last executing test programs: 7m56.171647786s ago: executing program 32 (id=39): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 7m43.150830566s ago: executing program 0 (id=88): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d001280cf45600ee71d67ff39013408262cfeb1f3106733c096050600ee102b3f22ca6791cfc4a3ad25ae884a292d12ab267e995baf99e346bee0c691ceb5f49beb5f98dd56ac0f373958d73a0000001e010680c522ec0ad9e848737e27054dbe8fb341393ec43bd6210cc5b6ea3bd574e4da3d26a8d8661f4bb99a4de17dd2545f2d5a8364af6063cba4604af85489c217c69cda191682fe8eaf2ff6f06f5d34ebc0c1097ec140943e2dc7265cb192"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 7m41.995705718s ago: executing program 0 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m41.87966343s ago: executing program 0 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f00000001c0), &(0x7f0000000080)=r5}, 0x4c) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f00000003c0)={0x1, 0x3, 0x2, 0x1, 0xf9}) 7m40.423281818s ago: executing program 33 (id=97): pipe(&(0x7f00000038c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@delalloc}, {@sysvgroups}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x3}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbf4, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 7m40.248123572s ago: executing program 2 (id=99): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000001080)=ANY=[@ANYBLOB="1c1000005e0001000000800000000000080000000100000004101a"], 0x101c}], 0x1}, 0x0) 7m40.059344235s ago: executing program 2 (id=100): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x5, {{0xa, 0x0, 0x0, @private1, 0x7f}}, {{0xa, 0xffff, 0x6dc, @loopback, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 7m39.975714647s ago: executing program 2 (id=101): pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xa6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x10, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xee01}, {0x0, 0x0, 0x6e0}, {0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 7m39.759743441s ago: executing program 2 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x96483, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m39.062565134s ago: executing program 0 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x96483, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) 7m38.911658167s ago: executing program 2 (id=109): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") 7m38.468608536s ago: executing program 2 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7m37.948596946s ago: executing program 34 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7m37.946163976s ago: executing program 0 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0xe, 0x6, 0x0, 0xffffffff00000001], 0xffff1001, 0x43100}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x0, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x5000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x3000, 0xeeee0000, 0xb, 0x6, 0x4, 0x1, 0x7, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x95, 0x5, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x80}, 0x80000031, 0x0, 0x1, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x9, 0x5e, 0x4650]}) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000ffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m37.458595525s ago: executing program 0 (id=114): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m37.439093345s ago: executing program 35 (id=114): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(&(0x7f0000000200)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m14.8003593s ago: executing program 8 (id=190): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8,iocharset=iso8859-6,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152b, &(0x7f0000000a00)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7m14.584718934s ago: executing program 8 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x3d9, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 7m13.274827039s ago: executing program 8 (id=195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="dffffffffdffffff00000000000002d600000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) 7m13.066966423s ago: executing program 8 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x96483, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 7m12.16327904s ago: executing program 8 (id=202): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 7m11.543585972s ago: executing program 8 (id=204): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4108040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000240)='./file0\x00', 0x2ad604b, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x2, 0x1508, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x2) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000680)="4a4349a21a29c9043ec14ff0f5b4adf10c936017b8b539ec94b47ebe0247548a478da681b942046326c6e57726a6c270ce82654a3f1cfd65a65aa936761c3b18146e0e74d7", 0x45, 0xfffffffffffffffb) 7m10.846868645s ago: executing program 36 (id=204): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4108040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000440), &(0x7f0000000240)='./file0\x00', 0x2ad604b, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x2, 0x1508, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r1, 0x400, 0x2) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000680)="4a4349a21a29c9043ec14ff0f5b4adf10c936017b8b539ec94b47ebe0247548a478da681b942046326c6e57726a6c270ce82654a3f1cfd65a65aa936761c3b18146e0e74d7", 0x45, 0xfffffffffffffffb) 6m6.335583413s ago: executing program 9 (id=448): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x9c3fa077fa966179, 0x70bd28, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x7ff, 0x69}}}}}, 0x20}}, 0x4000054) 6m5.643651766s ago: executing program 9 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 6m4.452700629s ago: executing program 9 (id=457): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) 6m1.894512728s ago: executing program 9 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x96483, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x11) 6m0.844006338s ago: executing program 9 (id=473): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000003c0)={0x1, 0x3, 0x2, 0x1, 0xf9}) 6m0.821773919s ago: executing program 9 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m0.804481379s ago: executing program 37 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m19.217766757s ago: executing program 6 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f00000003c0)={0x1, 0x3, 0x2, 0x1, 0xf9}) 5m17.974894731s ago: executing program 6 (id=664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) 5m17.958940961s ago: executing program 6 (id=667): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0xa, 0x300) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 5m15.689233104s ago: executing program 6 (id=675): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1b1, &(0x7f0000000540)="$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") getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$incfs(r8, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m12.610976903s ago: executing program 6 (id=687): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6) ftruncate(r4, 0x2007ffb) 5m12.527889885s ago: executing program 6 (id=688): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 5m12.527748095s ago: executing program 38 (id=688): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 8.099486445s ago: executing program 1 (id=2130): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000005b40)=ANY=[@ANYBLOB="1b00000000000000000000000080000042800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="7c4e0000d5a1114144dfdbe852af43a3aabd5f945f0a1d1607162ca9436099fca1780d3cc780fe73f41162ac09f0962c751595da99a4617993e63ccb4534a8d72953b54ac320526fd7e6f6d0df281cdcaa67befaae23753feed2c75a8487253420b26b18"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000057c0)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fsync_mode=strict,discard_unit=segment\x00checkpoint=merge,noquota,background_gc=off,discard,lazytime,grpquota=#&,fsync_mode=posix,nouser_xattr,mode=fragment:blohk,compress_cache,user_xattr,dont_measure,\x00'], 0x1, 0x5521, &(0x7f0000000200)="$eJzs3L1vG2UcB/Cf89J3SoQY2HpShZRItVWnL4KtQCteRKuqwMAEju1abm1fFLtOyMTAiBj4TxBITIz8DQzMbIgBxIYE8j0X1ACBVnFj0nw+0vl79/j8u+csK9LvcnYAR9ZS9uvPlTgbJyNiPiLORBTrlXIpXEvxQkRkETH30FIpx/8cOBYRpyLi7KR4qlkpn/r8wvj8lZ/e+uWb744vnP7i6+9nd9bArL0YEf31tL7ZT5l3Ut4rxxvjbpH9y+My0xP9++V2nnKzvVZU2Gzs7Nco8lIn7Z+vPxhO8m6v0Zxkp3u3GF8fpAMOx52dOsUL7jU2iu1We63I7jAvsrOd5rW1nf62bQ9HqU6rrPdRUT5Go51M4+2tdjqf9ftFNgejcjzVzVvtrUmOyywPF8281yrmsbafd/r/7e3u4MFWNm5vDLv5ILtSq79Uq1+t1jfyVnvUvlxt9FtXL2fLnd5kt+qo3ehf6+R5p9euNfP+SrbcaTar9Xq2fL291m0Msnq9dql2sXplpVy7kL1+672s18qWJ/lqd/Bg1O0Ns7v5RpZesZKt1i69vJKdr2fv3Lyd3b5z48bN2+9+cP39W6/cfPO1cqe/TStbXr24ulqtX6yu1leO0Pl/Uk56iucP+1KZ9QQADp/H7f/P6f+BKXhy/f/GnYgn3//Ho/f/CxH6/70cqv73qPf//37+i/v/NMBj0v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxZPyx++UaxspS2T5fjz5RDz5XblYiYi4jf/8F8HNtVc76ss7jH/ot/mcO3lSgqTI5xvFxORcS1cvnt2T2nX5neOwEAAABPp68+PvdZ6tbTw9KsJ8RBShdt5s58OKV6lYhYXPpxStXmJg/PT6lY8fleiK0pVSsuYJ2YUrF0yW1hWtUeyfyuOPFQVFLMHeh0AACAA7G7EzjYLgQAAICD9OmsJ8BsFPfOl/filzfwH09R/kPw5K4tAAAA4BDy3XkAAAB4+hX9/yH//T8AAADgP6Tf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3buJ1dpII4D+K+FCv6LxLj3Ku7gGB7BpUvkAF6CI+AVvABnwJ1HMNTQmRgwaHjpUHgvn0/SN52+6ZcZAouZkgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuKYfzWbxbfn+a9+cfdtPmdEAAAAA5+yazaI7maX6y3z9db70NteriKgj4tzcfRTPTjJHOaf5R/vmrz58j+gSDq8xyceLiPiQj19vrv0uAAAAwNO1Xa3nabae/sxu3SGGlBZt6lcfe2R8OTqvIqKZ/ezdr6Q+5L0rFNZ9vsfxuVBat4A1LRSWltzGpdIu0n3d/6zaTY+KKhX1/+8vNnYAAGBAo5Ni2FkIAAAAQ/p06w5QUltd2rJrmH+Lnx8FTlKRH+89P6kBAAAAj9DFCwUAAADAfWgnD76lm//f6/5/1TL9z/5/AAAA0E/a/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBr2jWbxXa1nvfN2bf9lBkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwm/15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi373y/+JqXEmmTttLB2PJGtXja2rxt6DxtGD8fZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu6eN44iDADw7O7thQQQxiAXRggkCmjI5RIS0iEKkEXBT0CyzCWYXPhIXJAoQrihQ67TICgRQgKZLv8hdSKlCV2KK4JEDdove+KcxPGR3XPueaTZeW+1mnlnT7L87qwNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ji8vR9nxWGpitP63K371zaK/vaBvnBj585q0Yo4aTPpw+HF+EOy0l0iAAAALI6sqe9DCHfz3bWiT5fK+j9vrilq/u+eruKmnj9Y9zd9U/sX7ddf7j2/N9FSNU8x6LnN8ejEw6n0Ht0q59szf3tFr7zz5bOXrPxC0ve2n5vk5f1Mvrl5851+GR5pI1sA4N843vR10Pw+VPTDLhMDYGH0osK7qf+zpW5zAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjDZDs82cRJCGG1tx8Xbt+/tjGtv7FzZ7VpZ65f34nHLIbIQwjnNsejEy2uZd5dvnL1wvp4PLrUfvBSCKGr2d+ql3/hgxkuDqGT+yP4n4K0/rLnJZ/DEXT4QwkAgMdSXreirr+b764V55LlEP78/sH6/9UoDtPq/6+q83H9f++jM7fiueL6f9jS+g6DwdbFzwaXr1x9ffPi+vnR+dEnb5wcvjk8dfb06bOD8lnJwBMTAAAA/pt+3eL6P11+eP//WBSHGff/P/92+GU8V6b+n2p/06/rTAAAABbbsy//8Xsy5XzS74cv1re2Lg2r497nk9Wxg1T/sSN1i+v/bLnrrAAAAIA2TLaTB/b/P4ziMOP+/1M/vPBTPGYWQjha7/8f3/h0fHDMRdXGnxN3vUYAAAC6dbRu8f5/Xr7/n+6V5WkI4bVXqrj+N4Az1f/Zu1//GM8Vv/9/qr0lzqV0pbofZb8SQm+l64wAAAB4nD1Rt6LY/y3fXfv452Pv973/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANC2vwIAAP//D28++w==") recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000005740)=@x25, 0xfffffffffffffe1b, &(0x7f0000005c40), 0x6}, 0x8001}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000005880)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000005800)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000005a00)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000059c0)={&(0x7f0000005fc0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16, @ANYRES16=r8, @ANYBLOB="08003a00000000001de55c8bb5efbce1c03b3985cb565beb672adb5282a4d47e53b32ba29671356d87bc29ca0a3350c363f8f111bec94183ed71d2103240e43bb0570a258a9255be76c70c38b6ae6fcb1773e62ecab64a858ca8ab140108cf98476ce76131c47a9192ebbcebe3719c6479c9025cc4526d3bd4aff5ba6dbbbb7947afd83e5e8d7c12fc188e0231c806e6c3a65fb21d27e23545ee659c511faf381089598de497985dc61a140dae37f856309f37871ee56399c926e014ede6a02b92e97a563625bdb67087f48ca2a6d878", @ANYRESHEX=0x0, @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32=r7, @ANYRESHEX=r0, @ANYRES16, @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x28040810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x80) 7.756180051s ago: executing program 5 (id=2133): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000940)='kmem_cache_free\x00', r3}, 0x18) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) 7.651911003s ago: executing program 5 (id=2134): creat(&(0x7f0000000140)='./file0\x00', 0x71) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 7.544358435s ago: executing program 5 (id=2135): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)="ad9ebf11ada0330a6c939a51d7", &(0x7f0000000700), 0xd, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000040), 0x26, 0x75e, &(0x7f0000000280)="$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") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r6, 0x0) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r7}, 0x10) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c"], 0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 7.224700931s ago: executing program 7 (id=2136): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x3d9, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 6.354199728s ago: executing program 7 (id=2137): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) 5.895802017s ago: executing program 1 (id=2139): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) eventfd2(0x1, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 5.460491935s ago: executing program 7 (id=2141): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x62802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000380)=0x4008) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) r5 = dup3(r4, r3, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 5.438000896s ago: executing program 7 (id=2142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) fallocate(r5, 0x0, 0x4000, 0x1001f0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='comm\x00') sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20000840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffffc000) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f010000"], 0x0) 4.977427905s ago: executing program 1 (id=2144): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.563116553s ago: executing program 5 (id=2146): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000940)='kmem_cache_free\x00', r4}, 0x18) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) 4.527001113s ago: executing program 5 (id=2147): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000400), 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 4.495703923s ago: executing program 4 (id=2148): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x3d9, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 3.951489084s ago: executing program 1 (id=2150): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@bh}]}, 0xff, 0x523, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181642, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) recvmsg$inet_nvme(r0, &(0x7f0000000600)={&(0x7f0000000340)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f0000000580)=""/65, 0x41}], 0x3, &(0x7f0000000900)=""/110, 0x6e}, 0x40000042) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0xc62643, 0x196) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000640)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x0, 0x0, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "0410b1617b6228917d76322c2e9e13be3626f4e25310f5db74161ccef2c5cf5e", [0x3, 0x80000800]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='fib_table_lookup\x00', r8, 0x0, 0x8}, 0xe) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r6, &(0x7f00000008c0)="0bd9", &(0x7f0000000980)=@udp6, 0x1}, 0x20) sendmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) fallocate(r1, 0x20, 0x0, 0x8000) 3.775002358s ago: executing program 1 (id=2151): getpid() prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f00000000c0)='./file0\x00', 0x210800, &(0x7f00000002c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@fat=@discard}, {@shortname_lower}, {@utf8}, {@fat=@uid}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x271, &(0x7f0000002140)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.604345041s ago: executing program 4 (id=2152): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) 3.460003133s ago: executing program 5 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003d00)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}}, 0x10) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c1c, &(0x7f0000000580)={[{@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower}, {@utf8no}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0xe4}}, {@shortname_win95}]}, 0x89, 0x29b, &(0x7f0000000180)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x41402) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2.868596425s ago: executing program 1 (id=2155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003d00)=@newtaction={0xb4, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}}, 0x10) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c1c, &(0x7f0000000580)={[{@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8no}, {@rodir}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower}, {@utf8no}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0xe4}}, {@shortname_win95}]}, 0x89, 0x29b, &(0x7f0000000180)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$unix(0x1, 0x2, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) gettid() syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x41402) 