last executing test programs: 16m25.612781656s ago: executing program 32 (id=3069): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x3f8}, 0x9c) bind$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r6, 0x4004510f, &(0x7f0000000280)=0xfb9fa3e5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 14m1.867140697s ago: executing program 4 (id=3403): socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x6, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) poll(0x0, 0x0, 0x6) futex(&(0x7f0000004000), 0x5, 0x300, 0x0, &(0x7f0000004000), 0xb0024000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) 13m59.787508332s ago: executing program 4 (id=3408): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, 0x0, 0x8000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r5, &(0x7f0000001380)=[{&(0x7f0000000280)=""/237, 0xed}], 0x1, 0x1fc, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffffff00}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0xff) 13m57.489711288s ago: executing program 4 (id=3414): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0xa, 0x6, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m46.535178975s ago: executing program 2 (id=3439): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x20042) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x40000000}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04e5d98ad69219"], 0x7) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000300)=0x8) accept$alg(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000d5c000/0x2000)=nil, 0x2000, 0x2) set_mempolicy(0x8006, 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0xc, 0x5, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) landlock_restrict_self(r3, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000001c0)="459224074a1e1ccd", 0x8}, {&(0x7f00000000c0)="e2b16d6d1b92cb9ff457893b355eda2dc02298dfd8e0b333a8c9fafb873bb6a2d606a6af1f6ded2b43de15fcc0625a63fab0d95a56256bb88e9297722bc8a84d54ee4d7e2a293d8808c0996edf985553deecaade1b45d098d4e0a45ee73e81705b2a976d2165dc3e34e4037ab51dd7751f75a4f057fd09124c7d31150fab25b48e0f54ed7796da1e4beef506cac0b266447b180c29ab2d1a0536f17ff77b85d1d93ffa0c2773b05aac413a1c9517b53897614155cb9925f0c2899e614c14a86a13baf3518819fffa2c88a9c3", 0xcc}], 0x2) 13m46.512507309s ago: executing program 4 (id=3440): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0) socket$inet6(0xa, 0x2, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r3 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x250, 0x940c, 0x3002, 0x0, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x250, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x2, 0x3, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@broadcast, @ipv4=@broadcast, @ipv4=@multicast2, @ipv4=@remote, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth1\x00', {0xb8cd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x498) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r5, 0x1000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050081) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x1c8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xb96}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7, 0xfffffff9, 0x8, 0x3ff, 0x8, 0x148, 0x62b, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x5, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0xc}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffd, 0x40, 0x5, 0x8, 0x5, 0x1003, 0x7, 0x2, 0x3d, 0xc88a, 0x21, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x1c8}}, 0x0) write$tun(r5, 0x0, 0x10da) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x284000, @remote, 0x3}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 13m44.55890977s ago: executing program 2 (id=3445): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x3f8}, 0x9c) bind$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, &(0x7f0000000280)=0xfb9fa3e5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 13m42.980584285s ago: executing program 2 (id=3447): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 13m42.823918368s ago: executing program 4 (id=3450): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000180)={0x3, 0x8}) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, r2, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13m39.633284001s ago: executing program 2 (id=3457): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 13m36.387650524s ago: executing program 4 (id=3466): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 13m36.025386235s ago: executing program 2 (id=3467): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = semget$private(0x0, 0x7, 0x180) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x7fff, 0x400}, {0x3, 0x86ac, 0x1000}], 0x2, 0x0) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000040)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0xfc}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x35, 0x0, &(0x7f0000000480)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) sendmmsg$unix(r5, &(0x7f0000008380), 0x0, 0x4008890) syz_clone3(&(0x7f00000003c0)={0x1040000, &(0x7f0000000140), &(0x7f00000004c0), &(0x7f0000000240)=0x0, {0x21}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/24, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r5}}, 0x58) sched_setscheduler(r7, 0x0, &(0x7f0000000440)=0x7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(r5, &(0x7f000001b700)={0x2020}, 0x2020) 13m35.508326685s ago: executing program 2 (id=3468): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 13m25.260339477s ago: executing program 3 (id=3489): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x3f8}, 0x9c) bind$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, &(0x7f0000000280)=0xfb9fa3e5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 13m23.046361968s ago: executing program 3 (id=3494): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) getrlimit(0x3, &(0x7f0000000540)) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) futex(&(0x7f000000cffc)=0x4, 0x7, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0x100, 0x3, 0x8, 0x4d, 0xff, 0x3, 0x0, 0xfadd, r7}, 0x20) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13m22.112165142s ago: executing program 3 (id=3495): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0) socket$inet6(0xa, 0x2, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r3 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x250, 0x940c, 0x3002, 0x0, 0x2c0, 0x368, 0x3d8, 0x3d8, 0x368, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x250, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x2, 0x3, 'syz0\x00'}}, @common=@inet=@iprange={{0x68}, {@ipv4=@broadcast, @ipv4=@broadcast, @ipv4=@multicast2, @ipv4=@remote, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth1\x00', {0xb8cd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x498) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r5, 0x1000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050081) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x1c8, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x198, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xb96}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7, 0xfffffff9, 0x8, 0x3ff, 0x8, 0x148, 0x62b, 0x2, 0x6c6, 0xc, 0x1c, 0xa, 0x9, 0x5, 0xfffffffd}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0xc}, @TCA_GRED_PARMS={0x38, 0x1, {0xfffffffd, 0x40, 0x5, 0x8, 0x5, 0x1003, 0x7, 0x2, 0x3d, 0xc88a, 0x21, 0x16, 0x1, 0x1, 0x5, 0x5}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x51d}]}}]}, 0x1c8}}, 0x0) write$tun(r5, 0x0, 0x10da) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020}, 0x2020) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x284000, @remote, 0x3}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 13m20.896937215s ago: executing program 33 (id=3466): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 13m19.816469216s ago: executing program 34 (id=3468): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 13m19.486114904s ago: executing program 3 (id=3503): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x6, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) poll(0x0, 0x0, 0x6) futex(&(0x7f0000004000), 0x5, 0x300, 0x0, &(0x7f0000004000), 0xb0024000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) 13m18.275777653s ago: executing program 3 (id=3504): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r5, &(0x7f0000000380)=""/4091, 0xff3a) syz_emit_ethernet(0xe, &(0x7f0000000200)={@broadcast, @multicast, @void, {@generic={0x88f7}}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 13m16.128415899s ago: executing program 3 (id=3508): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 13m0.336762233s ago: executing program 35 (id=3508): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 12m46.878041704s ago: executing program 6 (id=3559): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r6, 0xffffffffffffffff, 0x0) 12m44.822925629s ago: executing program 7 (id=3564): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x82000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') preadv(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0x1e, 0x20704513) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000280)={0x30, r8, 0x1, 0xa1ff, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) semop(0x0, &(0x7f0000000140)=[{0x0, 0x200, 0x1800}], 0x1) sendto$netrom(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x40000000000017a, 0x40840) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0xa9523a387e730bfe, 0x0) 12m42.727350415s ago: executing program 6 (id=3569): r0 = socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x0, 0x0, 0x3f8}, 0x9c) bind$inet6(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f0000000280)=0xfb9fa3e5) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 12m42.398671787s ago: executing program 6 (id=3571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5, 0x0, 0x4}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) brk(0x3) semget$private(0x0, 0x207, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) 12m41.46826021s ago: executing program 6 (id=3572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, 0x0, 0x8000) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') preadv(r5, &(0x7f0000001380)=[{&(0x7f0000000280)=""/237, 0xed}], 0x1, 0x1fc, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xffffff00}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x4) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0xff) 12m40.529247277s ago: executing program 6 (id=3573): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 12m39.278448815s ago: executing program 6 (id=3575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 12m38.740361085s ago: executing program 7 (id=3576): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') mremap(&(0x7f0000fe4000/0x1000)=nil, 0x1000, 0x800000, 0x4, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r6, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120141018f991220720c0c0009d40102030109021b0001000010000904"], 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 12m34.007226843s ago: executing program 7 (id=3583): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 12m33.028187341s ago: executing program 7 (id=3587): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000000000000040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x6, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) poll(0x0, 0x0, 0x6) futex(&(0x7f0000004000), 0x5, 0x300, 0x0, &(0x7f0000004000), 0xb0024000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) 12m30.920297645s ago: executing program 7 (id=3589): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x100, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x1, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x26, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xff, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r2, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r4 = inotify_init1(0x80800) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x1e, 0x5, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) 12m25.790390451s ago: executing program 7 (id=3599): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x5a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3a, 0x0, 0x0, 0x0, 0x8a, 0x0, 0xff}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x3}}, [0x5, 0x8, 0x920, 0x7f, 0x3, 0x1, 0x8, 0x4, 0x7, 0x909, 0x0, 0x3, 0x8, 0x6, 0x8]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x400, 0x7, 0xc999, 0x2000e}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYRES64=0x0], 0x20) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x8042, 0x80) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r7 = fanotify_init(0x202, 0x1000) fanotify_mark(r7, 0x1, 0x48000013, r5, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0xfffffe5d) 12m23.585276941s ago: executing program 36 (id=3575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x0, 0x1, 0xff, 0x9}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r5, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r5) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x400, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d64656661756c743d7374617469633a2c00a5565351c03c21a3407b27655d9a5db05be20340a01dfb73947a24ffd8a68d68e78776eff87dbf7471176b34e4ef0301753a0789428946b3a9117da2845a5881287661dbaeaf939a2732b086753362f32a491a8d60040d97eff48407b67846e095b2127cc72310c1bb2dc13b735bb9bb70adb91268fb1e787e2c6c78bea66316ef1ac8a5952b5512656bd73655530b8f06e40ea8913be358b7e138ebfa3ed52570a816"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) 12m10.247957019s ago: executing program 37 (id=3599): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x5a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3a, 0x0, 0x0, 0x0, 0x8a, 0x0, 0xff}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x3}}, [0x5, 0x8, 0x920, 0x7f, 0x3, 0x1, 0x8, 0x4, 0x7, 0x909, 0x0, 0x3, 0x8, 0x6, 0x8]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x400, 0x7, 0xc999, 0x2000e}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYRES64=0x0], 0x20) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x8042, 0x80) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r7 = fanotify_init(0x202, 0x1000) fanotify_mark(r7, 0x1, 0x48000013, r5, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000102c0)={0x2020}, 0xfffffe5d) 8.078708387s ago: executing program 9 (id=6236): sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b940)=[{{0x0, 0x0, &(0x7f0000007180)=[{&(0x7f0000007040)="bc9eed41ed314a0a040b470ddfc1a4a0b32e03b624c24dac82da87b90a81e84043975c9f0afe75e2b65f8a4fa6ae1913dbfb206958bb78e7ca85aaa2bbb15d9a86a34289483d663369e9517a894bc1c44f96bdbe1ea1372cf7d4ccdd28be2a82654cbab3f15556889226e6dc7be6ed68f641d6932ff719c63a", 0x79}], 0x1, 0x0, 0x0, 0x800}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.780700551s ago: executing program 8 (id=6242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb701) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 7.437565282s ago: executing program 8 (id=6244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000003c0)=@ccm_128={{0x303}, "4206f9c95436c8f0", "c66992cbf1eccd9bd21a7048c660caf3", '4w\x00', "3f7dc9959b100b76"}, 0x28) 6.739178648s ago: executing program 9 (id=6247): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) fcntl$addseals(r5, 0x409, 0xb) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000140)}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x3, r6, 0x0, 0x42, 0x94, &(0x7f0000000240)="b9a10ecb65a45d99d3bd7fc521e678f98412872c3f342b349fceeda4a5165dcc4c893e315cdbd421356d5d49695b4d10563e1bd5c21ae63a2190314a0d08b811ca74a8b66b866c570e1c0eb500e2b31524ebbcb1aa1f75c6d98377141f682916426c124ec8ce3f81ce153d41f306a9a7e50621d273e37fa6e97b6a57c0c24ffc7e7bcb408081c7d6e71fc3627d4c476eafb4f0b8"}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$SNDCTL_SEQ_SYNC(r10, 0x5101) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) 6.368633983s ago: executing program 8 (id=6250): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) 5.879169846s ago: executing program 8 (id=6251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYBLOB="13f029f54211bef11b3b861be8e26f", @ANYRESHEX=r0], 0xffdd) 5.696184201s ago: executing program 9 (id=6253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001040)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x0, 0xfff1}, {0x1001d, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.590165999s ago: executing program 5 (id=6260): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0xffff, 0x4, 0x10006, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x112, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x1000, 0x4, 0x101, 0x8, 0x7ff, 0x0, 0x0, 0x1, 0x8}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x16, {{0x4, 0x0, 0x4, 0x9, 0xfffffffc, 0x6, {0x0, 0xa8, 0x6, 0x100000008, 0x3, 0x1, 0x1ff, 0xffffff61, 0x0, 0x1000, 0xffffffff, r2, 0xee01, 0xfffffff9, 0x6}}, {0x0, 0x2}}}, 0x0, 0x0}) 3.58972952s ago: executing program 0 (id=6261): setpgid(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x7}) 3.476330559s ago: executing program 0 (id=6262): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "4ed1"}, 0x0, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x4}, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x20, 0x2, 0x56, {0x56, 0x24, "bf94525e666c74e7e65be08e9b53cd9039a706a88c7821492d24c90c470b1db4008fe589a3d160a9c47a635d52cd7799eb5e3a4dbb449f4809980972f2983d2fd273b06467ddd60decd7c2220ba26e1cdbfd59ed"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x5, 0x81, "924b6a6b", "6b9a7eb8"}}, 0x0}, &(0x7f0000000a40)={0x84, &(0x7f0000000400)={0x0, 0xf, 0xde, "88d2dda5c95de0199fb237b6117ef15cce6a0fedacb30072dc5d2791efe70700447067f8d9f1744f22420d63df851aefbf744f52f661fe88be1824b7fef456c1c37226cb450cf8818156406cdf5bbc2f9590a3a65d4da3c1da8f70b2d85a67104fa81faf99c03265ad060df66d8afe6afae7e3d1b74abdc92b156ec5f5b78934a7e31bb82577a26456dfc760427aad7bdaf2ebe6ecb1b42e5d094851b47cca2f5e2f33f54da30bb3246300c9ab01d0cf17da9c9296c54714234b295365cbceb0621ae0687c0496d4a67f5673112b66b2dc788f35490016894e7e476c9977"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "3204"}, 0x0, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000900)={0x40, 0x19, 0x2, "132e"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x9}, 0x0, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0xd}, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.387689548s ago: executing program 5 (id=6263): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x4006, 0x8, 0x80000000000, 0x40000}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000140), 0x776, 0x84200) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) acct(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) 2.911609278s ago: executing program 0 (id=6266): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.742524133s ago: executing program 1 (id=6268): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendto(r2, 0x0, 0x0, 0x4008044, 0x0, 0x0) 2.644502282s ago: executing program 1 (id=6269): mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x24f, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) 2.59809321s ago: executing program 1 (id=6270): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 2.289581704s ago: executing program 0 (id=6271): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.032166084s ago: executing program 1 (id=6272): ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.670887363s ago: executing program 5 (id=6273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.58041769s ago: executing program 8 (id=6274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4085, 0xff5, 0x1, 0x0}, &(0x7f0000000180)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 1.550415733s ago: executing program 9 (id=6275): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}], 0x1, 0x24040890) 1.522115614s ago: executing program 1 (id=6276): r0 = userfaultfd(0x801) shutdown(0xffffffffffffffff, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) 1.487904602s ago: executing program 8 (id=6277): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 682.746443ms ago: executing program 0 (id=6278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002000)={{0x1, 0x0, 0x80, {0x1000, 