444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.326213][ T2667] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 244.334626][ T444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.344293][ T444] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.353263][ T444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.361618][ T444] usb 3-1: config 0 descriptor?? [ 244.417337][ T598] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00AC/input/input42 [ 244.429843][ T598] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00AC/input/input43 [ 244.442395][ T598] uclogic 0003:256C:006D.00AC: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 244.506319][ T857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.517191][ T857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.526797][ T857] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.535704][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.544513][ T857] usb 5-1: config 0 descriptor?? [ 244.618611][ T398] usb 4-1: USB disconnect, device number 48 [ 244.686273][ T2667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.697052][ T2667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.706559][ T2667] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.715421][ T2667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.724797][ T2667] usb 1-1: config 0 descriptor?? [ 245.406213][ T598] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 245.486304][ T2667] usb 1-1: string descriptor 0 read error: -71 [ 245.487601][ T444] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00AD/input/input44 [ 245.509159][ T2667] uclogic 0003:256C:006D.00AF: failed retrieving string descriptor #200: -71 [ 245.510628][ T444] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00AD/input/input45 [ 245.518121][ T2667] uclogic 0003:256C:006D.00AF: failed retrieving pen parameters: -71 [ 245.534832][ T444] uclogic 0003:256C:006D.00AD: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 245.540130][ T2667] uclogic 0003:256C:006D.00AF: failed probing pen v2 parameters: -71 [ 245.557287][ T2667] uclogic 0003:256C:006D.00AF: failed probing parameters: -71 [ 245.564568][ T2667] uclogic: probe of 0003:256C:006D.00AF failed with error -71 [ 245.580583][ T2667] usb 1-1: USB disconnect, device number 50 [ 245.696337][ T444] usb 3-1: USB disconnect, device number 57 [ 245.826308][ T598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.837125][ T598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.846683][ T598] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.855507][ T598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.866981][ T598] usb 4-1: config 0 descriptor?? [ 245.966284][ T857] uclogic 0003:256C:006D.00AE: v1 buttonpad probing failed: -71 [ 245.973846][ T857] uclogic 0003:256C:006D.00AE: failed probing parameters: -71 [ 245.984416][ T857] uclogic: probe of 0003:256C:006D.00AE failed with error -71 [ 246.022629][ T26] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 246.031065][ T857] usb 5-1: USB disconnect, device number 46 [ 246.396555][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.407423][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.417002][ T26] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 246.425802][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.435121][ T26] usb 2-1: config 0 descriptor?? [ 246.516229][ T857] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 246.706208][ T444] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 246.876425][ T857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.887433][ T857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.897373][ T857] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 246.906313][ T857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.925315][ T857] usb 3-1: config 0 descriptor?? [ 247.106303][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.117083][ T444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.126803][ T444] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.135736][ T444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.144121][ T444] usb 5-1: config 0 descriptor?? [ 247.186309][ T598] uclogic 0003:256C:006D.00B0: failed retrieving string descriptor #100: -71 [ 247.195026][ T598] uclogic 0003:256C:006D.00B0: failed retrieving pen parameters: -71 [ 247.203685][ T598] uclogic 0003:256C:006D.00B0: failed probing pen v1 parameters: -71 [ 247.211643][ T598] uclogic 0003:256C:006D.00B0: failed probing parameters: -71 [ 247.218933][ T598] uclogic: probe of 0003:256C:006D.00B0 failed with error -71 [ 247.228111][ T598] usb 4-1: USB disconnect, device number 49 [ 247.316231][ T63] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 247.577221][ T26] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B1/input/input46 [ 247.590023][ T26] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B1/input/input47 [ 247.602691][ T26] uclogic 0003:256C:006D.00B1: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 247.676478][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.687228][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.697027][ T63] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 247.705964][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.714656][ T63] usb 1-1: config 0 descriptor?? [ 247.778562][ T39] usb 2-1: USB disconnect, device number 49 [ 248.066256][ T857] uclogic 0003:256C:006D.00B2: failed retrieving string descriptor #200: -71 [ 248.074897][ T857] uclogic 0003:256C:006D.00B2: failed retrieving pen parameters: -71 [ 248.082801][ T857] uclogic 0003:256C:006D.00B2: failed probing pen v2 parameters: -71 [ 248.090742][ T857] uclogic 0003:256C:006D.00B2: failed probing parameters: -71 [ 248.097970][ T857] uclogic: probe of 0003:256C:006D.00B2 failed with error -71 [ 248.106696][ T857] usb 3-1: USB disconnect, device number 58 [ 248.416287][ T444] uclogic 0003:256C:006D.00B3: interface is invalid, ignoring [ 248.904761][ T63] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00B4/input/input48 [ 249.005533][ T63] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00B4/input/input49 [ 249.025874][ T63] uclogic 0003:256C:006D.00B4: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 249.129304][ T63] usb 1-1: USB disconnect, device number 51 [ 249.198065][ T444] usb 5-1: USB disconnect, device number 47 [ 249.267090][ T4573] loop4: detected capacity change from 0 to 8192 [ 249.307182][ T4573] loop4: p2 p3 p4 [ 249.311214][ T4573] loop4: p2 start 14935 is beyond EOD, truncated [ 249.317947][ T4573] loop4: p3 size 196608 extends beyond EOD, truncated [ 249.325531][ T4573] loop4: p4 start 4026530307 is beyond EOD, truncated [ 249.354539][ T4576] loop1: detected capacity change from 0 to 1024 [ 249.377653][ T4573] overlayfs: missing 'lowerdir' [ 249.468225][ T329] udevd[329]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 249.486406][ T4576] EXT4-fs (loop1): Test dummy encryption mode enabled [ 249.496704][ T4576] EXT4-fs (loop1): Ignoring removed orlov option [ 249.512144][ T4576] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 249.781022][ T4588] loop1: detected capacity change from 0 to 40427 [ 249.787349][ T398] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 249.796310][ T63] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 249.810131][ T4588] F2FS-fs (loop1): invalid crc value [ 249.817225][ T4588] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.856043][ T4588] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 249.996438][ T2667] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 250.072392][ T4595] overlayfs: failed to resolve './file0': -2 [ 250.226261][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.237248][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.246862][ T63] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.255660][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.264617][ T63] usb 4-1: config 0 descriptor?? [ 250.326279][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.337091][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.347033][ T398] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.356040][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.356302][ T2667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.364696][ T398] usb 5-1: config 0 descriptor?? [ 250.387901][ T2667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.401832][ T2667] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.410892][ T2667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.419639][ T2667] usb 1-1: config 0 descriptor?? [ 250.474623][ T4403] attempt to access beyond end of device [ 250.474623][ T4403] loop1: rw=2049, want=45104, limit=40427 [ 250.676234][ T1193] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 251.046327][ T1193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.057043][ T1193] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.066594][ T1193] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.075421][ T1193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.083967][ T1193] usb 3-1: config 0 descriptor?? [ 351.086156][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 351.092594][ C0] rcu: 0-...!: (10000 ticks this GP) idle=127/1/0x4000000000000000 softirq=35533/35533 fqs=0 last_accelerate: ec91/13a5 dyntick_enabled: 1 [ 351.106638][ C0] (t=10002 jiffies g=39401 q=17) [ 351.111499][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g39401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 351.123643][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=12793 [ 351.131367][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g39401 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 351.142566][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 351.152373][ C0] rcu: RCU grace-period kthread stack dump: [ 351.158103][ C0] task:rcu_preempt state:I stack:28288 pid: 14 ppid: 2 flags:0x00004000 [ 351.167136][ C0] Call Trace: [ 351.170254][ C0] [ 351.173032][ C0] __schedule+0xccc/0x1590 [ 351.177284][ C0] ? __sched_text_start+0x8/0x8 [ 351.181967][ C0] ? __kasan_check_write+0x14/0x20 [ 351.186917][ C0] ? __kasan_check_write+0x14/0x20 [ 351.191861][ C0] schedule+0x11f/0x1e0 [ 351.195857][ C0] schedule_timeout+0x18c/0x370 [ 351.200543][ C0] ? __update_idle_core+0x2a0/0x2a0 [ 351.205577][ C0] ? console_conditional_schedule+0x30/0x30 [ 351.211305][ C0] ? update_process_times+0x200/0x200 [ 351.216514][ C0] ? prepare_to_swait_event+0x308/0x320 [ 351.221894][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 351.226495][ C0] ? asm_sysvec_call_function_single+0x1b/0x20 [ 351.232488][ C0] ? rcu_gp_init+0xc30/0xc30 [ 351.236911][ C0] ? _raw_spin_unlock_irq+0x49/0x70 [ 351.241942][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 351.246977][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 351.251403][ C0] rcu_gp_kthread+0xa4/0x350 [ 351.255831][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 351.260519][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 351.265029][ C0] ? __kasan_check_read+0x11/0x20 [ 351.269891][ C0] ? __kthread_parkme+0xb2/0x200 [ 351.274663][ C0] kthread+0x421/0x510 [ 351.278575][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 351.283081][ C0] ? kthread_blkcg+0xd0/0xd0 [ 351.287511][ C0] ret_from_fork+0x1f/0x30 [ 351.291765][ C0] [ 351.294627][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 351.300809][ C0] NMI backtrace for cpu 0 [ 351.304958][ C0] CPU: 0 PID: 1193 Comm: kworker/0:7 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 351.314849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 351.324842][ C0] Workqueue: usb_hub_wq hub_event [ 351.329691][ C0] Call Trace: [ 351.332815][ C0] [ 351.335506][ C0] dump_stack_lvl+0x151/0x1b7 [ 351.340019][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 351.345515][ C0] dump_stack+0x15/0x17 [ 351.349493][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 351.354257][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 351.360243][ C0] ? panic+0x751/0x751 [ 351.364148][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 351.370049][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 351.375863][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 351.381766][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 351.387496][ C0] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 351.393486][ C0] ? rcu_check_gp_kthread_expired_fqs_timer+0x18e/0x230 [ 351.400254][ C0] print_cpu_stall+0x310/0x5f0 [ 351.404856][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 351.409891][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 351.415877][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 351.420912][ C0] update_process_times+0x198/0x200 [ 351.425945][ C0] tick_sched_timer+0x188/0x240 [ 351.430631][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 351.436024][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 351.441061][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 351.445993][ C0] ? clockevents_program_event+0x22f/0x300 [ 351.451635][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 351.457537][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 351.462313][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 351.468039][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 351.473531][ C0] [ 351.476283][ C0] [ 351.479062][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 351.484887][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 351.489651][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 351.509092][ C0] RSP: 0018:ffffc9000112eae0 EFLAGS: 00000246 [ 351.514993][ C0] RAX: 0000000000000003 RBX: 1ffff92000225d60 RCX: ffffffff8154fbbf [ 351.522808][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810ae0a598 [ 351.530616][ C0] RBP: ffffc9000112eb90 R08: dffffc0000000000 R09: ffffed10215c14b4 [ 351.538431][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 351.546239][ C0] R13: ffff88810ae0a598 R14: 0000000000000003 R15: 1ffff92000225d64 [ 351.554056][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 351.560129][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 351.566118][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 351.571062][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 351.577225][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 351.583129][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 351.589378][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 351.594238][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 351.599011][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 351.604045][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 351.609338][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 351.614372][ C0] ? sock_map_unref+0x352/0x4d0 [ 351.619059][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 351.624448][ C0] bpf_trace_run2+0xec/0x210 [ 351.628868][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 351.633554][ C0] ? kvasprintf+0xd6/0x180 [ 351.637898][ C0] ? sock_map_unref+0x352/0x4d0 [ 351.642582][ C0] ? memset+0x35/0x40 [ 351.646398][ C0] ? sock_map_unref+0x352/0x4d0 [ 351.651085][ C0] __bpf_trace_kfree+0x6f/0x90 [ 351.655686][ C0] ? sock_map_unref+0x352/0x4d0 [ 351.660372][ C0] kfree+0x1f3/0x220 [ 351.664106][ C0] sock_map_unref+0x352/0x4d0 [ 351.668619][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 