2.712388818s ago: executing program 3 (id=2156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 2.684550888s ago: executing program 4 (id=2157): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 2.641164939s ago: executing program 3 (id=2158): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000940)='kmem_cache_free\x00', r4}, 0x18) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) 2.633682569s ago: executing program 3 (id=2159): creat(&(0x7f0000000140)='./file0\x00', 0x71) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 2.540461191s ago: executing program 4 (id=2160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000e0000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000580)={0x8, {"1cc9c3a4f7b55b5a90460b953309236362daf889be84309bbcd530a83dd0c7cf43ad11682195b33b070f652ee071251fc7b07793adb2e70e4b8836671ecaa7dd011b05ce6fb33dac710e1624ebf1379844d92b685e86e3f49251ffc55c9a292d0ea39fd8fbd13bc9909481b26d516c34e467a088dc57d01fb06df9958763152fd2524a49ff0a6ec4dcd3d192a5e3daa5f16eb86cb63a9589b67839b16667e3f8bce9fc1aca9eeeb3ef367f31638e2184fd0139996d8d4c2715f525cc177bf957fcd5cebae3d1d0846dc4bc7ac48f51e3bab49e832ba0b92f0906c39166bdd0fba01643564428201a00b61aa5fdb44478bb11e238cefb62ccd635defd97204e0800a79451ca5f88af83dd8adee428a0d73d129dbd7df00f0aea6814364ac476707be56a226d8f54e5dc89e16f44a6d8d6549e34bca79cf4fca6f2c3fdb1848c87c0a545e1449e8050ef0d9abd4581d6f476e05a3b7677ee356733fe909a5314afebbbd3de145fae94dbf8d83d1017d6f4499467ecde889980c6143adaf3e5d38b2377f000ba5df93da727a14a8b754a4d3f33e028ba6cc7541f41ad4707152208c4890e7db0185362e9680b9a769630d7a181947e0675613b121aa2ede0a9acf8362943a8733c52b49755ef2a7dc8f77dbe16b2d120f00e6ad06e841522132f3e7b953fccb127f2c33189f97569bbface010abebf4b67b4fb9f83cee02357a1a6b8aba219b08bb898aeb274dff8a9e81d47f49414c1512f7ae8ffedecf05781f136418f5d35e484869b98494fa4260360ddedcb389948fc89b69b622f8f1d1c72f20da378e516939546f601766fd083beb48d9166bba4164a674bcbb072f674f2bd3a8551f0d1d17f7b72c93299bdb77689e444916245fa6a6a0ca1150dd8e619a25bfc898191c4a08f2c421b4c19049a3c9b0a9eb3a16c44c5dd8ebf1433534b68440250dbf7183962356698383ead66e2eff26d03940ce5b4e92d6735a0c33e7b405a8f50423ef2cf93cd0f3e4cdd915fd7b11f00435c022290ea778d93f7c9d0095fb2db8fb5ea3da2012af9fcb920ad3401f50647b1a93c6a3b5fdc4db4b7b8fe25885e391ba4311eb4326e44dc9fa7f14410a6fdb3ce8ed37e8c5af201e5f215ae78e592d59c3ea47ab27b413a3ca6d4c5bbfeef148e8d5e29af0d7522a47621431060b962fc40d04160e3d396d883d446717448e36acb25f49897bed9846649df5cc643549928f129b0d912cdb2045af70241ffdcbce890a913f70f2d325bf406b220b72ad6f34c7ce6bbe5ae3bb8d717a425768e6a935329f39fd8a1c53f817c4f3c33f25c515f9ad440eb27c92cc27f78c7ca2d7f6d61c501ec4cee9921b5cd06ccb228e8de8c263e7f0b940dd3e22c3818e9c20506096ec0f512d8010850d86b7dfa81042ac3db76edd7e037fdb0311a1ea2e3d52ceae9083f1b057daabcb2b20e59aa9b114705b1f50d2455394c7d2bfebf742dbed40b95dc1b3c13c8eb99b84cf8b24a237dfdfc55526fc0fba5e7cf69f3fca50bc3ba9cc5ab80b6d1e5a077e3f0b2451786d4926a084423ae35e08e7714b5017f0eb064b885794e8426eef7fd2de1911c4004ed427fdb2178fb5da0adf6bd3c9916de19085a0404f394b82ce7c686775431df4e3afa6f0b1f272ca0fa1c41e072567b0b03d758a0495b4ffdbbb90bd56194ca99c422975552d1e838f4537e5aa71d100dcab5dde503b11370499949a9f236945ebea3c3777e6646304bc61c93f57fa2341665253768cf6baecadc8a51314825bbdafaac149c13ef8b0de93f46e1b983f0a94023487bff000c1236dc460a93822247ed81e76c9c29b6461b3e5e853faf3a51b94b9f9593dccd6e3db144c18ce44ae2b9ac9ceb7a0b9afca9fbd5db0ef48b8f4d1c40c95b57c25e1fde39480cedb3987ecc2dead3dba6bf9599efb052e5b0e01ebffc22d4be3ec893b9e72034411fa89524213fc93695f5b0fb6f659bcc5fdf4465ce37277343328392fce113c85a5b4297aad8b950b61cfc5413d67ee0edc35c9ee62c63378d5a5c1981b0b3b75fde99b0dc7590ccc3459e24d7fa562d61579ea7fe9f322daf7b48eda74cd0cee9209867e23ffbb45570255631399b498b6eecd61f6c851866e8759d10e071655d1ac4a1dd0e8074912459471da55b3cc4937bbfec9519632cbf004590a67c8dc4dbd1094f0bfb77c8d63fb649a7d0946f6f3586a39c3aa2f5686f031deaac7e2e46e6c71e82c2cbf4b73042b84e304dd95cbabbb5edc4e688947dad2698b685e1636f8419f0fb75766541f40b2431142dcf9dfb76e99c85e9006931ab37b504dbbd0474f8499f00bcfe3dc077bb2bc91d3ae5a9ed0dd981838ea8fb1fec639722b14f0460741ef6dc372e299ec09cb08e05dbf9688f793033a7cf416c9aaa104af508804d1c0df2afa2105e989061186fe458e834026387c9f126304017ff4370e133c020f9fcd2dba5398587be2aead644249c5b77f8289b1bf79dab6219e98386ddf8f5469925128329550f665c7d69357265ea395e7d2f4b302ea9b26ff401e72bd012bd7e5157803e5aedaeb78a577ab8b60d011f6cc16220e9a97f3b2f521232ad0409e26bedbc8503f89c8ce094946c1d30eeee7196d14282730073eb27d308ce57c9dc50f471d3c48fdf1ba62e2186b80018f10887ad4188fe9ea7535c1a518568131252cb043fc7b6ebe6f0569409a4098b256c6ef9af818103a076acd7e782946718737d2c897dd62ee1ee2770cd90cebbcce055fc166871aaae50480cd209e33b6b20f0c941bef2be7f5af169b405a222da4bba425bf77ecdd180c105097a27fd38f87d7aec9596dce45f23b44601f7476d3f055e3836679a86844619dbce7515c7af4497700b73294206addf25c424587d277f6f9caa06c31ebb5c03e54eda7b0522c2ce6f0729ffe0d14ca08e297045eb2dcc9f6de5a7bd7da0aaf0e29bf508b574dce6b8512345c9c79d3fe852198a214953635a95e36a02eafb59354a2bb0637f96ef196027cf3d387ea293f564702c0910f4b7646b0c6ce081ff2bd6c3fc90badfc7638a2fcf3216c291a1f421a3b608bb3a085cb2636915373c5b2826cc571a249e3b67d0b15079d266929d6f594ea008fbdaaf158db3c25297f4e780c931424697f0218ca2bfdb1fe60848f280c1542059faecf5a7c35a18f5ddac4e4122974af803d3b3aa97efbaa7aef687007fbc8625760b82f974061173b9a775153e4a773487d7f6034b158a2112435eee45fb5613d9dca51d398dfbb65f72e1324b2dca8fcd353b67dc8da0b4eb1a513e03cf13e9ffb01f284351b37f60af236c17c6d30625f4a4d1a853e4cf8c3d12ee305190d48363b43d2e4c4d7b37de98b3af34cd7cb96afc3fe76b206ebf2083892d93cbc61ec21396c33f1fa973a6b2e3c184894e4fa4132296c45a3ab539d8e269511cffb10c0a6bfe8529f53ea6fe040ea4c5403d01f93f43fea9a35a8b17143deeeb6620af68439d784ddb35ea674ca94312dcbf6a8f3134e2e4d84ff5ff72d1b9ef871fefbf34f61bf6706c715c05d38c596021b1d7dc9819ef219ae73873ae9090fa7985d7532043c6a229435e9f74fce910a24d3963e89b76df03876341f694468d9cf981a45393225c2af67fc90f36c497d1cb9b24782bf7b0bb0194bb7e056f25874c020de79d93a92f13188a37804aff7e958c03886606fa8057f790ac1d240b3d8c8f2b55ee6dc09d0252d99d74e901dff78cf743dc2c73405c3716da2fa36a27bf2d1afb436f06bd999b89abf0613ace47c2f4680fdfaed3e3eb9d108e24f634f66290c241b43cd5ab418e574637d551d451d4339bc412475830204e62071fd5216bfb2a3f58deee863c7a94d3dd04c6487ea67c1b1ae1d09a5a9355b937c9412a76fb11b5e110af13f28f2cb08052124fbef24ab9ad98658e15120e8ec762bcd41441f1cf564a49c1b38f8dd22fcc624a3628cdf3aa593f999cad407df7c3c0b8daec263a326bc6845094833c2b36ae299b4180727a2ba51d77411e3090bf83c7735e7f9020d55d0943b753c8fd72f93bf699fca24541a0b7149746bea5c10b018e010999dabfa1f66c35db2351ace23390da40df108003fbf098d5f488c3dd8414c6853f928ce5218f8243a4bf719f63270aa89bf85b200ed89e59bfd961ebee6f05451b8e3f5df6500363e49549ebd8c80ae4a7104179e89a72dfe81abb38061180218117fcf0e00ce0541bdfc089d26052674aad17ff71106a0d609afbc7dade42e59bc58e88837d1c18de08876d544d0dc06bf0974988f65ce148af315f1dbabc7773afec3f649223b7d4ce0563b513583f9a73b0d660d6f17e79394f7ccb8ed4a01bcedf43a7e546f05259b72d4fe90ecf0b138261c5f6214d73c34a256e5d925d77e3e69c01234ace7790b1705ba30b786eb1bbbc957df147e4c277f7d08f16dcc3456e84fe5788942fcf480e4465769c8078dd46043863ca21b0eea564d8e36e623b3b7683c500ce998b598e79a88cf17def4e8e7adc0d88b3ca47bda1700fa83b45276e3998101fa4be58f677f1f76b4b150f975587fc2088efd2d67b031ef95167ae43ccc238e7c9e9f9b2c5fd555d4df4575927f7e60ff8860780b7ec5b96d6506bb19afbbb5a6f9a694389ce4751c44a997174208eab3cd53c7ed0e4104e75a8c6438b164ea2191d0106b1f1ed583c85f7446f84e185bef3a426ceb13d979779613612db6ac45c7e0098fb710aefbbfc9f7a9e3b3b00281c9ae2a44bfbc4b11bc295545522d2cec5d699e460a84b0a0f4975b11432d995d94c86849c95dbceb9fb7c70250bc476b024c12ef95c09861d850720ab97068cf38f00e8318bb1cfec3e619699bc9ff5585f1741a65956e98de159edc4e3305f580f2102d8281d12524c57d13130d58526c382b33b6db1ed7ce5de82d0dfcec565c9598479fb91450bb706048a62207235d206665644fe0ad26ba93465972c6f8cc77dc78c8395f0dad978e8a93b8acf69256aa7c195f78e32707a8939557a34d08557b28e1362e004a890c17784724086c11547dbc8b75fb622aedefdf636bcd456071831126e6f3976d75050d9fd657f7d768721188745af78d3467de8ca5f5845da763d57a6b5498522f8ba531908af8aee2fb10b66b549654a8bb0366a820025f354a0d71cfaf64fad08d5cb06a89b3d0299dddc304e7f8f5c5262a384fec62def50039978d866602ced669bea5f4320dfe9f70096c4514d0457b8e72f623f7ecd75d303d13ad02ae27c38925bc010c96ac50e5096cfce0fe2d5c3791497fd1e9412ca1731f75b01e3350b640e9e0d730ebffb157c092351bc3f675584d160da37df49c4a63a4548ef6f353431b7c91b4126547e00853e685455f531ee551626c7dbb669d03cb5a0a9129a58f9398dc6fd48aafa5f78f09bfd17be980c62135c3c1965d41a1f0dfaee7016e5bf20b6871c056d8f6063c6939dcf375fd1836cff3463e2b7efd8b16013cf02d75865c89bcfa8be8f1cf04fbaf94387668fef452e5ad33f00800e7b8cf061da524f888307d6e442f913a2f23bbe32e95b89f94cc10bb3d77574a9b0b5a237bd26ff03fe5e29615af2547577e1fe672866c306fa25c42ae4bcb2b287e7a25a7a8ab5f538d9622d1d1f0ee18445dcf6ae1128350d974e075aea1f4fca4b7f07e088efc5bcbf4d8e6ed39e4e7c63218fcd11f1012d0d5c404aade5684884e855fb064adc31781cdd38a0ae341b9f36b45265938ac6eb1d194e719152d2963a8685cbb7151999da024868564d2194237af1", 0x1000}}, 0x1006) 2.483803572s ago: executing program 3 (id=2161): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x8ad17a375401bc9f) setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000020c0), &(0x7f00000000c0)='./file0\x00', 0x210800, &(0x7f00000002c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@fat=@discard}, {@shortname_lower}, {@utf8}, {@fat=@uid}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x271, &(0x7f0000002140)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.983911152s ago: executing program 3 (id=2162): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$packet(0x11, 0xa, 0x300) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 1.972977462s ago: executing program 7 (id=2163): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x3d9, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 871.288283ms ago: executing program 4 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800157fff000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 869.292043ms ago: executing program 7 (id=2165): bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x2000000000000111, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r5, 0x0, 0xf, 0x8) 228.999836ms ago: executing program 3 (id=2166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008", 0x1d) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 0s ago: executing program 4 (id=2167): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b22bec9 code=0x7ffc0000 [ 216.420508][ T24] audit: type=1326 audit(1758701839.690:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2921 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b22bec9 code=0x7ffc0000 [ 216.506999][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 216.656989][ T315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 216.857025][ T446] usbhid 8-1:0.0: can't add hid device: -71 [ 216.863135][ T446] usbhid: probe of 8-1:0.0 failed with error -71 [ 216.869867][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.882986][ T446] usb 8-1: USB disconnect, device number 4 [ 216.888899][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.899138][ T54] usb 5-1: config 1 has no interface number 0 [ 216.905553][ T54] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.017092][ T315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.027362][ T315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.036225][ T315] usb 4-1: config 1 has no interface number 0 [ 217.042440][ T315] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.066610][ T2930] overlayfs: './file1' not a directory [ 217.077101][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.086247][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.095059][ T54] usb 5-1: Product: syz [ 217.099592][ T54] usb 5-1: Manufacturer: syz [ 217.104199][ T54] usb 5-1: SerialNumber: syz [ 217.148419][ T54] cdc_ncm 5-1:1.1: bind() failure [ 217.528114][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.537256][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.537994][ T24] audit: type=1400 audit(1758701840.940:304): avc: denied { watch_reads } for pid=2935 comm="syz.7.750" path="/121/file0" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 217.545298][ T315] usb 4-1: Product: syz [ 217.572474][ T315] usb 4-1: Manufacturer: syz [ 217.577333][ T315] usb 4-1: SerialNumber: syz [ 217.620743][ T315] cdc_ncm 4-1:1.1: bind() failure [ 220.686056][ T315] usb 5-1: USB disconnect, device number 5 [ 220.716379][ T24] audit: type=1326 audit(1758701844.110:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcda2e9ec9 code=0x7ffc0000 [ 220.743355][ T446] usb 4-1: USB disconnect, device number 9 [ 220.768637][ T24] audit: type=1326 audit(1758701844.120:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fdcda2e9ec9 code=0x7ffc0000 [ 220.795109][ T24] audit: type=1326 audit(1758701844.120:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2958 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcda2e9ec9 code=0x7ffc0000 [ 221.001663][ T2971] netlink: 76 bytes leftover after parsing attributes in process `syz.1.760'. [ 222.917128][ T3002] fuse: Unknown parameter 'use00000000000000000000' [ 223.422623][ T3017] netlink: 76 bytes leftover after parsing attributes in process `syz.4.773'. [ 223.636908][ T3020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.774'. [ 223.986999][ T2012] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 224.837045][ T2012] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 224.846250][ T2012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.858893][ T2012] usb 6-1: config 0 descriptor?? [ 225.050694][ T3041] fuse: Unknown parameter 'user_i00000000000000000000' [ 225.576992][ T54] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 225.727029][ T2012] usbhid 6-1:0.0: can't add hid device: -71 [ 225.733165][ T2012] usbhid: probe of 6-1:0.0 failed with error -71 [ 225.741262][ T2012] usb 6-1: USB disconnect, device number 8 [ 225.817016][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 225.852410][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 225.937100][ T54] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.948484][ T54] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.061748][ T3058] device wireguard0 entered promiscuous mode [ 226.077134][ T54] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.086405][ T54] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.094961][ T54] usb 4-1: Product: syz [ 226.099372][ T54] usb 4-1: Manufacturer: syz [ 226.137791][ T54] hub 4-1:4.0: USB hub found [ 226.334224][ T3069] netlink: 76 bytes leftover after parsing attributes in process `syz.5.788'. [ 226.408380][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.428964][ T3039] fuse: Invalid rootmode [ 226.557068][ T54] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 226.597240][ T54] usb 4-1: USB disconnect, device number 10 [ 226.807284][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 226.820155][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.912781][ T25] usb 5-1: config 0 descriptor?? [ 227.387031][ T292] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 227.517016][ T2012] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 227.563403][ T3083] fuse: Unknown parameter 'user_i00000000000000000000' [ 227.677085][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 227.683277][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 227.692393][ T25] usb 5-1: USB disconnect, device number 6 [ 227.757105][ T292] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.768566][ T292] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.778620][ T292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 227.785281][ T292] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 227.794461][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.803413][ T292] usb 4-1: config 0 descriptor?? [ 227.806985][ T2012] usb 6-1: Using ep0 maxpacket: 16 [ 227.957109][ T2012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.968507][ T2012] usb 6-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 227.977626][ T2012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.998956][ T2012] usb 6-1: config 0 descriptor?? [ 228.280568][ T292] hid-steam 0003:28DE:1102.0008: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 228.298962][ T292] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 228.377139][ T292] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 228.527240][ T24] audit: type=1400 audit(1758701851.930:308): avc: denied { append } for pid=3076 comm="syz.3.791" name="hidraw0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 228.543025][ T3076] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0008/input/input8 [ 228.588879][ T292] usb 4-1: USB disconnect, device number 11 [ 228.614100][ T292] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 228.764700][ T3099] fido_id[3099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 229.427053][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 229.928295][ T2012] usbhid 6-1:0.0: can't add hid device: -71 [ 229.934331][ T2012] usbhid: probe of 6-1:0.0 failed with error -71 [ 229.949776][ T2012] usb 6-1: USB disconnect, device number 9 [ 230.298094][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.369230][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.378858][ T25] usb 5-1: config 1 has no interface number 0 [ 230.385215][ T25] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.567289][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.576558][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.584853][ T25] usb 5-1: Product: syz [ 230.589273][ T25] usb 5-1: Manufacturer: syz [ 230.594079][ T25] usb 5-1: SerialNumber: syz [ 230.637826][ T25] cdc_ncm 5-1:1.1: bind() failure [ 