0xf000}}, "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", "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"}) 682.086886ms ago: executing program 0 (id=6279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)='fH', 0x2, 0xc084, 0x0, 0x0) 681.66717ms ago: executing program 5 (id=6280): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000002700)={0xffff, [[0x9, 0x1, 0x5, 0x5, 0x7, 0x10, 0x3, 0x400], [0x5, 0x401, 0x1a, 0x4, 0x8, 0x6, 0x3, 0x3], [0x4, 0x1, 0xd1af, 0xffffb3c0, 0x3, 0x9, 0x4d90, 0x7]], '\x00', [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x401, 0xc, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x7, 0x1, 0x0, 0x1}, {0xea, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x100, 0x0, 0x1, 0x1}, {0x0, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x9, 0x1, 0x1}, {0x752, 0x5, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x1}, {0xa7, 0x1, 0x0, 0x1}], '\x00', 0x7}) close_range(r3, 0xffffffffffffffff, 0x0) 635.302006ms ago: executing program 9 (id=6281): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604", 0x43}, {0x0}], 0x2}}], 0x1, 0x20008000) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 613.747868ms ago: executing program 5 (id=6282): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) 583.883457ms ago: executing program 1 (id=6283): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x4006, 0x8, 0x80000000000, 0x40000}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000140), 0x776, 0x84200) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) acct(0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) 171.4421ms ago: executing program 9 (id=6284): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000140)='smaps\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r2, &(0x7f0000000180)="6f386d1e363a1a67380a016149b59011932f8d5807a013d25dcc523215d9c8c8898a045c2dc3a00b4f69ff6291c88b047e66de4469c1e15059b0543129022c0ed410a09993438442045b9e7e607bb99ae7e618ec7d9c7ae42763cbb4c9a373ad32b98feb06e1b450cf54754abc18a6155c7dee8a705529a1687e2ead0b4674043ccc0a83cbd794ea05c5d5b4ccf0839576bb41771c467e7698d9d17420f49f9ac450612b7c16f8e7d4f50b3266583b44d7cfaba90fc36fdd0b8d4da9d6f34da47d78bf28702f86bd78d6ad3231e10d705cd71a9b24929ce42364191e4b826d4938d75f0510ebbe5541df1758a96d675d8d5c403791d840a580abaff8bb91af467ec49f9a545612557d54da9e9b40664ae00e4ae67d8e426870d6b0bf197dfb4607b53ffe6680733c8c8471505bf47cdf9e77472c53e34fa95946c193eefc4369f725d6004654accf4a855d3383f37531834f5c836a33a313b3a789c2a5b703bcc7523e2b2c04a12a11cde8b1b7d3020d12adda4552c55a4404bbf9d39b160d8a1b43df64ab336406e90111c571d71ce4627177334ec9a4871c668a2bdd192f528c63618e80a80948f94de388a5968c9e2848c0892ad6a04aaf727b9cf876f0e031ab756eeceb1b6518d4f07ed451e89c388d77cc4527f1577ceddeebbbbc98198152d204b92126797d4c2cd5e0e6afe6256fc446ff6140cb6708838cab933ff66ee38697e259fdc7126ba65ab43990873bbafff587d2f0bc37a7c0888364dd0c36f121d3a30fe07bcedf8f87e389fe872bafde6529be07bf4bdce088069e7925cf7e56de8f9cce13b278effa080efeb3d7428ec830d83e19189a8d2806b890e46af16d93bd849bdb1db409d37836c896eb55aa46cc3fd6fff66400fd8b7f9c8c9817090708f3d0aaad031e8b9c271a8bf0f98848258c83bdb63e333ac89de6f1f5030a0b76d30ca8e2bbe5eba696b31739a450de2afa8d31abc402ad2c1844be58b734c76bde27709f24bc38b49f8b4d5e1f36e6c3158d84e34781fcc449552468421042a3da12f71c51a2abdb3e510fd4c2caef4b3798be524fc14dca80807436879a405df74814c0733be9e4e7d816c51a8c965a513609555f147d4d01de0d00fae26f250d906892e5daf26a91d43ae3518d46653ff403dfe7fedb0951d2365e8ab4ee50e814489e633489f66efc06820fb6e8b6cf414fbf6170ab8cb7557c7876dce31e432ebc6ef33828686c0371f2b4d7ea2200ed0bb2ce732251737cd04c2b5311c63f7c628367b45bf2075e3a04e0435ceb589c2af06f960c88df9012b0c7f9ce9dd25ccd431471b62d3dcf6a405287743e1ae7bf506c7e8ba2aa527b6978d07ce3cc259efe9475ba802e26576c32fd878cc6222b2c98f8584ec12aa6913e84e119281c7686f50cf3d3e12db895e0755f0c47612e5da77d7fc50b91de7235514a97557f910c35d866e4571ea8bdf710c417fd42f7863c0f3360d5c809c23b89788276b74ede46dee9cf359e169b77c6279716640c5671d095af02aa568cb55646688cb872500cbddec1b937f8a522d1b44f90b37c5122efe01d35646ae909a79841b49753ba66bc24e51c3f9137776c64b60f0066642f7bbc8d4678396213887afa027bbbeb425657ab4ffaa87f2a907dd0cefec83f64f0bafa6b2d2db95abed2f9b96c4fa2df6a9e1b869368543f8f29a7dbec7568d03c776ebe21395baee545f8d9f604745a3ff6c16b403ed013be9cbcbacc1b02fe9100391dbabe6e7639067a5d70d02e4a24947f684d1ba01986aa6d9de5d3b4b92fd491bad223bba0ebec3318f043ea429223167822cb82c3147b4525862b550fe3047e29167760f1be7ca23e6ee11b4275c4d3eb232629f8214d8e0ffb9b956042a232245a0759acb96a02a90e815ef91dacd401117e1857a4a17d004b0ac2115a875e422d6e7f40632eab98a574ef8c0bd4c7f54c2984769f02e977beedb3cfe40926c32a3f8c19e791714678924b3f22e54d62805c8bef5aeeb9ee055ba2ea1d60a97e8659323419e065e4169d2b74ede728f672af3d6f4375a23b082cb0128bf65670030bde3122ae6dd6985b68a1f9a5e4712f14ee32980745e5e5a8d3e87c90693e3b8c69242485dc391d5083b65a83089857be9fb1d3245e1787603fc556ac74107afee299e7237dca6b29e7266f5d1160241275421429061ad741b068ce34cd69f48b43533ff7486ac485bfcbc96333a48082a95d794b42c5699a7a149bc386fd92b464add93b75aa868190a253168360dcf0e7ce0bc6b263d86c28db78e2b765df84b469a13cf6fd9257409a773fde7debea6690057a2cee8f2bb1ffc06caa8fff0e650eee2278a1c69c3391b8b33fc4dac5b653417fa8d653cf041cd4d1e7f7b80d11e136c27a716155685fc9de19e0772c7c04e86971196168bf1a540b1d8d605cb8e4078429398fc3926d37701295023a834b95d8bd6d3cfc8ae35d87eb5cab922876ac930ac1a1d0eb293f28e064e6bbb7f9a1f453db025cb4747154ef35c611195d83ccdecb662940a96372330878cf3d72c38fff693fd3fa249dde1b339a80c05a870d03fc1f4c9bef5f8fa00ea7c49f02f0fcb21586c68451cc0380ee63eef8e363f4a8b29598e49ea91b2cd31832ceeb5847d85b7d3a3bc076e5d055839891d3bb3fdea3a7c3afbaff8f5bda306247c8e5e7627d29e767239ff668f4f54bdc240ca7b89bcfab6e26c49357cdb62806865b7c32743c5cfc7634ebd89acc337170bd4429b657b1c822c9a8d2f976d064b683b4c2c57c2367c3e72821474ef66cdf329402168d51f4cbef1c0169b6e5d258e6f1fce726439276775d343dd58e546adc061f3600883bacc8abe96bb83682826465820f1d43ba088ae8a766be19f0d1d906d96a792dd1a25b9a4a61e503805cd32508e6f7173ccba0bae3361357006020306597c4a775f4c9824f4b4788b25962cdf3e8a5f2341880c9cedc9b10e9c487cc36cf65097dded5d59cd8ac029fcc07c20b2f13d55d3b4a1d2ba7d1fbcbb60ed51143846560ab1d8845f568f8dba5fdc159b6e4572c7defcdf84f6674b587c02e522602e9b33187d39be8779ea9566f4e6d22354ac009ea4a91ea821bd6dfc1d026b8f5cdff4f8cb74bb58bb4027d3670a701227f8d4105810eb17e2a3a06f379b2541dbdbede02c5a50c32b487715a5f8291423f51b43799ab00781cf3c07a5f93c3835ad44b2ab6220e028be196ea85dc730504a5107eb0a3a178ca17b844dfd7e36586a384e7a3c91e923a1dd93a4b203ad2394826ad7927abbd9ee888e1fc5f98a98a84733bb250e57196a29539de9da2944e8ad37bb4defbdd6fff5fec6c8f94b9901c7440602db59852098bb9dba8382c197def33c40b62e9c6602399e58e7259537ec1ae7d26a4760f6d8f450d3e50177f89fe8939bbe075285363b201be79027f478b0c8fdb9f140676a5847243d8ed863a803408c1fed670820d4a180103ba1ae86924161daa1c51062e279a2ca4f3318d75345d0dce4d1c88bebc15134fc5d1398cd0605b3f13c6f31fed56f7db3c84e15ed56aba9b570fd9931912fa523db06515488f6761287ea24f3cadd3cf207fd009360251ee4273fc9fda133c3424cd276eb950aa1a71dd819a6d07a45406cd498aac08eb1814fe1a506d3c61ad8cc7043742aee3de918ff7cf7adde386db3c01fbd170f02573c5017f9c59159d2bd0fb537e642097325ff264c56e7cacd77499a65ce7c6ebce8824e39292452265fdbbd9897e25f0666a233349a1cc8589951f1e7b91b439fb77708ebfaba503f88c735380d98403682881b530a5e9636b3798c754db6c76affecafe72ba41a8e26a641055d0e06e01763c8acf564714d81856338750beefa6e807140438ddb10a54dcabfe7a5375c728c1858016cbf8a7f14f2859c8b0c2b3c94db34e407cf9c4f0b569317053323a016549e186352f9cfeba4f5fda79ea7cfe5e64206365c99d1fcf5cc182b7dca345f0330f82155eb3b20e2cefc7022845ace375141f5bc112c4ab4b5052141dcd9c7074aff0cea3eddd7b3cd1edaf5bfa854f722f0da067e0b0882bb2f37ff2b0555ceb0579cc1aa2d0e17a04220599624a1836439c52e2327bf8804a26055926ec625e2eb2cd175bae236953b129e38f4ff30430a93976100e095bd1cb7625d09e0caa6d5d4d3a528360ee075fd4617367876e22bf3aa3f488abd827829004c9b98983d91bf26dc25f5a98d46033ca34629ad5705dc8a06757d904b1adf434ff13784d224289f530945266e4b95ac99e1a8b74863e8fce78ee7c5cb83568c5c82a6fd1269118697fff70ea71f26e29a3bc0eaf61e38af04a8467df667c85963b832d85ff4c0859fb2b9504bace5005f92b04ad4823d1da30ec3fdf8d4b0616ee38cbd1cb0cfa9846f32280b60bed6c2ca62f8a87a9420c5452f2c4cb384fd7da9dd48c1f03ddc0e7b1b9bf2d03e2c166adf436fe41adf1e8c93f9acbae3c7776e3e5853de7f158af7b05a488353e1a57403ccf9b8f6059df5fe666183790bb72861f6de1142f15b2110adacbc1f0eaebd11ea90382fa780a4dd7de5227f707c165cb4cdd9e6c11178d2e08c0ee6e5f8ced9c1b161e3d586b7d39e316fa519a355896e4773ce352368676559565e7f0ab6fa238f8c8468181a3e7d33f68bcc3f11fcfbc1a70a2fb0510b6d13724ac17c39328e18c673afbd4e410c5bb526170a0df46de06a9f76208a0b8ee30246c2b7f439731bedcfd12add7d6937f0d44172ebab084c3141b78cb7f1599a73d0dbae03cec1a114805bf88fc5c54f1093d276d92f01110bcd9de0a0ea2519f4523ccd63802f4ef84cd7adfb60e7a41e5e0860757e003b913a060a3f6f52e62ced781235a59f9a499a9031d5bc756f69d530bb6c8b4ecc06a334d375a9cb754c7938a40c2f84e7a827b10c53b3cbdce4ab4a13f47bd2323cf9c9d49ebc8db0158c05951d99b0fe92f809e8d100e782ec547944cee4ccacde43698068fe78d9540dde0e9285cc68db1b2f3603fe147200c8bb78fb8190f9545029805e291ee3314ca302b798ef17c54149783b1e8de53c82875d04d1701fd7ed5fc5b2e7ce426ef1d96d23bb5b73cce495eb9e1a5699c24596b3ff890ba7447d22da6ff3dba4dd9d7e332ba2f37c253e3936748dbcdce0f03d6e44f0d12ab2ab285bff9e6ce475f33e1e37b4252f49aac246372ee09ce24dc5e4f04be0140f8ddc8a575bbc84992ebd9b10b0428268aeed14de2d6827969e4c5b9ef2b24059f32eff740dc7d61e30980b2e6523c950377879f291f68f0a39f6d28144f1752574263c17efa6ac1b10c1a4e347ebc65d0c08466888693893dcf373d365fd9f6db882f1a92b496ae6de09fd589bee85a2d3e15f8ecf500c425fb506609963ddabdc665046b1aac0911f77689ad621d9190be0de5dcc0e4162a1b8b95f7c66b90e8662b24b1b9a8ccc127b5636d682d203ad74079941293de778952ee68202df31f2080e52f363bcf831505dbe1308883bac954d08ed37d23099dc802027649a8654ee9a31d1913f27a27c7690d309a79e5268669cfbea220a8cfd4c12a5948fbebfdb5c51c601e2e3a4f5ca2e7367cde3d0a8aa07c083ad68eaa19946290c83d4203ba51637b7dc08723c401a5093d6d0b5fbaec5494cd879f0b7712a3f763f86fe28296427abeae137076a62a093f9c1fd2221acff93c50a13713712f3837d00531637b5cb7e86160bff39196300473a0dfa58be2e9ab34017897678a757f538e7a757094a449c857af3b135f5710bf56cd8ca14128e8f6beb336be47d185ec2e2d08f9aeb7c23cd7846c653006af9a1086f33c322ae76e145574a4b038361256d2ddd06122a7d3bc57737b4a2faddea61381bfc77757475b3aa4bdf5f0c5ce8553cf36627c0791ed3ac84290f4f29ebcfcd19a8cfb6cdb1bf0f814800e2d184fe181b5e6b4e5913d3ea20f76e19517454ab6976a86fc4387a58e5532a1abc4b06bb18ade365514ad71dcd3c49a521b20d56a032d304a8dc45d08130fb8b5681f901fb4d223db2cba80eef255f5ecfea59345f4854b49e38a72bf7a642b49377ae77797d59842ce3b7be81f76585ec2bed67f4651df3051462679e3bcbb36a4a590d7e5675f4b8f3e812b7dbac60b82ca161a9f90fc94ed67c4d8506276aa6802b98e0a9babe99902d8026b3c033756acb39390804141ff0c0ec2a2c50afd8a2240a186f1c9d8544fb32afd63989364516ccbcac561e6cdcf0dbe7c1188096ba50c18ecda7481693ed2c452201282558d9338abf7469331ad79cfbf08fc84da04e821835335c82d03d054667dae2f68ef905b16c77a935c1a902c0b2fa4d5b538c530e6cea5557f588c806f85ba24668d043c3f5e5b5a5fb17674de490e42b86a0979881c4023c5b58bc61644a9329b8ea6faee73754384fc8e41194c9df0d7fb5b586154a4798332e714a6b1e10987420587f39f0f6ed17854104aaf3e95a1c57927e2c2cfa0b8750a281fedfa294103607c2b7a34e6ea9ab594ce751dbf7a644cac5c194eaaa85dde6b0259a113c93a25d35e04d7fb8ad0164a31a374d33c88102ef04768a2a2bf009f58d3c97d9d6ac8cb836f9cfddacde61bb572e2eb21dec6dc5f6f0e293d7c0a201dd42248603831ad5914c26b3f1c75900b23a5feb082958de763b9836ab619df00c5b7969561f82453ad3ba3dc837775049eb4c0853bcd60bd386f4e4fb48e0b773add837bc8b985f75d25ecb1bafc4a76604a89aab95c3b9ebc65ed48997ab805d23cacfeb53ba30583891c3eb5ada0462472c2817d0f5be0a3580681c29f9eb8fae2b53522b2f2c3e751e70129c13c46485ca5baf3f390662af5241b425427d4e4025ab577307c54130c5d64167e1e38d7a36248d222144f4e5561a16b89a8e9c4611c650eaa4032a86232351a1d59d02da3d98db1b2bca9f647a63606b936c08902379213075680cf78bae8c938e45c14096e222e41ad32e3ba2c3c5bf963d67b7d65b637f9656c5c03fc9102545b83947e8a4a1ac73c4905fe5c6e171fe0cd0f5afcab6316250d28a5b9907978bca40ac342b9d6037e151d8690f290ae74d89d311811f20698261f1e3c1d5d730b1dff44482888e1a65f6bde8f2b837f4e6b88e3a0163ef20832e54f979ac26839c0015617b1e6d6bff73a4cb71f0f0a141ef454dbb212d925235b36b42111efaacd5dcf98edfb5298c0683dd1408eaa31c2016dc233be2f33eec18554d692b63371e227bbc4bff0b8989536d112f0dc9463e2093ef1eecc1187c492da5d2fada2f587b53917c0660c95d622e6641d2fc40ab1372b1b9239a65cb965181e8b1604e6ff1ea3fd0b3bea18506f3030f3f157d1563d4b7182aa6d2767caa5c6f1f0c8d8f43af8c903e4567fbb07ab596f6e57b424a747c570ee26412100882d8462508342e29784bb92076d76cb47789118d18f6e8861ad81a287eeb21b605ed8ac63e7ba8952f7d8ce660735495cb9287d91df3f48a4815a363abb22d71daca1148b7210869323abcbd96beb69ba4eb4a168ff7898ec78a90b2a6d33de283a97840eb2d2b5d9168072965d92a98669b01c66e5abe04b61a7804af5e655ef8c3dd920910c8b187b8ff9cdef54aecded504abb05ae8f25700063f63c22b17587c09123b9d6a58abb0049adb4dfcb139cfdcd669dd83ceb5bcab22af4e6bd240f265a760c6656f11e0f229fd151dd815b73b3ebe9e85ad41a2d8790fd25add347ae122a2f74b9861d9497fabb7dc86b105099d98c3a109f06734316fee2ed3cc676c93e8458fe35f9772d971c88c7378fe6bb22da857975aa8c1113d6e530b310b17575e699dcaa8fee2fd56aa8de57bc573c82de64203f8af03e3bc20b31da5f0e8300265ec992bf49977f3fb97f4535cb81e19acd0c31f73ad1d90110a5f933c6714673c3ba51c27c282048f3c4d1b9e90b5dabe3ebc7cb1c1899b67ccfc6e3dcbb396629f409d4424ddfb6d47681720b8c44a875ada1576d982cb33feb498f568a0abd5cc5400c46c05a3188d9d08591d4af180db1579d95266c08eb94ec248ba79bc36d7029e6ae62739231b7feb2b9571c787a2989af4d42116056a6b31311a625ce10a31f930ae6202534f6c0c42443760c38b3aa74e9a51ebe4e57269bbef38e614273285f6d80d9ec21c95259f53ad3efbb8319c7321d895181a0e6c3a6eaa122f9297680e6762a63451661a7020946cc24e44e2d395b563c354ea548ac1f1576195de9426e46bef7c9b78a4acd653825cda68f03ad6fd8a04042acca971c05237d6491ec8a413e4fcc581d8a4c9800b5fb2467d3640316d3635322aa654cf3183536e29f9a8220ceffd988ef616e9a79aece75630a7d08028df222228696fe552f09d04d224603171cf939fd31be898355483eea17712d8e0fb114670aa08782cee7c7d7102c84ffb171fd9c41f28c46a3b9d1d167f9585ae720443b8cdae9290393a519a91a32650f2393045dcdacd35d351420f6012243d6aa7e805547fc4cb1c36eabbe965afd8961f423692490669d2dcef2129774bfaa45d879b46c473a46aca128ead1eedb2e02fb597691d38a7ccd43a40876744f10195d0fb92c38bb85aa01e3c43317d404a15ff5e286ac4f87b8635d868445a1e5067d01130bea9023029f0630458c606878d19385baf68b9df20f1dfe9d1723808069cfffc17e9a92a6b35602396ebeb1bb1079e6e82b583874c0d3ded6452bffda3896726194f942418dbefb8abcc281d227eda46830cc6260000b1efc4814bc152d006e77324c3ea70bba1238b92052e16afe73674b6b6d95b3e4f0a9e200ce7754da577b59b63aad8d141e47af2cd068934fc7d0825ed6a4ea12b1d5ce715059b3e98e688a08999e425be05132ab1ca72f0f5505600afe096004d12b9e4591768680cb04e8fdd7c7147d548629a577a8f892d0d0e4c263cf5cee6bfb324581e2160d009c5fe42e9c614e8a299ca846d0de81532f39716e301fea89e2f2652c2a3c1de971e7eec3af18d0dd5f71676a3860733ce7faa5143dcad124ba970d014e3b777d26dcefb51473f69429005d3ae1276bd8468da27ee0d4edb15976a30d5704bc99fc5f44b522b72f1a9ccd0ee2892506fcab87619fd2443b2ed32bfc042d9cbf09aa8cad31f34d8b4c5d4c156ddaa079986f2c2d71a67a70bd280b1d74748bd04a677f81a14f354d671177e1da5667b648f2f40784b011979127493d1ef28b1ae5c625b167a7f20d59b5edea6b8a56e4a818ebe051d7885acc0ddf425c310f39afdc872ff1c6e17130552a50b78f13c873584b8bb7a9987b76ace011c6bbe4846dbaf9e75508e906099d61416915e673dbac6fbc1a42bc574fad6c7252c45133c94f7cea34dddbdd81e3e07cc7204da54279d8851c91a22b68511f1bac43b114df83214152b565b5a21395c510fda7b20951b159bdf8b87c6c0879117797f1e1971101134d7fc39921c92e7a456c4ce642464ce6fd187f3eb35f3db314608b3911e63cab643ed97481ba349374d6c0227a003529a041114c296481cc95d6a9a03b1709bed424fc7ca92be7bdd884ee72b976bfb8f562221323ac3c76bc13edd917dceb3748126f0c224ee9ca0f46df2f831692881268b21109a2caaa00988ac55cda6429875c929a92862e3223c72f83a0fb47f4c4a4aad21a1256f8c70c696b43cc0e863944bdb7c225d9b07a5a0bab55ef18cf8c3f1b9adbd70fb19a1cff75dc65b5095a5c9e9ca98258891a81d4a6382a5a7af495e1ac08202972f24ea118aa2a77b04c300ff7b192f796c4a5d681e4c4458510afa4d1b1d45917a8260aa74e6835dff51e4743a508b1c0e155184411d08270436c6a4c7c132e5aa5818935582a350f9616e95d9e25c6a8eb74d3c7200c8c50e82f0ffd2e18c735e1b04e3e4856f0eb3d1337a57629c2bbaebd4182e7c8ba889fa811aed61fcff414dc41886e18ba74daad913cb0f1bb1f00e119ea859f3e8b098d4e9de04d4beef8ac06e9d90fc4c37b60f4ff6e55b73784a01223358908d5cf02cc4fc39ea3a3a6ae987aea207ce944faf212e392f4304f2ec2b25d38d393364adc4fde0b62f7a30674f1727ba180777e4c754fc9c27b3cf101a88dc84606e0e3b66aaa88c4b5bb2aba8483c0594b41d50611023270e00205161471f5b62e59e5ab85a491a4be52a829433bddac9b8ef9b5ae6e1216c22c8f9ae554be254f21b17696f1117b03843389e2948ebbb74d1f49eb305c8ff67bf227cbaf31af51a1394151afbd4073eb9c88b34b424ddf064ee4b211c4ded83389625790fab0ade3f68fa4adef3b3a52a09fd993e8dc070763413377049a146060c384cebaffb88d59ec459ceea4cf7f8c1a2bd1c14aa3c9e202d05714e0bfc4b9ce80e90f3964058cad1d64ef224d0d2e414d3a3f47ddfacc7f767bab5b7c28952051f0a9d8724c670d16be2008b0433d08da8e49701ca5a657fe9dc8d6723e8235f8070503b4e82a9055171973c213c7b75e83f2f1ce63727e49f1d9bae87deaad5b7fcab51df0eba72124582b38ec6c705ae07f7cef73179c6dab7d421f185d547f3254ad38daa99491867dc3b1de2c04764b09c780acbf4e1f184a9b968559d9c10cee09af4c2ecb520b59cf82441c0bd2f527e1fc81b030f2e4a6540518c11e6d7891c75e8eaa1f95866adb87ff3d31b0c0c6d9a5cc2a3934ad5eaf1c8f6be4b0a91659207472b0bd46a55e3f96ea961bae03ca96ce76b68a6a6396904453533a385d1232d2d9e031e81f49c27013f717d6d9fa77783c31234627abd10a4eb02816f4c7e7850c7a55964b9f6f58691d8f69ab1eb220dea4be07793f09925d288e79cdd479a9f443374be8b7ce1f446c0f07ccc87f14dc2afeabcf51f76326eaede78bc8c1d030c242e7957c61971565987bfcb4fa18e2fe8ab319897b66ae1ece93b312b2394f667b780e75e5258d4ec7fad4d425b7261fe35a48f900a2e0d4913f9210a863632af8a8ddff56c040dd5d82653a4a855340ce847c39d1885b317cc7ab563ae12c36d4848865a7ae42045a4a242c555844598da79d2c08169923856ee515fb5742c12b4628623450184d793f65cda63fbd5ee01ad69bda32beb5464d5d556bcf0fc86648abd7822ccd079f7d863d1880b78bf2f5c7f77c4bd26a87118787de6d07e0df138161fe71a9274411f2fccf4ac73ff159316000d01cedec4a6964ab0b0c2441acac49bf95ac88f950c3709e5cacc49a4b2ca87b87eec4561e4130ce0bc2f98eeece1c5e26a473252c2e69c28e4fa73eed4211a4f6b8665642536f006126f8bcaabccaccb96f88ad1803d0b858914e04444e81b3685a8556ccfe88bd4f477c36fdcd0a0dc75a3e57833160731be2ac1cd263c57c416d9b5c2737832a362c746526b0b4263df9b511fc439bc9517e9ae151c6a77e0403c137aff85c06ffecd5df0b6b4e0b341b106f8e3665c2bba662da75e1bfe78d29da5a6748141ad50b0f6a3ae959e0f73e90ab6e2e59d71cff02ac0c9cb1ef444b3a7f3044e5ccc39f4d125dd14ef6ba7c832b4eeb2d5309a73c8d3ec39ef069565ad15a6a127041", 0x2000, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=6285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setstatus(r1, 0x4, 0x42800) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c051}, 0x1) kernel console output (not intermixed with test programs): .180394][T21292] usb 2-1: Using ep0 maxpacket: 16 [ 2346.187563][T21292] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2346.202452][T21292] usb 2-1: config 0 has no interface number 0 [ 2346.208828][T21292] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2346.224903][T21292] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2346.236520][T21292] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2346.250497][T21292] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2346.258719][T21292] usb 2-1: Product: syz [ 2346.267153][T21292] usb 2-1: SerialNumber: syz [ 2346.276179][T21292] usb 2-1: config 0 descriptor?? [ 2346.288670][T21292] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 2346.298726][T21292] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input73 [ 2346.387635][T21292] usb 9-1: USB disconnect, device number 19 [ 2346.523201][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2346.523304][T15660] usb 2-1: USB disconnect, device number 34 [ 2346.530193][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2346.577352][T15660] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2346.608242][T31366] IPVS: length: 24 != 792 [ 2346.684885][T31368] rdma_op ffff88804c14d1f0 conn xmit_rdma 0000000000000000 [ 2347.090044][T15659] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2347.179461][T20609] usb 9-1: Service connection timeout for: 256 [ 2347.188275][T20609] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2347.208469][T20609] ath9k_htc: Failed to initialize the device [ 2347.269598][T15659] usb 6-1: Using ep0 maxpacket: 8 [ 2347.269875][T21292] usb 9-1: ath9k_htc: USB layer deinitialized [ 2347.276065][T15659] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2347.328084][T15659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.353091][T15659] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2347.360441][T15659] pvrusb2: ********** [ 2347.369368][T31388] input: syz0 