last executing test programs: 7.064793671s ago: executing program 2 (id=47): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES64, @ANYRESOCT], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="437734ca1b6857e5626355f9fb8083e7270f0aa8546192a5e83abb873b1aea4a8c4f55b19822f2b78ce1a48d1629f405973ea95b9470cdc6f701a0d7f927885821330af71584bbc6ba4ecd32f29bc4a4d394557f8d61437eb35332f3a6bbb29a9415dd41ae8a24cd162fe1c61aa89144fc77d10645077439795b41669d281d", @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c8081, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fcdbdf250c00000008000300", @ANYRES32=r4, @ANYRES64], 0x84}}, 0x8001) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socket(0x1e, 0x4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x100010, 0xffffffffffffffff, 0xfc777000) ioctl$FIBMAP(r6, 0x301, &(0x7f0000000100)=0x4) syz_usb_control_io(r0, 0x0, 0x0) r7 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="72d6154883af99a573bc7ab72ae49f2be597fbd3e77ea268453a9fc33220e756fe37d54eb311a730e2de74498f9b20ad7d259c45e480071c9c51479b53c32363c11e23bf41c22f8645562718ca80cc578a419b1bb00de2574c2798ce83a514121683852a00a22787ee87d270b494a765495bd1842d51c450c5e67b694a53fa325bb26f7b00a10c1d5d63", 0x8a, 0xfffffffffffffffa) keyctl$update(0x2, r7, &(0x7f0000000200)="c9dd60a208a780cd1dfb14d42ba52b4e4d0735bc0c272dc2183bd389ea03544a5a7438e72d442ba6184741d5af90c48e6260169ebe022e464fb5bd5facb52aee69a2be0026e39105e1db9ce4a1f77b705ea37ad71e", 0x55) syz_usb_control_io(r0, 0x0, 0x0) close(r1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00b\x00\x00\x00\x00'], 0x0}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000300), 0x20000007d, 0x0) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000100)=""/16, 0x10}, {0x0}], 0x2, 0x2a0800, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) 4.917210993s ago: executing program 3 (id=69): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4090, 0xffa}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x3}, 0x402}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x48cc, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) 4.859305166s ago: executing program 3 (id=70): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x14, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r1, 0x0, 0x0) 4.039718294s ago: executing program 2 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000080)={@void, @val={0x0, 0x3, 0x1c, 0x93, 0x14, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x1c, 0x64, 0x0, 0x3, 0x2, 0x0, @empty=0xe000, @empty}, {0x11, 0x6, 0x0, @empty=0xe0}}}, 0x26) 3.994454525s ago: executing program 2 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a0000000000000000000000000000000000000000000000f9000000200002000a00000000000001fe80002d0000000000000000000000bb000000000d0001007564703a7379"], 0x6c}}, 0x0) 3.915183793s ago: executing program 2 (id=73): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x4, 0xffffffffdf350f4e, 0x200, 0x5, 0x200, 0xffeffffa, 0x0, 0x0, 0x2, 0x800}}, 0x50) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc0000001b00010027bd7000fbdbdf25fe800000000000000000000000aafffff7ff00000000000024000700000000aac078869eb42005cfd9a10b05ec36297223daf2368e7f9d56d718db4fc020d9048c8bfeb37b80000000000000003cade0746a555cb42ecedf35dc39a7ff628347d2529cb4eaa9cd2dc1a721886209c5c4d3ae3d338f907a9a9c6cbfc78fd182cac0d519d3663e69689e3a97b1248e778f4fc268a9931c74ef5556bb5c7ccd53ceb977d3710e85013aade01e4d39ecc6d1db97a4010904dae6156075d9443fe0a12936", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="030080000000000002000000000000007f0000000000000001040000000000000900000000000000090000000000000006000000000000000000000000000000040000000000000001000000000000800180000000000000010000000000000009000000b46b6e00000102000000000010000000000000000c0015005d07350010000000"], 0xcc}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket(0x400000000010, 0x3, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) (async, rerun: 64) read(r2, 0x0, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xe0000, 0x125) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) shutdown(r5, 0x0) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x4, 0x2471}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf2501000000000000000b"], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async, rerun: 64) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r10, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) r11 = syz_open_pts(r10, 0x80) r12 = dup3(r11, r10, 0x80000) syz_fuse_handle_req(r12, &(0x7f0000003a40)="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", 0x2000, &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$watch_queue(r12, &(0x7f0000001d40)=""/4095, 0xfff) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/8, 0x8) (async, rerun: 64) ioctl$KVM_RUN(r12, 0xae80, 0x0) (rerun: 64) 3.337811625s ago: executing program 3 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@ieee802154, &(0x7f00000001c0)=0x80, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) connect$packet(r1, &(0x7f0000000340)={0x11, 0xc, r2, 0x1, 0x80, 0x6, @random="9da7378602dd"}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000680)='drop=\"', 0x6) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x0, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x0, @empty}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x3, 0x4}}, 0x28) 3.284075708s ago: executing program 3 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r0, 0x2b66b000) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) madvise(&(0x7f00000e5000/0x2000)=nil, 0x2000, 0xd) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000036c000/0x400000)=nil) (async) fadvise64(r0, 0xfffffffffffffffd, 0xffff, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 3.072690756s ago: executing program 3 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x36}, 0x18) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d69a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fdb00685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee32fddb81ebefa818f31f60d09a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa360800000000000000084c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e300000000c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a2c1003d79b1cd40654e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf360b5a091a4b3600000000000000000000000000000000000000000000000000000000007d3e6ecd2cbe42a700"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.96500809s ago: executing program 0 (id=93): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001ac14142c00000000000000000000000000000003000000000a00000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x19c}}, 0x44050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10b) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.851357837s ago: executing program 0 (id=94): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x8, 0x5, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x38}}, &(0x7f0000000bc0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.024890296s ago: executing program 0 (id=95): r0 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f00000040c0)=[&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0x2, 0x0, 0x2}, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x1, 0x5, r1, 0x0, 0x0, 0xfffffffffffffff4}]) r3 = socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x11, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 1.955082512s ago: executing program 0 (id=96): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1000}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000440)={&(0x7f0000000040)=0x5, 0x4, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x100000005833, 0x8, 0x2, 0x4000000000000e51, 0x100, 0x5479, 0x103d, 0x200000000006, 0x80000000, 0x5, 0x1, 0xf3c, 0x0, 0x40000000009, 0x8000000010005, 0x5], 