230.809057][ T3121] overlayfs: './file1' not a directory [ 233.004280][ T20] usb 5-1: USB disconnect, device number 7 [ 233.783131][ T3148] netlink: 76 bytes leftover after parsing attributes in process `syz.1.811'. [ 234.776279][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 234.888287][ T3177] netlink: 76 bytes leftover after parsing attributes in process `syz.1.820'. [ 236.310131][ T20] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.649924][ T3203] netlink: 76 bytes leftover after parsing attributes in process `syz.4.829'. [ 236.787000][ T2012] Bluetooth: hci0: command 0x1003 tx timeout [ 236.793103][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 236.807050][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.817245][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.826357][ T20] usb 2-1: config 1 has no interface number 0 [ 236.832530][ T20] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.997048][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.006195][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.014318][ T20] usb 2-1: Product: syz [ 237.018527][ T20] usb 2-1: Manufacturer: syz [ 237.023152][ T20] usb 2-1: SerialNumber: syz [ 237.067750][ T20] cdc_ncm 2-1:1.1: bind() failure [ 239.769365][ T20] Bluetooth: hci0: command 0x1001 tx timeout [ 239.779656][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 239.851654][ T20] usb 2-1: USB disconnect, device number 9 [ 240.829181][ T3235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 240.855454][ T3237] overlayfs: './file1' not a directory [ 240.967591][ T3243] usb usb8: usbfs: process 3243 (syz.4.841) did not claim interface 0 before use [ 241.827106][ T350] Bluetooth: hci0: command 0x1009 tx timeout [ 241.852734][ T3254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 242.913343][ T3277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.853'. [ 243.385043][ T3284] usb usb8: usbfs: process 3284 (syz.5.855) did not claim interface 0 before use [ 243.666426][ T3286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.856'. [ 243.686320][ T3288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 244.247045][ T446] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 245.599326][ T3320] netlink: 76 bytes leftover after parsing attributes in process `syz.7.865'. [ 245.937300][ T446] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.952762][ T446] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 245.963180][ T446] usb 5-1: config 1 has no interface number 0 [ 245.979987][ T446] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.461309][ T446] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.470446][ T446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.478693][ T446] usb 5-1: Product: syz [ 246.483057][ T446] usb 5-1: Manufacturer: syz [ 246.487818][ T446] usb 5-1: SerialNumber: syz [ 246.527561][ T446] cdc_ncm 5-1:1.1: bind() failure [ 246.559060][ T3335] fuse: Unknown parameter '0x0000000000000003' [ 246.748141][ T446] usb 5-1: USB disconnect, device number 8 [ 247.539477][ T3368] fuse: Unknown parameter '0x0000000000000003' [ 248.347209][ T297] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 248.727039][ T297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.737464][ T297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.746586][ T297] usb 4-1: config 1 has no interface number 0 [ 248.754714][ T297] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.937191][ T297] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.946824][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.959011][ T297] usb 4-1: Product: syz [ 248.963386][ T297] usb 4-1: Manufacturer: syz [ 248.968335][ T297] usb 4-1: SerialNumber: syz [ 249.027598][ T297] cdc_ncm 4-1:1.1: bind() failure [ 249.228815][ T315] usb 4-1: USB disconnect, device number 12 [ 249.372651][ T3399] usb usb8: usbfs: process 3399 (syz.1.892) did not claim interface 0 before use [ 249.523348][ T3406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.895'. [ 250.486685][ T3422] netlink: 76 bytes leftover after parsing attributes in process `syz.7.897'. [ 251.156408][ T24] audit: type=1400 audit(1758701874.550:309): avc: denied { ioctl } for pid=3424 comm="syz.4.900" path="socket:[26263]" dev="sockfs" ino=26263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.216550][ T24] audit: type=1400 audit(1758701874.550:310): avc: denied { ioctl } for pid=3424 comm="syz.4.900" path="socket:[26262]" dev="sockfs" ino=26262 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.288818][ T3436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 251.804705][ T3434] usb usb8: usbfs: process 3434 (syz.3.904) did not claim interface 0 before use [ 252.487034][ T297] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 252.877205][ T297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.889157][ T297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.899726][ T297] usb 4-1: config 1 has no interface number 0 [ 252.906038][ T297] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.077095][ T297] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.086435][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.094562][ T297] usb 4-1: Product: syz [ 253.098802][ T297] usb 4-1: Manufacturer: syz [ 253.103517][ T297] usb 4-1: SerialNumber: syz [ 253.147575][ T297] cdc_ncm 4-1:1.1: bind() failure [ 253.350212][ T888] usb 4-1: USB disconnect, device number 13 [ 255.737556][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 257.030271][ T3516] syz.5.925[3516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.030362][ T3516] syz.5.925[3516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.471736][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 259.490763][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 259.498087][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 259.505335][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 259.513058][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 259.520540][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 259.528013][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 259.536174][ T3542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.592229][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 259.603111][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.614523][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 259.624730][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.673514][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.683369][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.692853][ T3548] fuse: Unknown parameter 'grou00000000000000000000' [ 259.700334][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.712186][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.720632][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 259.730452][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 261.256848][ T3574] syz.5.941[3574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.257681][ T3574] syz.5.941[3574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.629786][ T3591] fuse: Unknown parameter 'grou00000000000000000000' [ 265.716967][ T888] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 265.940572][ T3633] syz.4.959[3633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.940714][ T3633] syz.4.959[3633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.956996][ T888] usb 8-1: Using ep0 maxpacket: 32 [ 266.005016][ T3640] fuse: Unknown parameter 'group_i00000000000000000000' [ 266.237236][ T888] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.238852][ T3648] overlayfs: './file1' not a directory [ 266.254220][ T888] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.387583][ T888] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 266.462852][ T888] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 266.472183][ T888] usb 8-1: Product: syz [ 266.476575][ T888] usb 8-1: Manufacturer: syz [ 267.382557][ T888] hub 8-1:4.0: USB hub found [ 267.557009][ T888] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 267.597282][ T888] usb 8-1: USB disconnect, device number 5 [ 267.845760][ T3670] fuse: Unknown parameter 'group_i00000000000000000000' [ 268.904342][ T3680] overlayfs: './file1' not a directory [ 270.213369][ T3702] syz.1.981[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.213430][ T3702] syz.1.981[3702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.386637][ T3709] fuse: Unknown parameter 'group_i00000000000000000000' [ 271.404291][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 271.415435][ T3720] overlayfs: './file1' not a directory [ 273.155513][ T3748] netlink: 76 bytes leftover after parsing attributes in process `syz.7.996'. [ 273.247490][ T3754] syz.4.998[3754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.247585][ T3754] syz.4.998[3754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.449650][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 273.566729][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.576013][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 273.586361][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.596457][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.605705][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.615122][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.625851][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.447035][ T297] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 275.625565][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 275.633966][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 275.641377][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 275.648617][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 275.656412][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 275.664291][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 275.671954][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 275.680614][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.977036][ T315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 276.097049][ T297] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.107373][ T297] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.116504][ T297] usb 8-1: config 1 has no interface number 0 [ 276.123705][ T297] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.217037][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 276.337056][ T297] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.346326][ T297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.347221][ T315] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.354468][ T297] usb 8-1: Product: syz [ 276.370700][ T297] usb 8-1: Manufacturer: syz [ 276.375633][ T297] usb 8-1: SerialNumber: syz [ 276.406970][ T315] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.437525][ T297] cdc_ncm 8-1:1.1: bind() failure [ 276.527045][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 276.536118][ T315] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 276.544777][ T315] usb 5-1: Product: syz [ 276.549334][ T315] usb 5-1: Manufacturer: syz [ 276.597491][ T315] hub 5-1:4.0: USB hub found [ 276.646340][ T2012] usb 8-1: USB disconnect, device number 6 [ 276.707068][ T54] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 277.017012][ T315] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 277.057580][ T315] usb 5-1: USB disconnect, device number 9 [ 277.067084][ T54] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.093196][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.102376][ T54] usb 6-1: config 1 has no interface number 0 [ 277.108958][ T54] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.277047][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.286565][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.294871][ T54] usb 6-1: Product: syz [ 277.299172][ T54] usb 6-1: Manufacturer: syz [ 277.303806][ T54] usb 6-1: SerialNumber: syz [ 277.367538][ T54] cdc_ncm 6-1:1.1: bind() failure [ 279.360007][ T315] usb 6-1: USB disconnect, device number 10 [ 279.793179][ T3871] fuse: Bad value for 'user_id' [ 279.986977][ T20] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 280.246986][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 280.367338][ T20] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.378412][ T20] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.507041][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 280.516330][ T20] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 280.524876][ T20] usb 2-1: Product: syz [ 280.529096][ T20] usb 2-1: Manufacturer: syz [ 280.567880][ T20] hub 2-1:4.0: USB hub found [ 280.672853][ T3889] overlayfs: './file1' not a directory [ 280.694170][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 280.772668][ T3865] fuse: Invalid rootmode [ 280.849881][ T20] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 280.887575][ T20] usb 2-1: USB disconnect, device number 10 [ 281.323672][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 283.905290][ T292] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 284.097124][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 284.186958][ T292] usb 2-1: Using ep0 maxpacket: 32 [ 284.317130][ T292] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.329001][ T292] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.457893][ T292] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 284.467849][ T292] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 284.477029][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.487569][ T292] usb 2-1: Product: syz [ 284.492045][ T292] usb 2-1: Manufacturer: syz [ 284.496936][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 284.528860][ T20] usb 4-1: config 1 has no interface number 0 [ 284.570468][ T292] hub 2-1:4.0: USB hub found [ 284.575218][ T20] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.767096][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.776287][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.785256][ T20] usb 4-1: Product: syz [ 284.790137][ T20] usb 4-1: Manufacturer: syz [ 284.790661][ T3943] fuse: Invalid rootmode [ 284.794779][ T20] usb 4-1: SerialNumber: syz [ 284.847822][ T20] cdc_ncm 4-1:1.1: bind() failure [ 284.867042][ T292] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 284.897272][ T292] usb 2-1: USB disconnect, device number 11 [ 285.052111][ T20] usb 4-1: USB disconnect, device number 14 [ 285.100298][ T3977] fuse: Unknown parameter 'grou00000000000000000000' [ 285.339007][ T3981] overlayfs: './file1' not a directory [ 285.788691][ T3995] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1079'. [ 286.029398][ T315] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 286.106363][ T24] audit: type=1326 audit(1758701909.500:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.7.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 286.182057][ T24] audit: type=1326 audit(1758701909.500:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.7.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 286.255209][ T24] audit: type=1326 audit(1758701909.530:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.7.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 286.289031][ T24] audit: type=1326 audit(1758701909.530:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.7.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 286.312942][ T24] audit: type=1326 audit(1758701909.530:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.7.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 286.447037][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.457275][ T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.466137][ T315] usb 2-1: config 1 has no interface number 0 [ 286.472631][ T315] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.877111][ T292] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 286.980088][ T315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.989233][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.997561][ T315] usb 2-1: Product: syz [ 287.001866][ T315] usb 2-1: Manufacturer: syz [ 287.006660][ T315] usb 2-1: SerialNumber: syz [ 287.047475][ T315] cdc_ncm 2-1:1.1: bind() failure [ 287.126980][ T292] usb 6-1: Using ep0 maxpacket: 32 [ 287.285623][ T292] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.301399][ T292] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.437021][ T292] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 287.446134][ T292] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 287.454698][ T292] usb 6-1: Product: syz [ 287.458923][ T292] usb 6-1: Manufacturer: syz [ 287.498145][ T292] hub 6-1:4.0: USB hub found [ 287.550676][ T4025] usb usb8: usbfs: process 4025 (syz.3.1090) did not claim interface 0 before use [ 287.711630][ T4010] fuse: Invalid rootmode [ 287.897127][ T292] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 287.927307][ T292] usb 6-1: USB disconnect, device number 11 [ 288.387217][ T315] usb 2-1: USB disconnect, device number 12 [ 288.548618][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 290.040917][ T4079] fuse: Unknown parameter 'grou00000000000000000000' [ 290.057094][ T315] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 290.447012][ T315] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.463929][ T315] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.482659][ T315] usb 5-1: config 1 has no interface number 0 [ 290.495448][ T315] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.847996][ T315] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.069016][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.203513][ T315] usb 5-1: Product: syz [ 291.212749][ T315] usb 5-1: Manufacturer: syz [ 291.219189][ T315] usb 5-1: SerialNumber: syz [ 291.357546][ T315] cdc_ncm 5-1:1.1: bind() failure [ 291.546982][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 291.806992][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 291.927047][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.938097][ T25] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.067180][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.076596][ T25] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 292.085186][ T25] usb 6-1: Product: syz [ 292.089504][ T25] usb 6-1: Manufacturer: syz [ 292.127881][ T25] hub 6-1:4.0: USB hub found [ 292.329698][ T4101] fuse: Invalid rootmode [ 292.397017][ T25] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 292.437405][ T25] usb 6-1: USB disconnect, device number 12 [ 292.518062][ T292] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 292.586971][ T315] usb 5-1: USB disconnect, device number 10 [ 293.037195][ T292] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 293.064598][ T292] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.076041][ T292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.084053][ T292] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 293.096408][ T292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.097337][ T4129] fuse: Unknown parameter 'group_i00000000000000000000' [ 293.132789][ T292] usb 4-1: config 0 descriptor?? [ 293.648669][ T292] hid-steam 0003:28DE:1102.000A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 293.662553][ T292] hid-steam 0003:28DE:1102.000B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 293.692240][ T24] audit: type=1326 audit(1758701917.090:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.7.