351.673841][ C0] ? kfree_const+0x39/0x40 [ 351.678095][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 351.683476][ C0] bpf_trace_run2+0xec/0x210 [ 351.687901][ C0] ? kvasprintf_const+0x5e/0x190 [ 351.692675][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 351.697364][ C0] ? kfree_const+0x39/0x40 [ 351.701614][ C0] ? kvasprintf+0x107/0x180 [ 351.705953][ C0] ? __driver_probe_device+0x1a0/0x310 [ 351.711249][ C0] ? driver_probe_device+0x54/0x3d0 [ 351.716283][ C0] ? kfree_const+0x39/0x40 [ 351.720535][ C0] __bpf_trace_kfree+0x6f/0x90 [ 351.725136][ C0] ? kfree_const+0x39/0x40 [ 351.729387][ C0] kfree+0x1f3/0x220 [ 351.733122][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 351.737809][ C0] kfree_const+0x39/0x40 [ 351.741887][ C0] kobject_set_name_vargs+0xce/0x120 [ 351.747095][ C0] dev_set_name+0xd1/0x120 [ 351.751347][ C0] ? get_device+0x30/0x30 [ 351.755513][ C0] ? pm_runtime_init+0x275/0x350 [ 351.760286][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 351.765322][ C0] usb_set_configuration+0xef1/0x1e80 [ 351.770530][ C0] usb_generic_driver_probe+0x8b/0x150 [ 351.775823][ C0] usb_probe_device+0x144/0x260 [ 351.780509][ C0] ? usb_register_device_driver+0x240/0x240 [ 351.786239][ C0] really_probe+0x28d/0x970 [ 351.790577][ C0] ? __kasan_check_write+0x14/0x20 [ 351.795525][ C0] __driver_probe_device+0x1a0/0x310 [ 351.800646][ C0] driver_probe_device+0x54/0x3d0 [ 351.805507][ C0] ? __device_attach_driver+0x2af/0x470 [ 351.810887][ C0] __device_attach_driver+0x2c5/0x470 [ 351.816096][ C0] ? deferred_probe_work_func+0x240/0x240 [ 351.821664][ C0] bus_for_each_drv+0x183/0x200 [ 351.826338][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 351.831458][ C0] ? subsys_find_device_by_id+0x310/0x310 [ 351.837012][ C0] ? __pm_runtime_resume+0x11e/0x170 [ 351.842133][ C0] __device_attach+0x312/0x510 [ 351.846734][ C0] ? kobject_uevent_env+0x33c/0x700 [ 351.851768][ C0] ? device_attach+0x20/0x20 [ 351.856194][ C0] ? kobject_uevent_env+0x33c/0x700 [ 351.861236][ C0] device_initial_probe+0x1a/0x20 [ 351.866088][ C0] bus_probe_device+0xbe/0x1e0 [ 351.870688][ C0] device_add+0xb60/0xf10 [ 351.874859][ C0] usb_new_device+0x1038/0x1c00 [ 351.879542][ C0] ? usb_disconnect+0x890/0x890 [ 351.884228][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 351.889350][ C0] hub_event+0x2def/0x4770 [ 351.893605][ C0] ? led_work+0x590/0x590 [ 351.897769][ C0] ? __kasan_check_write+0x14/0x20 [ 351.902713][ C0] ? mutex_unlock+0xb2/0x260 [ 351.907143][ C0] ? __kasan_check_write+0x14/0x20 [ 351.912089][ C0] ? __kasan_check_read+0x11/0x20 [ 351.916949][ C0] ? read_word_at_a_time+0x12/0x20 [ 351.921895][ C0] ? strscpy+0x9c/0x260 [ 351.925896][ C0] process_one_work+0x6bb/0xc10 [ 351.930583][ C0] worker_thread+0xad5/0x12a0 [ 351.935090][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 351.939777][ C0] kthread+0x421/0x510 [ 351.943682][ C0] ? worker_clr_flags+0x180/0x180 [ 351.948547][ C0] ? kthread_blkcg+0xd0/0xd0 [ 351.952969][ C0] ret_from_fork+0x1f/0x30 [ 351.957223][ C0] [ 351.960107][ C0] NMI backtrace for cpu 0 [ 351.964252][ C0] CPU: 0 PID: 1193 Comm: kworker/0:7 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 351.974058][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 351.983956][ C0] Workqueue: usb_hub_wq hub_event [ 351.988816][ C0] Call Trace: [ 351.991940][ C0] [ 351.994631][ C0] dump_stack_lvl+0x151/0x1b7 [ 351.999144][ C0] ? io_uring_drop_tctx_refs+0x190/0x190 [ 352.004610][ C0] ? ttwu_do_wakeup+0x187/0x430 [ 352.009299][ C0] dump_stack+0x15/0x17 [ 352.013289][ C0] nmi_cpu_backtrace+0x2f7/0x300 [ 352.018064][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 352.024051][ C0] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 352.029346][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 352.034034][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 352.039934][ C0] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 352.045749][ C0] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 352.051653][ C0] arch_trigger_cpumask_backtrace+0x10/0x20 [ 352.057476][ C0] rcu_dump_cpu_stacks+0x1d8/0x330 [ 352.062420][ C0] print_cpu_stall+0x315/0x5f0 [ 352.067014][ C0] rcu_sched_clock_irq+0x989/0x12f0 [ 352.072047][ C0] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 352.078039][ C0] ? hrtimer_run_queues+0x15f/0x440 [ 352.083071][ C0] update_process_times+0x198/0x200 [ 352.088105][ C0] tick_sched_timer+0x188/0x240 [ 352.092791][ C0] ? tick_setup_sched_timer+0x480/0x480 [ 352.098172][ C0] __hrtimer_run_queues+0x41a/0xad0 [ 352.103207][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 352.108154][ C0] ? clockevents_program_event+0x22f/0x300 [ 352.113794][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 352.119700][ C0] hrtimer_interrupt+0x40c/0xaa0 [ 352.124475][ C0] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 352.130199][ C0] sysvec_apic_timer_interrupt+0x95/0xc0 [ 352.135680][ C0] [ 352.138445][ C0] [ 352.141226][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 352.147039][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 