as /devices/virtual/input/input74 [ 2347.375699][T15659] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2347.391400][T31388] tmpfs: Bad value for 'mpol' [ 2347.406287][T15659] pvrusb2: Important functionality might not be entirely working. [ 2347.423070][T15659] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2347.449784][T15659] pvrusb2: ********** [ 2347.638382][ T2336] pvrusb2: Invalid write control endpoint [ 2347.727909][ T2336] pvrusb2: Invalid write control endpoint [ 2347.753894][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2347.784596][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2347.806095][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2347.835736][ T2336] pvrusb2: Device being rendered inoperable [ 2347.884895][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2347.924587][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2347.961355][T20609] usb 6-1: USB disconnect, device number 32 [ 2347.988113][ T2336] pvrusb2: Attached sub-driver cx25840 [ 2347.997711][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2348.056525][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2348.835723][T31403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5393'. [ 2349.099479][T15660] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2349.249618][T15660] usb 10-1: Using ep0 maxpacket: 32 [ 2349.283485][T15660] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2349.324196][T15660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.348843][T15660] usb 10-1: config 0 descriptor?? [ 2349.367326][T31424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5400'. [ 2349.680243][T15660] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2349.732065][T15660] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2349.745721][T15660] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2349.754647][T15660] usb 10-1: media controller created [ 2349.838699][T15660] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2349.944097][T15660] az6027: usb out operation failed. (-71) [ 2349.964727][T15660] az6027: usb out operation failed. (-71) [ 2349.976442][T15660] stb0899_attach: Driver disabled by Kconfig [ 2349.991545][T15660] az6027: no front-end attached [ 2349.991545][T15660] [ 2350.010915][T15660] az6027: usb out operation failed. (-71) [ 2350.026072][T15660] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2350.045207][T15660] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input75 [ 2350.090031][T15660] dvb-usb: schedule remote query interval to 400 msecs. [ 2350.097997][T15660] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2350.114598][T15660] usb 10-1: USB disconnect, device number 22 [ 2350.250341][T15660] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2351.778144][ T30] audit: type=1400 audit(1756518484.347:3773): avc: denied { write } for pid=31460 comm="syz.0.5415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2351.882453][T21292] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2352.249557][T15660] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2352.361967][T21292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2352.376024][T21292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2352.395926][T21292] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2352.405921][T21292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.415573][T21292] usb 9-1: config 0 descriptor?? [ 2352.420966][T15660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2352.420995][T15660] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2352.421026][T15660] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2352.421051][T15660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.422689][T15660] usb 2-1: config 0 descriptor?? [ 2352.849447][T20609] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 2352.862080][T21292] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 2352.872437][T21292] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 2353.019242][T15660] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 2353.028128][T15660] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 2353.035971][T15660] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 2353.044301][T15660] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 2353.052132][T20609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2353.063306][T15660] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 2353.070749][T20609] usb 10-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 2353.080100][T15660] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 2353.087493][T15660] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 2353.095031][T20609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.105085][T20609] usb 10-1: config 0 descriptor?? [ 2353.113761][T15660] steelseries 0003:1038:12B6.0013: hidraw1: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 2353.239440][T15659] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2353.288357][T21292] usb 9-1: USB disconnect, device number 20 [ 2353.401413][T15659] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 2353.409944][T15659] usb 6-1: config 150 has no interface number 0 [ 2353.416227][T15659] usb 6-1: config 150 interface 204 has no altsetting 0 [ 2353.423779][T15659] usb 6-1: config 150 interface 1 has no altsetting 0 [ 2353.444612][T15659] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2353.453846][T15659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.465861][T15659] usb 6-1: Product: syz [ 2353.472688][T15659] usb 6-1: Manufacturer: syz [ 2353.477311][T15659] usb 6-1: SerialNumber: syz [ 2353.478540][T21292] usb 2-1: USB disconnect, device number 35 [ 2353.532076][T20609] elecom 0003:056E:00E6.0014: unknown main item tag 0x0 [ 2353.539076][T20609] elecom 0003:056E:00E6.0014: unknown main item tag 0x0 [ 2353.546546][T20609] elecom 0003:056E:00E6.0014: unexpected long global item [ 2353.554205][T20609] elecom 0003:056E:00E6.0014: probe with driver elecom failed with error -22 [ 2353.695104][T15659] xr_serial 6-1:150.204: xr_serial converter detected [ 2353.708374][T15659] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 2353.714821][T15659] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2353.726084][T15659] usb 6-1: USB disconnect, device number 33 [ 2353.733239][T15659] xr_serial 6-1:150.204: device disconnected [ 2353.734202][T21292] usb 10-1: USB disconnect, device number 23 [ 2353.836747][ T30] audit: type=1400 audit(1756518486.407:3774): avc: denied { write } for pid=31482 comm="syz.8.5423" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2353.836811][T31483] random: crng reseeded on system resumption [ 2353.859872][ C1] vkms_vblank_simulate: vblank timer overrun [ 2353.959121][T31488] netlink: 'syz.8.5424': attribute type 9 has an invalid length. [ 2354.117320][T15659] kernel write not supported for file /dsp1 (pid: 15659 comm: kworker/1:7) [ 2354.149037][T31497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'. [ 2354.323792][T31502] syzkaller1: entered allmulticast mode [ 2354.569928][T21292] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2354.609649][T20609] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2354.699420][T15659] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 2354.720076][T21292] usb 9-1: Using ep0 maxpacket: 32 [ 2354.735455][T21292] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2354.752966][T21292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.764816][T21292] usb 9-1: config 0 descriptor?? [ 2354.779439][T20609] usb 10-1: Using ep0 maxpacket: 8 [ 2354.786474][T20609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.801506][T20609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2354.817498][T20609] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2354.830765][T20609] usb 10-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 2354.840110][T20609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.851183][T20609] usb 10-1: config 0 descriptor?? [ 2354.874290][T15659] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.913846][T15659] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2354.940138][T15659] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2354.959375][T15659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.995412][T15659] usb 6-1: config 0 descriptor?? [ 2355.001115][T21292] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2355.003290][T15659] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2355.020469][T21292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2355.030526][T15659] dvb-usb: bulk message failed: -22 (3/0) [ 2355.041695][T21292] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2355.048079][T15659] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2355.048882][T21292] usb 9-1: media controller created [ 2355.057999][T15659] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2355.101769][T15659] usb 6-1: media controller created [ 2355.106449][T21292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2355.146070][T15659] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2355.178368][T15659] dvb-usb: bulk message failed: -22 (6/0) [ 2355.198575][T15659] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2355.209179][T21292] az6027: usb out operation failed. (-71) [ 2355.211324][T15659] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input76 [ 2355.230798][T21292] az6027: usb out operation failed. (-71) [ 2355.236745][T15659] dvb-usb: schedule remote query interval to 150 msecs. [ 2355.241811][T21292] stb0899_attach: Driver disabled by Kconfig [ 2355.252781][T21292] az6027: no front-end attached [ 2355.252781][T21292] [ 2355.262439][T15659] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2355.269894][T21292] az6027: usb out operation failed. (-71) [ 2355.276607][T21292] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2355.288011][T21292] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input77 [ 2355.290198][T20609] nzxt-kraken2 0003:1E71:170E.0015: item fetching failed at offset 2/5 [ 2355.308889][T21292] dvb-usb: schedule remote query interval to 400 msecs. [ 2355.314315][T20609] nzxt-kraken2 0003:1E71:170E.0015: hid parse failed with -22 [ 2355.324572][T20609] nzxt-kraken2 0003:1E71:170E.0015: probe with driver nzxt-kraken2 failed with error -22 [ 2355.334650][T21292] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2355.353297][T21292] usb 9-1: USB disconnect, device number 21 [ 2355.394269][T21292] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2355.421433][T20609] dvb-usb: bulk message failed: -22 (1/0) [ 2355.430267][T20609] dvb-usb: error while querying for an remote control event. [ 2355.444696][T21290] usb 6-1: USB disconnect, device number 34 [ 2355.466329][T21290] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2355.515124][T20609] usb 10-1: USB disconnect, device number 24 [ 2356.200644][T31550] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5442'. [ 2356.310269][T21290] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2356.340157][T21292] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2356.469762][T21290] usb 6-1: Using ep0 maxpacket: 32 [ 2356.476769][T21290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2356.490272][T21290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2356.502916][T21290] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2356.512829][T21292] usb 10-1: Using ep0 maxpacket: 8 [ 2356.518766][T21290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.529043][T21292] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2356.545553][T21292] usb 10-1: config 4 interface 0 has no altsetting 0 [ 2356.555101][T21292] usb 10-1: string descriptor 0 read error: -22 [ 2356.562113][T21292] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2356.572131][T21290] usb 6-1: config 0 descriptor?? [ 2356.577273][T21292] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2356.615292][T21292] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2356.624907][T21292] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2356.636125][T21292] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2356.644451][T21292] usb 10-1: media controller created [ 2356.680920][T21292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2356.870155][T21292] zl10353_read_register: readreg error (reg=127, ret==0) [ 2356.949114][T21292] usb 10-1: USB disconnect, device number 25 [ 2357.013139][T21290] koneplus 0003:1E7D:2D51.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 2357.196167][T31542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2357.205291][T31542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2357.227015][T21290] koneplus 0003:1E7D:2D51.0016: couldn't init struct koneplus_device [ 2357.246003][T31568] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5450'. [ 2357.276425][T21290] koneplus 0003:1E7D:2D51.0016: couldn't install mouse [ 2357.295760][T21290] koneplus 0003:1E7D:2D51.0016: probe with driver koneplus failed with error -71 [ 2357.315012][T21290] usb 6-1: USB disconnect, device number 35 [ 2357.330739][T20609] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2357.499473][T20609] usb 2-1: Using ep0 maxpacket: 8 [ 2357.506246][T20609] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2357.516635][T20609] usb 2-1: config 0 has no interface number 0 [ 2357.526868][T20609] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2357.549933][T20609] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2357.559780][T20609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.569768][T20609] usb 2-1: config 0 descriptor?? [ 2357.593129][T20609] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2357.800481][T20609] usb 2-1: USB disconnect, device number 36 [ 2358.096887][T31589] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5457'. [ 2358.169757][T15659] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2358.340019][T15659] usb 6-1: Using ep0 maxpacket: 8 [ 2358.404831][T15659] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2358.428843][T15659] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2358.454886][T15659] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2358.465166][T15659] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2358.475287][T15659] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2358.498701][T15659] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2358.649331][T15659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.689419][T20609] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2358.705914][T31604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5459'. [ 2358.849419][T20609] usb 2-1: Using ep0 maxpacket: 32 [ 2358.875254][T20609] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2358.899403][T15659] usb 6-1: usb_control_msg returned -32 [ 2358.905848][T20609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.918783][T15659] usbtmc 6-1:16.0: can't read capabilities [ 2358.933796][T20609] usb 2-1: Product: syz [ 2358.947338][T20609] usb 2-1: Manufacturer: syz [ 2358.961506][T20609] usb 2-1: SerialNumber: syz [ 2358.974320][T20609] usb 2-1: config 0 descriptor?? [ 2358.984201][T20609] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2359.109975][T21290] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 2359.261724][T21290] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2359.269167][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2359.300875][T21290] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2359.316901][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2359.328684][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2359.358248][T21290] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2359.368589][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2359.417021][T21290] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2359.445993][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2359.467558][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2359.596675][T21290] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2359.639920][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2359.654493][T21290] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2359.672372][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2359.684103][T21290] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2359.698737][T21290] usb 9-1: string descriptor 0 read error: -22 [ 2359.705589][T21290] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2359.715502][T21290] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.733181][T21290] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2359.961988][T21290] usb 9-1: USB disconnect, device number 22 [ 2359.998061][T20609] gspca_ov534_9: reg_w failed -71 [ 2360.339612][T20609] gspca_ov534_9: Unknown sensor 0000 [ 2360.339720][T20609] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 2360.365671][T20609] usb 2-1: USB disconnect, device number 37 [ 2360.503429][T31644] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5470'. [ 2360.829574][T20609] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2360.837216][T15660] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2360.925126][T15659] usb 6-1: USB disconnect, device number 36 [ 2361.009802][T20609] usb 2-1: Using ep0 maxpacket: 32 [ 2361.022251][T15660] usb 9-1: no configurations [ 2361.036212][T15660] usb 9-1: can't read configurations, error -22 [ 2361.046001][T20609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2361.059932][T20609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2361.069830][T20609] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2361.078902][T20609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2361.090095][T20609] usb 2-1: config 0 descriptor?? [ 2361.096677][T20609] hub 2-1:0.0: USB hub found [ 2361.179733][T15660] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2361.301623][T20609] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 2361.340194][T15660] usb 9-1: no configurations [ 2361.374340][T15660] usb 9-1: can't read configurations, error -22 [ 2361.444716][T31657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5475'. [ 2361.458262][T15660] usb usb9-port1: attempt power cycle [ 2361.724461][T20609] usbhid 2-1:0.0: can't add hid device: -71 [ 2361.730533][T20609] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2361.787394][T20609] usb 2-1: USB disconnect, device number 38 [ 2361.819810][T15660] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2361.850350][T15660] usb 9-1: no configurations [ 2361.854967][T15660] usb 9-1: can't read configurations, error -22 [ 2362.030040][T15660] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2362.060512][T15660] usb 9-1: no configurations [ 2362.072351][T15660] usb 9-1: can't read configurations, error -22 [ 2362.084137][T15660] usb usb9-port1: unable to enumerate USB device [ 2362.728770][T31666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2362.735227][T31666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2362.741786][T31666] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2362.747799][T31666] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 2362.878731][T31675] vlan2: entered allmulticast mode [ 2362.884884][T31675] bond0: entered allmulticast mode [ 2362.890636][T31675] bond_slave_0: entered allmulticast mode [ 2362.896388][T31675] bond_slave_1: entered allmulticast mode [ 2362.916934][T31673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2363.092855][ T30] audit: type=1400 audit(1756518495.667:3775): avc: denied { ioctl } for pid=31683 comm="syz.1.5483" path="socket:[122087]" dev="sockfs" ino=122087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2363.210359][ T30] audit: type=1800 audit(1756518495.777:3776): pid=31686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5481" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 2363.629963][T21292] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2363.639844][ T30] audit: type=1800 audit(1756518496.197:3777): pid=31698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5486" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 2363.831782][T21292] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2363.866843][T21292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2363.917816][T21292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2364.075038][T21292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2364.076600][T17702] Bluetooth: hci1: command 0x0405 tx timeout [ 2364.108535][T21292] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2364.226715][T21292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.347324][T21292] usb 2-1: config 0 descriptor?? [ 2364.791726][T17702] Bluetooth: hci2: command 0x0405 tx timeout [ 2364.797779][T17702] Bluetooth: hci7: command 0x0c1a tx timeout [ 2365.291438][T21292] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 2365.491845][T21292] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2365.581747][T21292] usb 2-1: USB disconnect, device number 39 [ 2365.706539][ T30] audit: type=1400 audit(1756518498.277:3778): avc: denied { read } for pid=31731 comm="syz.5.5496" path="socket:[122115]" dev="sockfs" ino=122115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2365.756527][ T30] audit: type=1400 audit(1756518498.327:3779): avc: denied { map } for pid=31731 comm="syz.5.5496" path="socket:[122122]" dev="sockfs" ino=122122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2365.802381][T31737] : left promiscuous mode [ 2366.289964][T15660] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 2366.371018][ T30] audit: type=1800 audit(1756518498.927:3780): pid=31760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.5501" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 2366.410961][T31763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5499'. [ 2366.464225][T15660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 2366.487651][T15660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2366.528460][T15660] usb 9-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 2366.556111][T15660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.583058][T15660] usb 9-1: config 0 descriptor?? [ 2366.600476][T31742] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2366.883403][ T30] audit: type=1800 audit(1756518499.447:3781): pid=31772 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5506" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 2367.080027][T15660] hid-generic 0003:0486:0185.0018: hidraw0: USB HID v0.08 Device [HID 0486:0185] on usb-dummy_hcd.8-1/input0 [ 2367.237566][T15660] usb 9-1: USB disconnect, device number 27 [ 2367.340612][ T5861] Bluetooth: hci7: command 0x0c1a tx timeout [ 2368.729888][T21292] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2368.880991][T21292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2368.940183][T21292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2368.973568][T21292] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2368.997243][T21292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2369.032443][T21292] usb 2-1: config 0 descriptor?? [ 2369.574441][T21292] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 2369.713142][T21292] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 2369.766476][T21292] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 2369.790428][T21292] usb 2-1: USB disconnect, device number 40 [ 2369.858645][T21292] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 2370.294739][T31833] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5524'. [ 2370.407733][T31836] Illegal XDP return value 4294967274 on prog (id 659) dev syz_tun, expect packet loss! [ 2370.420573][T21292] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2370.641361][T21292] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2370.652409][T21292] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2370.670225][T21292] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2370.689506][T21292] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2370.708693][T21292] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2370.726758][T21292] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2370.742348][T21292] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2370.802081][T21292] usb 10-1: Product: syz [ 2370.891425][T15660] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 2370.918712][T21292] usb 10-1: Manufacturer: syz [ 2370.929893][T21292] cdc_wdm 10-1:1.0: skipping garbage [ 2370.935259][T21292] cdc_wdm 10-1:1.0: skipping garbage [ 2370.944839][T21292] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2370.953621][T21292] cdc_wdm 10-1:1.0: Unknown control protocol [ 2371.443845][T15660] usb 2-1: config 9 has an invalid interface number: 81 but max is 0 [ 2371.452281][T15660] usb 2-1: config 9 has no interface number 0 [ 2371.458536][T15660] usb 2-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2371.469871][T15660] usb 2-1: config 9 interface 81 has no altsetting 0 [ 2371.478691][T15660] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 2371.488117][T15660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.496481][T15660] usb 2-1: Product: syz [ 2371.502642][T15660] usb 2-1: Manufacturer: syz [ 2371.507288][T15660] usb 2-1: SerialNumber: syz [ 2371.516054][T31841] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2371.630163][T15665] usb 10-1: USB disconnect, device number 26 [ 2371.730262][T15660] usbserial_generic 2-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 2371.747375][T15660] usbserial_generic 2-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 2371.758694][T15660] usbserial_generic 2-1:9.81: generic converter detected [ 2371.776360][T15660] usb 2-1: generic converter now attached to ttyUSB0 [ 2371.794389][T15660] usb 2-1: generic converter now attached to ttyUSB1 [ 2371.803935][T15660] usb 2-1: USB disconnect, device number 41 [ 2371.814815][T15660] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 2371.828130][T15660] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 2371.837618][T15660] usbserial_generic 2-1:9.81: device disconnected [ 2372.059929][T15667] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2372.211229][T15667] usb 6-1: Using ep0 maxpacket: 8 [ 2372.220253][T15667] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2372.231898][T15667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.243733][T15667] usb 6-1: Product: syz [ 2372.249967][T15667] usb 6-1: Manufacturer: syz [ 2372.257089][T15667] usb 6-1: SerialNumber: syz [ 2372.283775][T15667] usb 6-1: config 0 descriptor?? [ 2372.324500][T15667] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2372.757302][T31869] IPVS: length: 24 != 792 [ 2372.797783][T15665] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 2372.952952][T15665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2372.976711][T15665] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2372.986660][T15665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.997320][T15665] usb 2-1: config 0 descriptor?? [ 2373.008822][T31868] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2373.177046][T15667] gspca_sq930x: ucbus_write failed -71 [ 2373.400137][T15667] gspca_sq930x: Sensor ov9630 not yet treated [ 2373.406465][T15667] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 2373.456153][T15667] usb 6-1: USB disconnect, device number 37 [ 2373.488543][T15665] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2374.182619][T15660] usb 2-1: USB disconnect, device number 42 [ 2374.256672][ T30] audit: type=1800 audit(1756518506.827:3782): pid=31876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.5540" name="SYSV00000000" dev="tmpfs" ino=8 res=0 errno=0 [ 2374.779550][T15660] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2374.953444][T15660] usb 9-1: Using ep0 maxpacket: 32 [ 2374.961773][T15660] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2374.979536][T15660] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2374.997317][T15660] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2375.007047][T15660] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2375.034539][T15660] usb 9-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 2375.054802][T15660] usb 9-1: Product: syz [ 2375.068396][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 2375.078815][T15660] usb 9-1: Manufacturer: syz [ 2375.086690][T15660] usb 9-1: SerialNumber: syz [ 2375.093611][T15660] usb 9-1: config 0 descriptor?? [ 2375.120464][T31922] IPVS: length: 24 != 792 [ 2375.216798][ T30] audit: type=1800 audit(1756518507.787:3783): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5552" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 2375.238118][ C1] vkms_vblank_simulate: vblank timer overrun [ 2375.296547][T31930] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5553'. [ 2375.307218][T31930] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5553'. [ 2375.529145][T15660] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 2375.685096][T15667] Process accounting resumed [ 2375.937301][T15660] gs_usb 9-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 2375.973065][T15660] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -22 [ 2376.213533][T15660] usb 9-1: USB disconnect, device number 28 [ 2376.323832][T31935] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5554'. [ 2376.606870][ T30] audit: type=1400 audit(1756518509.147:3784): avc: denied { connect } for pid=31945 comm="syz.9.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2376.655826][ T30] audit: type=1400 audit(1756518509.227:3785): avc: denied { module_load } for pid=31947 comm="syz.9.5559" path="/sys/power/wakeup_count" dev="sysfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 2376.781500][T28427] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2376.875372][T17702] Bluetooth: hci2: unexpected event for opcode 0x0c1d [ 2376.941678][T28427] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2376.965992][T28427] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2377.002968][T28427] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2377.023699][T28427] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2377.048781][T28427] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2377.094693][T28427] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2377.117501][T28427] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2377.151048][T28427] usb 6-1: Product: syz [ 2377.168688][T28427] usb 6-1: Manufacturer: syz [ 2377.179597][T15660] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2377.201056][T28427] cdc_wdm 6-1:1.0: skipping garbage [ 2377.213817][T28427] cdc_wdm 6-1:1.0: skipping garbage [ 2377.230028][T28427] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2377.247931][T28427] cdc_wdm 6-1:1.0: Unknown control protocol [ 2377.478636][T15660] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 2377.723072][T15660] usb 9-1: config 1 has no interface number 0 [ 2377.731804][T31976] IPVS: length: 24 != 792 [ 2377.736196][T15660] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2377.747905][T15660] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2377.757947][T15660] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2377.796871][T15660] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2377.877759][T15660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.889116][T15660] usb 9-1: Product: syz [ 2377.897954][T15660] usb 9-1: Manufacturer: syz [ 2377.929858][T15660] usb 9-1: SerialNumber: syz [ 2377.993246][T31958] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2378.245388][T31958] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2378.483244][T15660] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 2378.635706][T31989] netlink: 'syz.9.5571': attribute type 29 has an invalid length. [ 2378.656557][T31989] netlink: 'syz.9.5571': attribute type 29 has an invalid length. [ 2379.118995][T28427] usb 9-1: USB disconnect, device number 29 [ 2379.139221][T28427] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem [ 2379.221031][T28427] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 2379.489805][T21292] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2379.552157][T28427] usb 6-1: USB disconnect, device number 38 [ 2379.860173][T21292] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2379.873067][T21292] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2379.885084][T21292] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2379.895355][T21292] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2379.908570][T21292] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2379.918588][T21292] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.030139][T21292] usb 10-1: config 0 descriptor?? [ 2380.180381][T32007] kvm: Disabled LAPIC found during irq injection [ 2380.306828][ T30] audit: type=1800 audit(1756518512.877:3786): pid=32018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5576" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 2380.472928][T21292] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 2380.737124][T15659] usb 10-1: USB disconnect, device number 27 [ 2380.955779][T17702] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2380.965405][T17702] Bluetooth: hci2: Injecting HCI hardware error event [ 2380.975476][T17702] Bluetooth: hci2: hardware error 0x00 [ 2381.622870][T32054] loop6: detected capacity change from 0 to 7 [ 2381.646013][T32054] Dev loop6: unable to read RDB block 7 [ 2381.726560][T32054] loop6: unable to read partition table [ 2381.736813][T32054] loop6: partition table beyond EOD, truncated [ 2381.747515][T32054] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2381.759635][T15660] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2381.920522][T15660] usb 9-1: Using ep0 maxpacket: 32 [ 2381.930738][T15660] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 2381.938906][T15660] usb 9-1: config 0 has no interface number 0 [ 2381.953221][T15660] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2381.968627][T15660] usb 9-1: config 0 interface 85 has no altsetting 0 [ 2381.980575][T15660] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2381.993730][T15660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.005743][T15660] usb 9-1: Product: syz [ 2382.020897][T15660] usb 9-1: Manufacturer: syz [ 2382.025938][T15660] usb 9-1: SerialNumber: syz [ 2382.047300][T15660] usb 9-1: config 0 descriptor?? [ 2382.589587][T15659] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 2382.763116][T15659] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2382.804549][T15659] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2382.826322][T15660] appletouch 9-1:0.85: Geyser mode initialized. [ 2382.849221][T15660] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input79 [ 2382.863676][T15659] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2382.894820][T15659] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.166719][T15659] usb 10-1: usb_control_msg returned -32 [ 2383.180370][T17702] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2383.205334][T15659] usbtmc 10-1:16.0: can't read capabilities [ 2383.474737][T32095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5603'. [ 2383.669516][T15660] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2383.829467][T15660] usb 2-1: Using ep0 maxpacket: 16 [ 2383.858246][T15660] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2383.873963][T15660] usb 2-1: too many configurations: 233, using maximum allowed: 8 [ 2383.886542][T15660] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2383.898099][T15660] usb 2-1: can't read configurations, error -71 [ 2383.944684][ T30] audit: type=1800 audit(1756518516.517:3787): pid=32116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5606" name="SYSV00000000" dev="tmpfs" ino=38 res=0 errno=0 [ 2384.598008][T21292] usb 9-1: USB disconnect, device number 30 [ 2384.995406][T21292] appletouch 9-1:0.85: input: appletouch disconnected [ 2385.373007][T21292] usb 10-1: USB disconnect, device number 28 [ 2385.429357][T15660] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2385.628269][T15660] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2385.636820][T15660] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2385.654306][T15660] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2385.673917][T15660] usb 6-1: config 220 has no interface number 2 [ 2385.680498][T15660] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2385.706971][T15660] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2385.728489][T15660] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2385.961336][T15660] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2385.985393][T15660] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2386.029680][T15660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.038991][T15660] usb 6-1: Product: syz [ 2386.043532][T15660] usb 6-1: Manufacturer: syz [ 2386.049781][T15660] usb 6-1: SerialNumber: syz [ 2386.068713][T32150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5617'. [ 2386.268422][T15660] usb 6-1: selecting invalid altsetting 0 [ 2386.275249][T15660] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 2386.281776][T20609] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2386.331800][T15660] usb 6-1: No valid video chain found. [ 2386.369972][T15660] usb 6-1: selecting invalid altsetting 0 [ 2386.411228][T15660] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2386.479618][T20609] usb 9-1: Using ep0 maxpacket: 32 [ 2386.578565][T15660] usb 6-1: USB disconnect, device number 39 [ 2386.597273][T20609] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2386.910297][T20609] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2386.931132][T20609] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2386.964466][T20609] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2386.979754][T20609] usb 9-1: config 0 descriptor?? [ 2386.998618][T20609] hub 9-1:0.0: USB hub found [ 2387.253636][T20609] hub 9-1:0.0: 1 port detected [ 2387.966848][T20609] hub 9-1:0.0: activate --> -90 [ 2388.078549][ T30] audit: type=1800 audit(1756518520.647:3788): pid=32172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5626" name="SYSV00000000" dev="tmpfs" ino=39 res=0 errno=0 [ 2388.368500][T21292] usb 9-1: USB disconnect, device number 31 [ 2388.689396][T20609] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2388.849534][T20609] usb 2-1: Using ep0 maxpacket: 8 [ 2388.857972][T20609] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2388.868217][T20609] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2388.878200][T20609] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2388.888218][T20609] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2388.903940][T20609] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2388.913651][T20609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.191664][T20609] usb 2-1: GET_CAPABILITIES returned 0 [ 2389.337033][T15660] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2389.407186][T20609] usbtmc 2-1:16.0: can't read capabilities [ 2389.426555][T20609] usb 2-1: USB disconnect, device number 45 [ 2389.569412][T15660] usb 9-1: Using ep0 maxpacket: 8 [ 2389.612526][T15660] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2389.623132][T15660] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2389.633131][T15660] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2389.644328][T15660] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2389.658353][T15660] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2389.669258][T15660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.882657][T15660] usb 9-1: GET_CAPABILITIES returned 0 [ 2389.905733][T15660] usbtmc 9-1:16.0: can't read capabilities [ 2389.919542][T32209] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2390.084973][T15660] usb 9-1: USB disconnect, device number 32 [ 2391.559954][T28427] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2391.669756][T20609] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2391.721452][T28427] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2391.730568][T28427] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2391.740844][T28427] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2391.752192][T28427] usb 6-1: config 220 has no interface number 2 [ 2391.758843][T28427] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2391.772906][T28427] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2391.780448][T28427] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2391.787571][T28427] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2391.797895][T28427] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2391.807694][T28427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.816371][T28427] usb 