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 293.727005][ T24] audit: type=1326 audit(1758701917.110:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.7.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 293.751215][ T292] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' connected [ 293.761606][ T292] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.000A/input/input9 [ 293.773511][ T24] audit: type=1326 audit(1758701917.110:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.7.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe837af5ec9 code=0x7ffc0000 [ 293.853467][ T4109] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.000A/input/input10 [ 293.950915][ T292] usb 4-1: USB disconnect, device number 15 [ 293.977836][ T292] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' disconnected [ 294.344787][ T4137] fido_id[4137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 294.361814][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 294.392575][ T4153] syz.5.1132[4153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.392668][ T4153] syz.5.1132[4153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 297.693767][ T4178] device wireguard0 entered promiscuous mode [ 297.711416][ T297] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 298.057336][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 298.384548][ T297] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.426260][ T297] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.477232][ T297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 298.515769][ T297] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 298.569529][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.605034][ T297] usb 2-1: config 0 descriptor?? [ 298.696701][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 298.744653][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.754351][ T25] usb 5-1: config 0 descriptor?? [ 299.019513][ T4221] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1154'. [ 299.169951][ T4231] overlayfs: './file1' not a directory [ 299.207007][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 299.213011][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 299.224729][ T25] usb 5-1: USB disconnect, device number 11 [ 299.244741][ T24] audit: type=1326 audit(1758701922.640:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990fcc5ec9 code=0x7ffc0000 [ 299.268485][ T24] audit: type=1326 audit(1758701922.640:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f990fcc5ec9 code=0x7ffc0000 [ 299.292554][ T24] audit: type=1326 audit(1758701922.640:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.4.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990fcc5ec9 code=0x7ffc0000 [ 299.348504][ T297] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 299.356171][ T297] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 299.365003][ T297] hid-steam 0003:28DE:1102.000C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 299.380778][ T297] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 299.388346][ T297] hid-steam 0003:28DE:1102.000D: unknown main item tag 0x0 [ 299.397469][ T297] hid-steam 0003:28DE:1102.000D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 299.483154][ T297] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected [ 299.517414][ T297] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.000C/input/input11 [ 299.556234][ T297] usb 2-1: USB disconnect, device number 13 [ 299.578629][ T297] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 299.583744][ T4245] fido_id[4245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 300.203926][ T4262] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1165'. [ 300.338087][ T4260] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1168'. [ 300.488845][ T4256] device wireguard0 entered promiscuous mode [ 300.562784][ T4270] syz.7.1170[4270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.562842][ T4270] syz.7.1170[4270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.807052][ T446] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 301.197054][ T446] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 301.206713][ T446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.215536][ T446] usb 2-1: config 0 descriptor?? [ 301.626963][ T297] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 301.966984][ T446] usbhid 2-1:0.0: can't add hid device: -71 [ 301.973010][ T446] usbhid: probe of 2-1:0.0 failed with error -71 [ 301.980255][ T446] usb 2-1: USB disconnect, device number 14 [ 302.007062][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.018643][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.028628][ T297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 302.035864][ T297] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 302.044941][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.054493][ T297] usb 5-1: config 0 descriptor?? [ 302.538571][ T297] hid-steam 0003:28DE:1102.000E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 302.557924][ T297] hid-steam 0003:28DE:1102.000F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 302.636964][ T297] hid-steam 0003:28DE:1102.000E: Steam Controller 'XXXXXXXXXX' connected [ 302.646400][ T297] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.000E/input/input12 [ 302.741023][ T4274] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.000E/input/input13 [ 302.755126][ T297] usb 5-1: USB disconnect, device number 12 [ 302.765607][ T297] hid-steam 0003:28DE:1102.000E: Steam Controller 'XXXXXXXXXX' disconnected [ 302.897003][ T446] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 303.257144][ T446] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 303.271290][ T446] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.291986][ T446] usb 4-1: config 0 interface 0 has no altsetting 0 [ 303.306958][ T446] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 303.316841][ T446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.392875][ T446] usb 4-1: config 0 descriptor?? [ 303.697370][ T4306] usb usb8: usbfs: process 4306 (syz.5.1181) did not claim interface 0 before use [ 303.923316][ T446] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 303.940445][ T446] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 303.969512][ T446] hid-steam 0003:28DE:1102.0010: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 304.020038][ T446] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 304.048543][ T446] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 304.077877][ T446] hid-steam 0003:28DE:1102.0011: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 304.161610][ T446] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' connected [ 304.265980][ T446] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0010/input/input14 [ 304.288673][ T446] usb 4-1: USB disconnect, device number 16 [ 304.304562][ T446] hid-steam 0003:28DE:1102.0010: Steam Controller 'XXXXXXXXXX' disconnected [ 304.322636][ T4313] fido_id[4313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 305.746968][ T350] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 306.147000][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 306.187272][ T350] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.222408][ T350] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.270669][ T350] usb 8-1: config 0 interface 0 has no altsetting 0 [ 306.390362][ T350] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 306.450677][ T350] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.570690][ T350] usb 8-1: config 0 descriptor?? [ 307.067976][ T350] hid-steam 0003:28DE:1102.0012: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 307.080171][ T350] hid-steam 0003:28DE:1102.0013: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 307.164252][ T350] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' connected [ 307.174693][ T350] input: Steam Controller as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1102.0012/input/input15 [ 307.270869][ T4333] input: Steam Controller as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1102.0012/input/input16 [ 307.283943][ T25] usb 8-1: USB disconnect, device number 7 [ 307.293743][ T25] hid-steam 0003:28DE:1102.0012: Steam Controller 'XXXXXXXXXX' disconnected [ 307.517013][ T350] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 308.058135][ T350] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.094341][ T350] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.105492][ T350] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.237564][ T350] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 308.419510][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.012632][ T350] usb 5-1: config 0 descriptor?? [ 309.488375][ T350] hid-steam 0003:28DE:1102.0014: unknown main item tag 0x0 [ 309.495847][ T350] hid-steam 0003:28DE:1102.0014: unknown main item tag 0x0 [ 309.518648][ T350] hid-steam 0003:28DE:1102.0014: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 309.547683][ T350] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 309.556206][ T350] hid-steam 0003:28DE:1102.0015: unknown main item tag 0x0 [ 309.577695][ T350] hid-steam 0003:28DE:1102.0015: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 309.689851][ T350] hid-steam 0003:28DE:1102.0014: Steam Controller 'XXXXXXXXXX' connected [ 309.699570][ T350] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0014/input/input17 [ 309.718526][ T350] usb 5-1: USB disconnect, device number 13 [ 309.737431][ T4394] fido_id[4394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0015/report_descriptor': No such file or directory [ 309.755088][ T350] hid-steam 0003:28DE:1102.0014: Steam Controller 'XXXXXXXXXX' disconnected [ 310.410700][ T4409] usb usb8: usbfs: process 4409 (syz.4.1212) did not claim interface 0 before use [ 310.620341][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1214'. [ 311.889859][ T4449] usb usb8: usbfs: process 4449 (syz.1.1223) did not claim interface 0 before use [ 311.908569][ T4451] fuse: Bad value for 'rootmode' [ 312.040938][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1226'. [ 314.257410][ T4486] fuse: Bad value for 'rootmode' [ 314.310083][ T4488] usb usb8: usbfs: process 4488 (syz.7.1236) did not claim interface 0 before use [ 314.417205][ T4492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1238'. [ 314.567093][ T297] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 315.047384][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.102175][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.177554][ T297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.199584][ T297] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 315.218327][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.280212][ T297] usb 5-1: config 0 descriptor?? [ 316.859407][ T4524] fuse: Bad value for 'rootmode' [ 317.088579][ T297] hid-steam 0003:28DE:1102.0016: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 317.101855][ T297] hid-steam 0003:28DE:1102.0017: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 317.186982][ T297] hid-steam 0003:28DE:1102.0016: Steam Controller 'XXXXXXXXXX' connected [ 317.197082][ T297] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0016/input/input18 [ 317.290845][ T4480] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0016/input/input19 [ 317.329273][ T297] usb 5-1: USB disconnect, device number 14 [ 317.348007][ T297] hid-steam 0003:28DE:1102.0016: Steam Controller 'XXXXXXXXXX' disconnected [ 318.228403][ T4546] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1252'. [ 318.975400][ T4561] fuse: Unknown parameter 'use00000000000000000000' [ 319.106944][ T297] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 319.487183][ T297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.507183][ T297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 319.537688][ T297] usb 5-1: config 1 has no interface number 0 [ 319.672097][ T297] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.938115][ T297] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.908144][ T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.938034][ T297] usb 5-1: Product: syz [ 320.947075][ T297] usb 5-1: Manufacturer: syz [ 320.951720][ T297] usb 5-1: SerialNumber: syz [ 320.997665][ T297] cdc_ncm 5-1:1.1: bind() failure [ 321.098796][ T297] usb 5-1: USB disconnect, device number 15 [ 321.204319][ T4593] fuse: Unknown parameter 'use00000000000000000000' [ 321.376761][ T4602] overlayfs: './file1' not a directory [ 322.836975][ T297] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 323.197011][ T297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.226940][ T297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.245965][ T297] usb 2-1: config 1 has no interface number 0 [ 323.252150][ T297] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.298039][ T4632] fuse: Unknown parameter 'use00000000000000000000' [ 323.455220][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 324.022670][ T297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.091469][ T297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.164523][ T297] usb 2-1: Product: syz [ 324.187100][ T297] usb 2-1: Manufacturer: syz [ 324.288683][ T297] usb 2-1: SerialNumber: syz [ 325.539533][ T297] usb 2-1: can't set config #1, error -71 [ 325.558177][ T297] usb 2-1: USB disconnect, device number 15 [ 325.660087][ T4672] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1291'. [ 326.568070][ T4690] overlayfs: './file1' not a directory [ 328.670841][ T4713] fuse: Unknown parameter 'user_i00000000000000000000' [ 329.066991][ T20] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 329.496989][ T20] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.520562][ T20] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.600498][ T20] usb 8-1: config 1 has no interface number 0 [ 329.606807][ T20] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.641779][ T4734] overlayfs: './file1' not a directory [ 329.715979][ T4738] fuse: Bad value for 'fd' [ 329.837079][ T20] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.846308][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.876934][ T20] usb 8-1: Product: syz [ 329.881135][ T20] usb 8-1: Manufacturer: syz [ 329.885824][ T20] usb 8-1: SerialNumber: syz [ 329.949303][ T20] cdc_ncm 8-1:1.1: bind() failure [ 330.518650][ T4748] fuse: Unknown parameter 'user_i00000000000000000000' [ 330.552129][ T319] Bluetooth: hci0: Frame reassembly failed (-84) [ 330.607818][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 331.217083][ T25] usb 8-1: USB disconnect, device number 8 [ 331.558085][ T4779] fuse: Unknown parameter 'user_id00000000000000000000' [ 331.628247][ T4781] fuse: Bad value for 'fd' [ 332.546952][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 332.563156][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 332.935705][ T4805] syz.1.1339[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.935785][ T4805] syz.1.1339[4805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.196932][ T888] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 333.807034][ T888] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.817260][ T888] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.826332][ T888] usb 8-1: config 1 has no interface number 0 [ 333.833191][ T888] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.846466][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 333.855460][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 334.007079][ T888] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.016460][ T888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.025865][ T888] usb 8-1: Product: syz [ 334.030425][ T888] usb 8-1: Manufacturer: syz [ 334.035329][ T888] usb 8-1: SerialNumber: syz [ 334.077630][ T888] cdc_ncm 8-1:1.1: bind() failure [ 334.256555][ T4827] fuse: Bad value for 'fd' [ 334.588276][ T4831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 334.626965][ T350] Bluetooth: hci0: command 0x1001 tx timeout [ 334.633207][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 336.304999][ T350] usb 8-1: USB disconnect, device number 9 [ 336.978279][ T350] Bluetooth: hci0: command 0x1009 tx timeout [ 337.271664][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 337.944004][ T4870] overlayfs: './file1' not a directory [ 337.989120][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1359'. [ 337.998178][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1359'. [ 339.652296][ T4889] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1365'. [ 340.916257][ T4913] fuse: Unknown parameter '0x0000000000000005' [ 343.656985][ T2012] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 343.794100][ T4957] syz.1.1385[4957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.794190][ T4957] syz.1.1385[4957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.051455][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 344.576559][ T2012] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.597020][ T2012] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 344.605928][ T2012] usb 8-1: config 1 has no interface number 0 [ 344.616982][ T2012] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.797043][ T2012] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.810913][ T2012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.877270][ T2012] usb 8-1: Product: syz [ 344.885143][ T2012] usb 8-1: Manufacturer: syz [ 344.890084][ T2012] usb 8-1: SerialNumber: syz [ 344.916992][ T2012] usb 8-1: can't set config #1, error -71 [ 344.923924][ T2012] usb 8-1: USB disconnect, device number 10 [ 346.464861][ T5001] syz.7.1397[5001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.464952][ T5001] syz.7.1397[5001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.030742][ T5081] usb usb8: usbfs: process 5081 (syz.4.1422) did not claim interface 0 before use [ 351.740940][ T5096] fuse: Unknown parameter 'user00000000000000000000' [ 351.758521][ T5098] syz.1.1426[5098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.758604][ T5098] syz.1.1426[5098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.467939][ T5116] usb usb8: usbfs: process 5116 (syz.1.1434) did not claim interface 0 before use [ 353.867256][ T315] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 354.277071][ T315] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.312055][ T315] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 354.422640][ T315] usb 8-1: config 1 has no interface number 0 [ 354.466931][ T315] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.667622][ T5147] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1439'. [ 355.252009][ T315] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.261138][ T315] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.269422][ T315] usb 8-1: Product: syz [ 355.273665][ T315] usb 8-1: Manufacturer: syz [ 355.278664][ T315] usb 8-1: SerialNumber: syz [ 355.317397][ T315] cdc_ncm 8-1:1.1: bind() failure [ 355.387319][ T20] usb 8-1: USB disconnect, device number 11 [ 355.472449][ T5162] fuse: Unknown parameter 'user00000000000000000000' [ 356.158145][ T5171] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1447'. [ 358.620722][ T5203] fuse: Unknown parameter 'user00000000000000000000' [ 359.011848][ T5210] overlayfs: './file1' not a directory [ 359.030845][ T5212] usb usb8: usbfs: process 5212 (syz.3.1463) did not claim interface 0 before use [ 359.580151][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 359.662143][ T15] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 360.167092][ T15] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.719933][ T15] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.818201][ T15] usb 5-1: config 1 has no interface number 0 [ 360.824332][ T15] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.291492][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.300693][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.308913][ T15] usb 5-1: Product: syz [ 361.313092][ T15] usb 5-1: Manufacturer: syz [ 361.317899][ T15] usb 5-1: SerialNumber: syz [ 361.357467][ T15] cdc_ncm 5-1:1.1: bind() failure [ 361.407954][ T297] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 361.469836][ T5256] fuse: Unknown parameter 'user_i00000000000000000000' [ 361.837099][ T297] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.848206][ T297] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.859398][ T297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 361.866131][ T297] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 361.876553][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.898598][ T297] usb 2-1: config 0 descriptor?? [ 362.515481][ T297] hid-steam 0003:28DE:1102.0018: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 362.660569][ T15] usb 5-1: USB disconnect, device number 16 [ 362.884171][ T297] hid-steam 0003:28DE:1102.0019: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 363.138714][ T297] hid-steam 0003:28DE:1102.0018: Steam Controller 'XXXXXXXXXX' connected [ 363.165432][ T297] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0018/input/input20 [ 363.253678][ T297] usb 2-1: USB disconnect, device number 16 [ 363.414987][ T297] hid-steam 0003:28DE:1102.0018: Steam Controller 'XXXXXXXXXX' disconnected [ 363.480071][ T5275] fido_id[5275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 364.565982][ T5298] fuse: Unknown parameter 'user_i00000000000000000000' [ 365.589696][ T5319] incfs_lookup_dentry err:-14 [ 365.594651][ T5319] incfs: Can't find or create .incomplete dir in ./file0 [ 365.720467][ T24] audit: type=1400 audit(1758701989.120:322): avc: denied { remove_name } for pid=5318 comm="syz.7.1499" name=".index" dev="9p" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 365.721069][ T5319] incfs: mount failed -14 [ 365.748433][ T24] audit: type=1400 audit(1758701989.120:323): avc: denied { rmdir } for pid=5318 comm="syz.7.1499" name=".index" dev="9p" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 366.853498][ T25] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 367.084872][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 368.486783][ T5366] overlayfs: './file1' not a directory [ 368.535400][ T25] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 368.543275][ T25] usb 4-1: can't read configurations, error -71 [ 369.328269][ T5382] incfs_lookup_dentry err:-14 [ 369.336941][ T5382] incfs: Can't find or create .incomplete dir in ./file0 [ 369.351426][ T5382] incfs: mount failed -14 [ 370.517011][ T297] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 370.987718][ T297] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.021925][ T297] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.063183][ T15] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 371.071820][ T297] usb 8-1: config 0 interface 0 has no altsetting 0 [ 371.078826][ T297] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 371.088154][ T297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.102473][ T297] usb 8-1: config 0 descriptor?? [ 371.450618][ T15] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.476643][ T15] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 371.506772][ T15] usb 4-1: config 1 has no interface number 0 [ 371.518369][ T15] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.595368][ T297] hid-steam 0003:28DE:1102.001A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 371.619432][ T297] hid-steam 0003:28DE:1102.001B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.7-1/input0 [ 371.696970][ T297] hid-steam 0003:28DE:1102.001A: Steam Controller 'XXXXXXXXXX' connected [ 371.708988][ T297] input: Steam Controller as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1102.001A/input/input21 [ 371.756935][ T292] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 371.790876][ T5401] input: Steam Controller as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1102.001A/input/input22 [ 371.803749][ T54] usb 8-1: USB disconnect, device number 12 [ 371.810007][ T15] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.820155][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.830346][ T15] usb 4-1: Product: syz [ 371.834588][ T15] usb 4-1: Manufacturer: syz [ 371.840490][ T15] usb 4-1: SerialNumber: syz [ 371.852030][ T54] hid-steam 0003:28DE:1102.001A: Steam Controller 'XXXXXXXXXX' disconnected [ 371.887363][ T15] cdc_ncm 4-1:1.1: bind() failure [ 371.996947][ T292] usb 5-1: Using ep0 maxpacket: 16 [ 372.127055][ T292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.138109][ T292] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 372.147297][ T292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.156568][ T292] usb 5-1: config 0 descriptor?? [ 372.459304][ T5433] device wireguard0 entered promiscuous mode [ 372.717035][ T292] usbhid 5-1:0.0: can't add hid device: -71 [ 372.723422][ T292] usbhid: probe of 5-1:0.0 failed with error -71 [ 372.763591][ T292] usb 5-1: USB disconnect, device number 17 [ 372.776955][ T297] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 373.150901][ T292] usb 4-1: USB disconnect, device number 19 [ 373.159875][ T5447] overlayfs: './file1' not a directory [ 373.288632][ T297] usb 8-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 373.307541][ T297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.316600][ T297] usb 8-1: config 0 descriptor?? [ 373.587043][ T25] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 373.947010][ T25] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.966951][ T25] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.986930][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 373.997263][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 374.017001][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.034454][ T25] usb 5-1: config 0 descriptor?? [ 374.086785][ T297] usbhid 8-1:0.0: can't add hid device: -71 [ 374.095783][ T297] usbhid: probe of 8-1:0.0 failed with error -71 [ 374.105149][ T297] usb 8-1: USB disconnect, device number 13 [ 374.508463][ T25] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 374.523479][ T25] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0 [ 374.533172][ T25] hid-steam 0003:28DE:1102.001C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 374.557473][ T25] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 374.565079][ T25] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0 [ 374.588079][ T25] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 374.676963][ T25] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected [ 374.686432][ T25] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.001C/input/input23 [ 374.710855][ T54] usb 5-1: USB disconnect, device number 18 [ 374.720618][ T54] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected [ 374.734996][ T5478] fido_id[5478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 375.309823][ T5487] overlayfs: './file1' not a directory [ 375.316950][ T54] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 375.646904][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 375.767029][ T54] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.784475][ T54] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.917059][ T54] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 375.933339][ T54] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 375.958273][ T54] usb 4-1: Product: syz [ 375.971753][ T54] usb 4-1: Manufacturer: syz [ 376.027476][ T54] hub 4-1:4.0: USB hub found [ 376.296979][ T54] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 376.399918][ T54] usb 4-1: USB disconnect, device number 20 [ 377.411236][ T5531] incfs_lookup_dentry err:-14 [ 377.416058][ T5531] incfs: Can't find or create .incomplete dir in ./file0 [ 377.423784][ T5531] incfs: mount failed -14 [ 378.547460][ T5561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 378.730291][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 378.976919][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 379.126545][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 18: 157, using maximum allowed: 30 [ 379.138230][ T25] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.149263][ T25] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.159209][ T25] usb 6-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 157 [ 379.172286][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 379.178998][ T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 379.188438][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.197101][ T25] usb 6-1: config 0 descriptor?? [ 379.469981][ T24] audit: type=1400 audit(1758702002.870:324): avc: denied { bind } for pid=5552 comm="syz.5.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.566089][ T24] audit: type=1400 audit(1758702002.960:325): avc: denied { setopt } for pid=5552 comm="syz.5.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.766924][ T54] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 380.138538][ T54] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.149240][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 380.179234][ T54] usb 8-1: config 1 has no interface number 0 [ 380.185358][ T54] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.367014][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.376509][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.384666][ T54] usb 8-1: Product: syz [ 380.389030][ T54] usb 8-1: Manufacturer: syz [ 380.393760][ T54] usb 8-1: SerialNumber: syz [ 380.437373][ T54] cdc_ncm 8-1:1.1: bind() failure [ 381.082473][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 381.090387][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 381.098106][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 381.105583][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 381.525014][ T315] usb 6-1: USB disconnect, device number 13 [ 382.348992][ T25] usb 8-1: USB disconnect, device number 14 [ 382.442641][ T321] Bluetooth: hci0: Frame reassembly failed (-84) [ 382.900002][ T25] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 383.147068][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 383.267257][ T25] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.278620][ T25] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.407255][ T25] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 383.416955][ T25] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 383.425556][ T25] usb 8-1: Product: syz [ 383.431839][ T25] usb 8-1: Manufacturer: syz [ 383.491274][ T25] hub 8-1:4.0: USB hub found [ 383.640359][ T5641] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1599'. [ 383.718344][ T5625] fuse: Invalid rootmode [ 383.919797][ T25] hub 8-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 384.247061][ T315] usb 8-1: USB disconnect, device number 15 [ 384.331653][ T5655] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1602'. [ 384.466973][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 384.473327][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 385.050688][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1606'. [ 386.250313][ T5688] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1612'. [ 386.480573][ T24] audit: type=1400 audit(1758702009.880:326): avc: denied { block_suspend } for pid=5695 comm="syz.5.1616" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 386.564965][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 386.572279][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 387.007021][ T315] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 387.486271][ T5714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1621'. [ 388.076974][ T315] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.087215][ T315] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.186616][ T315] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 388.206911][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.214948][ T315] usb 6-1: SerialNumber: syz [ 388.457911][ T5696] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1616'. [ 388.497627][ T315] usb 6-1: 0:2 : does not exist [ 388.508083][ T315] usb 6-1: USB disconnect, device number 14 [ 388.626942][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 388.731109][ T4846] udevd[4846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 389.145903][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1625'. [ 392.286959][ T54] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 392.687024][ T54] usb 2-1: unable to read config index 0 descriptor/all [ 392.694367][ T54] usb 2-1: can't read configurations, error -71 [ 394.517448][ T5791] overlayfs: './file1' not a directory [ 396.175757][ T15] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 396.693719][ T446] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 396.810890][ T15] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.825444][ T15] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 396.838720][ T15] usb 6-1: config 1 has no interface number 0 [ 396.847022][ T15] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.571905][ T15] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.581159][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.589767][ T15] usb 6-1: Product: syz [ 397.594104][ T15] usb 6-1: Manufacturer: syz [ 397.598988][ T15] usb 6-1: SerialNumber: syz [ 397.627024][ T15] usb 6-1: can't set config #1, error -71 [ 397.636635][ T15] usb 6-1: USB disconnect, device number 15 [ 397.647054][ T446] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.657876][ T446] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 