352.151812][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 352.171321][ C0] RSP: 0018:ffffc9000112eae0 EFLAGS: 00000246 [ 352.177158][ C0] RAX: 0000000000000003 RBX: 1ffff92000225d60 RCX: ffffffff8154fbbf [ 352.184974][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810ae0a598 [ 352.192777][ C0] RBP: ffffc9000112eb90 R08: dffffc0000000000 R09: ffffed10215c14b4 [ 352.200589][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 352.208400][ C0] R13: ffff88810ae0a598 R14: 0000000000000003 R15: 1ffff92000225d64 [ 352.216217][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 352.222293][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 352.228279][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 352.233223][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 352.239301][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 352.245202][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 352.251462][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 352.256312][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 352.261084][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 352.266122][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 352.271467][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 352.276450][ C0] ? sock_map_unref+0x352/0x4d0 [ 352.281134][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 352.286517][ C0] bpf_trace_run2+0xec/0x210 [ 352.290942][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 352.295628][ C0] ? kvasprintf+0xd6/0x180 [ 352.299880][ C0] ? sock_map_unref+0x352/0x4d0 [ 352.304569][ C0] ? memset+0x35/0x40 [ 352.308388][ C0] ? sock_map_unref+0x352/0x4d0 [ 352.313072][ C0] __bpf_trace_kfree+0x6f/0x90 [ 352.317673][ C0] ? sock_map_unref+0x352/0x4d0 [ 352.322362][ C0] kfree+0x1f3/0x220 [ 352.326093][ C0] sock_map_unref+0x352/0x4d0 [ 352.330942][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 352.336051][ C0] ? kfree_const+0x39/0x40 [ 352.340303][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 352.345681][ C0] bpf_trace_run2+0xec/0x210 [ 352.350107][ C0] ? kvasprintf_const+0x5e/0x190 [ 352.354881][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 352.359570][ C0] ? kfree_const+0x39/0x40 [ 352.363820][ C0] ? kvasprintf+0x107/0x180 [ 352.368168][ C0] ? __driver_probe_device+0x1a0/0x310 [ 352.373617][ C0] ? driver_probe_device+0x54/0x3d0 [ 352.378643][ C0] ? kfree_const+0x39/0x40 [ 352.382889][ C0] __bpf_trace_kfree+0x6f/0x90 [ 352.387490][ C0] ? kfree_const+0x39/0x40 [ 352.391741][ C0] kfree+0x1f3/0x220 [ 352.395483][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 352.400161][ C0] kfree_const+0x39/0x40 [ 352.404240][ C0] kobject_set_name_vargs+0xce/0x120 [ 352.409365][ C0] dev_set_name+0xd1/0x120 [ 352.413614][ C0] ? get_device+0x30/0x30 [ 352.417781][ C0] ? pm_runtime_init+0x275/0x350 [ 352.422554][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 352.427588][ C0] usb_set_configuration+0xef1/0x1e80 [ 352.432799][ C0] usb_generic_driver_probe+0x8b/0x150 [ 352.438092][ C0] usb_probe_device+0x144/0x260 [ 352.442784][ C0] ? usb_register_device_driver+0x240/0x240 [ 352.448505][ C0] really_probe+0x28d/0x970 [ 352.452844][ C0] ? __kasan_check_write+0x14/0x20 [ 352.457792][ C0] __driver_probe_device+0x1a0/0x310 [ 352.462912][ C0] driver_probe_device+0x54/0x3d0 [ 352.467774][ C0] ? __device_attach_driver+0x2af/0x470 [ 352.473155][ C0] __device_attach_driver+0x2c5/0x470 [ 352.478369][ C0] ? deferred_probe_work_func+0x240/0x240 [ 352.483916][ C0] bus_for_each_drv+0x183/0x200 [ 352.488606][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 352.493731][ C0] ? subsys_find_device_by_id+0x310/0x310 [ 352.499282][ C0] ? __pm_runtime_resume+0x11e/0x170 [ 352.504400][ C0] __device_attach+0x312/0x510 [ 352.508999][ C0] ? kobject_uevent_env+0x33c/0x700 [ 352.514032][ C0] ? device_attach+0x20/0x20 [ 352.518549][ C0] ? kobject_uevent_env+0x33c/0x700 [ 352.523581][ C0] device_initial_probe+0x1a/0x20 [ 352.528442][ C0] bus_probe_device+0xbe/0x1e0 [ 352.533040][ C0] device_add+0xb60/0xf10 [ 352.537208][ C0] usb_new_device+0x1038/0x1c00 [ 352.541897][ C0] ? usb_disconnect+0x890/0x890 [ 352.546581][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 352.551703][ C0] hub_event+0x2def/0x4770 [ 352.555959][ C0] ? led_work+0x590/0x590 [ 352.560121][ C0] ? __kasan_check_write+0x14/0x20 [ 352.565070][ C0] ? mutex_unlock+0xb2/0x260 [ 352.569495][ C0] ? __kasan_check_write+0x14/0x20 [ 352.574441][ C0] ? __kasan_check_read+0x11/0x20 [ 352.579304][ C0] ? read_word_at_a_time+0x12/0x20 [ 352.584252][ C0] ? strscpy+0x9c/0x260 [ 352.588329][ C0] process_one_work+0x6bb/0xc10 [ 352.593017][ C0] worker_thread+0xad5/0x12a0 [ 352.597529][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 352.602230][ C0] kthread+0x421/0x510 [ 352.606125][ C0] ? worker_clr_flags+0x180/0x180 [ 352.610980][ C0] ? kthread_blkcg+0xd0/0xd0 [ 352.615411][ C0] ret_from_fork+0x1f/0x30 [ 352.619662][ C0] [ 352.622528][ C0] Sending NMI from CPU 0 to CPUs 1: [ 352.627584][ C1] NMI backtrace for cpu 1 [ 352.627606][ C1] CPU: 1 PID: 4580 Comm: syz.4.1331 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 