6-1: Product: syz [ 2391.821328][T28427] usb 6-1: Manufacturer: syz [ 2391.826055][T28427] usb 6-1: SerialNumber: syz [ 2391.861296][T20609] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2391.875452][T20609] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2391.898002][T20609] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2391.921812][T20609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2391.941265][T20609] usb 2-1: SerialNumber: syz [ 2392.048791][T28427] usb 6-1: selecting invalid altsetting 0 [ 2392.070411][T28427] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 2392.076933][T28427] usb 6-1: No valid video chain found. [ 2392.087401][T28427] usb 6-1: selecting invalid altsetting 0 [ 2392.094170][T28427] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2392.105745][T28427] usb 6-1: USB disconnect, device number 40 [ 2392.213273][T20609] usb 2-1: 0:2 : does not exist [ 2392.269074][T20609] usb 2-1: USB disconnect, device number 46 [ 2392.875943][T32284] loop2: detected capacity change from 0 to 6 [ 2392.897289][T32284] Dev loop2: unable to read RDB block 6 [ 2392.923690][T32284] loop2: unable to read partition table [ 2392.944434][T32284] loop2: partition table beyond EOD, truncated [ 2392.963246][T32284] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2393.359379][T15660] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2393.549884][T15660] usb 10-1: Using ep0 maxpacket: 32 [ 2393.570385][T15660] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2393.583779][T32297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5663'. [ 2393.593917][T15660] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2393.610022][T15660] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2393.630058][T15660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.630552][T17702] block nbd0: Receive control failed (result -107) [ 2393.681407][T15660] usb 10-1: config 0 descriptor?? [ 2393.820401][ T30] audit: type=1400 audit(1756518526.387:3789): avc: denied { ioctl } for pid=32302 comm="syz.0.5668" path="socket:[124070]" dev="sockfs" ino=124070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2393.982464][T32310] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5670'. [ 2394.025888][T32310] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5670'. [ 2394.167931][T15660] hid_parser_main: 8 callbacks suppressed [ 2394.167945][T15660] ft260 0003:0403:6030.001D: unknown main item tag 0x7 [ 2394.236670][T32310] fuse: Unknown parameter 'grou00000000000000000000' [ 2394.254088][T15659] Process accounting resumed [ 2394.402727][T15660] ft260 0003:0403:6030.001D: chip code: 6424 8183 [ 2394.506970][T32321] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 2394.532050][T32321] SELinux: failed to load policy [ 2394.603866][T15660] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 2395.016410][T15660] ft260 0003:0403:6030.001D: failed to retrieve status: -71 [ 2395.025873][T15660] ft260 0003:0403:6030.001D: failed to reset I2C controller: -71 [ 2395.038809][T15660] usb 10-1: USB disconnect, device number 29 [ 2395.374262][ T30] audit: type=1400 audit(1756518527.947:3790): avc: denied { listen } for pid=32328 comm="syz.8.5678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2395.800133][T28427] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2395.970268][T28427] usb 9-1: Using ep0 maxpacket: 32 [ 2395.979097][T28427] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2395.990580][T28427] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2396.008446][T28427] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2396.047245][T28427] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.077670][T28427] usb 9-1: config 0 descriptor?? [ 2396.096082][T28427] hub 9-1:0.0: USB hub found [ 2396.122237][T32354] input: syz0 as /devices/virtual/input/input81 [ 2396.306881][T28427] hub 9-1:0.0: 1 port detected [ 2396.498379][ T30] audit: type=1400 audit(1756518529.057:3791): avc: denied { getopt } for pid=32356 comm="syz.5.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2396.935015][T15667] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2396.952540][T28427] hub 9-1:0.0: activate --> -90 [ 2397.101182][T15667] usb 6-1: Using ep0 maxpacket: 16 [ 2397.126078][T15667] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2397.160561][T28427] usb 9-1-port1: config error [ 2397.166200][T15667] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2397.186174][T15667] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2397.200195][T15667] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2397.206919][T15667] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2397.221690][T15667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.233616][T15667] usb 6-1: config 0 descriptor?? [ 2397.363778][T21292] usb 9-1: USB disconnect, device number 33 [ 2397.371058][T28427] usb 9-1: Failed to suspend device, error -19 [ 2397.463319][T32379] netlink: 'syz.1.5697': attribute type 1 has an invalid length. [ 2397.474918][T32375] kvm: Disabled LAPIC found during irq injection [ 2397.658752][T15667] hid (null): nested delimiters [ 2397.667406][T15667] hid (null): nested delimiters [ 2397.674659][T15667] hid (null): nested delimiters [ 2397.712983][T28168] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 2397.764423][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5696'. [ 2397.914849][T15667] usb 6-1: USB disconnect, device number 41 [ 2398.239575][T15659] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 2398.425885][T15659] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2398.466833][T15659] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.550695][T15659] usb 9-1: config 0 descriptor?? [ 2398.667683][T32408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5706'. [ 2398.681799][T32408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5706'. [ 2398.709399][T21292] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2398.869944][T21292] usb 6-1: Using ep0 maxpacket: 16 [ 2398.890466][T21292] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2398.929983][T21292] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2398.997165][T21292] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2399.062036][T21292] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2399.079207][T21292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.122924][T21292] usb 6-1: Product: syz [ 2399.127840][T32411] fuse: Unknown parameter 'grou00000000000000000000' [ 2399.152399][T21292] usb 6-1: Manufacturer: syz [ 2399.174259][T21292] usb 6-1: SerialNumber: syz [ 2399.324202][T28427] Process accounting resumed [ 2399.641513][T21292] usb 6-1: 0:2 : does not exist [ 2399.859203][T15659] pegasus 9-1:0.0: can't reset MAC [ 2399.909774][T15659] pegasus 9-1:0.0: probe with driver pegasus failed with error -5 [ 2399.927528][T15659] usb 9-1: USB disconnect, device number 34 [ 2400.139951][T28427] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2400.301049][T28427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2400.317876][T28427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2400.340437][T28427] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2400.352662][T28427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2400.364190][T28427] usb 2-1: config 0 descriptor?? [ 2400.455525][T21292] usb 6-1: USB disconnect, device number 42 [ 2400.651104][T32435] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2400.959407][T15659] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2401.007227][T28427] usb 2-1: language id specifier not provided by device, defaulting to English [ 2401.094248][ T30] audit: type=1400 audit(1756518533.667:3792): avc: denied { mounton } for pid=32438 comm="syz.5.5717" path="/proc/2275/task" dev="proc" ino=123821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2401.126087][T15659] usb 9-1: Using ep0 maxpacket: 16 [ 2401.133125][T15659] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 2401.149395][T15659] usb 9-1: config 0 has no interface number 0 [ 2401.163159][T15659] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2401.189310][T15659] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2401.219592][T15659] usb 9-1: config 0 interface 41 has no altsetting 0 [ 2401.231309][T15659] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2401.289740][T15659] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.309992][T15659] usb 9-1: Product: syz [ 2401.315580][T15659] usb 9-1: Manufacturer: syz [ 2401.327747][T15659] usb 9-1: SerialNumber: syz [ 2401.344444][T15659] usb 9-1: config 0 descriptor?? [ 2401.350168][T32437] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2401.357455][T32437] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2401.426592][T32444] overlayfs: failed to clone upperpath [ 2401.459535][T15667] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 2401.576909][T32437] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2401.584559][T32437] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2401.613594][T28427] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #100: -71 [ 2401.623328][T28427] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 2401.632628][T28427] uclogic 0003:256C:006D.001F: failed probing pen v1 parameters: -71 [ 2401.641539][T28427] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 2401.649247][T28427] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 2401.660186][T15667] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2401.670834][T28427] usb 2-1: USB disconnect, device number 47 [ 2401.679003][T15667] usb 10-1: not running at top speed; connect to a high speed hub [ 2401.689948][T15667] usb 10-1: config 1 has an invalid interface number: 138 but max is 0 [ 2401.698242][T15667] usb 10-1: config 1 has no interface number 0 [ 2401.704744][T15667] usb 10-1: config 1 interface 138 has no altsetting 0 [ 2401.714550][T15667] usb 10-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 2401.724224][T15667] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.733244][T15667] usb 10-1: Product: syz [ 2401.737505][T15667] usb 10-1: Manufacturer: syz [ 2401.743438][T15667] usb 10-1: SerialNumber: syz [ 2401.970364][T15667] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2402.041342][T15667] usb 10-1: USB disconnect, device number 30 [ 2402.221392][T15659] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2402.267006][T32456] netlink: 'syz.1.5723': attribute type 4 has an invalid length. [ 2402.488145][T15659] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 2402.566521][T15659] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 2402.596799][T32464] IPv4: Oversized IP packet from 127.202.26.0 [ 2402.599558][T15659] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 2402.691201][T15659] usb 9-1: USB disconnect, device number 35 [ 2403.145825][T32480] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5731'. [ 2403.174221][T32480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5731'. [ 2403.354246][T32492] fuse: Unknown parameter 'group_i00000000000000000000' [ 2403.421455][T32497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'. [ 2403.443011][T15659] Process accounting resumed [ 2403.541727][T32500] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5730'. [ 2404.883809][T32517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5742'. [ 2404.948573][T32517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5742'. [ 2405.013082][T32517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5742'. [ 2405.036957][T32517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5742'. [ 2405.059308][T15667] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 2405.222322][T15667] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2405.292272][T15667] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2405.456551][T15667] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2405.498013][T15667] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.672231][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.749621][T15667] usb 10-1: usb_control_msg returned -32 [ 2405.771892][T15667] usbtmc 10-1:16.0: can't read capabilities [ 2406.068120][T15660] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2406.219567][T15660] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2406.231533][T15660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2406.243121][T15660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2406.254797][T15660] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2406.268226][T15660] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2406.277566][T15660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.287065][T15660] usb 6-1: config 0 descriptor?? [ 2406.296684][T32527] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2406.379959][T32532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5748'. [ 2406.390270][T32532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5748'. [ 2406.446236][T32532] fuse: Unknown parameter 'group_i00000000000000000000' [ 2406.461445][T15659] Process accounting resumed [ 2406.753109][T15660] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 2406.788439][T15660] plantronics 0003:047F:FFFF.0020: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2407.035065][T15667] usb 6-1: USB disconnect, device number 43 [ 2407.406538][T32553] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2407.429366][T32553] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 2407.483860][T32557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5759'. [ 2407.496247][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5759'. [ 2407.536811][ T30] audit: type=1400 audit(1756518546.099:3793): avc: denied { bind } for pid=32559 comm="syz.1.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2407.574585][ T30] audit: type=1400 audit(1756518546.129:3794): avc: denied { accept } for pid=32559 comm="syz.1.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2407.635860][T32557] fuse: Unknown parameter 'group_id00000000000000000000' [ 2407.664038][T15660] Process accounting resumed [ 2407.783098][T15667] usb 10-1: USB disconnect, device number 31 [ 2407.980655][T32585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5762'. [ 2408.000956][ T30] audit: type=1400 audit(1756518546.569:3795): avc: denied { append } for pid=32583 comm="syz.1.5770" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2408.062906][T15660] kernel read not supported for file /admmidi2 (pid: 15660 comm: kworker/1:8) [ 2408.794989][T32613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5776'. [ 2408.955650][T32613] fuse: Unknown parameter 'group_id00000000000000000000' [ 2408.976759][T15659] Process accounting resumed [ 2409.540491][ T30] audit: type=1800 audit(1756518548.100:3796): pid=32627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5782" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 2410.510110][T32666] __nla_validate_parse: 2 callbacks suppressed [ 2410.510123][T32666] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5788'. [ 2411.675698][T28427] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2411.830361][T28427] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2411.840313][T28427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.854673][T28427] usb 6-1: config 0 descriptor?? [ 2412.026277][ T30] audit: type=1400 audit(1756518550.601:3797): avc: denied { mounton } for pid=32705 comm="syz.0.5802" path="/1218/file0" dev="tmpfs" ino=7075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2412.335486][ T30] audit: type=1400 audit(1756518550.901:3798): avc: denied { setattr } for pid=32705 comm="syz.0.5802" name="file0" dev="tmpfs" ino=7075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2412.734848][T15660] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2413.115087][T28427] usb 6-1: Cannot set autoneg [ 2413.119933][T28427] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 2413.254463][T15660] usb 2-1: Using ep0 maxpacket: 32 [ 2413.268527][T15660] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 2413.277129][T15660] usb 2-1: config 0 has no interface number 0 [ 2413.306302][T15660] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2413.322190][T15660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.343362][T15660] usb 2-1: Product: syz [ 2413.347782][T15660] usb 2-1: Manufacturer: syz [ 2413.352359][T15660] usb 2-1: SerialNumber: syz [ 2413.358738][T15660] usb 2-1: config 0 descriptor?? [ 2413.367741][T15660] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2413.381354][T15659] usb 6-1: USB disconnect, device number 44 [ 2413.576118][T15660] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2413.603772][T15660] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2413.705791][ T30] audit: type=1400 audit(1756518552.272:3799): avc: denied { name_connect } for pid=32734 comm="syz.0.5811" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 2414.001629][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2414.080660][T15660] usb 2-1: USB disconnect, device number 48 [ 2414.120285][T15660] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2414.158038][T15660] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2414.189979][T15660] quatech2 2-1:0.51: device disconnected [ 2414.515376][T32760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5816'. [ 2414.611781][T32764] netlink: 'syz.9.5818': attribute type 1 has an invalid length. [ 2414.692312][T32764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2414.746693][T32766] bond2: (slave ip6erspan0): making interface the new active one [ 2414.776153][T32766] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 2415.123516][T15660] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2415.293448][T15660] usb 10-1: Using ep0 maxpacket: 32 [ 2415.307785][T15660] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2415.325212][T15660] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2415.348410][T15660] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2415.373688][T15660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.398830][T15660] usb 10-1: config 0 descriptor?? [ 2415.731459][ T322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5824'. [ 2415.893750][T15659] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2415.921132][T15660] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 2415.952049][T15660] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 2415.974812][T15660] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 2415.988767][T15660] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 2416.030711][T15660] koneplus 0003:1E7D:2D51.0021: unknown main item tag 0x0 [ 2416.043302][T15660] koneplus 0003:1E7D:2D51.