0xe000, 0x1869c1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) close(0x3) 1.840326488s ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x59, 0xfffffffffffffff8}, 0x0) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r0) (async) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/117, 0x75}], 0x4}, 0xfffffffe}], 0x1, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.565676382s ago: executing program 2 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000c61bafa4e0f9dbd32511000000040009805a71843183baf5e2b63139ce8662cc281c0e4ba6bc018e5bd4f2bfcee3b4d57fd6a04284eee95d4441cdce1a966116667bb3b45be3dd8040d5cef7506c19b26a5555e166e8a1d4883cdd"], 0x18}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000000101010000000003000000070000080c0005800800010052415300200006801400040000000000000000000000ffff640101000800123dd7d3330200ac14141a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48010) syz_clone(0x10080d080, &(0x7f0000000140)='>w', 0x2, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="47dd7b32609fbe61297327515b8cad977012f1eade60b6a16b0255bcc498f7f5dea1b7123fbbf11ac4bf13006c48be3a0d4f2962d9bea0831f5306c778229690433fa1369fc8b22bd06b945efa2d69bdace41bf816e0a5aa4b6581fa4296c061dcc666b2f98b58fb85a611e68a2952c15dec2b54d0cf2873ab08f15574dfe6286114b9b2f9d41b3eddc21ac9c525a6c58299c0d3f6b85b820aa00fbb93cc9a925d14c078140cc52cc352445cf8e1ff0bab633518578e97a3f6db818799e1279552b3c6045c4e0ce1d546a5f9c29e4d7b898aeae30c26104a") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) close(0x3) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000500)={0x1f, 0x0, @any, 0x8000, 0x1}, 0xe) open(&(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x583400, 0x89) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x9, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000009480)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x0, [{0x6}]}}) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.154914205s ago: executing program 2 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x50, &(0x7f0000002900)=0x659c, 0x4) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x80001) memfd_create(0x0, 0x3) write(r1, &(0x7f00000001c0)="ac37e89e5fc1969508681884f333f1afb0bfc19570a2efea06c84b4dbafcfd56c8992cda0a470afdfa9a92f7adb41608d1440cff26fbee37d72ea7222b181de526c5c5b26ae53dbba814f68c25537f89e0651b331dafa21804fcb1dc434b7f5e90a3eea9ec2420bc9d058c498e2d68b648a524476a4fe2fc481092167674a0a7089e3247f0bc225f8f", 0x89) pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000180)={0x0, 0x5}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010100000000204112155000000000000109022400010000c00609040000029537552905000921"], 0x0) setuid(0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000107"], 0x0, 0x0, 0x0, 0x0}, 0x0) 915.311ms ago: executing program 0 (id=106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05690000000000000109022400010000a003090400750103000500090581030002021504"], 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003480), 0x2, 0x0) futex_waitv(&(0x7f0000000ec0)=[{0x5, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000003980)={0x1d, {0x17, 0x8, 0x40, 0x4, 0x78a, 0xdb}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x1d, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000001980)=""/159, 0x9f}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x40000100, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000540)=[@decrefs], 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x71, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) 721.185965ms ago: executing program 1 (id=108): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013105b310fe"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f000000a3c0)={0xe9b, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x4, 0x0, 0x20000000, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x2000, 0x0, r4, r5, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000200)=0xc) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x8c00, &(0x7f0000000340)={[{@xino_auto}, {@volatile}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@permit_directio}, {@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r6}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'volatile'}}, {@uid_gt={'uid>', r4}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_gt={'euid>', r6}}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') write$binfmt_misc(r7, &(0x7f0000000180)="f44c888b0ee9fe9ca68deff3b3d28cb837495607254e1f8d1c18b43de3c14dd2492a6d82a82172cb47568590d25c44c3200394c45ebaefdfd98c613b075e6041b45829718c5b", 0x46) read$FUSE(r7, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 643.350133ms ago: executing program 1 (id=109): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r0, 0x0, 0x30) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) pwritev(r1, &(0x7f0000001300)=[{0x0}, {&(0x7f00000002c0)="bd", 0x1}], 0x2, 0x8, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x4, 0x1f8, 0xfffffffffffffffe, 0xffffffdfefffff17, 0x3, 0x0, 0x1, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0xe80f5000) 508.298934ms ago: executing program 1 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000080)={@void, @val={0x0, 0x3, 0x1c, 0x93, 0x14, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0x1c, 0x64, 0x0, 0x3, 0x2, 0x0, @empty=0x8000000, @empty}, {0x11, 0x6, 0x0, @empty=0xe0}}}, 0x26) 452.597846ms ago: executing program 1 (id=111): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xd) read(r2, &(0x7f0000000080)=""/190, 0xbe) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@can={{}, 0x1, 0x1, 0x4, 0x0, "500000b74b958e56"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4800) fcntl$addseals(r0, 0x409, 0x8) 395.25424ms ago: executing program 1 (id=112): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f000038a000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x51798000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000080)={0x5, 0x0, [{0x8f3, 0x0, 0x800}, {0x9ce, 0x0, 0xfa8}, {0x80d, 0x0, 0x9cbb}, {0xa94, 0x0, 0xb}, {0x854, 0x0, 0x5}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) memfd_create(&(0x7f0000000140)='.\xdf*\'\x00', 0x4) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000001e40)=[{r6, 0x7183}, {r6, 0x1008}], 0x2, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = creat(&(0x7f00000010c0)='./bus\x00', 0x101) write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) listen(r8, 0x9) connect$bt_sco(r8, &(0x7f0000000040), 0x8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) ioctl$KVM_RUN(r5, 0xae80, 0x0) 34.044282ms ago: executing program 3 (id=113): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002004e21e0000002000000000000000000c14f3d5700000000000000000000000000000000000000000000000000000000000000000000e2000000000000008bc5979e505eed192e17fb0000000000000000000000000000000000000000000000000000a1d507ac0000000000000000000300000000b70000000000000006000000000000000001000000", @ANYRES64=r0], 0x110) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffc3f}}]}}, 0x7fe782539b0b) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32, @ANYBLOB="65d40080000000916e8afe31026666cbec93a54c9a99cdf6bb47120ee72511224391b8101955e1a6ec35b9808e4421f47368387261f588ddc185ee3359e82162496e4ec62d039343eff09906ab07318553075b280514b010a23dfde4c5ee42458af7710f197e45ff259c17583e07335c69497f68a41ac6db5c5eea0f2656908ae47554e6569861753bfc021cefe937e3093aa293bd83582de4d021eb"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}}, 0x200000d0) 0s ago: executing program 1 (id=114): socket$vsock_stream(0x28, 0x1, 0x28) r0 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000200)={0x0, 0x5fc6, 0x1, 0xfbffffff, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) getpid() (async) r4 = getpid() syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x4, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0xc8}}}, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x18a) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x400, 