352.627623][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 352.627633][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 352.627653][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 352.627666][ C1] RSP: 0018:ffffc90000a07780 EFLAGS: 00000246 [ 352.627682][ C1] RAX: 0000000000000001 RBX: 1ffff92000140ef4 RCX: 1ffffffff0d1aa9c [ 352.627693][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 352.627703][ C1] RBP: ffffc90000a07830 R08: dffffc0000000000 R09: ffffed103ee2715b [ 352.627715][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 352.627727][ C1] R13: ffff8881f7138ad4 R14: 0000000000000001 R15: 1ffff92000140ef8 [ 352.627738][ C1] FS: 00007f58870286c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 352.627753][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.627764][ C1] CR2: 0000001b3211aff8 CR3: 000000011d3c6000 CR4: 00000000003506a0 [ 352.627779][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.627788][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.627799][ C1] Call Trace: [ 352.627804][ C1] [ 352.627809][ C1] ? show_regs+0x58/0x60 [ 352.627826][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 352.627844][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 352.627863][ C1] ? kvm_wait+0x147/0x180 [ 352.627877][ C1] ? kvm_wait+0x147/0x180 [ 352.627890][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 352.627908][ C1] ? nmi_handle+0xa8/0x280 [ 352.627923][ C1] ? kvm_wait+0x147/0x180 [ 352.627937][ C1] ? default_do_nmi+0x69/0x160 [ 352.627954][ C1] ? exc_nmi+0xaf/0x120 [ 352.627968][ C1] ? end_repeat_nmi+0x16/0x31 [ 352.627985][ C1] ? kvm_wait+0x147/0x180 [ 352.627999][ C1] ? kvm_wait+0x147/0x180 [ 352.628012][ C1] ? kvm_wait+0x147/0x180 [ 352.628026][ C1] [ 352.628031][ C1] [ 352.628036][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 352.628052][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 352.628068][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 352.628087][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 352.628104][ C1] ? do_futex+0x1310/0x37f0 [ 352.628122][ C1] ? avc_has_extended_perms+0x90b/0x10f0 [ 352.628139][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 352.628156][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 352.628173][ C1] ? avc_has_extended_perms+0xad7/0x10f0 [ 352.628189][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 352.628208][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 352.628224][ C1] ? raw_ioctl+0x1992/0x3510 [ 352.628240][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 352.628253][ C1] bpf_trace_run2+0xec/0x210 [ 352.628271][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 352.628286][ C1] ? raw_ioctl+0x1992/0x3510 [ 352.628302][ C1] ? __kasan_check_write+0x14/0x20 [ 352.628318][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 352.628335][ C1] ? raw_ioctl+0x1992/0x3510 [ 352.628350][ C1] __bpf_trace_kfree+0x6f/0x90 [ 352.628365][ C1] ? raw_ioctl+0x1992/0x3510 [ 352.628380][ C1] kfree+0x1f3/0x220 [ 352.628395][ C1] ? __kasan_check_read+0x11/0x20 [ 352.628411][ C1] raw_ioctl+0x1992/0x3510 [ 352.628429][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 352.628445][ C1] ? has_cap_mac_admin+0x3c0/0x3c0 [ 352.628464][ C1] ? selinux_file_ioctl+0x3cc/0x540 [ 352.628481][ C1] ? selinux_file_alloc_security+0x120/0x120 [ 352.628499][ C1] ? __fget_files+0x31e/0x380 [ 352.628515][ C1] ? security_file_ioctl+0x84/0xb0 [ 352.628532][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 352.628549][ C1] __se_sys_ioctl+0x114/0x190 [ 352.628563][ C1] __x64_sys_ioctl+0x7b/0x90 [ 352.628577][ C1] do_syscall_64+0x3d/0xb0 [ 352.628592][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 352.628611][ C1] RIP: 0033:0x7f5887da66eb [ 352.628626][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 352.628639][ C1] RSP: 002b:00007f5887025f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.628654][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5887da66eb [ 352.628665][ C1] RDX: 00007f5887027000 RSI: 0000000080085502 RDI: 0000000000000003 [ 352.628675][ C1] RBP: 00007f5887e27746 R08: 0000000000000000 R09: 0000000000000000 [ 352.628685][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 352.628695][ C1] R13: 0000000020000040 R14: 00007f5887f34fa0 R15: 00007ffefefe6178 [ 352.628708][ C1] [ 485.071785][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [kworker/0:7:1193] [ 485.079944][ C0] Modules linked in: [ 485.083676][ C0] CPU: 0 PID: 1193 Comm: kworker/0:7 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 485.093481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 485.103382][ C0] Workqueue: usb_hub_wq hub_event [ 485.108240][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 485.113016][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 485.132972][ C0] RSP: 0018:ffffc9000112eae0 EFLAGS: 00000246 [ 485.138879][ C0] RAX: 0000000000000003 RBX: 1ffff92000225d60 RCX: ffffffff8154fbbf [ 485.146686][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88810ae0a598 [ 485.154513][ C0] RBP: ffffc9000112eb90 R08: dffffc0000000000 R09: ffffed10215c14b4 [ 