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.9-1/input0 [ 2416.115328][T15659] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 2416.138702][T15659] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.171571][T15659] usb 9-1: config 0 has no interfaces? [ 2416.191778][T15659] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2416.201304][T15659] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.218325][T15659] usb 9-1: config 0 descriptor?? [ 2416.450054][T28427] usb 10-1: USB disconnect, device number 32 [ 2416.490692][T15660] usb 9-1: USB disconnect, device number 36 [ 2418.505745][ T358] overlayfs: failed to clone upperpath [ 2418.511467][ T356] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5835'. [ 2418.785774][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2418.792263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.800159][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.808012][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.815937][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.823772][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.831678][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.839492][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.847441][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.855295][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.863234][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.871032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.878945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.886784][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.894714][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.902537][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.910418][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.918244][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.926105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.933915][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.941825][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.949615][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.957507][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.965346][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.973224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.981039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2418.988933][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2418.996750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.004635][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.012449][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.020273][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.028136][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.036063][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.043913][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.051803][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.059619][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.067528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.075352][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.083235][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.091067][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.098967][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.106781][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.114690][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.122497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.130372][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.138183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.146053][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.153860][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.161754][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.169555][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.177486][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.185312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.193245][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.201054][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.208977][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.216792][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.224675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.232490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.240356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.248198][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.256094][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.263923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.271784][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.279578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.287482][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.295322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.303256][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.311075][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.318999][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.326825][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.334725][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.342546][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.350405][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.358218][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.366075][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.373880][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.381775][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.389565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.397456][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.405264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.413144][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.420934][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.428846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.436672][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.444602][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.452417][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.460327][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.468169][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.476049][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.483864][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.491764][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.499547][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.507431][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.515247][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.523111][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.530912][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.538800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.546622][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.554495][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2419.562312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2419.762695][ T30] audit: type=1400 audit(1756518558.345:3800): avc: denied { read } for pid=372 comm="syz.5.5842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2419.985939][ T391] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5841'. [ 2421.272612][ T420] SELinux: failed to load policy [ 2422.093561][T21290] lo speed is unknown, defaulting to 1000 [ 2422.101573][T21290] 3yz0: Port: 1 Link DOWN [ 2422.391161][ T449] block nbd1: shutting down sockets [ 2422.523202][T21290] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2422.700409][T21290] usb 6-1: Using ep0 maxpacket: 16 [ 2422.707064][T21290] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2422.715944][T21290] usb 6-1: config 0 has no interface number 0 [ 2422.725022][T21290] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2422.742625][T21290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.751077][T21290] usb 6-1: Product: syz [ 2422.755314][T21290] usb 6-1: Manufacturer: syz [ 2422.760903][T21290] usb 6-1: SerialNumber: syz [ 2422.767062][T21290] usb 6-1: config 0 descriptor?? [ 2422.778537][T21290] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2422.798017][T21290] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 2422.890116][T28427] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2423.047118][T28427] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 2423.083393][T28427] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2423.117900][T21290] usb 6-1: USB disconnect, device number 45 [ 2423.134406][T28427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2423.170172][T28427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2423.196960][T28427] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2423.227756][T28427] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2423.254357][T28427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.313735][T28427] usb 2-1: config 0 descriptor?? [ 2423.330605][ T460] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2423.543222][ T469] overlayfs: failed to clone upperpath [ 2424.045385][T28427] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 2424.056522][ T473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5867'. [ 2424.081391][T28427] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2424.233846][ T473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5867'. [ 2424.308698][T28427] usb 2-1: USB disconnect, device number 49 [ 2424.351952][ T473] fuse: Bad value for 'fd' [ 2424.357777][T15660] Process accounting resumed [ 2425.188699][T15660] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 2425.374518][T15660] usb 10-1: Using ep0 maxpacket: 32 [ 2425.394677][T15660] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2425.405483][T15660] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2425.435261][T15660] usb 10-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2425.448571][T15660] usb 10-1: config 0 interface 0 has no altsetting 1 [ 2425.458333][T15660] usb 10-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 2425.470085][T15660] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.478186][T15660] usb 10-1: Product: syz [ 2425.488711][T15660] usb 10-1: Manufacturer: syz [ 2425.493519][T15660] usb 10-1: SerialNumber: syz [ 2425.514298][T15660] usb 10-1: config 0 descriptor?? [ 2425.531156][T15660] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2425.577422][T15660] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 2425.780999][T15660] usb 10-1: USB disconnect, device number 33 [ 2426.783545][ T527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5881'. [ 2429.036975][T21290] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2429.197181][T21290] usb 6-1: Using ep0 maxpacket: 32 [ 2429.204071][T21290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2429.223968][T21290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2429.235007][T21290] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2429.250477][T21290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.260585][T21290] usb 6-1: config 0 descriptor?? [ 2429.275075][T21290] hub 6-1:0.0: USB hub found [ 2429.492284][T21290] hub 6-1:0.0: 1 port detected [ 2429.692217][ T30] audit: type=1400 audit(1756518568.270:3801): avc: denied { create } for pid=563 comm="syz.0.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2429.735860][ T30] audit: type=1400 audit(1756518568.310:3802): avc: denied { write } for pid=573 comm="syz.1.5895" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2429.896562][T15667] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 2430.048741][T15667] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2430.084057][T15667] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 2430.113622][T15667] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 2430.129651][T15667] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 2430.147183][T15667] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2430.163509][T15667] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 2430.175578][T15667] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.191590][ T585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2430.203820][T21292] hub 6-1:0.0: activate --> -90 [ 2430.211245][T15667] usb 10-1: Product: syz [ 2430.215653][T15667] usb 10-1: Manufacturer: syz [ 2430.221549][T15667] usb 10-1: SerialNumber: syz [ 2430.240097][T15667] usb 10-1: config 0 descriptor?? [ 2430.259142][ T571] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2430.268313][T15667] ati_remote 10-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 2430.616947][T21290] usb 6-1: USB disconnect, device number 46 [ 2430.923100][ T592] lo speed is unknown, defaulting to 1000 [ 2430.932692][ T592] lo speed is unknown, defaulting to 1000 [ 2431.328643][ T605] program syz.5.5905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2431.343367][ T605] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2432.081271][ T620] block nbd1: Attempted send on invalid socket [ 2432.089020][ T620] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.110499][ T620] block nbd1: Attempted send on invalid socket [ 2432.127691][ T620] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.148156][ T620] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2432.188335][ T620] block nbd1: Attempted send on invalid socket [ 2432.198781][ T620] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.211536][ T620] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2432.250255][ T620] block nbd1: Attempted send on invalid socket [ 2432.257131][ T620] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.285322][ T620] block nbd1: Attempted send on invalid socket [ 2432.292331][ T620] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.369478][ T620] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2432.380640][ T620] block nbd1: Attempted send on invalid socket [ 2432.387789][ T620] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.398415][ T620] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2432.410501][ T620] block nbd1: Attempted send on invalid socket [ 2432.428822][ T620] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.451653][ T620] block nbd1: Attempted send on invalid socket [ 2432.460240][ T620] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.474240][ T620] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2432.500114][ T620] block nbd1: Attempted send on invalid socket [ 2432.507412][ T620] I/O error, dev nbd1, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2432.522747][ T620] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2432.533117][ T620] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 2432.733613][T15660] usb 10-1: USB disconnect, device number 34 [ 2433.104332][ T30] audit: type=1400 audit(1756518571.682:3803): avc: denied { unmount } for pid=23299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2433.214181][ T648] syz_tun: entered allmulticast mode [ 2433.225532][ T648] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 2433.234768][ T648] mroute: pending queue full, dropping entries [ 2433.310886][ T652] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 2433.320183][ T652] mroute: pending queue full, dropping entries [ 2433.344002][ T647] syz_tun: left allmulticast mode [ 2433.380375][ T657] syzkaller1: entered promiscuous mode [ 2433.391002][ T657] syzkaller1: entered allmulticast mode [ 2433.517704][T15660] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2433.529149][ T664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5921'. [ 2433.724208][T15660] usb 6-1: Using ep0 maxpacket: 16 [ 2433.744214][T15660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2433.761726][T15660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2433.798716][T15660] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2433.994914][T15660] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2434.024521][T15660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2434.056814][T15660] usb 6-1: config 0 descriptor?? [ 2434.468237][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5927'. [ 2434.536936][T15660] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 2434.568200][T15660] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 2434.580917][T15660] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 2434.601706][T15660] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 2434.620688][T15660] shield 0003:0955:7214.0023: unknown main item tag 0x0 [ 2434.631359][T15660] input: HID 0955:7214 Haptics as /devices/virtual/input/input84 [ 2434.651163][T15660] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 2434.662445][T15660] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 2435.057548][T15659] usb 6-1: USB disconnect, device number 47 [ 2435.063784][T31402] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2435.085906][T31402] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2435.102375][T31402] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2435.129126][T31402] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2435.971904][ T705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2437.460048][ T30] audit: type=1400 audit(1756518576.044:3804): avc: denied { write } for pid=740 comm="syz.9.5947" path="socket:[128058]" dev="sockfs" ino=128058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2437.800431][ T755] overlayfs: failed to clone upperpath [ 2438.259482][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5953'. [ 2438.627038][ T781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5954'. [ 2438.911637][T15667] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2438.949301][ T792] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5959'. [ 2438.998111][ T792] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5959'. [ 2439.063281][T15667] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2439.079491][T15667] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2439.130877][T15667] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2439.175086][T15667] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2439.217883][T15667] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2439.266041][T15667] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2439.305940][T15667] usb 9-1: config 0 descriptor?? [ 2439.742343][T15667] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2440.216646][ T30] audit: type=1400 audit(1756518578.805:3805): avc: denied { listen } for pid=810 comm="syz.9.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2440.243693][ T30] audit: type=1400 audit(1756518578.825:3806): avc: denied { accept } for pid=810 comm="syz.9.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2440.310940][T31402] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2440.461103][T31402] usb 6-1: Using ep0 maxpacket: 16 [ 2440.469824][T31402] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 2440.483760][T31402] usb 6-1: config 0 has no interface number 0 [ 2440.490128][T31402] usb 6-1: config 0 interface 128 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 2440.504746][T31402] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01d3, bcdDevice= 1.16 [ 2440.515248][T31402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.529113][T31402] usb 6-1: Product: syz [ 2440.533586][T31402] usb 6-1: Manufacturer: syz [ 2440.538202][T31402] usb 6-1: SerialNumber: syz [ 2440.545218][T31402] usb 6-1: config 0 descriptor?? [ 2440.551955][ T807] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2440.560460][T31402] ftdi_sio 6-1:0.128: FTDI USB Serial Device converter detected [ 2440.569005][T31402] usb 6-1: Detected SIO [ 2440.574105][T31402] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2440.778173][T21292] usb 6-1: USB disconnect, device number 48 [ 2440.789102][T21292] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2440.799356][T21292] ftdi_sio 6-1:0.128: device disconnected [ 2441.084509][ T814] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5967'. [ 2441.701035][T21292] usb 9-1: USB disconnect, device number 37 [ 2442.018024][ T843] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5979'. [ 2442.046749][ T843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5979'. [ 2442.300977][ T852] fuse: Invalid rootmode [ 2442.337649][T15659] Process accounting resumed [ 2442.403693][ T30] audit: type=1400 audit(1756518580.996:3807): avc: denied { relabelfrom } for pid=854 comm="syz.9.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2442.423411][ C0] vkms_vblank_simulate: vblank timer overrun [ 2442.458815][ T30] audit: type=1400 audit(1756518580.996:3808): avc: denied { relabelto } for pid=854 comm="syz.9.