0x4) rmdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00') socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x200014, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/tracing/options/context-info\x00', 0x800, 0x0) read(r6, 0x0, 0x0) (async) read(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r9, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r9, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0xffc99a3b00000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) (async) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0xffc99a3b00000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000001740)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8001, 0x0) (async) r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8001, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r11, &(0x7f00000004c0)='./file1\x00', 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 21.265885][ T36] audit: type=1400 audit(1790427410.160:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.267066][ T286] cgroup: Unknown subsys name 'net' [ 21.288556][ T36] audit: type=1400 audit(1790427410.160:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.315873][ T36] audit: type=1400 audit(1790427410.190:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.316034][ T286] cgroup: Unknown subsys name 'devices' [ 21.440529][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.446175][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.539076][ T36] audit: type=1400 audit(1790427410.440:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.562348][ T36] audit: type=1400 audit(1790427410.440:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.571287][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.587251][ T36] audit: type=1400 audit(1790427410.440:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.618900][ T36] audit: type=1400 audit(1790427410.500:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.644332][ T36] audit: type=1400 audit(1790427410.500:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.678234][ T36] audit: type=1400 audit(1790427410.570:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.703805][ T36] audit: type=1400 audit(1790427410.570:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.704120][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.478882][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.485973][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.493222][ T293] bridge_slave_0: entered allmulticast mode [ 22.501749][ T293] bridge_slave_0: entered promiscuous mode [ 22.514910][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.522000][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.529083][ T293] bridge_slave_1: entered allmulticast mode [ 22.535495][ T293] bridge_slave_1: entered promiscuous mode [ 22.645973][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.653173][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.660301][ T297] bridge_slave_0: entered allmulticast mode [ 22.666491][ T297] bridge_slave_0: entered promiscuous mode [ 22.673009][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.680118][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.687194][ T297] bridge_slave_1: entered allmulticast mode [ 22.693490][ T297] bridge_slave_1: entered promiscuous mode [ 22.751529][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.758898][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.765957][ T298] bridge_slave_0: entered allmulticast mode [ 22.772267][ T298] bridge_slave_0: entered promiscuous mode [ 22.778819][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.785865][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.793125][ T298] bridge_slave_1: entered allmulticast mode [ 22.799371][ T298] bridge_slave_1: entered promiscuous mode [ 22.847543][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.854625][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.861949][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.869023][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.890459][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.897521][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.904883][ T299] bridge_slave_0: entered allmulticast mode [ 22.911286][ T299] bridge_slave_0: entered promiscuous mode [ 22.917762][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.924840][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.931971][ T299] bridge_slave_1: entered allmulticast mode [ 22.938318][ T299] bridge_slave_1: entered promiscuous mode [ 22.976205][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.983294][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.990609][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.997649][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.071914][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.079006][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.086277][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.093328][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.101814][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.109024][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.116650][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.124041][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.131357][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.138759][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.149899][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.156957][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.172168][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.179277][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.191189][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.198258][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.207741][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.214809][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.250378][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.257432][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.265706][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.272766][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.299117][ T293] veth0_vlan: entered promiscuous mode [ 23.326595][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.333692][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.343124][ T293] veth1_macvtap: entered promiscuous mode [ 23.357588][ T298] veth0_vlan: entered promiscuous mode [ 23.367986][ T297] veth0_vlan: entered promiscuous mode [ 23.375138][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.382207][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.410146][ T298] veth1_macvtap: entered promiscuous mode [ 23.424127][ T297] veth1_macvtap: entered promiscuous mode [ 23.457047][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.482299][ T299] veth0_vlan: entered promiscuous mode [ 23.506997][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.520487][ T299] veth1_macvtap: entered promiscuous mode [ 23.582233][ T318] netlink: 'syz.0.1': attribute type 32 has an invalid length. [ 23.856794][ T353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 23.881256][ T355] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 23.949303][ T45] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 23.992007][ T361] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 24.010114][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 24.019663][ T361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16'. [ 24.060553][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.070826][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.099579][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 24.113926][ T45] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 24.123250][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.132886][ T45] usb 1-1: config 0 descriptor?? [ 24.145801][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 24.318473][ T312] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 24.418468][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.469866][ T312] usb 2-1: not running at top speed; connect to a high speed hub [ 24.479925][ T312] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 24.489038][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.497068][ T312] usb 2-1: Product: Й [ 24.501198][ T312] usb 2-1: Manufacturer: Т [ 24.506086][ T312] usb 2-1: SerialNumber: 쟩→븚褁胋臖 [ 24.578452][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 24.584795][ T45] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.595805][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 24.602540][ T45] usb 4-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 24.611734][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.621348][ T45] usb 4-1: config 0 descriptor?? [ 24.627714][ T45] usbhid 4-1:0.0: can't add hid device: -22 [ 24.637180][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 24.718936][ T312] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 24.725645][ T312] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 24.740528][ T312] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 24.760061][ T312] usb 2-1: USB disconnect, device number 2 [ 24.774437][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.906273][ T380] mmap: syz.2.21 (380) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 24.933623][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 25.042192][ T388] FAULT_INJECTION: forcing a failure. [ 25.042192][ T388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.055793][ T388] CPU: 0 UID: 0 PID: 388 Comm: syz.2.25 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 25.055816][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.055824][ T388] Call Trace: [ 25.055828][ T388] [ 25.055833][ T388] __dump_stack+0x21/0x30 [ 25.055856][ T388] dump_stack_lvl+0x140/0x1c0 [ 25.055873][ T388] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.055890][ T388] ? check_stack_object+0x138/0x150 [ 25.055904][ T388] dump_stack+0x19/0x20 [ 25.055920][ T388] should_fail_ex+0x3c2/0x510 [ 25.055935][ T388] should_fail+0xf/0x20 [ 25.055948][ T388] should_fail_usercopy+0x1e/0x30 [ 25.055964][ T388] _copy_to_user+0x24/0xa0 [ 25.055982][ T388] simple_read_from_buffer+0xed/0x160 [ 25.056000][ T388] proc_fail_nth_read+0x1aa/0x220 [ 25.056018][ T388] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.056035][ T388] ? bpf_lsm_file_permission+0xd/0x20 [ 25.056051][ T388] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.056068][ T388] vfs_read+0x288/0xc70 [ 25.056081][ T388] ? __cfi_vfs_read+0x10/0x10 [ 25.056093][ T388] ? __kasan_check_write+0x18/0x20 [ 25.056106][ T388] ? mutex_lock+0x97/0x1d0 [ 25.056121][ T388] ? __cfi_mutex_lock+0x10/0x10 [ 25.056136][ T388] ksys_read+0x145/0x260 [ 25.056152][ T388] ? __cfi_ksys_read+0x10/0x10 [ 25.056165][ T388] ? __kasan_check_read+0x15/0x20 [ 25.056178][ T388] __x64_sys_read+0x7f/0x90 [ 25.056191][ T388] x64_sys_call+0x2638/0x2ee0 [ 25.056203][ T388] do_syscall_64+0x57/0xf0 [ 25.056218][ T388] ? clear_bhb_loop+0x50/0xa0 [ 25.056234][ T388] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.056248][ T388] RIP: 0033:0x7fa41c35e98e [ 25.056260][ T388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 25.056271][ T388] RSP: 002b:00007fa41d1f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 25.056286][ T388] RAX: ffffffffffffffda RBX: 00007fa41d1f86c0 RCX: 00007fa41c35e98e [ 25.056296][ T388] RDX: 000000000000000f RSI: 00007fa41d1f80a0 RDI: 0000000000000005 [ 25.056304][ T388] RBP: 00007fa41d1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 25.056312][ T388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.056320][ T388] R13: 00007fa41c626038 R14: 00007fa41c625fa0 R15: 00007ffec1463a58 [ 25.056330][ T388] [ 25.738422][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.888462][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 25.894849][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.905979][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.915983][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.929023][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 25.938086][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.946705][ T45] usb 2-1: config 0 descriptor?? [ 25.997335][ T400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.006255][ T400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.353825][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 26.360061][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 26.368821][ T45] usb 2-1: USB disconnect, device number 3 [ 26.702740][ T312] usb 1-1: USB disconnect, device number 2 [ 26.865686][ T411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 26.886793][ T36] kauditd_printk_skb: 95 callbacks suppressed [ 26.886812][ T36] audit: type=1400 audit(1790427415.780:169): avc: denied { create } for pid=412 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 26.912299][ T36] audit: type=1400 audit(1790427415.790:170): avc: denied { ioctl } for pid=412 comm="syz.1.32" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4257 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.939182][ T36] audit: type=1400 audit(1790427415.790:171): avc: denied { map } for pid=412 comm="syz.1.32" path="socket:[4252]" dev="sockfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 26.961968][ T36] audit: type=1400 audit(1790427415.800:172): avc: denied { append } for pid=412 comm="syz.1.32" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.985596][ T36] audit: type=1400 audit(1790427415.800:173): avc: denied { mounton } for pid=412 comm="syz.1.32" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.038429][ T312] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.060873][ T36] audit: type=1400 audit(1790427415.960:174): avc: denied { mount } for pid=420 comm="syz.1.34" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.061281][ T421] device-mapper: ioctl: name not supplied when creating device [ 27.083082][ T36] audit: type=1400 audit(1790427415.960:175): avc: denied { read write } for pid=420 comm="syz.1.34" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.092050][ T423] device-mapper: ioctl: name not supplied when creating device [ 27.114644][ T36] audit: type=1400 audit(1790427415.960:176): avc: denied { open } for pid=420 comm="syz.1.34" path="/12/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.145687][ T36] audit: type=1400 audit(1790427415.960:177): avc: denied { ioctl } for pid=420 comm="syz.1.34" path="/12/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.171911][ T36] audit: type=1400 audit(1790427415.990:178): avc: denied { mounton } for pid=420 comm="syz.1.34" path="/12/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 27.194160][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 27.200940][ T312] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 27.208539][ T310] usb 4-1: USB disconnect, device number 2 [ 27.209148][ T312] usb 1-1: config 0 has no interface number 0 [ 27.229151][ T312] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 27.239854][ T312] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.249899][ T312] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.261354][ T312] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 27.270948][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.280911][ T312] usb 1-1: Product: syz [ 27.288422][ T312] usb 1-1: Manufacturer: syz [ 27.296032][ T312] usb 1-1: SerialNumber: syz [ 27.478425][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.488208][ T312] usb 1-1: config 0 descriptor?? [ 27.496891][ T409] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.624191][ T450] __vm_enough_memory: pid: 450, comm: syz.3.43, bytes: 4611686022722355200 not enough memory for the allocation [ 27.640027][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 27.652023][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 27.664811][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 27.678209][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 27.687697][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.695954][ T9] usb 2-1: Product: syz [ 27.701128][ T9] usb 2-1: Manufacturer: syz [ 27.705802][ T9] usb 2-1: SerialNumber: syz [ 27.711013][ T312] usb-storage 1-1:0.20: USB Mass Storage device detected [ 27.720912][ T312] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 27.729091][ T312] scsi host1: usb-storage 1-1:0.20 [ 27.736544][ T312] usb 1-1: USB disconnect, device number 3 [ 27.932056][ T9] usb 2-1: Can't get UAC3 power state for id 10 [ 27.939783][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 27.948547][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.949162][ T9] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 27.985541][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 27.997909][ T9] usb 2-1: USB disconnect, device number 4 [ 28.011423][ T431] udevd[431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.122250][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.133574][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.144838][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.158040][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.167261][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.176685][ T31] usb 4-1: config 0 descriptor?? [ 28.250966][ T466] SELinux: policydb string does not match my string SE Linux [ 28.258653][ T466] SELinux: failed to load policy [ 28.389730][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.398776][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.438465][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.543610][ T477] incfs_lookup_dentry err:-13 [ 28.548335][ T477] incfs: Can't find or create .index dir in ./file0 [ 28.555172][ T477] incfs: mount failed -13 [ 28.568735][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.610512][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 28.616648][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 28.625766][ T31] usb 4-1: USB disconnect, device number 3 [ 28.708544][ T310] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 28.818452][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.826000][ T9] usb 3-1: device descriptor read/64, error -71 [ 28.870160][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.878278][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 28.887039][ T310] usb 1-1: config 5 has an invalid interface number: 196 but max is 0 [ 28.895283][ T310] usb 1-1: config 5 has no interface number 0 [ 28.902987][ T310] usb 1-1: New USB device found, idVendor=0502, idProduct=3394, bcdDevice=62.21 [ 28.912105][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.920124][ T310] usb 1-1: Product: syz [ 28.924320][ T310] usb 1-1: Manufacturer: syz [ 28.929058][ T310] usb 1-1: SerialNumber: syz [ 28.958468][ T66] usb 2-1: device descriptor read/64, error -71 [ 29.068424][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.151932][ T310] usb 1-1: USB disconnect, device number 4 [ 29.198486][ T66] usb 2-1: device descriptor read/64, error -71 [ 29.205684][ T9] usb 3-1: device descriptor read/64, error -71 [ 29.218120][ T486] kvm: kvm [485]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 29.395113][ T492] netlink: 'syz.3.60': attribute type 20 has an invalid length. [ 29.448501][ T66] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.456067][ T9] usb 3-1: device descriptor read/64, error -71 [ 29.473754][ T499] 9pnet_fd: Insufficient options for proto=fd [ 29.568535][ T9] usb usb3-port1: attempt power cycle [ 29.588442][ T66] usb 2-1: device descriptor read/64, error -71 [ 29.716554][ T508] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 29.828431][ T66] usb 2-1: device descriptor read/64, error -71 [ 29.908456][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.929487][ T9] usb 3-1: device descriptor read/8, error -71 [ 29.938531][ T66] usb usb2-port1: attempt power cycle [ 30.059806][ T9] usb 3-1: device descriptor read/8, error -71 [ 30.078440][ T312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.229754][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.240825][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.250708][ T312] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 30.259803][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.268576][ T312] usb 1-1: config 0 descriptor?? [ 30.278481][ T66] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 30.299526][ T66] usb 2-1: device descriptor read/8, error -71 [ 30.308467][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.324753][ T516] netlink: 'syz.3.68': attribute type 32 has an invalid length. [ 30.333765][ T9] usb 3-1: device descriptor read/8, error -71 [ 30.429763][ T66] usb 2-1: device descriptor read/8, error -71 [ 30.469488][ T9] usb 3-1: device descriptor read/8, error -71 [ 30.578542][ T9] usb usb3-port1: unable to enumerate USB device [ 30.598423][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.668431][ T66] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.677347][ T312] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 30.684216][ T312] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 30.691078][ T312] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 30.697974][ T312] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 30.705047][ T312] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 30.712000][ T312] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 30.719355][ T312] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x0 [ 30.726331][ T66] usb 2-1: device descriptor read/8, error -71 [ 30.733206][ T312] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 30.748519][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 30.754996][ T31] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 30.767121][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.780436][ T31] usb 4-1: config 0 descriptor?? [ 30.789687][ T31] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 30.859484][ T66] usb 2-1: device descriptor read/8, error -71 [ 30.968587][ T66] usb usb2-port1: unable to enumerate USB device [ 30.990352][ T31] usb 4-1: Detected FT232B [ 31.078641][ T312] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 31.086067][ T312] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 31.094016][ T312] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71 [ 31.103967][ T312] usb 1-1: USB disconnect, device number 5 [ 31.195194][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 31.202941][ T31] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 31.270684][ T526] tipc: Started in network mode [ 31.275660][ T526] tipc: Node identity , cluster identity 4711 [ 31.281959][ T526] tipc: Failed to set node id, please configure manually [ 31.289271][ T526] tipc: Enabling of bearer rejected, failed to enable media [ 31.307387][ T528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 31.404341][ T66] usb 4-1: USB disconnect, device number 4 [ 31.411490][ T66] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 31.421788][ T66] ftdi_sio 4-1:0.0: device disconnected [ 31.661923][ T543] capability: warning: `syz.0.77' uses deprecated v2 capabilities in a way that may be insecure [ 31.725014][ T548] netlink: 'syz.0.78': attribute type 32 has an invalid length. [ 31.788878][ T554] process 'syz.0.81' launched '/dev/fd/3' with NULL argv: empty string