397.666809][ T446] usb 8-1: config 1 has no interface number 0 [ 397.673400][ T446] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.736245][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 397.745968][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 397.775566][ T5836] overlayfs: './file1' not a directory [ 397.781290][ T446] usb 8-1: string descriptor 0 read error: -71 [ 397.787784][ T446] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.797356][ T446] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.827025][ T446] usb 8-1: can't set config #1, error -71 [ 397.837413][ T446] usb 8-1: USB disconnect, device number 16 [ 399.832801][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 399.893467][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 401.086975][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 401.807324][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.820776][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 401.831159][ T25] usb 2-1: config 1 has no interface number 0 [ 401.838602][ T25] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.004275][ T292] Bluetooth: hci0: command 0x1009 tx timeout [ 402.015310][ T5888] usb usb8: usbfs: process 5888 (syz.7.1676) did not claim interface 0 before use [ 402.567240][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.581208][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.590519][ T25] usb 2-1: Product: syz [ 402.594847][ T25] usb 2-1: Manufacturer: syz [ 402.625892][ T25] usb 2-1: SerialNumber: syz [ 403.814708][ T25] usb 2-1: can't set config #1, error -71 [ 403.821220][ T25] usb 2-1: USB disconnect, device number 19 [ 405.473484][ T5928] overlayfs: './file1' not a directory [ 406.466914][ T15] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 407.909580][ T25] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 408.236938][ T15] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.247093][ T15] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.327029][ T15] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 408.336471][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.344948][ T15] usb 5-1: SerialNumber: syz [ 408.406979][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.417433][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 408.426492][ T25] usb 6-1: config 1 has no interface number 0 [ 408.433259][ T25] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.535186][ T5965] 9pnet: Insufficient options for proto=fd [ 408.541500][ T25] usb 6-1: string descriptor 0 read error: -71 [ 408.548851][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.559557][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.606679][ T25] usb 6-1: can't set config #1, error -71 [ 408.615814][ T25] usb 6-1: USB disconnect, device number 16 [ 409.307630][ T15] usb 5-1: 0:2 : does not exist [ 409.328389][ T15] usb 5-1: USB disconnect, device number 19 [ 410.808019][ T4846] udevd[4846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 411.020045][ T315] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 411.407051][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 411.415423][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 411.536960][ T315] usb 4-1: Using ep0 maxpacket: 32 [ 412.067241][ T315] usb 4-1: too many endpoints for config 0 interface 0 altsetting 18: 157, using maximum allowed: 30 [ 412.078300][ T315] usb 4-1: config 0 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.127425][ T315] usb 4-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.222919][ T315] usb 4-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 157 [ 412.236242][ T315] usb 4-1: config 0 interface 0 has no altsetting 0 [ 412.243042][ T315] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 412.252293][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.405026][ T315] usb 4-1: config 0 descriptor?? [ 413.586475][ T25] usb 4-1: USB disconnect, device number 21 [ 414.371250][ T6048] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1721'. [ 414.645530][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1723'. [ 415.402506][ T54] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 416.795773][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 417.030227][ T54] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 417.518953][ T54] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 417.528162][ T54] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 417.536687][ T54] usb 2-1: Product: syz [ 417.541488][ T54] usb 2-1: Manufacturer: syz [ 417.587543][ T54] hub 2-1:4.0: bad descriptor, ignoring hub [ 417.594401][ T54] hub: probe of 2-1:4.0 failed with error -5 [ 417.627202][ T54] usb 2-1: USB disconnect, device number 20 [ 417.638588][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 420.596911][ T20] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 420.682128][ T6133] device wireguard0 entered promiscuous mode [ 420.876965][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 420.996970][ T292] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 421.004632][ T20] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 421.152881][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 421.162533][ T20] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 421.171094][ T20] usb 4-1: Product: syz [ 421.175245][ T20] usb 4-1: Manufacturer: syz [ 421.219335][ T20] hub 4-1:4.0: bad descriptor, ignoring hub [ 421.225683][ T20] hub: probe of 4-1:4.0 failed with error -5 [ 421.407320][ T292] usb 8-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 421.473778][ T6126] fuse: Invalid rootmode [ 421.489520][ T292] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.537671][ T292] usb 8-1: config 0 descriptor?? [ 421.878644][ T446] usb 4-1: USB disconnect, device number 22 [ 422.506982][ T292] usbhid 8-1:0.0: can't add hid device: -71 [ 422.513013][ T292] usbhid: probe of 8-1:0.0 failed with error -71 [ 422.535913][ T292] usb 8-1: USB disconnect, device number 17 [ 425.928128][ T292] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 426.228787][ T292] usb 5-1: Using ep0 maxpacket: 32 [ 426.268898][ T6204] device wireguard0 entered promiscuous mode [ 426.527035][ T292] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 426.638795][ T54] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 426.666807][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1772'. [ 426.752326][ T292] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 426.762158][ T292] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 426.770951][ T292] usb 5-1: Product: syz [ 426.775225][ T292] usb 5-1: Manufacturer: syz [ 426.833137][ T292] hub 5-1:4.0: bad descriptor, ignoring hub [ 426.839816][ T292] hub: probe of 5-1:4.0 failed with error -5 [ 427.053707][ T6196] fuse: Invalid rootmode [ 427.227036][ T292] usb 5-1: USB disconnect, device number 20 [ 427.236987][ T54] usb 8-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 427.246123][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.255642][ T54] usb 8-1: config 0 descriptor?? [ 428.233475][ T54] usbhid 8-1:0.0: can't add hid device: -71 [ 428.240587][ T54] usbhid: probe of 8-1:0.0 failed with error -71 [ 428.255276][ T54] usb 8-1: USB disconnect, device number 18 [ 429.793019][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 430.056974][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 430.346941][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 430.487145][ T25] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 430.498587][ T25] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.972705][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 430.982310][ T25] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 430.991193][ T25] usb 5-1: Product: syz [ 430.995560][ T25] usb 5-1: Manufacturer: syz [ 431.126813][ T25] hub 5-1:4.0: bad descriptor, ignoring hub [ 431.133049][ T25] hub: probe of 5-1:4.0 failed with error -5 [ 431.140978][ T25] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 431.386081][ T6275] fuse: Invalid rootmode [ 431.408030][ T319] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.513179][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 431.522373][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 431.531948][ T54] usb 5-1: USB disconnect, device number 21 [ 432.626946][ T54] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 433.427031][ T297] Bluetooth: hci0: command 0x1003 tx timeout [ 433.433691][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 433.537015][ T54] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.548445][ T54] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.558733][ T54] usb 4-1: config 0 interface 0 has no altsetting 0 [ 433.565453][ T54] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 433.575056][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.628361][ T54] usb 4-1: config 0 descriptor?? [ 433.637667][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1809'. [ 434.656812][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 434.864772][ T54] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 434.872255][ T54] hid-steam 0003:28DE:1102.001E: unknown main item tag 0x0 [ 434.881465][ T54] hid-steam 0003:28DE:1102.001E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 434.894170][ T54] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 434.902040][ T54] hid-steam 0003:28DE:1102.001F: unknown main item tag 0x0 [ 434.911237][ T54] hid-steam 0003:28DE:1102.001F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 434.986884][ T54] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' connected [ 434.999193][ T54] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.001E/input/input24 [ 435.041137][ T54] usb 4-1: USB disconnect, device number 23 [ 435.055978][ T54] hid-steam 0003:28DE:1102.001E: Steam Controller 'XXXXXXXXXX' disconnected [ 435.609003][ T297] Bluetooth: hci0: command 0x1001 tx timeout [ 435.623461][ T3175] Bluetooth: hci0: sending frame failed (-49) [ 436.138371][ T6387] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1821'. [ 437.679767][ T297] Bluetooth: hci0: command 0x1009 tx timeout [ 438.183686][ T6432] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1835'. [ 440.256987][ T297] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 440.626967][ T297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.644253][ T297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 440.653647][ T297] usb 4-1: config 1 has no interface number 0 [ 440.660141][ T297] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.957165][ T297] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.966696][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.986190][ T297] usb 4-1: Product: syz [ 440.990760][ T297] usb 4-1: Manufacturer: syz [ 440.995451][ T297] usb 4-1: SerialNumber: syz [ 441.077349][ T297] cdc_ncm 4-1:1.1: bind() failure [ 442.633279][ T6492] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1852'. [ 442.999747][ T54] usb 4-1: USB disconnect, device number 24 [ 444.194965][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 444.204206][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 445.247095][ T6551] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1867'. [ 445.866924][ T15] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 446.966975][ T15] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.967772][ T20] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 446.985534][ T15] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 446.994942][ T15] usb 2-1: config 1 has no interface number 0 [ 447.001219][ T15] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.167034][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.176613][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.235749][ T15] usb 2-1: Product: syz [ 447.240138][ T15] usb 2-1: Manufacturer: syz [ 447.249077][ T15] usb 2-1: SerialNumber: syz [ 447.286889][ T20] usb 8-1: Using ep0 maxpacket: 32 [ 447.437201][ T20] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 447.476402][ T20] usb 8-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.581646][ T15] cdc_ncm 2-1:1.1: bind() failure [ 447.737146][ T20] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 447.746986][ T20] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 447.774401][ T20] usb 8-1: Product: syz [ 447.778897][ T20] usb 8-1: Manufacturer: syz [ 447.850039][ T20] hub 8-1:4.0: bad descriptor, ignoring hub [ 447.856643][ T20] hub: probe of 8-1:4.0 failed with error -5 [ 447.868199][ T20] usbhid 8-1:4.0: couldn't find an input interrupt endpoint [ 448.105342][ T6575] fuse: Invalid rootmode [ 448.246988][ T20] usb 8-1: USB disconnect, device number 19 [ 448.614023][ T15] usb 2-1: USB disconnect, device number 21 [ 449.463673][ T6621] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1886'. [ 452.071955][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 452.636267][ T15] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 453.107120][ T15] usb 8-1: Using ep0 maxpacket: 32 [ 453.427042][ T15] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 453.437745][ T15] usb 8-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.673235][ T15] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 454.682738][ T15] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 454.691517][ T15] usb 8-1: Product: syz [ 454.695886][ T15] usb 8-1: Manufacturer: syz [ 455.202647][ T15] usb 8-1: can't set config #4, error -71 [ 455.413469][ T15] usb 8-1: USB disconnect, device number 20 [ 456.227023][ T297] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 456.456972][ T20] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 456.607504][ T297] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.659088][ T297] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.755532][ T297] usb 4-1: config 0 interface 0 has no altsetting 0 [ 456.850072][ T297] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 456.860963][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.890254][ T297] usb 4-1: config 0 descriptor?? [ 457.227317][ T20] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.245916][ T20] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.255918][ T20] usb 8-1: config 1 has no interface number 0 [ 457.263098][ T20] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.678052][ T297] hid-steam 0003:28DE:1102.0020: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 457.690479][ T297] hid-steam 0003:28DE:1102.0021: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 457.702200][ T20] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.711531][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.720065][ T20] usb 8-1: Product: syz [ 457.724380][ T20] usb 8-1: Manufacturer: syz [ 457.729500][ T20] usb 8-1: SerialNumber: syz [ 457.777001][ T297] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' connected [ 457.832657][ T297] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0020/input/input25 [ 457.898947][ T20] cdc_ncm 8-1:1.1: bind() failure [ 457.969349][ T6704] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0020/input/input26 [ 457.994746][ T20] usb 4-1: USB disconnect, device number 25 [ 458.005451][ T20] hid-steam 0003:28DE:1102.0020: Steam Controller 'XXXXXXXXXX' disconnected [ 458.037480][ T15] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 458.276961][ T15] usb 5-1: Using ep0 maxpacket: 32 [ 458.397038][ T15] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 458.407559][ T15] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.557016][ T15] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 458.566484][ T15] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 458.575031][ T15] usb 5-1: Product: syz [ 458.579484][ T15] usb 5-1: Manufacturer: syz [ 459.057969][ T15] hub 5-1:4.0: bad descriptor, ignoring hub [ 459.064077][ T15] hub: probe of 5-1:4.0 failed with error -5 [ 459.070435][ T15] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 459.123365][ T20] usb 8-1: USB disconnect, device number 21 [ 459.243948][ T6757] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1924'. [ 459.260706][ T6734] fuse: Invalid rootmode [ 459.408664][ T15] usb 5-1: USB disconnect, device number 22 [ 459.515083][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 463.613848][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1944'. [ 464.464081][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 464.531341][ T6846] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1950'. [ 465.699548][ T6866] 9pnet: Insufficient options for proto=fd [ 465.879108][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1961'. [ 467.311400][ T24] audit: type=1400 audit(1758702090.710:327): avc: denied { bind } for pid=6874 comm="syz.1.