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2442.644044][ T863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5980'. [ 2443.179996][T21292] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2443.331016][T21292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2443.368277][T21292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2443.471734][T21292] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 2443.507613][ T885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5989'. [ 2443.540062][T21292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2443.585185][T21292] usb 9-1: config 0 descriptor?? [ 2444.083727][T21292] razer 0003:1532:010E.0025: unknown main item tag 0x0 [ 2444.105182][T21292] razer 0003:1532:010E.0025: unknown main item tag 0x0 [ 2444.128739][T21292] razer 0003:1532:010E.0025: item fetching failed at offset 2/5 [ 2444.146924][T21292] razer 0003:1532:010E.0025: probe with driver razer failed with error -22 [ 2444.346220][T21292] usb 9-1: USB disconnect, device number 38 [ 2444.440209][ T897] 9pnet_fd: Insufficient options for proto=fd [ 2445.424823][ T30] audit: type=1400 audit(1756518584.008:3809): avc: denied { bind } for pid=930 comm="syz.8.6000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2445.998406][T15667] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2446.151338][T15667] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 2446.166224][T15667] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2446.177337][T15667] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2446.195876][T15667] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2446.231215][T15667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2446.261231][T15667] usb 2-1: config 0 descriptor?? [ 2446.690952][T15667] kovaplus 0003:1E7D:2D50.0026: unknown main item tag 0x0 [ 2446.707748][T15667] kovaplus 0003:1E7D:2D50.0026: unknown main item tag 0x0 [ 2446.737965][T15667] kovaplus 0003:1E7D:2D50.0026: item fetching failed at offset 4/5 [ 2446.768751][T15667] kovaplus 0003:1E7D:2D50.0026: parse failed [ 2446.774855][T15667] kovaplus 0003:1E7D:2D50.0026: probe with driver kovaplus failed with error -22 [ 2446.961638][T15667] usb 2-1: USB disconnect, device number 50 [ 2448.268691][ T991] lo speed is unknown, defaulting to 1000 [ 2448.275761][ T991] lo speed is unknown, defaulting to 1000 [ 2448.903609][ T30] audit: type=1326 audit(1756518587.490:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=989 comm="syz.5.6019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4eecd8ebe9 code=0x0 [ 2449.135986][T15667] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 2449.252792][ T1021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6025'. [ 2449.308594][T15667] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2449.389022][T15667] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.431757][T15667] usb 9-1: config 0 descriptor?? [ 2449.668254][T21292] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2449.828394][T21292] usb 6-1: Using ep0 maxpacket: 32 [ 2449.840551][T21292] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2449.852725][T21292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.864804][T21292] usb 6-1: config 0 descriptor?? [ 2450.324705][T21292] hid-picolcd 0003:04D8:F002.0027: item fetching failed at offset 1/5 [ 2450.408876][T21292] hid-picolcd 0003:04D8:F002.0027: device report parse failed [ 2450.426393][T21292] hid-picolcd 0003:04D8:F002.0027: probe with driver hid-picolcd failed with error -22 [ 2450.543866][T21292] usb 6-1: USB disconnect, device number 49 [ 2450.756816][T15667] pegasus 9-1:0.0: can't reset MAC [ 2450.789201][T15667] pegasus 9-1:0.0: probe with driver pegasus failed with error -5 [ 2451.177656][T15667] usb 9-1: USB disconnect, device number 39 [ 2451.772112][ T1080] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2451.924534][ T30] audit: type=1400 audit(1756518590.511:3811): avc: denied { map } for pid=1078 comm="syz.0.6041" path="socket:[129322]" dev="sockfs" ino=129322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2453.668530][ T1135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940630386 (15762521544 ns) > initial count (6051692324 ns). Using initial count to start timer. [ 2454.282877][ T1156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6061'. [ 2455.492319][ T1186] loop6: detected capacity change from 0 to 7 [ 2455.577542][ T1186] Dev loop6: unable to read RDB block 7 [ 2455.584391][ T1188] overlayfs: failed to clone upperpath [ 2455.590086][ T1186] loop6: AHDI p1 p2 [ 2455.611968][ T1186] loop6: partition table partially beyond EOD, truncated [ 2455.631535][ T1186] loop6: p1 start 926365495 is beyond EOD, truncated [ 2455.843267][T31402] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2455.923765][T21290] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2455.949654][ T1202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6077'. [ 2456.023375][T31402] usb 10-1: Using ep0 maxpacket: 16 [ 2456.046261][T31402] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.074247][T31402] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2456.109654][T31402] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2456.116848][T21290] usb 6-1: Using ep0 maxpacket: 32 [ 2456.136184][T31402] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2456.148127][T21290] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 2456.158023][T21290] usb 6-1: config 0 has no interface number 0 [ 2456.167168][T21290] usb 6-1: config 0 interface 184 has no altsetting 0 [ 2456.176411][T21290] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2456.182903][T31402] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2456.198767][T21290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.207437][T21290] usb 6-1: Product: syz [ 2456.211658][T21290] usb 6-1: Manufacturer: syz [ 2456.216812][T21290] usb 6-1: SerialNumber: syz [ 2456.226484][T21290] usb 6-1: config 0 descriptor?? [ 2456.234986][T31402] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2456.237306][T21290] smsc75xx v1.0.0 [ 2456.255644][T31402] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2456.264176][T20609] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2456.281332][T31402] usb 10-1: Manufacturer: syz [ 2456.289065][T31402] usb 10-1: config 0 descriptor?? [ 2456.441169][T20609] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2456.453593][T20609] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2456.468405][T20609] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2456.491837][T20609] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2456.508604][ T1190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2456.520850][ T1190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2456.537438][T20609] usb 9-1: config 0 descriptor?? [ 2456.622939][T31402] rc_core: IR keymap rc-hauppauge not found [ 2456.631944][T31402] Registered IR keymap rc-empty [ 2456.637738][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.662823][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.683547][T31402] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2456.706196][T31402] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input86 [ 2456.722403][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.752674][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.772828][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.806466][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.843642][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.862655][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.899140][T21290] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2456.902624][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2456.924969][T21290] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2456.939780][T21290] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2456.957063][T21290] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 2456.971425][T21290] usb 6-1: USB disconnect, device number 50 [ 2456.982608][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2457.002587][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2457.032600][T31402] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 2457.093677][T31402] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2457.110617][T31402] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2457.128268][T31402] usb 10-1: USB disconnect, device number 35 [ 2457.167070][T20609] hid-led 0003:1D34:000A.0028: probe with driver hid-led failed with error -71 [ 2457.206481][T20609] usb 9-1: USB disconnect, device number 40 [ 2457.275236][ T30] audit: type=1400 audit(1756518595.874:3812): avc: denied { map } for pid=1209 comm="syz.1.6080" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 2457.300738][ T30] audit: type=1400 audit(1756518595.874:3813): avc: denied { execute } for pid=1209 comm="syz.1.6080" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 2457.710720][ T1221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2457.903127][T21290] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2458.062643][T21290] usb 10-1: Using ep0 maxpacket: 16 [ 2458.094974][T21290] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2458.137931][T21290] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2458.152958][T20609] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2458.185404][T21290] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2458.219583][T21290] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2458.266376][T21290] usb 10-1: config 7 interface 0 has no altsetting 0 [ 2458.288018][T21290] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2458.299425][T21290] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2458.343282][T20609] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2458.378627][T20609] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2458.378658][T20609] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2458.378698][T20609] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2458.437014][T20609] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2458.450088][T20609] usb 9-1: config 0 descriptor?? [ 2459.402899][T21290] input: HID 0458:5010 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.0/0003:0458:5010.0029/input/input87 [ 2459.452549][T21290] kye 0003:0458:5010.0029: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.9-1/input0 [ 2459.526947][T21290] usb 10-1: USB disconnect, device number 36 [ 2459.675989][T20609] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xe [ 2459.711310][T20609] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 2459.822624][T20609] plantronics 0003:047F:FFFF.002A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2460.178964][T28427] usb 9-1: USB disconnect, device number 41 [ 2460.800616][T15659] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2460.960570][T15659] usb 2-1: Using ep0 maxpacket: 8 [ 2460.997696][T15659] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 2461.041290][T15659] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2461.050346][T15659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.148906][T15659] hub 2-1:32.0: bad descriptor, ignoring hub [ 2461.241523][T15659] hub 2-1:32.0: probe with driver hub failed with error -5 [ 2461.361587][ T30] audit: type=1400 audit(1756518599.956:3814): avc: denied { map } for pid=1294 comm="syz.8.6109" path="socket:[130549]" dev="sockfs" ino=130549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2461.440053][ T30] audit: type=1400 audit(1756518599.956:3815): avc: denied { accept } for pid=1294 comm="syz.8.6109" path="socket:[130549]" dev="sockfs" ino=130549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2461.628643][ T1301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2461.635903][ T1301] IPv6: NLM_F_CREATE should be set when creating new route [ 2461.902032][T28427] usb 2-1: reset high-speed USB device number 51 using dummy_hcd [ 2463.040447][T28427] usb 2-1: USB disconnect, device number 51 [ 2463.792868][T15659] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2463.970564][T15659] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2463.993158][T15659] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2464.026665][T15659] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2464.040997][T15659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2464.051104][T15659] usb 2-1: SerialNumber: syz [ 2464.267535][T15659] usb 2-1: 0:2 : does not exist [ 2464.337117][T15659] usb 2-1: USB disconnect, device number 52 [ 2464.642374][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6127'. [ 2465.251109][ T1391] lo speed is unknown, defaulting to 1000 [ 2465.257538][ T1391] lo speed is unknown, defaulting to 1000 [ 2465.479137][T28427] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2465.703345][T28427] usb 2-1: config 0 has no interfaces? [ 2465.852177][T28427] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2465.861864][T28427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2465.870554][T28427] usb 2-1: Product: syz [ 2465.878553][T28427] usb 2-1: Manufacturer: syz [ 2465.886494][T28427] usb 2-1: SerialNumber: syz [ 2465.904071][T28427] usb 2-1: config 0 descriptor?? [ 2466.299690][ T1391] tipc: Resetting bearer [ 2466.408938][ T1416] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6138'. [ 2466.816672][ T1391] veth0_vlan: left promiscuous mode [ 2466.846825][ T1391] veth0_vlan: entered promiscuous mode [ 2466.923097][T28427] usb 2-1: USB disconnect, device number 53 [ 2467.083883][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.863089][T12830] tipc: Resetting bearer [ 2467.927209][T21290] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2468.148822][T21290] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2468.170374][T21290] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2468.184407][T21290] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2468.207524][T21290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2468.215697][T21290] usb 2-1: SerialNumber: syz [ 2468.222810][T12830] tipc: Disabling bearer [ 2468.231119][T21290] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2468.249390][T21290] usb-storage 2-1:1.0: USB Mass Storage device detected [ 2468.278754][T21290] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 2468.288853][T21290] scsi host1: usb-storage 2-1:1.0 [ 2468.465262][T21290] usb 2-1: USB disconnect, device number 54 [ 2468.758119][ T1456] overlayfs: failed to clone upperpath [ 2469.141371][ T1466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6151'. [ 2469.152780][ T1471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6152'. [ 2469.799551][ T1490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6155'. [ 2470.270534][ T1499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6159'. [ 2472.145526][T21290] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2472.348717][T21290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2472.360369][T21290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2472.385184][T21290] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2472.416931][T21290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.486904][T21290] usb 6-1: config 0 descriptor?? [ 2472.592468][ T1544] overlayfs: overlapping lowerdir path [ 2472.924416][T21290] hid-steam 0003:28DE:1142.002B: item fetching failed at offset 4/5 [ 2472.941978][T21290] hid-steam 0003:28DE:1142.002B: steam_probe:parse of hid interface failed [ 2472.952473][T21290] hid-steam 0003:28DE:1142.002B: probe with driver hid-steam failed with error -22 [ 2473.159120][T21290] usb 6-1: USB disconnect, device number 51 [ 2474.089105][ T1610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2474.914021][T21290] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2475.115434][T21290] usb 6-1: Using ep0 maxpacket: 32 [ 2475.122357][T21290] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2475.149996][T21290] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2475.190588][T21290] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2475.213273][T21290] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 2475.235519][T21290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2475.246258][T21290] usb 6-1: config 0 descriptor?? [ 2475.428861][ T1650] syzkaller0: entered promiscuous mode [ 2475.441537][ T1652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6213'. [ 2475.444867][ T1650] syzkaller0: entered allmulticast mode [ 2475.478002][ T1652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6213'. [ 2475.666301][T21290] wacom 0003:056A:0094.002C: Using device in hidraw-only mode [ 2475.688961][T21290] wacom 0003:056A:0094.002C: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 2475.769503][ T1652] fuse: Unknown parameter 'user_i00000000000000000000' [ 2475.830635][T20609] Process accounting resumed [ 2475.887329][T21290] usb 6-1: USB disconnect, device number 52 [ 2475.985222][ T30] audit: type=1400 audit(1756518614.583:3816): avc: denied { link } for pid=1660 comm="syz.8.6215" name="#305" dev="tmpfs" ino=3287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2475.988285][ T30] audit: type=1400 audit(1756518614.593:3817): avc: denied { rename } for pid=1660 comm="syz.8.6215" name="#306" dev="tmpfs" ino=3287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2476.056098][ C1] vkms_vblank_simulate: vblank timer overrun [ 2476.128223][ T1668] lo speed is unknown, defaulting to 1000 [ 2476.128866][ T1668] lo speed is unknown, defaulting to 1000 [ 2476.474199][T15659] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2476.573179][T21290] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 2476.583599][ T1683] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2476.599003][ T1683] block device autoloading is deprecated and will be removed. [ 2476.644121][T15659] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2476.668713][T15659] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2476.682140][T15659] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2476.697808][T15659] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 2476.707634][T15659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2476.730286][T15659] usb 10-1: Product: syz [ 2476.736827][T15659] usb 10-1: Manufacturer: syz [ 2476.753059][T15659] usb 10-1: SerialNumber: syz [ 2476.753532][T21290] usb 9-1: Using ep0 maxpacket: 16 [ 2476.774562][T21290] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2476.797173][ T1689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2476.821027][ T1689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2476.851803][T21290] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2476.894280][ T1692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6226'. [ 2476.907859][ T1692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6226'. [ 2476.913129][T21290] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2476.947482][T21290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2476.970524][T15659] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2477.035012][ T1692] fuse: Unknown parameter 'user_id00000000000000000000' [ 2477.049162][T15659] Process accounting resumed [ 2477.059311][T21290] usb 9-1: config 0 descriptor?? [ 2477.342940][T20609] usb 10-1: USB disconnect, device number 37 [ 2477.355845][T20609] usblp0: removed [ 2477.666809][T21290] corsair 0003:1B1C:1B02.002D: unbalanced delimiter at end of report description [ 2477.680875][T21290] corsair 0003:1B1C:1B02.002D: parse failed [ 2477.699957][T21290] corsair 0003:1B1C:1B02.002D: probe with driver corsair failed with error -22 [ 2477.930305][T21290] usb 9-1: USB disconnect, device number 42 [ 2478.690039][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.709650][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.736365][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.761186][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.789747][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.810427][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.827818][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.878492][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.913401][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.944169][ T1743] syzkaller1: entered promiscuous mode [ 2478.953916][ T1729] kvm_intel: kvm [1726]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 2478.973744][ T1743] syzkaller1: entered allmulticast mode [ 2478.995604][ T1743] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2479.012065][ T1743] syzkaller1: Linktype set failed because interface is up [ 2480.268628][ T1771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6249'. [ 2480.289627][ T1771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6249'. [ 2480.509027][ T1771] fuse: Unknown parameter 'user_id00000000000000000000' [ 2480.526409][T15659] Process accounting resumed [ 2481.003353][ T1785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2481.064918][ T1783] syzkaller0: entered promiscuous mode [ 2481.091058][ T1783] syzkaller0: entered allmulticast mode [ 2481.484297][T21290] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2481.650826][T21290] usb 2-1: Using ep0 maxpacket: 16 [ 2481.658049][T21290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2481.669569][T21290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2481.686390][T21290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2481.709945][T21290] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2481.723743][T21290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.749190][T21290] usb 2-1: config 0 descriptor?? [ 