added [ 31.807724][ T556] tipc: Started in network mode [ 31.812793][ T556] tipc: Node identity , cluster identity 4711 [ 31.819345][ T556] tipc: Failed to set node id, please configure manually [ 31.826392][ T556] tipc: Enabling of bearer rejected, failed to enable media [ 31.847521][ T558] random: crng reseeded on system resumption [ 31.909324][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 31.909342][ T36] audit: type=1400 audit(1790427420.810:223): avc: denied { setattr } for pid=561 comm="syz.0.85" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.978245][ T36] audit: type=1400 audit(1790427420.870:224): avc: denied { read append } for pid=569 comm="syz.3.87" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.001203][ T312] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 32.001248][ T36] audit: type=1400 audit(1790427420.870:225): avc: denied { open } for pid=569 comm="syz.3.87" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.034034][ T36] audit: type=1400 audit(1790427420.880:226): avc: denied { map } for pid=569 comm="syz.3.87" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.083984][ T577] netlink: 'syz.0.88': attribute type 32 has an invalid length. [ 32.106507][ T36] audit: type=1400 audit(1790427421.000:227): avc: denied { ioctl } for pid=578 comm="syz.0.89" path="socket:[7570]" dev="sockfs" ino=7570 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.130777][ T36] audit: type=1400 audit(1790427421.010:228): avc: denied { read write } for pid=578 comm="syz.0.89" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.137443][ T582] binfmt_misc: register: failed to install interpreter file ./file0 [ 32.153970][ T36] audit: type=1400 audit(1790427421.010:229): avc: denied { open } for pid=578 comm="syz.0.89" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.186734][ T312] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 32.197713][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.210245][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.220048][ T312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 32.233075][ T312] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 32.245859][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.254139][ T589] tipc: Started in network mode [ 32.257843][ T312] usb 2-1: config 0 descriptor?? [ 32.259095][ T589] tipc: Node identity , cluster identity 4711 [ 32.270200][ T589] tipc: Failed to set node id, please configure manually [ 32.277250][ T589] tipc: Enabling of bearer rejected, failed to enable media [ 32.368964][ T36] audit: type=1400 audit(1790427421.270:230): avc: denied { read } for pid=592 comm="syz.0.94" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.391962][ T36] audit: type=1400 audit(1790427421.270:231): avc: denied { open } for pid=592 comm="syz.0.94" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.416056][ T458] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.529239][ T36] audit: type=1400 audit(1790427421.430:232): avc: denied { write } for pid=592 comm="syz.0.94" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.542925][ T595] rust_binder: 592:595 error while translating object: EINVAL [ 32.552241][ T458] usb 4-1: device descriptor read/64, error -71 [ 32.567173][ T595] rust_binder: Failure in copy_transaction_data: EINVAL [ 32.567202][ T595] rust_binder: 592:595 transaction async to 592:0 failed EINVAL, code 0 size 96-24 [ 32.590148][ T595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.94'. [ 32.671451][ T312] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 32.688294][ T312] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 32.695780][ T312] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 32.703253][ T312] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 32.710685][ T312] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 32.718035][ T312] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 32.734832][ T312] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 32.743270][ T312] holtek_kbd 0003:04D9:A055.0002: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 32.798403][ T458] usb 4-1: device descriptor read/64, error -71 [ 32.871570][ T310] usb 2-1: USB disconnect, device number 9 [ 33.038441][ T458] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.178412][ T458] usb 4-1: device descriptor read/64, error -71 [ 33.221055][ T312] rust_binder: 592: undelivered TRANSACTION_ERROR: 29201 [ 33.401384][ T606] netlink: 'syz.1.97': attribute type 32 has an invalid length. [ 33.428502][ T610] Zero length message leads to an empty skb [ 33.438569][ T458] usb 4-1: device descriptor read/64, error -71 [ 33.540354][ T618] tipc: Started in network mode [ 33.545291][ T618] tipc: Node identity , cluster identity 4711 [ 33.551621][ T458] usb usb4-port1: attempt power cycle [ 33.557849][ T618] tipc: Failed to set node id, please configure manually [ 33.565082][ T618] tipc: Enabling of bearer rejected, failed to enable media [ 33.700182][ T626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=626 comm=syz.2.104 [ 33.770429][ T628] FAULT_INJECTION: forcing a failure. [ 33.770429][ T628] name fail_futex, interval 1, probability 0, space 0, times 1 [ 33.783467][ T628] CPU: 1 UID: 0 PID: 628 Comm: syz.2.104 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 33.783504][ T628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.783517][ T628] Call Trace: [ 33.783524][ T628] [ 33.783533][ T628] __dump_stack+0x21/0x30 [ 33.783571][ T628] dump_stack_lvl+0x140/0x1c0 [ 33.783604][ T628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.783638][ T628] dump_stack+0x19/0x20 [ 33.783668][ T628] should_fail_ex+0x3c2/0x510 [ 33.783696][ T628] should_fail+0xf/0x20 [ 33.783720][ T628] get_futex_key+0x178/0x940 [ 33.783747][ T628] ? lookup_user_key+0xd8/0x1230 [ 33.783776][ T628] ? __cfi_get_futex_key+0x10/0x10 [ 33.783801][ T628] ? __kasan_check_write+0x18/0x20 [ 33.783820][ T628] ? lookup_user_key+0xd94/0x1230 [ 33.783846][ T628] futex_wake+0x150/0x950 [ 33.783865][ T628] ? __cfi_lookup_user_key+0x10/0x10 [ 33.783891][ T628] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 33.783921][ T628] ? __cfi_futex_wake+0x10/0x10 [ 33.783943][ T628] ? bpf_lsm_file_permission+0xd/0x20 [ 33.783973][ T628] ? keyctl_keyring_unlink+0x37/0x160 [ 33.784000][ T628] do_futex+0x37d/0x510 [ 33.784030][ T628] ? __cfi_do_futex+0x10/0x10 [ 33.784058][ T628] ? mutex_unlock+0x90/0x240 [ 33.784086][ T628] __se_sys_futex+0x13c/0x320 [ 33.784116][ T628] ? __x64_sys_futex+0x110/0x110 [ 33.784147][ T628] __x64_sys_futex+0xe9/0x110 [ 33.784176][ T628] x64_sys_call+0x227f/0x2ee0 [ 33.784198][ T628] do_syscall_64+0x57/0xf0 [ 33.784219][ T628] ? clear_bhb_loop+0x50/0xa0 [ 33.784264][ T628] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.784293][ T628] RIP: 0033:0x7fa41c39e159 [ 33.784312][ T628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.784330][ T628] RSP: 002b:00007fa41d1d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 33.784356][ T628] RAX: ffffffffffffffda RBX: 00007fa41c626098 RCX: 00007fa41c39e159 [ 33.784373][ T628] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa41c62609c [ 33.784389][ T628] RBP: 00007fa41c626090 R08: 4000000000000000 R09: 0000000000000000 [ 33.784404][ T628] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 33.784420][ T628] R13: 00007fa41c626128 R14: 00007ffec1463970 R15: 00007ffec1463a58 [ 33.784439][ T628] [ 33.948437][ T458] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 34.049403][ T458] usb 4-1: device descriptor read/8, error -71 [ 34.191002][ T458] usb 4-1: device descriptor read/8, error -71 [ 34.304737][ T635] can: request_module (can-proto-0) failed. [ 34.311933][ T634] rust_binder: 632:634 performed invalid weak decrement on ref [ 34.428538][ T458] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.449557][ T458] usb 4-1: device