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.330993][ T24] audit: type=1400 audit(1758702090.710:328): avc: denied { name_bind } for pid=6874 comm="syz.1.1963" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 467.565920][ T24] audit: type=1400 audit(1758702090.710:329): avc: denied { node_bind } for pid=6874 comm="syz.1.1963" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 467.737650][ T6899] 9pnet: Insufficient options for proto=fd [ 468.637337][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1973'. [ 468.810096][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1975'. [ 470.533800][ T6938] 9pnet: Insufficient options for proto=fd [ 472.966943][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 474.440687][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 474.794877][ T6992] 9pnet: Insufficient options for proto=fd [ 476.456870][ T15] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 476.696969][ T15] usb 8-1: Using ep0 maxpacket: 32 [ 476.816947][ T15] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.827926][ T15] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.957102][ T15] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 476.967101][ T15] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 476.975558][ T15] usb 8-1: Product: syz [ 476.980125][ T15] usb 8-1: Manufacturer: syz [ 477.928652][ T7028] 9pnet: Insufficient options for proto=fd [ 477.957632][ T15] hub 8-1:4.0: USB hub found [ 478.167617][ T24] audit: type=1400 audit(1758702101.570:330): avc: denied { mount } for pid=7001 comm="syz.7.1999" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 478.348930][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 478.596965][ T15] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 478.637584][ T15] usb 8-1: USB disconnect, device number 22 [ 478.856950][ T25] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 478.969329][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2013'. [ 479.266931][ T25] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 479.289350][ T25] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.318646][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 479.339770][ T25] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 479.366871][ T297] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 479.379641][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.405302][ T25] usb 6-1: config 0 descriptor?? [ 479.747036][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 479.758433][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.768255][ T297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 479.774899][ T297] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 479.783949][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.792766][ T297] usb 5-1: config 0 descriptor?? [ 479.908667][ T25] hid-steam 0003:28DE:1102.0022: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 479.922138][ T25] hid-steam 0003:28DE:1102.0023: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 479.937217][ T15] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 479.996920][ T25] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' connected [ 480.006324][ T25] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.0022/input/input27 [ 480.123705][ T25] usb 6-1: USB disconnect, device number 17 [ 480.132611][ T25] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' disconnected [ 480.176928][ T15] usb 4-1: Using ep0 maxpacket: 32 [ 480.297001][ T15] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.308340][ T15] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.346991][ T297] usbhid 5-1:0.0: can't add hid device: -71 [ 480.353325][ T297] usbhid: probe of 5-1:0.0 failed with error -71 [ 480.360861][ T297] usb 5-1: USB disconnect, device number 24 [ 480.457014][ T15] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 480.471337][ T15] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 480.479928][ T15] usb 4-1: Product: syz [ 480.484093][ T15] usb 4-1: Manufacturer: syz [ 480.527631][ T15] hub 4-1:4.0: USB hub found [ 480.731239][ T7060] fuse: Invalid rootmode [ 480.753544][ T7072] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2020'. [ 480.806964][ T15] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 480.826742][ T7074] 9pnet: Insufficient options for proto=fd [ 480.847711][ T15] usb 4-1: USB disconnect, device number 26 [ 482.772043][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 482.781216][ T15] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 483.147283][ T15] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.197744][ T15] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.287808][ T15] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 483.317810][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.325875][ T15] usb 2-1: SerialNumber: syz [ 483.647528][ T15] usb 2-1: 0:2 : does not exist [ 483.655128][ T15] usb 2-1: USB disconnect, device number 22 [ 483.783640][ T7115] 9pnet: Insufficient options for proto=fd [ 483.906328][ T7033] udevd[7033]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 485.161643][ T7141] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2042'. [ 485.176919][ T297] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 485.186961][ T15] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 485.567268][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.579031][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.590747][ T297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.597595][ T297] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 485.607314][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.632905][ T15] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 485.641106][ T297] usb 5-1: config 0 descriptor?? [ 485.656797][ T15] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.747035][ T15] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.756349][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 485.764974][ T15] usb 6-1: SerialNumber: syz [ 486.071264][ T15] usb 6-1: 0:2 : does not exist [ 486.076774][ T888] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 486.088174][ T15] usb 6-1: USB disconnect, device number 18 [ 486.148379][ T297] hid-steam 0003:28DE:1102.0024: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 486.160750][ T297] hid-steam 0003:28DE:1102.0025: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 486.526236][ T297] hid-steam 0003:28DE:1102.0024: Steam Controller 'XXXXXXXXXX' connected [ 486.535659][ T297] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0024/input/input28 [ 486.549977][ T297] usb 5-1: USB disconnect, device number 25 [ 486.558418][ T297] hid-steam 0003:28DE:1102.0024: Steam Controller 'XXXXXXXXXX' disconnected [ 486.570501][ T7156] fido_id[7156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 486.585986][ T6953] udevd[6953]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 486.606857][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 486.711803][ T24] audit: type=1326 audit(1758702110.110:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b22bec9 code=0x7ffc0000 [ 486.735403][ T888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.739905][ T24] audit: type=1326 audit(1758702110.110:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b22bec9 code=0x7ffc0000 [ 486.770062][ T888] usb 4-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 486.770084][ T888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.792768][ T888] usb 4-1: config 0 descriptor?? [ 486.798281][ T24] audit: type=1326 audit(1758702110.110:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fcf6b22bec9 code=0x7ffc0000 [ 486.822434][ T24] audit: type=1326 audit(1758702110.110:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b22bec9 code=0x7ffc0000 [ 486.846350][ T24] audit: type=1326 audit(1758702110.110:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.5.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b22bec9 code=0x7ffc0000 [ 487.943082][ T297] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 488.587483][ T297] usb 8-1: Using ep0 maxpacket: 32 [ 488.717027][ T297] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.738056][ T297] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.793128][ T888] usbhid 4-1:0.0: can't add hid device: -71 [ 488.799446][ T888] usbhid: probe of 4-1:0.0 failed with error -71 [ 488.810067][ T888] usb 4-1: USB disconnect, device number 27 [ 488.897128][ T297] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 488.938073][ T297] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 488.946794][ T297] usb 8-1: Product: syz [ 488.958010][ T297] usb 8-1: Manufacturer: syz [ 489.008421][ T297] hub 8-1:4.0: USB hub found [ 489.125214][ T7191] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2056'. [ 489.212322][ T7168] fuse: Invalid rootmode [ 489.347031][ T297] hub 8-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 489.366957][ T15] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 489.446939][ T888] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 489.737014][ T15] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.747455][ T15] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.756393][ T15] usb 2-1: config 1 has no interface number 0 [ 489.763372][ T15] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.826909][ T888] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 489.838446][ T888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.937044][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.946426][ T888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 489.955505][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.244241][ T888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 490.252565][ T15] usb 2-1: Product: syz [ 490.256740][ T15] usb 2-1: Manufacturer: syz [ 490.261554][ T888] usb 4-1: SerialNumber: syz [ 490.266999][ T15] usb 2-1: SerialNumber: syz [ 490.307774][ T15] cdc_ncm 2-1:1.1: bind() failure [ 490.509271][ T15] usb 2-1: USB disconnect, device number 23 [ 490.548165][ T888] usb 4-1: 0:2 : does not exist [ 490.554407][ T888] usb 4-1: USB disconnect, device number 28 [ 490.670089][ T7223] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2066'. [ 490.707252][ T446] usb 8-1: USB disconnect, device number 23 [ 491.038530][ T7229] incfs: Can't find or create .index dir in ./file0 [ 491.045392][ T7229] incfs: mount failed -14 [ 491.316985][ T7238] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2072'. [ 491.866897][ T888] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 492.106924][ T888] usb 8-1: Using ep0 maxpacket: 32 [ 492.227048][ T888] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.238119][ T888] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.356928][ T446] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 492.367021][ T888] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 492.376284][ T888] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 492.384751][ T888] usb 8-1: Product: syz [ 492.389015][ T888] usb 8-1: Manufacturer: syz [ 492.427610][ T888] hub 8-1:4.0: USB hub found [ 492.446975][ T297] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 492.596937][ T446] usb 2-1: Using ep0 maxpacket: 16 [ 492.631570][ T7243] fuse: Invalid rootmode [ 492.717035][ T888] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 492.725268][ T446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.746274][ T446] usb 2-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 492.755744][ T446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.767275][ T888] usb 8-1: USB disconnect, device number 24 [ 492.774232][ T446] usb 2-1: config 0 descriptor?? [ 492.816989][ T297] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 492.828458][ T297] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.838494][ T297] usb 4-1: config 0 interface 0 has no altsetting 0 [ 492.845359][ T297] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 492.854636][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.890097][ T297] usb 4-1: config 0 descriptor?? [ 493.223910][ T7268] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2082'. [ 493.350569][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 493.381925][ T297] hid-steam 0003:28DE:1102.0026: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 493.433999][ T297] hid-steam 0003:28DE:1102.0027: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 493.523034][ T297] hid-steam 0003:28DE:1102.0026: Steam Controller 'XXXXXXXXXX' connected [ 493.536041][ T297] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0026/input/input29 [ 493.556931][ T446] usbhid 2-1:0.0: can't add hid device: -71 [ 493.565037][ T446] usbhid: probe of 2-1:0.0 failed with error -71 [ 493.585616][ T446] usb 2-1: USB disconnect, device number 24 [ 493.603458][ T7248] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0026/input/input30 [ 493.616648][ T888] usb 4-1: USB disconnect, device number 29 [ 493.626490][ T888] hid-steam 0003:28DE:1102.0026: Steam Controller 'XXXXXXXXXX' disconnected [ 493.766969][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.777486][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 493.786575][ T25] usb 6-1: config 1 has no interface number 0 [ 493.792800][ T25] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.967028][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.976151][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.984188][ T25] usb 6-1: Product: syz [ 493.988439][ T25] usb 6-1: Manufacturer: syz [ 493.993036][ T25] usb 6-1: SerialNumber: syz [ 494.049918][ T25] cdc_ncm 6-1:1.1: bind() failure [ 495.019024][ T7285] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2088'. [ 495.119910][ T297] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 495.366951][ T297] usb 8-1: Using ep0 maxpacket: 16 [ 495.487059][ T297] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.498146][ T297] usb 8-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 495.507434][ T297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.516004][ T297] usb 8-1: config 0 descriptor?? [ 496.139908][ T20] usb 6-1: USB disconnect, device number 19 [ 496.176961][ T7302] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2094'. [ 496.232835][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 496.437000][ T297] usbhid 8-1:0.0: can't add hid device: -71 [ 496.443473][ T297] usbhid: probe of 8-1:0.0 failed with error -71 [ 496.476940][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 496.500990][ T297] usb 8-1: USB disconnect, device number 25 [ 496.645383][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.665719][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.753957][ T7304] device wireguard0 entered promiscuous mode [ 496.847174][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 497.188961][ T25] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 497.253563][ T25] usb 4-1: Product: syz [ 497.330082][ T25] usb 4-1: Manufacturer: syz [ 498.517113][ T888] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 498.593924][ T25] hub 4-1:4.0: USB hub found [ 498.708155][ T7299] fuse: Invalid rootmode [ 498.814445][ T7331] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2101'. [ 498.877410][ T25] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 499.127037][ T888] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 499.136174][ T888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.144849][ T888] usb 2-1: config 0 descriptor?? [ 499.688889][ T888] usbhid 2-1:0.0: can't add hid device: -71 [ 499.695055][ T888] usbhid: probe of 2-1:0.0 failed with error -71 [ 499.705366][ T888] usb 2-1: USB disconnect, device number 25 [ 500.863892][ T446] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 501.176635][ T25] usb 4-1: USB disconnect, device number 30 [ 501.910302][ T446] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.921735][ T446] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 501.932761][ T446] usb 8-1: config 1 has no interface number 0 [ 501.941033][ T446] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.946883][ T25] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 502.191584][ T7365] device wireguard0 entered promiscuous mode [ 502.411668][ T25] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.429873][ T25] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.440205][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 502.447486][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 502.456690][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.487075][ T20] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 502.542032][ T25] usb 5-1: config 0 descriptor?? [ 502.577063][ T297] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 502.726937][ T446] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.736345][ T446] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.756954][ T446] usb 8-1: can't set config #1, error -71 [ 502.765085][ T446] usb 8-1: USB disconnect, device number 26 [ 502.876997][ T20] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.887345][ T20] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.947053][ T297] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 502.956218][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.965269][ T297] usb 2-1: config 0 descriptor?? [ 502.970445][ T20] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 502.979932][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.987951][ T20] usb 6-1: SerialNumber: syz [ 503.038191][ T25] hid-steam 0003:28DE:1102.0028: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 503.050359][ T25] hid-steam 0003:28DE:1102.0029: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 503.126910][ T25] hid-steam 0003:28DE:1102.0028: Steam Controller 'XXXXXXXXXX' connected [ 503.136070][ T25] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0028/input/input31 [ 503.268566][ T20] usb 6-1: 0:2 : does not exist [ 503.278154][ T20] usb 6-1: USB disconnect, device number 20 [ 503.311330][ T7361] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0028/input/input32 [ 503.326413][ T888] usb 5-1: USB disconnect, device number 26 [ 503.341142][ T888] hid-steam 0003:28DE:1102.0028: Steam Controller 'XXXXXXXXXX' disconnected [ 503.353338][ T7387] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2117'. [ 503.717080][ T297] usbhid 2-1:0.0: can't add hid device: -71 [ 503.723093][ T297] usbhid: probe of 2-1:0.0 failed with error -71 [ 503.730490][ T297] usb 2-1: USB disconnect, device number 26 [ 503.749071][ T7391] incfs_lookup_dentry err:-14 [ 503.753782][ T7391] incfs: Can't find or create .incomplete dir in ./file0 [ 503.761065][ T7391] incfs: mount failed -14 [ 504.934164][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2127'. [ 504.949112][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'. [ 506.486874][ T888] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 506.569710][ T7432] device wireguard0 entered promiscuous mode [ 506.726884][ T888] usb 5-1: Using ep0 maxpacket: 32 [ 506.736985][ T297] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 506.846973][ T888] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.847094][ T20] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 506.858218][ T888] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.896979][ T25] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 506.987150][ T888] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 506.996655][ T888] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 507.005582][ T888] usb 5-1: Product: syz [ 507.009816][ T888] usb 5-1: Manufacturer: syz [ 507.097013][ T20] usb 6-1: Using ep0 maxpacket: 32 [ 507.117141][ T297] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.144071][ T297] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.155055][ T297] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.162575][ T297] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 507.172535][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.201601][ T297] usb 4-1: config 0 descriptor?? [ 507.217812][ T20] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.223131][ T888] hub 5-1:4.0: USB hub found [ 507.234324][ T20] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.267042][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 507.276150][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.285005][ T25] usb 2-1: config 0 descriptor?? [ 507.306383][ T7431] fuse: Invalid rootmode [ 507.356959][ T20] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 507.366339][ T20] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 507.374973][ T20] usb 6-1: Product: syz [ 507.379198][ T20] usb 6-1: Manufacturer: syz [ 507.386971][ T888] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 507.417717][ T20] hub 6-1:4.0: USB hub found [ 507.418103][ T888] usb 5-1: USB disconnect, device number 27 [ 507.621364][ T7445] fuse: Invalid rootmode [ 507.687885][ T297] hid-steam 0003:28DE:1102.002A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 507.700458][ T297] hid-steam 0003:28DE:1102.002B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 507.717034][ T20] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 507.796053][ T297] hid-steam 0003:28DE:1102.002A: Steam Controller 'XXXXXXXXXX' connected [ 507.805763][ T297] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.002A/input/input33 [ 507.837051][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 507.843059][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 507.857695][ T25] usb 2-1: USB disconnect, device number 27 [ 507.913314][ T7433] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.002A/input/input34 [ 507.932979][ T888] usb 4-1: USB disconnect, device number 31 [ 507.948172][ T7456] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2137'. [ 507.960828][ T888] hid-steam 0003:28DE:1102.002A: Steam Controller 'XXXXXXXXXX' disconnected [ 508.664081][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 509.136903][ T888] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 509.358669][ T7479] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2144'. [ 509.611082][ T7483] incfs_lookup_dentry err:-14 [ 509.616125][ T7483] incfs: Can't find or create .incomplete dir in ./file0 [ 509.623663][ T7483] incfs: mount failed -14 [ 509.746960][ T888] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.757526][ T888] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 509.766538][ T888] usb 8-1: config 1 has no interface number 0 [ 509.773047][ T888] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.779655][ T297] usb 6-1: USB disconnect, device number 21 [ 510.332632][ T888] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.374192][ T888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.398945][ T888] usb 8-1: Product: syz [ 510.404207][ T888] usb 8-1: Manufacturer: syz [ 510.418305][ T888] usb 8-1: SerialNumber: syz [ 510.487702][ T888] cdc_ncm 8-1:1.1: bind() failure [ 510.686612][ T7507] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2152'. [ 511.076920][ T297] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 511.447118][ T297] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 511.462040][ T297] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.476754][ T297] usb 6-1: config 0 interface 0 has no altsetting 0 [ 511.483673][ T297] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 511.490624][ T7520] incfs_lookup_dentry err:-14 [ 511.498442][ T7520] incfs: Can't find or create .incomplete dir in ./file0 [ 511.505870][ T7520] incfs: mount failed -14 [ 511.516891][ T297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.537088][ T297] usb 6-1: config 0 descriptor?? [ 511.775515][ T25] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 512.184749][ T888] usb 8-1: USB disconnect, device number 27 [ 513.304098][ T297] hid-steam 0003:28DE:1102.002C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 513.385010][ T297] hid-steam 0003:28DE:1102.002D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 513.757484][ T297] hid-steam 0003:28DE:1102.002C: Steam Controller 'XXXXXXXXXX' connected [ 513.767257][ T7509] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.002C/input/input35 [ 513.797032][ T297] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.002C/input/input36 [ 513.857050][ T25] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.933479][ T297] usb 6-1: USB disconnect, device number 22 [ 513.940182][ T25] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.950596][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 513.957356][ T25] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 513.963304][ T7545] fido_id[7545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 513.966390][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.969896][ T25] usb 2-1: config 0 descriptor?? [ 513.994900][ T297] hid-steam 0003:28DE:1102.002C: Steam Controller 'XXXXXXXXXX' disconnected [ 514.209776][ T7033] ================================================================== [ 514.217972][ T7033] BUG: KASAN: use-after-free in mutex_lock+0x7f/0xe0 [ 514.224898][ T7033] Write of size 8 at addr ffff88812751b040 by task udevd/7033 [ 514.232348][ T7033] [ 514.234672][ T7033] CPU: 1 PID: 7033 Comm: udevd Not tainted syzkaller #0 [ 514.241693][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 514.251913][ T7033] Call Trace: [ 514.255202][ T7033] __dump_stack+0x21/0x24 [ 514.259524][ T7033] dump_stack_lvl+0x169/0x1d8 [ 514.264192][ T7033] ? show_regs_print_info+0x18/0x18 [ 514.269378][ T7033] ? thaw_kernel_threads+0x220/0x220 [ 514.274677][ T7033] ? __kasan_kmalloc+0xec/0x110 [ 514.279524][ T7033] ? __kasan_kmalloc+0xda/0x110 [ 514.284552][ T7033] print_address_description+0x7f/0x2c0 [ 514.290298][ T7033] ? mutex_lock+0x7f/0xe0 [ 514.294628][ T7033] kasan_report+0xe2/0x130 [ 514.299046][ T7033] ? mutex_lock+0x7f/0xe0 [ 514.303716][ T7033] kasan_check_range+0x280/0x290 [ 514.308754][ T7033] __kasan_check_write+0x14/0x20 [ 514.313683][ T7033] mutex_lock+0x7f/0xe0 [ 514.317826][ T7033] ? mutex_trylock+0xa0/0xa0 [ 514.322408][ T7033] steam_input_open+0x91/0x160 [ 514.327284][ T7033] ? steam_input_register+0xa70/0xa70 [ 514.332650][ T7033] ? __kasan_check_write+0x14/0x20 [ 514.337848][ T7033] ? mutex_lock_interruptible+0x8c/0xe0 [ 514.343572][ T7033] input_open_device+0x14c/0x2a0 [ 514.348583][ T7033] evdev_open+0x4d2/0x5e0 [ 514.353078][ T7033] chrdev_open+0x597/0x670 [ 514.357769][ T7033] ? cd_forget+0x170/0x170 [ 514.362277][ T7033] ? cd_forget+0x170/0x170 [ 514.366681][ T7033] do_dentry_open+0x793/0x1090 [ 514.371433][ T7033] vfs_open+0x73/0x80 [ 514.375405][ T7033] path_openat+0x27ad/0x3160 [ 514.380005][ T7033] ? hashlen_string+0x120/0x120 [ 514.385291][ T7033] ? __kasan_slab_alloc+0xcf/0xf0 [ 514.390394][ T7033] ? kmem_cache_alloc+0x165/0x2e0 [ 514.395405][ T7033] ? getname+0x19/0x20 [ 514.399567][ T7033] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 514.405722][ T7033] ? do_filp_open+0x3e0/0x3e0 [ 514.410386][ T7033] ? expand_files+0xde/0x8e0 [ 514.414963][ T7033] do_filp_open+0x1b3/0x3e0 [ 514.419551][ T7033] ? vfs_tmpfile+0x2c0/0x2c0 [ 514.424221][ T7033] ? get_unused_fd_flags+0x92/0xa0 [ 514.429407][ T7033] do_sys_openat2+0x14c/0x6d0 [ 514.434182][ T7033] ? do_sys_open+0xe0/0xe0 [ 514.438621][ T7033] ? ____fput+0x15/0x20 [ 514.442845][ T7033] __x64_sys_openat+0x136/0x160 [ 514.447710][ T7033] do_syscall_64+0x31/0x40 [ 514.452204][ T7033] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 514.458084][ T7033] RIP: 0033:0x7f5501999407 [ 514.462487][ T7033] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 514.482172][ T7033] RSP: 002b:00007ffd447f59e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 514.490853][ T7033] RAX: ffffffffffffffda RBX: 00007f55018ab880 RCX: 00007f5501999407 [ 514.498993][ T7033] RDX: 0000000000080000 RSI: 000055f5d13ae0c0 RDI: ffffffffffffff9c [ 514.506953][ T7033] RBP: 000055f5d13b70b0 R08: 0000000000000000 R09: 0000000000000000 [ 514.514921][ T7033] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f5afa870c8 [ 514.523083][ T7033] R13: 000055f5afa870ce R14: 00007ffd447f5fe0 R15: 000055f5afa8dbcc [ 514.531216][ T7033] [ 514.533548][ T7033] Allocated by task 1832: [ 514.537899][ T7033] __kasan_kmalloc+0xda/0x110 [ 514.542563][ T7033] __kmalloc+0x1a7/0x330 [ 514.546791][ T7033] alloc_workqueue+0x14e/0x1180 [ 514.551720][ T7033] ext4_fill_super+0x6c80/0x8b60 [ 514.556671][ T7033] mount_bdev+0x28b/0x3a0 [ 514.561036][ T7033] ext4_mount+0x34/0x40 [ 514.565291][ T7033] legacy_get_tree+0xed/0x190 [ 514.569984][ T7033] vfs_get_tree+0x89/0x260 [ 514.574387][ T7033] do_new_mount+0x25a/0xa20 [ 514.578880][ T7033] path_mount+0x572/0xc80 [ 514.583195][ T7033] __se_sys_mount+0x318/0x380 [ 514.587863][ T7033] __x64_sys_mount+0xbf/0xd0 [ 514.592440][ T7033] do_syscall_64+0x31/0x40 [ 514.596847][ T7033] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 514.602729][ T7033] [ 514.605047][ T7033] Freed by task 297: [ 514.608929][ T7033] kasan_set_track+0x4a/0x70 [ 514.613509][ T7033] kasan_set_free_info+0x23/0x40 [ 514.618435][ T7033] ____kasan_slab_free+0x125/0x160 [ 514.623565][ T7033] __kasan_slab_free+0x11/0x20 [ 514.628326][ T7033] slab_free_freelist_hook+0xc5/0x190 [ 514.633710][ T7033] kfree+0xc0/0x270 [ 514.637761][ T7033] release_nodes+0x753/0x7d0 [ 514.642347][ T7033] devres_release_all+0x7c/0xa0 [ 514.647189][ T7033] device_release_driver_internal+0x4cb/0x750 [ 514.653269][ T7033] device_release_driver+0x19/0x20 [ 514.658456][ T7033] bus_remove_device+0x2dd/0x340 [ 514.663517][ T7033] device_del+0x696/0xed0 [ 514.667836][ T7033] hid_destroy_device+0x6a/0x110 [ 514.672796][ T7033] usbhid_disconnect+0x9f/0xc0 [ 514.677559][ T7033] usb_unbind_interface+0x212/0x8c0 [ 514.682841][ T7033] device_release_driver_internal+0x4bc/0x750 [ 514.688899][ T7033] device_release_driver+0x19/0x20 [ 514.693992][ T7033] bus_remove_device+0x2dd/0x340 [ 514.698911][ T7033] device_del+0x696/0xed0 [ 514.703224][ T7033] usb_disable_device+0x3a8/0x750 [ 514.708256][ T7033] usb_disconnect+0x31e/0x850 [ 514.712916][ T7033] hub_event+0x1a88/0x42c0 [ 514.717324][ T7033] process_one_work+0x6e1/0xba0 [ 514.722158][ T7033] worker_thread+0xd56/0x13b0 [ 514.726819][ T7033] kthread+0x346/0x3d0 [ 514.730873][ T7033] ret_from_fork+0x1f/0x30 [ 514.735271][ T7033] [ 514.737593][ T7033] Last potentially related work creation: [ 514.743820][ T7033] kasan_save_stack+0x3a/0x60 [ 514.748485][ T7033] __kasan_record_aux_stack+0xd2/0x100 [ 514.754224][ T7033] kasan_record_aux_stack_noalloc+0xb/0x10 [ 514.760015][ T7033] call_rcu+0x10e/0x1050 [ 514.764429][ T7033] pwq_unbound_release_workfn+0x287/0x2c0 [ 514.770133][ T7033] process_one_work+0x6e1/0xba0 [ 514.774976][ T7033] worker_thread+0xa6a/0x13b0 [ 514.779728][ T7033] kthread+0x346/0x3d0 [ 514.783848][ T7033] ret_from_fork+0x1f/0x30 [ 514.788251][ T7033] [ 514.790566][ T7033] Second to last potentially related work creation: [ 514.797346][ T7033] kasan_save_stack+0x3a/0x60 [ 514.802097][ T7033] __kasan_record_aux_stack+0xd2/0x100 [ 514.807541][ T7033] kasan_record_aux_stack_noalloc+0xb/0x10 [ 514.813422][ T7033] kvfree_call_rcu+0x10c/0x620 [ 514.818267][ T7033] drop_sysctl_table+0x2ef/0x410 [ 514.823190][ T7033] drop_sysctl_table+0x2de/0x410 [ 514.828166][ T7033] unregister_sysctl_table+0x75/0x120 [ 514.833532][ T7033] unregister_net_sysctl_table+0x15/0x20 [ 514.839189][ T7033] neigh_sysctl_unregister+0x78/0x90 [ 514.844546][ T7033] inetdev_event+0x7f5/0x1030 [ 514.849297][ T7033] raw_notifier_call_chain+0x90/0x100 [ 514.854772][ T7033] unregister_netdevice_many+0xf8b/0x1980 [ 514.860493][ T7033] default_device_exit_batch+0x330/0x390 [ 514.866301][ T7033] cleanup_net+0x5fb/0xb70 [ 514.870834][ T7033] process_one_work+0x6e1/0xba0 [ 514.875761][ T7033] worker_thread+0xa6a/0x13b0 [ 514.880424][ T7033] kthread+0x346/0x3d0 [ 514.884570][ T7033] ret_from_fork+0x1f/0x30 [ 514.888964][ T7033] [ 514.891306][ T7033] The buggy address belongs to the object at ffff88812751b000 [ 514.891306][ T7033] which belongs to the cache kmalloc-512 of size 512 [ 514.905522][ T7033] The buggy address is located 64 bytes inside of [ 514.905522][ T7033] 512-byte region [ffff88812751b000, ffff88812751b200) [ 514.919062][ T7033] The buggy address belongs to the page: [ 514.924879][ T7033] page:ffffea00049d4600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888127519800 pfn:0x127518 [ 514.936579][ T7033] head:ffffea00049d4600 order:2 compound_mapcount:0 compound_pincount:0 [ 514.945238][ T7033] flags: 0x4000000000010200(slab|head) [ 514.950777][ T7033] raw: 4000000000010200 ffffea0004686f08 ffffea000475d708 ffff888100043080 [ 514.959654][ T7033] raw: ffff888127519800 000000000010000f 00000001ffffffff 0000000000000000 [ 514.968226][ T7033] page dumped because: kasan: bad access detected [ 514.974627][ T7033] page_owner tracks the page as allocated [ 514.980340][ T7033] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 277, ts 24583814972, free_ts 0 [ 515.000469][ T7033] prep_new_page+0x179/0x180 [ 515.005069][ T7033] get_page_from_freelist+0x2235/0x23d0 [ 515.010600][ T7033] __alloc_pages_nodemask+0x268/0x5f0 [ 515.016051][ T7033] new_slab+0x84/0x3f0 [ 515.020211][ T7033] ___slab_alloc+0x2a6/0x450 [ 515.024877][ T7033] __slab_alloc+0x63/0xa0 [ 515.029215][ T7033] __kmalloc+0x201/0x330 [ 515.033446][ T7033] kvmalloc_node+0x88/0x130 [ 515.037940][ T7033] alloc_netdev_mqs+0x61e/0xc80 [ 515.042950][ T7033] rtnl_create_link+0x242/0x930 [ 515.047804][ T7033] rtnl_newlink+0x105e/0x1640 [ 515.052496][ T7033] rtnetlink_rcv_msg+0x9db/0xb90 [ 515.057543][ T7033] netlink_rcv_skb+0x1e0/0x430 [ 515.062393][ T7033] rtnetlink_rcv+0x1c/0x20 [ 515.066895][ T7033] netlink_unicast+0x876/0xa40 [ 515.071649][ T7033] netlink_sendmsg+0x88d/0xb30 [ 515.076499][ T7033] page_owner free stack trace missing [ 515.081856][ T7033] [ 515.084174][ T7033] Memory state around the buggy address: [ 515.090063][ T7033] ffff88812751af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 515.098164][ T7033] ffff88812751af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 515.106222][ T7033] >ffff88812751b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.114266][ T7033] ^ [ 515.120404][ T7033] ffff88812751b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.128451][ T7033] ffff88812751b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.136784][ T7033] ================================================================== [ 515.145121][ T7033] Disabling lock debugging due to kernel taint [ 515.157347][ T24] audit: type=1400 audit(1758702138.560:336): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 515.189601][ T7033] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.205987][ T7553] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2167'. [ 515.218847][ T7033] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.223481][ T24] audit: type=1400 audit(1758702138.580:337): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.249989][ T7033] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.250318][ T24] audit: type=1400 audit(1758702138.580:338): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.275460][ T7033] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.282864][ T24] audit: type=1400 audit(1758702138.580:339): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.289755][ T7033] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.311118][ T24] audit: type=1400 audit(1758702138.580:340): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 515.340346][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 515.340480][ T24] audit: type=1400 audit(1758702138.580:341): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 515.346501][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 515.371986][ T24] audit: type=1400 audit(1758702138.580:342): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 515.376088][ T80] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.409574][ T80] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.412756][ T25] usb 2-1: USB disconnect, device number 28 [ 515.424424][ T80] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.433750][ T80] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read [ 515.443092][ T80] hid 0003:28DE:1102.002C: No HID_FEATURE_REPORT submitted - nothing to read