2482.519471][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.530315][T21290] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 2482.539286][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.547141][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.554860][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.562423][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.597165][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.608735][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.616892][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.632023][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.639284][T21290] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 2482.675907][T21290] microsoft 0003:045E:07DA.002E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2482.689419][T21290] microsoft 0003:045E:07DA.002E: no inputs found [ 2482.701240][T21290] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway [ 2482.951391][T15659] usb 2-1: USB disconnect, device number 55 [ 2483.312407][ T1821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6263'. [ 2483.321856][ T1821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6263'. [ 2483.504787][ T1823] fuse: Bad value for 'fd' [ 2483.511311][T15659] Process accounting resumed [ 2484.942223][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2484.960090][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2484.975486][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2484.987129][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2485.009612][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2485.022174][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2485.034073][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2485.045770][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 2485.779023][T21292] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 2485.958334][T21292] usb 9-1: Using ep0 maxpacket: 8 [ 2486.010986][T21292] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2486.039377][T21292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.091600][T21292] usb 9-1: Product: syz [ 2486.125728][T21292] usb 9-1: Manufacturer: syz [ 2486.138351][T21292] usb 9-1: SerialNumber: syz [ 2486.151204][T21292] usb 9-1: config 0 descriptor?? [ 2486.371193][T21292] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2486.571740][ T1872] fuse: Bad value for 'fd' [ 2486.618588][T15659] Process accounting resumed [ 2486.693557][ T1878] [ 2486.695920][ T1878] ===================================================== [ 2486.702844][ T1878] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2486.710302][ T1878] syzkaller #0 Not tainted [ 2486.714712][ T1878] ----------------------------------------------------- [ 2486.721630][ T1878] syz.5.6285/1878 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2486.729239][ T1878] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 2486.737834][ T1878] [ 2486.737834][ T1878] and this task is already holding: [ 2486.745206][ T1878] ffff8880316a88a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 2486.753913][ T1878] which would create a new lock dependency: [ 2486.759781][ T1878] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2486.767329][ T1878] [ 2486.767329][ T1878] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2486.776750][ T1878] (&dev->event_lock#2){..-.}-{3:3} [ 2486.776782][ T1878] [ 2486.776782][ T1878] ... which became SOFTIRQ-irq-safe at: [ 2486.789637][ T1878] lock_acquire+0x179/0x350 [ 2486.794219][ T1878] _raw_spin_lock_irqsave+0x3a/0x60 [ 2486.799487][ T1878] input_inject_event+0x9f/0x3b0 [ 2486.804489][ T1878] led_set_brightness+0x217/0x290 [ 2486.809579][ T1878] led_trigger_event+0xda/0x270 [ 2486.814500][ T1878] kbd_bh+0x21b/0x300 [ 2486.818558][ T1878] tasklet_action_common+0x281/0x400 [ 2486.823923][ T1878] handle_softirqs+0x216/0x8e0 [ 2486.828752][ T1878] run_ksoftirqd+0x3a/0x60 [ 2486.833240][ T1878] smpboot_thread_fn+0x3f4/0xae0 [ 2486.834037][T21292] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2486.838251][ T1878] kthread+0x3c5/0x780 [ 2486.838274][ T1878] ret_from_fork+0x5d7/0x6f0 [ 2486.838292][ T1878] ret_from_fork_asm+0x1a/0x30 [ 2486.838316][ T1878] [ 2486.838316][ T1878] to a SOFTIRQ-irq-unsafe lock: [ 2486.838325][ T1878] (tasklist_lock){.+.+}-{3:3} [ 2486.838345][ T1878] [ 2486.838345][ T1878] ... which became SOFTIRQ-irq-unsafe at: [ 2486.838354][ T1878] ... [ 2486.838359][ T1878] lock_acquire+0x179/0x350 [ 2486.838386][ T1878] _raw_read_lock+0x5f/0x70 [ 2486.838402][ T1878] __do_wait+0x105/0x890 [ 2486.838428][ T1878] do_wait+0x21e/0x5a0 [ 2486.838453][ T1878] kernel_wait+0x9f/0x160 [ 2486.838467][ T1878] call_usermodehelper_exec_work+0xf1/0x170 [ 2486.838488][ T1878] process_one_work+0x9cf/0x1b70 [ 2486.838507][ T1878] worker_thread+0x6c8/0xf10 [ 2486.838526][ T1878] kthread+0x3c5/0x780 [ 2486.838542][ T1878] ret_from_fork+0x5d7/0x6f0 [ 2486.838558][ T1878] ret_from_fork_asm+0x1a/0x30 [ 2486.838578][ T1878] [ 2486.838578][ T1878] other info that might help us debug this: [ 2486.838578][ T1878] [ 2486.838585][ T1878] Chain exists of: [ 2486.838585][ T1878] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 2486.838585][ T1878] [ 2486.838619][ T1878] Possible interrupt unsafe locking scenario: [ 2486.838619][ T1878] [ 2486.838625][ T1878] CPU0 CPU1 [ 2486.838631][ T1878] ---- ---- [ 2486.838637][ T1878] lock(tasklist_lock); [ 2486.838649][ T1878] local_irq_disable(); [ 2486.838655][ T1878] lock(&dev->event_lock#2); [ 2486.838673][ T1878] lock(&f_owner->lock); [ 2486.838686][ T1878] [ 2486.838691][ T1878] lock(&dev->event_lock#2); [ 2486.838707][ T1878] [ 2486.838707][ T1878] *** DEADLOCK *** [ 2486.838707][ T1878] [ 2486.838713][ T1878] 2 locks held by syz.5.6285/1878: [ 2486.838723][ T1878] #0: ffff888040163858 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x20/0x50 [ 2486.838775][ T1878] #1: ffff8880316a88a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 2486.838824][ T1878] [ 2486.838824][ T1878] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2486.838833][ T1878] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2487.057727][ T1878] IN-SOFTIRQ-W at: [ 2487.061974][ T1878] lock_acquire+0x179/0x350 [ 2487.068644][ T1878] _raw_spin_lock_irqsave+0x3a/0x60 [ 2487.075995][ T1878] input_inject_event+0x9f/0x3b0 [ 2487.083148][ T1878] led_set_brightness+0x217/0x290 [ 2487.090339][ T1878] led_trigger_event+0xda/0x270 [ 2487.097343][ T1878] kbd_bh+0x21b/0x300 [ 2487.103470][ T1878] tasklet_action_common+0x281/0x400 [ 2487.110918][ T1878] handle_softirqs+0x216/0x8e0 [ 2487.117832][ T1878] run_ksoftirqd+0x3a/0x60 [ 2487.124408][ T1878] smpboot_thread_fn+0x3f4/0xae0 [ 2487.131493][ T1878] kthread+0x3c5/0x780 [ 2487.137706][ T1878] ret_from_fork+0x5d7/0x6f0 [ 2487.144461][ T1878] ret_from_fork_asm+0x1a/0x30 [ 2487.151375][ T1878] INITIAL USE at: [ 2487.155500][ T1878] lock_acquire+0x179/0x350 [ 2487.162061][ T1878] _raw_spin_lock_irqsave+0x3a/0x60 [ 2487.169313][ T1878] input_inject_event+0x9f/0x3b0 [ 2487.176310][ T1878] led_set_brightness+0x217/0x290 [ 2487.183404][ T1878] kbd_led_trigger_activate+0xcb/0x110 [ 2487.190929][ T1878] led_trigger_set+0x59a/0xc50 [ 2487.197753][ T1878] led_trigger_set_default+0x1e0/0x2e0 [ 2487.205269][ T1878] led_classdev_register_ext+0x7b8/0xa10 [ 2487.212967][ T1878] input_leds_connect+0x552/0x8e0 [ 2487.220050][ T1878] input_attach_handler.isra.0+0x173/0x250 [ 2487.227920][ T1878] input_register_device+0xab9/0x1180 [ 2487.235380][ T1878] atkbd_connect+0x5f8/0xa40 [ 2487.242028][ T1878] serio_driver_probe+0x7f/0xd0 [ 2487.248943][ T1878] really_probe+0x241/0xa90 [ 2487.255520][ T1878] __driver_probe_device+0x1de/0x440 [ 2487.262872][ T1878] driver_probe_device+0x4c/0x1b0 [ 2487.269976][ T1878] __driver_attach+0x283/0x580 [ 2487.276799][ T1878] bus_for_each_dev+0x13e/0x1d0 [ 2487.283706][ T1878] serio_handle_event+0x335/0xc30 [ 2487.290788][ T1878] process_one_work+0x9cf/0x1b70 [ 2487.297784][ T1878] worker_thread+0x6c8/0xf10 [ 2487.304433][ T1878] kthread+0x3c5/0x780 [ 2487.310553][ T1878] ret_from_fork+0x5d7/0x6f0 [ 2487.317196][ T1878] ret_from_fork_asm+0x1a/0x30 [ 2487.324016][ T1878] } [ 2487.326743][ T1878] ... key at: [] __key.7+0x0/0x40 [ 2487.334085][ T1878] -> (&client->buffer_lock){....}-{3:3} { [ 2487.339959][ T1878] INITIAL USE at: [ 2487.344009][ T1878] lock_acquire+0x179/0x350 [ 2487.350400][ T1878] _raw_spin_lock+0x2e/0x40 [ 2487.356789][ T1878] evdev_pass_values+0x10e/0x9b0 [ 2487.363617][ T1878] evdev_events+0x1bb/0x390 [ 2487.370010][ T1878] input_pass_values+0x74b/0x880 [ 2487.376829][ T1878] input_handle_event+0xf00/0x14d0 [ 2487.383822][ T1878] input_inject_event+0x1e8/0x3b0 [ 2487.390732][ T1878] evdev_write+0x457/0x750 [ 2487.397035][ T1878] vfs_write+0x29d/0x11d0 [ 2487.403241][ T1878] ksys_write+0x1f8/0x250 [ 2487.409459][ T1878] do_syscall_64+0xcd/0x4c0 [ 2487.415844][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.423614][ T1878] } [ 2487.426261][ T1878] ... key at: [] __key.1+0x0/0x40 [ 2487.433515][ T1878] ... acquired at: [ 2487.437462][ T1878] _raw_spin_lock+0x2e/0x40 [ 2487.442132][ T1878] evdev_pass_values+0x10e/0x9b0 [ 2487.447221][ T1878] evdev_events+0x1bb/0x390 [ 2487.451890][ T1878] input_pass_values+0x74b/0x880 [ 2487.456979][ T1878] input_handle_event+0xf00/0x14d0 [ 2487.462236][ T1878] input_inject_event+0x1e8/0x3b0 [ 2487.467415][ T1878] evdev_write+0x457/0x750 [ 2487.471978][ T1878] vfs_write+0x29d/0x11d0 [ 2487.476447][ T1878] ksys_write+0x1f8/0x250 [ 2487.480918][ T1878] do_syscall_64+0xcd/0x4c0 [ 2487.485564][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.491599][ T1878] [ 2487.493907][ T1878] -> (&new->fa_lock){....}-{3:3} { [ 2487.499094][ T1878] INITIAL USE at: [ 2487.503049][ T1878] lock_acquire+0x179/0x350 [ 2487.509267][ T1878] _raw_write_lock_irq+0x36/0x50 [ 2487.515913][ T1878] fasync_remove_entry+0xb2/0x1e0 [ 2487.522647][ T1878] fasync_helper+0xaf/0xd0 [ 2487.528798][ T1878] lease_modify+0x232/0x500 [ 2487.535010][ T1878] locks_remove_file+0x29e/0x5c0 [ 2487.541659][ T1878] __fput+0x351/0xb70 [ 2487.547355][ T1878] task_work_run+0x14d/0x240 [ 2487.553664][ T1878] exit_to_user_mode_loop+0xeb/0x110 [ 2487.560655][ T1878] do_syscall_64+0x3f6/0x4c0 [ 2487.566954][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.574551][ T1878] INITIAL READ USE at: [ 2487.578947][ T1878] lock_acquire+0x179/0x350 [ 2487.585595][ T1878] _raw_read_lock_irqsave+0x74/0x90 [ 2487.592931][ T1878] kill_fasync+0x138/0x510 [ 2487.599493][ T1878] lease_break_callback+0x23/0x30 [ 2487.606668][ T1878] __break_lease+0x674/0x1810 [ 2487.613483][ T1878] do_dentry_open+0x91f/0x1530 [ 2487.620388][ T1878] vfs_open+0x82/0x3f0 [ 2487.626621][ T1878] dentry_open_nonotify+0x7b/0xd0 [ 2487.633797][ T1878] fanotify_read+0x5e4/0x27d0 [ 2487.640625][ T1878] vfs_read+0x1e4/0xcf0 [ 2487.646920][ T1878] ksys_read+0x12a/0x250 [ 2487.653314][ T1878] do_syscall_64+0xcd/0x4c0 [ 2487.659971][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.668009][ T1878] } [ 2487.670563][ T1878] ... key at: [] __key.0+0x0/0x40 [ 2487.677731][ T1878] ... acquired at: [ 2487.681588][ T1878] _raw_read_lock_irqsave+0x74/0x90 [ 2487.686928][ T1878] kill_fasync+0x138/0x510 [ 2487.691490][ T1878] evdev_pass_values+0x619/0x9b0 [ 2487.696574][ T1878] evdev_events+0x1bb/0x390 [ 2487.701222][ T1878] input_pass_values+0x74b/0x880 [ 2487.706311][ T1878] input_handle_event+0xf00/0x14d0 [ 2487.711570][ T1878] input_inject_event+0x1e8/0x3b0 [ 2487.716741][ T1878] evdev_write+0x457/0x750 [ 2487.721305][ T1878] vfs_write+0x29d/0x11d0 [ 2487.725776][ T1878] ksys_write+0x1f8/0x250 [ 2487.730246][ T1878] do_syscall_64+0xcd/0x4c0 [ 2487.734919][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.740970][ T1878] [ 2487.743270][ T1878] -> (&f_owner->lock){....}-{3:3} { [ 2487.748445][ T1878] INITIAL USE at: [ 2487.752316][ T1878] lock_acquire+0x179/0x350 [ 2487.758363][ T1878] _raw_write_lock_irq+0x36/0x50 [ 2487.764841][ T1878] __f_setown+0x61/0x3c0 [ 2487.770617][ T1878] generic_setlease+0xeef/0x1300 [ 2487.777105][ T1878] kernel_setlease+0x106/0x140 [ 2487.783412][ T1878] vfs_setlease+0x258/0x2d0 [ 2487.789461][ T1878] fcntl_setlease+0x3ed/0x5a0 [ 2487.795670][ T1878] do_fcntl+0x751/0x15a0 [ 2487.801446][ T1878] __x64_sys_fcntl+0x163/0x200 [ 2487.807744][ T1878] do_syscall_64+0xcd/0x4c0 [ 2487.813782][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.821217][ T1878] INITIAL READ USE at: [ 2487.825511][ T1878] lock_acquire+0x179/0x350 [ 2487.831996][ T1878] _raw_read_lock_irqsave+0x74/0x90 [ 2487.839172][ T1878] send_sigio+0x31/0x3e0 [ 2487.845387][ T1878] kill_fasync+0x214/0x510 [ 2487.851775][ T1878] lease_break_callback+0x23/0x30 [ 2487.858769][ T1878] __break_lease+0x674/0x1810 [ 2487.865423][ T1878] do_dentry_open+0x91f/0x1530 [ 2487.872173][ T1878] vfs_open+0x82/0x3f0 [ 2487.878228][ T1878] dentry_open_nonotify+0x7b/0xd0 [ 2487.885229][ T1878] fanotify_read+0x5e4/0x27d0 [ 2487.891870][ T1878] vfs_read+0x1e4/0xcf0 [ 2487.898004][ T1878] ksys_read+0x12a/0x250 [ 2487.904218][ T1878] do_syscall_64+0xcd/0x4c0 [ 2487.910688][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.918547][ T1878] } [ 2487.921015][ T1878] ... key at: [] __key.1+0x0/0x40 [ 2487.928096][ T1878] ... acquired at: [ 2487.931867][ T1878] _raw_read_lock_irqsave+0x74/0x90 [ 2487.937213][ T1878] send_sigio+0x31/0x3e0 [ 2487.941615][ T1878] kill_fasync+0x214/0x510 [ 2487.946175][ T1878] lease_break_callback+0x23/0x30 [ 2487.951347][ T1878] __break_lease+0x674/0x1810 [ 2487.956175][ T1878] do_dentry_open+0x91f/0x1530 [ 2487.961082][ T1878] vfs_open+0x82/0x3f0 [ 2487.965303][ T1878] dentry_open_nonotify+0x7b/0xd0 [ 2487.970471][ T1878] fanotify_read+0x5e4/0x27d0 [ 2487.975288][ T1878] vfs_read+0x1e4/0xcf0 [ 2487.979592][ T1878] ksys_read+0x12a/0x250 [ 2487.983983][ T1878] do_syscall_64+0xcd/0x4c0 [ 2487.988629][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.994672][ T1878] [ 2487.996967][ T1878] [ 2487.996967][ T1878] the dependencies between the lock to be acquired [ 2487.996976][ T1878] and SOFTIRQ-irq-unsafe lock: [ 2488.010434][ T1878] -> (tasklist_lock){.+.+}-{3:3} { [ 2488.015526][ T1878] HARDIRQ-ON-R at: [ 2488.019491][ T1878] lock_acquire+0x179/0x350 [ 2488.025636][ T1878] _raw_read_lock+0x5f/0x70 [ 2488.031771][ T1878] __do_wait+0x105/0x890 [ 2488.037647][ T1878] do_wait+0x21e/0x5a0 [ 2488.043342][ T1878] kernel_wait+0x9f/0x160 [ 2488.049291][ T1878] call_usermodehelper_exec_work+0xf1/0x170 [ 2488.056806][ T1878] process_one_work+0x9cf/0x1b70 [ 2488.063375][ T1878] worker_thread+0x6c8/0xf10 [ 2488.069586][ T1878] kthread+0x3c5/0x780 [ 2488.075285][ T1878] ret_from_fork+0x5d7/0x6f0 [ 2488.081509][ T1878] ret_from_fork_asm+0x1a/0x30 [ 2488.087915][ T1878] SOFTIRQ-ON-R at: [ 2488.091875][ T1878] lock_acquire+0x179/0x350 [ 2488.098006][ T1878] _raw_read_lock+0x5f/0x70 [ 2488.104128][ T1878] __do_wait+0x105/0x890 [ 2488.109995][ T1878] do_wait+0x21e/0x5a0 [ 2488.115699][ T1878] kernel_wait+0x9f/0x160 [ 2488.121645][ T1878] call_usermodehelper_exec_work+0xf1/0x170 [ 2488.129171][ T1878] process_one_work+0x9cf/0x1b70 [ 2488.135737][ T1878] worker_thread+0x6c8/0xf10 [ 2488.141957][ T1878] kthread+0x3c5/0x780 [ 2488.147654][ T1878] ret_from_fork+0x5d7/0x6f0 [ 2488.153863][ T1878] ret_from_fork_asm+0x1a/0x30 [ 2488.160248][ T1878] INITIAL USE at: [ 2488.164107][ T1878] lock_acquire+0x179/0x350 [ 2488.170146][ T1878] _raw_write_lock_irq+0x36/0x50 [ 2488.176620][ T1878] copy_process+0x4caf/0x7690 [ 2488.182835][ T1878] kernel_clone+0xfc/0x930 [ 2488.188793][ T1878] user_mode_thread+0xc7/0x110 [ 2488.195094][ T1878] rest_init+0x23/0x2b0 [ 2488.200790][ T1878] start_kernel+0x3ee/0x4d0 [ 2488.206825][ T1878] x86_64_start_reservations+0x18/0x30 [ 2488.213833][ T1878] x86_64_start_kernel+0x130/0x190 [ 2488.220495][ T1878] common_startup_64+0x13e/0x148 [ 2488.226985][ T1878] INITIAL READ USE at: [ 2488.231297][ T1878] lock_acquire+0x179/0x350 [ 2488.237778][ T1878] _raw_read_lock+0x5f/0x70 [ 2488.244257][ T1878] __do_wait+0x105/0x890 [ 2488.250472][ T1878] do_wait+0x21e/0x5a0 [ 2488.256522][ T1878] kernel_wait+0x9f/0x160 [ 2488.262820][ T1878] call_usermodehelper_exec_work+0xf1/0x170 [ 2488.270710][ T1878] process_one_work+0x9cf/0x1b70 [ 2488.277642][ T1878] worker_thread+0x6c8/0xf10 [ 2488.284213][ T1878] kthread+0x3c5/0x780 [ 2488.290259][ T1878] ret_from_fork+0x5d7/0x6f0 [ 2488.296825][ T1878] ret_from_fork_asm+0x1a/0x30 [ 2488.303590][ T1878] } [ 2488.306057][ T1878] ... key at: [] tasklist_lock+0x18/0x40 [ 2488.313749][ T1878] ... acquired at: [ 2488.317523][ T1878] lock_acquire+0x179/0x350 [ 2488.322187][ T1878] _raw_read_lock+0x5f/0x70 [ 2488.326837][ T1878] send_sigurg+0xed/0xc80 [ 2488.331348][ T1878] sk_send_sigurg+0x76/0x360 [ 2488.336084][ T1878] tcp_urg+0x341/0xb80 [ 2488.340296][ T1878] tcp_rcv_established+0x87a/0x23f0 [ 2488.345658][ T1878] tcp_v4_do_rcv+0x5ca/0xa90 [ 2488.350406][ T1878] __release_sock+0x31b/0x400 [ 2488.355233][ T1878] release_sock+0x5a/0x220 [ 2488.359790][ T1878] tcp_sendmsg+0x38/0x50 [ 2488.364178][ T1878] inet6_sendmsg+0xb9/0x140 [ 2488.368828][ T1878] ____sys_sendmsg+0x705/0xc70 [ 2488.373743][ T1878] ___sys_sendmsg+0x134/0x1d0 [ 2488.378562][ T1878] __sys_sendmsg+0x16d/0x220 [ 2488.383297][ T1878] do_syscall_64+0xcd/0x4c0 [ 2488.387944][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.393990][ T1878] [ 2488.396294][ T1878] [ 2488.396294][ T1878] stack backtrace: [ 2488.402164][ T1878] CPU: 1 UID: 0 PID: 1878 Comm: syz.5.6285 Not tainted syzkaller #0 PREEMPT(full) [ 2488.402182][ T1878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2488.402188][ T1878] Call Trace: [ 2488.402194][ T1878] [ 2488.402199][ T1878] dump_stack_lvl+0x116/0x1f0 [ 2488.402216][ T1878] check_irq_usage+0x7dc/0x920 [ 2488.402237][ T1878] ? check_path.constprop.0+0x24/0x50 [ 2488.402254][ T1878] ? __lock_acquire+0x12bc/0x1ce0 [ 2488.402270][ T1878] __lock_acquire+0x12bc/0x1ce0 [ 2488.402289][ T1878] lock_acquire+0x179/0x350 [ 2488.402306][ T1878] ? send_sigurg+0xed/0xc80 [ 2488.402324][ T1878] _raw_read_lock+0x5f/0x70 [ 2488.402335][ T1878] ? send_sigurg+0xed/0xc80 [ 2488.402349][ T1878] send_sigurg+0xed/0xc80 [ 2488.402364][ T1878] ? __alloc_skb+0x200/0x380 [ 2488.402376][ T1878] sk_send_sigurg+0x76/0x360 [ 2488.402387][ T1878] tcp_urg+0x341/0xb80 [ 2488.402403][ T1878] ? __pfx_tcp_urg+0x10/0x10 [ 2488.402418][ T1878] tcp_rcv_established+0x87a/0x23f0 [ 2488.402435][ T1878] ? find_held_lock+0x2b/0x80 [ 2488.402448][ T1878] ? __pfx_tcp_rcv_established+0x10/0x10 [ 2488.402463][ T1878] ? ipv4_dst_check+0x1a8/0x3b0 [ 2488.402479][ T1878] ? __pfx_ipv4_dst_check+0x10/0x10 [ 2488.402494][ T1878] tcp_v4_do_rcv+0x5ca/0xa90 [ 2488.402511][ T1878] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 2488.402526][ T1878] __release_sock+0x31b/0x400 [ 2488.402540][ T1878] release_sock+0x5a/0x220 [ 2488.402551][ T1878] tcp_sendmsg+0x38/0x50 [ 2488.402565][ T1878] ? __pfx_tcp_sendmsg+0x10/0x10 [ 2488.402580][ T1878] inet6_sendmsg+0xb9/0x140 [ 2488.402597][ T1878] ____sys_sendmsg+0x705/0xc70 [ 2488.402612][ T1878] ? copy_msghdr_from_user+0x10a/0x160 [ 2488.402624][ T1878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2488.402640][ T1878] ? __pfx_futex_wake_mark+0x10/0x10 [ 2488.402653][ T1878] ___sys_sendmsg+0x134/0x1d0 [ 2488.402665][ T1878] ? __pfx____sys_sendmsg+0x10/0x10 [ 2488.402683][ T1878] __sys_sendmsg+0x16d/0x220 [ 2488.402695][ T1878] ? __pfx___sys_sendmsg+0x10/0x10 [ 2488.402706][ T1878] ? __x64_sys_futex+0x1e0/0x4c0 [ 2488.402726][ T1878] do_syscall_64+0xcd/0x4c0 [ 2488.402741][ T1878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.402753][ T1878] RIP: 0033:0x7f4eecd8ebe9 [ 2488.402764][ T1878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2488.402774][ T1878] RSP: 002b:00007f4eedb8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2488.402785][ T1878] RAX: ffffffffffffffda RBX: 00007f4eecfc5fa0 RCX: 00007f4eecd8ebe9 [ 2488.402793][ T1878] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 2488.402799][ T1878] RBP: 00007f4eece11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2488.402806][ T1878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2488.402812][ T1878] R13: 00007f4eecfc6038 R14: 00007f4eecfc5fa0 R15: 00007ffc5fd9f138 [ 2488.402822][ T1878] [ 2488.735110][T21292] usb 9-1: USB disconnect, device number 43