descriptor read/8, error -71 [ 34.478557][ T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.523345][ T637] netlink: 'syz.1.107': attribute type 32 has an invalid length. [ 34.538418][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.547153][ T639] : renamed from bond_slave_0 [ 34.557315][ T639] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.609112][ T458] usb 4-1: device descriptor read/8, error -71 [ 34.628608][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 34.634954][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.649718][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 34.662843][ T310] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 34.672184][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.681331][ T310] usb 3-1: config 0 descriptor?? [ 34.699611][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.709902][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 34.716524][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 34.725623][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.728479][ T458] usb usb4-port1: unable to enumerate USB device [ 34.740452][ T31] usb 1-1: config 0 descriptor?? [ 34.947011][ T66] usb 1-1: USB disconnect, device number 6 [ 35.092501][ T310] usb 3-1: string descriptor 0 read error: -71 [ 35.104638][ T310] usb 3-1: USB disconnect, device number 6 [ 35.284085][ T655] BUG: scheduling while atomic: syz.1.114/655/0x00000002 [ 35.291206][ T655] Modules linked in: [ 35.295134][ T655] CPU: 0 UID: 0 PID: 655 Comm: syz.1.114 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 35.295160][ T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.295172][ T655] Call Trace: [ 35.295178][ T655] [ 35.295187][ T655] __dump_stack+0x21/0x30 [ 35.295220][ T655] dump_stack_lvl+0x140/0x1c0 [ 35.295247][ T655] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.295276][ T655] dump_stack+0x19/0x20 [ 35.295302][ T655] __schedule_bug+0x12b/0x200 [ 35.295325][ T655] ? find_proxy_task+0x2460/0x2460 [ 35.295347][ T655] ? update_load_avg+0x4f3/0x1980 [ 35.295373][ T655] ? __kernel_text_address+0x11/0x40 [ 35.295401][ T655] ? unwind_get_return_address+0x51/0x90 [ 35.295428][ T655] __schedule+0xb85/0x20b0 [ 35.295450][ T655] ? kvm_sched_clock_read+0x15/0x30 [ 35.295476][ T655] ? sched_clock_noinstr+0xd/0x30 [ 35.295500][ T655] ? __kasan_check_read+0x15/0x20 [ 35.295522][ T655] ? __sched_text_start+0x10/0x10 [ 35.295535][ T655] ? __kasan_check_read+0x15/0x20 [ 35.295547][ T655] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 35.295560][ T655] ? __kasan_check_write+0x18/0x20 [ 35.295572][ T655] ? _raw_spin_lock_irq+0x93/0x120 [ 35.295584][ T655] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.295596][ T655] schedule+0xc5/0x240 [ 35.295609][ T655] schedule_preempt_disabled+0x14/0x30 [ 35.295623][ T655] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 35.295641][ T655] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 35.295665][ T655] ? try_to_wake_up+0x111a/0x1fd0 [ 35.295680][ T655] ? __kasan_check_write+0x18/0x20 [ 35.295692][ T655] ? wake_q_add_safe+0x29/0x100 [ 35.295704][ T655] ? __cfi_try_to_wake_up+0x10/0x10 [ 35.295718][ T655] ? rwsem_mark_wake+0x507/0x770 [ 35.295736][ T655] ? rwsem_read_trylock+0x275/0x5a0 [ 35.295753][ T655] ? wake_up_q+0x10a/0x1c0 [ 35.295764][ T655] ? downgrade_write+0x470/0x470 [ 35.295782][ T655] down_write+0x163/0x2b0 [ 35.295798][ T655] ? __cfi_down_write+0x10/0x10 [ 35.295813][ T655] ? down_read+0x7f/0xe0 [ 35.295828][ T655] ? __cfi_down_read+0x10/0x10 [ 35.295843][ T655] ? __kasan_check_write+0x18/0x20 [ 35.295856][ T655] kernfs_remove+0x87/0xc0 [ 35.295872][ T655] sysfs_remove_group+0x22d/0x250 [ 35.295887][ T655] dpm_sysfs_remove+0x99/0xd0 [ 35.295904][ T655] device_del+0x241/0xcf0 [ 35.295916][ T655] ? __cfi_class_find_device+0x10/0x10 [ 35.295930][ T655] ? __cfi_device_del+0x10/0x10 [ 35.295941][ T655] ? __kasan_check_write+0x18/0x20 [ 35.295953][ T655] ? kobject_put+0x1cc/0x2a0 [ 35.295966][ T655] device_destroy+0xb0/0x100 [ 35.295978][ T655] ? __cfi_device_destroy+0x10/0x10 [ 35.295990][ T655] ? __kasan_check_write+0x18/0x20 [ 35.296003][ T655] android_device_destroy+0x118/0x180 [ 35.296022][ T655] gadgets_drop+0x1d/0x30 [ 35.296035][ T655] ? __cfi_gadgets_drop+0x10/0x10 [ 35.296047][ T655] configfs_rmdir+0x8ba/0x9b0 [ 35.296064][ T655] vfs_rmdir+0x3db/0x560 [ 35.296082][ T655] do_rmdir+0x29a/0x590 [ 35.296098][ T655] ? __cfi_do_rmdir+0x10/0x10 [ 35.296115][ T655] ? __kasan_check_write+0x18/0x20 [ 35.296128][ T655] __x64_sys_rmdir+0x4b/0x60 [ 35.296145][ T655] x64_sys_call+0xaf7/0x2ee0 [ 35.296160][ T655] do_syscall_64+0x57/0xf0 [ 35.296172][ T655] ? clear_bhb_loop+0x50/0xa0 [ 35.296187][ T655] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.296202][ T655] RIP: 0033:0x7fec3f79e159 [ 35.296214][ T655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.296225][ T655] RSP: 002b:00007fec40595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 35.296239][ T655] RAX: ffffffffffffffda RBX: 00007fec3fa25fa0 RCX: 00007fec3f79e159 [ 35.296249][ T655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 35.296257][ T655] RBP: 00007fec3f83506b R08: 0000000000000000 R09: 0000000000000000 [ 35.296265][ T655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.296273][ T655] R13: 00007fec3fa26038 R14: 00007fec3fa25fa0 R15: 00007ffe3a5d57d8 [ 35.296283][ T655] [ 35.296552][ T655] ------------[ cut here ]------------ [ 35.558417][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 35.564015][ T655] WARNING: CPU: 0 PID: 655 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 35.719458][ T655] Modules linked in: [ 35.723545][ T655] CPU: 0 UID: 0 PID: 655 Comm: syz.1.114 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 35.729604][ T45] usb 4-1: config index 0 descriptor too short (expected 64575, got 68) [ 35.736444][ T655] Tainted: [W]=WARN [ 35.745287][ T45] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 35.748699][ T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.748716][ T655] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 35.759183][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 35.769004][ T655] Code: 48 83 3d f4 00 dc 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 33 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 35.776226][ T45] usb 4-1: config index 1 descriptor too short (expected 64575, got 68) [ 35.788134][ T655] RSP: 0018:ffffc9000ea6f980 EFLAGS: 00010206 [ 35.788165][ T655] RAX: 000000007fffffff RBX: ffff8881f5407290 RCX: 0000000000207290 [ 35.808429][ T45] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 35.816422][ T655] RDX: ffff8881f5407290 RSI: 0000000000000001 RDI: 00000000f134cfc9 [ 35.822825][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 35.830555][ T655] RBP: ffffc9000ea6f9e0 R08: 0000000051aa3c41 R09: 0000000059062803 [ 35.855417][ T45] usb 4-1: string descriptor 0 read error: -71 [ 35.861779][ T655] R10: 000000000000000d R11: ffffffff8175a6a0 R12: 0000000074620729 [ 35.861800][ T655] R13: 0000000000000000 R14: ffffc9000ea6f9f0 R15: 000000000000000d [ 35.872922][ T45] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.875957][ T655] FS: 00007fec405956c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.884201][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.891976][ T655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.906682][ T45] usb 4-1: can't set config #1, error -71 [ 35.910079][ T655] CR2: 00007fec3e06ed58 CR3: 000000013841c000 CR4: 00000000003526b0 [ 35.922889][ T45] usb 4-1: USB disconnect, device number 9 [ 35.924715][ T655] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 35.952228][ T655] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 35.960273][ T655] Call Trace: [ 35.963579][ T655] [ 35.966521][ T655] ? do_syscall_64+0x57/0xf0 [ 35.971168][ T655] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.977302][ T655] kasan_save_track+0x4f/0x80 [ 35.982078][ T655] ? kasan_save_track+0x3e/0x80 [ 35.986985][ T655] ? kasan_save_free_info+0x44/0x50 [ 35.992219][ T655] ? __kasan_slab_free+0x5f/0x80 [ 35.997176][ T655] ? kfree+0x158/0x440 [ 36.001304][ T655] ? gadget_info_attr_release+0xcb/0x130 [ 36.006955][ T655] ? config_item_put+0x175/0x240 [ 36.011990][ T655] ? configfs_rmdir+0x8e8/0x9b0 [ 36.016874][ T655] ? vfs_rmdir+0x3db/0x560 [ 36.021346][ T655] ? do_rmdir+0x29a/0x590 [ 36.025717][ T655] ? __x64_sys_rmdir+0x4b/0x60 [ 36.030536][ T655] ? x64_sys_call+0xaf7/0x2ee0 [ 36.035319][ T655] ? do_syscall_64+0x57/0xf0 [ 36.039939][ T655] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.046039][ T655] kasan_save_free_info+0x44/0x50 [ 36.051208][ T655] __kasan_slab_free+0x5f/0x80 [ 36.055999][ T655] kfree+0x158/0x440 [ 36.060500][ T655] ? gadget_info_attr_release+0xcb/0x130 [ 36.066149][ T655] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 36.072645][ T655] gadget_info_attr_release+0xcb/0x130 [ 36.078150][ T655] config_item_put+0x175/0x240 [ 36.082996][ T655] ? __cfi_gadgets_drop+0x10/0x10 [ 36.088041][ T655] configfs_rmdir+0x8e8/0x9b0 [ 36.092767][ T655] vfs_rmdir+0x3db/0x560 [ 36.097067][ T655] do_rmdir+0x29a/0x590 [ 36.101297][ T655] ? __cfi_do_rmdir+0x10/0x10 [ 36.106006][ T655] ? __kasan_check_write+0x18/0x20 [ 36.111159][ T655] __x64_sys_rmdir+0x4b/0x60 [ 36.115794][ T655] x64_sys_call+0xaf7/0x2ee0 [ 36.120524][ T655] do_syscall_64+0x57/0xf0 [ 36.124954][ T655] ? clear_bhb_loop+0x50/0xa0 [ 36.129684][ T655] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.136180][ T655] RIP: 0033:0x7fec3f79e159 [ 36.140673][ T655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.160413][ T655] RSP: 002b:00007fec40595028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 36.168889][ T655] RAX: ffffffffffffffda RBX: 00007fec3fa25fa0 RCX: 00007fec3f79e159 [ 36.176902][ T655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 36.185025][ T655] RBP: 00007fec3f83506b R08: 0000000000000000 R09: 0000000000000000 [ 36.193056][ T655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.201171][ T655] R13: 00007fec3fa26038 R14: 00007fec3fa25fa0 R15: 00007ffe3a5d57d8 [ 36.209183][ T655] [ 36.212289][ T655] ---[ end trace 0000000000000000 ]--- [ 36.218124][ T655] BUG: scheduling while atomic: syz.1.114/655/0x00000000 [ 36.226504][ T655] Modules linked in: [ 36.230682][ T655] CPU: 0 UID: 0 PID: 655 Comm: syz.1.114 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 36.230719][ T655] Tainted: [W]=WARN [ 36.230726][ T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.230739][ T655] Call Trace: [ 36.230754][ T655] [ 36.230762][ T655] __dump_stack+0x21/0x30 [ 36.230795][ T655] dump_stack_lvl+0x140/0x1c0 [ 36.230823][ T655] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.230853][ T655] dump_stack+0x19/0x20 [ 36.230879][ T655] __schedule_bug+0x12b/0x200 [ 36.230902][ T655] ? find_proxy_task+0x2460/0x2460 [ 36.230925][ T655] ? update_load_avg+0x4f3/0x1980 [ 36.230952][ T655] __schedule+0xb85/0x20b0 [ 36.230974][ T655] ? __kasan_check_read+0x15/0x20 [ 36.230997][ T655] ? plist_check_list+0x2a1/0x2c0 [ 36.231017][ T655] ? __sched_text_start+0x10/0x10 [ 36.231039][ T655] ? plist_add+0x4d4/0x570 [ 36.231066][ T655] ? __futex_queue+0x19f/0x350 [ 36.231093][ T655] ? __cfi___futex_queue+0x10/0x10 [ 36.231128][ T655] schedule+0xc5/0x240 [ 36.231151][ T655] futex_wait_queue+0xfc/0x240 [ 36.231171][ T655] __futex_wait+0x15b/0x3d0 [ 36.231192][ T655] ? __cfi___futex_wait+0x10/0x10 [ 36.231211][ T655] ? __cfi_futex_wake_mark+0x10/0x10 [ 36.231232][ T655] ? __kasan_check_read+0x15/0x20 [ 36.231253][ T655] ? futex_wake+0x627/0x950 [ 36.231271][ T655] futex_wait+0x128/0x7c0 [ 36.231291][ T655] ? __cfi_futex_wait+0x10/0x10 [ 36.231314][ T655] do_futex+0x32a/0x510 [ 36.231340][ T655] ? __cfi_do_futex+0x10/0x10 [ 36.231367][ T655] ? __kasan_slab_free+0x6a/0x80 [ 36.231391][ T655] ? kmem_cache_free+0x1bd/0x4f0 [ 36.231415][ T655] __se_sys_futex+0x13c/0x320 [ 36.231441][ T655] ? putname+0x113/0x150 [ 36.231465][ T655] ? __x64_sys_futex+0x110/0x110 [ 36.231493][ T655] __x64_sys_futex+0xe9/0x110 [ 36.231519][ T655] x64_sys_call+0x227f/0x2ee0 [ 36.231539][ T655] do_syscall_64+0x57/0xf0 [ 36.231558][ T655] ? clear_bhb_loop+0x50/0xa0 [ 36.231593][ T655] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.231618][ T655] RIP: 0033:0x7fec3f79e159 [ 36.231635][ T655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.231652][ T655] RSP: 002b:00007fec405950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.231676][ T655] RAX: ffffffffffffffda RBX: 00007fec3fa25fa8 RCX: 00007fec3f79e159 [ 36.231691][ T655] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fec3fa25fa8 [ 36.231707][ T655] RBP: 00007fec3fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 36.231725][ T655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.231738][ T655] R13: 00007fec3fa26038 R14: 00007ffe3a5d56f0 R15: 00007ffe3a5d57d8 [ 36.231875][ T655] [ 36.231984][ T310] ------------[ cut here ]------------ [ 36.512091][ T310] pvqspinlock: lock 0xffff8881f6e4fc40 has corrupted value 0x0! [ 36.519737][ T310] WARNING: CPU: 0 PID: 310 at kernel/locking/qspinlock_paravirt.h:506 __pv_queued_spin_unlock_slowpath+0x241/0x300 [ 36.531819][ T310] Modules linked in: [ 36.535704][ T310] CPU: 0 UID: 0 PID: 310 Comm: kworker/1:2 Tainted: G W syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 36.548797][ T310] Tainted: [W]=WARN [ 36.552587][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.562630][ T310] Workqueue: 0x0 (wg-crypt-wg1) [ 36.567566][ T310] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x241/0x300 [ 36.574585][ T310] Code: e8 c4 bb 38 fc 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 b2 00 00 00 8b 13 48 c7 c7 c0 d4 e8 85 48 89 de e8 cf ab 5c fb <0f> 0b eb 96 48 c7 c7 40 6a 52 87 4c 89 e6 48 89 ca 49 89 ce e8 e6 [ 36.594178][ T310] RSP: 0018:ffffc9000b72fa90 EFLAGS: 00010046 [ 36.600242][ T310] RAX: 66e324ee477c1200 RBX: ffff8881f6e4fc40 RCX: ffff88812fc9df00 [ 36.608201][ T310] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 36.616249][ T310] RBP: ffffc9000b72fab8 R08: 0000000000000003 R09: 0000000000000004 [ 36.624207][ T310] R10: dffffc0000000000 R11: fffffbfff0e9f334 R12: ffff8881f6e4fc40 [ 36.632325][ T310] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812fc9df00 [ 36.640285][ T310] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.649205][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.655776][ T310] CR2: 00007fec3e06ed58 CR3: 000000013841c000 CR4: 00000000003526b0 [ 36.663751][ T310] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 36.671710][ T310] DR3: ffffffdfefffff17 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 36.679669][ T310] Call Trace: [ 36.682939][ T310] [ 36.685858][ T310] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x19/0x40 [ 36.693483][ T310] .slowpath+0x9/0x13 [ 36.697541][ T310] _raw_spin_unlock+0x45/0x60 [ 36.702223][ T310] finish_task_switch+0x139/0x770 [ 36.707240][ T310] __schedule+0x149e/0x20b0 [ 36.711734][ T310] ? __sched_text_start+0x10/0x10 [ 36.716745][ T310] ? __kasan_check_write+0x18/0x20 [ 36.721930][ T310] ? kthread_data+0x54/0xc0 [ 36.726446][ T310] ? wq_worker_sleeping+0x68/0x260 [ 36.731564][ T310] schedule+0xc5/0x240 [ 36.735623][ T310] worker_thread+0x10fd/0x13f0 [ 36.740375][ T310] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 36.746186][ T310] ? __kasan_check_read+0x15/0x20 [ 36.751203][ T310] kthread+0x2c4/0x360 [ 36.755351][ T310] ? __cfi_worker_thread+0x10/0x10 [ 36.760453][ T310] ? __cfi_kthread+0x10/0x10 [ 36.765061][ T310] ret_from_fork+0x67/0xa0 [ 36.769473][ T310] ? __cfi_kthread+0x10/0x10 [ 36.774054][ T310] ret_from_fork_asm+0x1a/0x30 [ 36.778907][ T310] [ 36.781916][ T310] ---[ end trace 0000000000000000 ]---