485.162313][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 485.170121][ C0] R13: ffff88810ae0a598 R14: 0000000000000003 R15: 1ffff92000225d64 [ 485.177932][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 485.186699][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.193119][ C0] CR2: 0000001b2f214ff8 CR3: 00000001210ac000 CR4: 00000000003506b0 [ 485.200933][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.208743][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.216556][ C0] Call Trace: [ 485.219680][ C0] [ 485.222374][ C0] ? show_regs+0x58/0x60 [ 485.226536][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 485.231483][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 485.236603][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 485.241813][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 485.246759][ C0] ? clockevents_program_event+0x22f/0x300 [ 485.252401][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 485.258303][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 485.263264][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 485.269152][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 485.274792][ C0] [ 485.277569][ C0] [ 485.280347][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.286338][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 485.292420][ C0] ? kvm_wait+0x147/0x180 [ 485.296587][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.302569][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 485.307986][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 485.314024][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 485.319929][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 485.326261][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 485.331122][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 485.335898][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 485.341450][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 485.346917][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 485.351951][ C0] ? sock_map_unref+0x352/0x4d0 [ 485.356643][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 485.362117][ C0] bpf_trace_run2+0xec/0x210 [ 485.366534][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 485.371219][ C0] ? kvasprintf+0xd6/0x180 [ 485.375474][ C0] ? sock_map_unref+0x352/0x4d0 [ 485.380161][ C0] ? memset+0x35/0x40 [ 485.383979][ C0] ? sock_map_unref+0x352/0x4d0 [ 485.388667][ C0] __bpf_trace_kfree+0x6f/0x90 [ 485.393280][ C0] ? sock_map_unref+0x352/0x4d0 [ 485.397957][ C0] kfree+0x1f3/0x220 [ 485.401688][ C0] sock_map_unref+0x352/0x4d0 [ 485.406201][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 485.411320][ C0] ? kfree_const+0x39/0x40 [ 485.415571][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 485.420953][ C0] bpf_trace_run2+0xec/0x210 [ 485.425379][ C0] ? kvasprintf_const+0x5e/0x190 [ 485.430152][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 485.434837][ C0] ? kfree_const+0x39/0x40 [ 485.439092][ C0] ? kvasprintf+0x107/0x180 [ 485.443432][ C0] ? __driver_probe_device+0x1a0/0x310 [ 485.448729][ C0] ? driver_probe_device+0x54/0x3d0 [ 485.453775][ C0] ? kfree_const+0x39/0x40 [ 485.458019][ C0] __bpf_trace_kfree+0x6f/0x90 [ 485.462618][ C0] ? kfree_const+0x39/0x40 [ 485.466867][ C0] kfree+0x1f3/0x220 [ 485.470605][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 485.475288][ C0] kfree_const+0x39/0x40 [ 485.479365][ C0] kobject_set_name_vargs+0xce/0x120 [ 485.484485][ C0] dev_set_name+0xd1/0x120 [ 485.488742][ C0] ? get_device+0x30/0x30 [ 485.492904][ C0] ? pm_runtime_init+0x275/0x350 [ 485.497677][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 485.502713][ C0] usb_set_configuration+0xef1/0x1e80 [ 485.507929][ C0] usb_generic_driver_probe+0x8b/0x150 [ 485.513213][ C0] usb_probe_device+0x144/0x260 [ 485.517902][ C0] ? usb_register_device_driver+0x240/0x240 [ 485.523630][ C0] really_probe+0x28d/0x970 [ 485.527971][ C0] ? __kasan_check_write+0x14/0x20 [ 485.532925][ C0] __driver_probe_device+0x1a0/0x310 [ 485.538042][ C0] driver_probe_device+0x54/0x3d0 [ 485.542897][ C0] ? __device_attach_driver+0x2af/0x470 [ 485.548280][ C0] __device_attach_driver+0x2c5/0x470 [ 485.553488][ C0] ? deferred_probe_work_func+0x240/0x240 [ 485.559042][ C0] bus_for_each_drv+0x183/0x200 [ 485.563727][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 485.568849][ C0] ? subsys_find_device_by_id+0x310/0x310 [ 485.574406][ C0] ? __pm_runtime_resume+0x11e/0x170 [ 485.579524][ C0] __device_attach+0x312/0x510 [ 485.584124][ C0] ? kobject_uevent_env+0x33c/0x700 [ 485.589158][ C0] ? device_attach+0x20/0x20 [ 485.593591][ C0] ? kobject_uevent_env+0x33c/0x700 [ 485.598621][ C0] device_initial_probe+0x1a/0x20 [ 485.603478][ C0] bus_probe_device+0xbe/0x1e0 [ 485.608079][ C0] device_add+0xb60/0xf10 [ 485.612246][ C0] usb_new_device+0x1038/0x1c00 [ 485.616936][ C0] ? usb_disconnect+0x890/0x890 [ 485.621621][ C0] ? __mutex_lock_slowpath+0x10/0x10 [ 485.626741][ C0] hub_event+0x2def/0x4770 [ 485.631001][ C0] ? led_work+0x590/0x590 [ 485.635159][ C0] ? __kasan_check_write+0x14/0x20 [ 485.640107][ C0] ? mutex_unlock+0xb2/0x260 [ 485.644533][ C0] ? __kasan_check_write+0x14/0x20 [ 485.649481][ C0] ? __kasan_check_read+0x11/0x20 [ 485.654340][ C0] ? read_word_at_a_time+0x12/0x20 [ 485.659289][ C0] ? strscpy+0x9c/0x260 [ 485.663280][ C0] process_one_work+0x6bb/0xc10 [ 485.667967][ C0] worker_thread+0xad5/0x12a0 [ 485.672480][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 485.677169][ C0] kthread+0x421/0x510 [ 485.681072][ C0] ? worker_clr_flags+0x180/0x180 [ 485.685933][ C0] ? kthread_blkcg+0xd0/0xd0 [ 485.690360][ C0] ret_from_fork+0x1f/0x30 [ 485.694613][ C0] [ 485.697478][ C0] Sending NMI from CPU 0 to CPUs 1: [ 485.702533][ C1] NMI backtrace for cpu 1 [ 485.702543][ C1] CPU: 1 PID: 4580 Comm: syz.4.1331 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 485.702559][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 485.702573][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 485.702592][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 485.702606][ C1] RSP: 0018:ffffc90000a07780 EFLAGS: 00000246 [ 485.702621][ C1] RAX: 0000000000000001 RBX: 1ffff92000140ef4 RCX: 1ffffffff0d1aa9c [ 485.702632][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 485.702643][ C1] RBP: ffffc90000a07830 R08: dffffc0000000000 R09: ffffed103ee2715b [ 485.702655][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 485.702666][ C1] R13: ffff8881f7138ad4 R14: 0000000000000001 R15: 1ffff92000140ef8 [ 485.702677][ C1] FS: 00007f58870286c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 485.702691][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.702703][ C1] CR2: 0000001b3211aff8 CR3: 000000011d3c6000 CR4: 00000000003506a0 [ 485.702717][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.702727][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 485.702737][ C1] Call Trace: [ 485.702743][ C1] [ 485.702749][ C1] ? show_regs+0x58/0x60 [ 485.702765][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 485.702783][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 485.702802][ C1] ? kvm_wait+0x147/0x180 [ 485.702815][ C1] ? kvm_wait+0x147/0x180 [ 485.702829][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 485.702846][ C1] ? nmi_handle+0xa8/0x280 [ 485.702861][ C1] ? kvm_wait+0x147/0x180 [ 485.702874][ C1] ? kvm_wait+0x147/0x180 [ 485.702888][ C1] ? default_do_nmi+0x69/0x160 [ 485.702904][ C1] ? exc_nmi+0xaf/0x120 [ 485.702919][ C1] ? end_repeat_nmi+0x16/0x31 [ 485.702935][ C1] ? kvm_wait+0x147/0x180 [ 485.702949][ C1] ? kvm_wait+0x147/0x180 [ 485.702963][ C1] ? kvm_wait+0x147/0x180 [ 485.702977][ C1] [ 485.702982][ C1] [ 485.702987][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 485.703003][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 485.703019][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 485.703040][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 485.703057][ C1] ? do_futex+0x1310/0x37f0 [ 485.703075][ C1] ? avc_has_extended_perms+0x90b/0x10f0 [ 485.703092][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 485.703109][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 485.703125][ C1] ? avc_has_extended_perms+0xad7/0x10f0 [ 485.703142][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 485.703161][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 485.703178][ C1] ? raw_ioctl+0x1992/0x3510 [ 485.703195][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e4 [ 485.703207][ C1] bpf_trace_run2+0xec/0x210 [ 485.703225][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 485.703240][ C1] ? raw_ioctl+0x1992/0x3510 [ 485.703256][ C1] ? __kasan_check_write+0x14/0x20 [ 485.703272][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 485.703288][ C1] ? raw_ioctl+0x1992/0x3510 [ 485.703304][ C1] __bpf_trace_kfree+0x6f/0x90 [ 485.703319][ C1] ? raw_ioctl+0x1992/0x3510 [ 485.703334][ C1] kfree+0x1f3/0x220 [ 485.703349][ C1] ? __kasan_check_read+0x11/0x20 [ 485.703375][ C1] raw_ioctl+0x1992/0x3510 [ 485.703392][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 485.703409][ C1] ? has_cap_mac_admin+0x3c0/0x3c0 [ 485.703428][ C1] ? selinux_file_ioctl+0x3cc/0x540 [ 485.703445][ C1] ? selinux_file_alloc_security+0x120/0x120 [ 485.703463][ C1] ? __fget_files+0x31e/0x380 [ 485.703479][ C1] ? security_file_ioctl+0x84/0xb0 [ 485.703496][ C1] ? audio_source_pcm_show+0xd0/0xd0 [ 485.703512][ C1] __se_sys_ioctl+0x114/0x190 [ 485.703526][ C1] __x64_sys_ioctl+0x7b/0x90 [ 485.703540][ C1] do_syscall_64+0x3d/0xb0 [ 485.703555][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 485.703570][ C1] RIP: 0033:0x7f5887da66eb [ 485.703585][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 485.703598][ C1] RSP: 002b:00007f5887025f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.703613][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5887da66eb [ 485.703624][ C1] RDX: 00007f5887027000 RSI: 0000000080085502 RDI: 0000000000000003 [ 485.703635][ C1] RBP: 00007f5887e27746 R08: 0000000000000000 R09: 0000000000000000 [ 485.703644][ C1] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 485.703654][ C1] R13: 0000000020000040 R14: 00007f5887f34fa0 R15: 00007ffefefe6178 [ 485.703667][ C1]