last executing test programs: 6.819140721s ago: executing program 2 (id=644): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0xff, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x2, 0xc1, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x54, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000000680), 0x0}, 0x0) (async) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000401e04633240000102030109026e000301580009080b0002012430080904000000010130"], &(0x7f00000021c0)={0x0, 0x0, 0x10, &(0x7f0000001e80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x43, 0xa, 0x6, 0x80}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 6.230235611s ago: executing program 2 (id=650): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000bc0)={0x0, "87596ef20cf363cbfd3b887f834e6025"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000200)={r2, 0x8e, 0x6}) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x5b, 0x1a, 0x55, 0x10, 0x357d, 0x7788, 0x8489, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0xe0, 0x8, "", [{{0x9, 0x4, 0x14, 0x7f, 0x0, 0x29, 0xaa, 0x29, 0x6d}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, 0x0, 0x42c202, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) 5.340462605s ago: executing program 0 (id=658): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r1, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$RTC_AIE_OFF(r0, 0x7002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000100)=0x10000, 0x0, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xffffffff, 0x4, 0x2, 0x0, 0x8, 0x20009, 0x1, 0x9, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x9, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x2d, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x1, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x3, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0x1, 0x10, 0x80000001, 0x80000001, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x40000003, 0x101, 0x7, 0x6d7e, 0x80003, 0x8, 0x8001, 0xbf23, 0x6, 0x9, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x7, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x0, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x8002, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x3e, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0x10a80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x100002, 0xe, 0xf, 0x132, 0x6]}, 0x45c) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x70}}, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000004060300000000000000000007000008050001000700000005000100070000000900020073797a32000000000900020073797a3200000000190c0450c10c160a3b7ad32e57aa4f9ffc7a77f53984f18d03daaaaf251fe99e3d246cede839d3a38f69bc33de5b4598931e6670e018545bda1c983d0aecf0f0bc45e5ff5391957518e58d395b3f31933be6e02ac9df2f736b6eed562102e76d927744bf181aa21bdbabbc071e9e8654acfaaf1621936b573991276cabceaa6cb2"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xee00}], {0x4, 0x5}, [], {0x10, 0x6}}, 0x2c, 0x3) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, 0xb, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6a998b7b}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}]}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x19}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x10, 0x1a, '/dev/uinput\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x54}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.924967266s ago: executing program 3 (id=666): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4}) unshare(0x22020600) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) syz_usb_connect$uac1(0x5, 0x85, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000081e0400304000010203010902730003010810010904000000010100000a240169000a00020102090404000000020000090401010101020000090501091000fe06030725010c2008000904020000010200000904020101010200000c240202ffff0900016dec5d072401000007000905820900040201020725010c070000"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 4.540890855s ago: executing program 0 (id=668): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4c6b02, 0x0) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000140), &(0x7f00000001c0)={[0xc]}, 0x8) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xa6e) (async) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xa6e) syz_usb_connect$uac1(0x2, 0x81, &(0x7f0000000840)=ANY=[@ANYBLOB="1201010200ec39208205160040000102030109026f00030109403f0904000000010100000a2401d2000a0002010209040100000102000009040101010102000007240108080000082402010304030809050109ff037808ba072501080403000904020000010200000904020101010200000905820920000302fe072501000e0300"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 4.485367127s ago: executing program 3 (id=669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x60}]}, 0x24}, 0x1, 0x0, 0x0, 0x80894}, 0x8000) 4.42621238s ago: executing program 3 (id=670): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1}, 0x80000001}], 0x1, 0x102, 0x0) shutdown(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0xffff, 0x3, 0x73, 0x7}, {0x101, 0x4, 0x7, 0xfffffc00}, {0x4, 0x0, 0x3, 0x1}, {0xffff, 0x60, 0x40, 0x8}, {0x2, 0x5, 0x8, 0x4}]}) 4.42566195s ago: executing program 3 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='.\x02\x00', 0x2) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000440)='encrypted\x00', 0x0, &(0x7f0000000000)='0', 0x1, r3) mknodat(r2, &(0x7f0000000240)='\x00', 0x100, 0x8) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x80, 0x0) sendfile(r5, r6, 0x0, 0x3) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r7, &(0x7f0000000100)='logon\x00', &(0x7f0000000140)='*\x00') recvfrom(r0, 0x0, 0x0, 0x10160, 0x0, 0x0) request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', r4) 4.425101821s ago: executing program 3 (id=672): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000009311fffc010000000000000000000000000000ff0200000000000000000000000000014e204e23"], 0xcd) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xe) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020854e8c4b94a5715f8227fd4236ff070000000000001c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febc8100000000000000c84e5b"], 0x0}) 4.309275486s ago: executing program 3 (id=675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "06cf386d6b25f51f", "9d3212aca86df12acf1262188203cb6e517cb3bf798a6c509d30053be8a3561a", "3ed5cc65", "a6521c34b1809173"}, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = gettid() setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x7}, 0x8) sendto$packet(r1, &(0x7f0000000180)="1497c84016caa9e16f2b8afdb2d11ff5559c5430407d8f19f5a20332ce11b58b7d4af50123d46ae42a1168068cfc60fb817868d10008b50b43708e0e06e1039edad16911a871572966043b6d318cbabe89b7f6976721ae1e9d8ad509af4054c430277d4f664d9b806db777502152badaf1e85f5d13b9216fdf7da1a685de3f1474f17b361eb9e19e1b83a9cafe0ef1faf17acdbdf8cb489b46dae8", 0x9b, 0x10, &(0x7f0000000240)={0x11, 0x11, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r5, 0x0, 0x2e, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) sendto$packet(r1, &(0x7f00000012c0)="cbfbe3eeb0c847852997577ef80840d4c4350e6700292e5dbf26892e107aa7418d67c6bd7f899b48aa3b6d803767be099cd35fdaf3d46e48b1bc420d3f1ee4992379760953073784bc01b1430caf5ee7543a0a275757bc9d0ed3c146142f8321363cb71e14eb7194ff7d0e574db8a174872bb01104a923908652cdb6d77f29a8ed07e8ef0ea855cb99e3ec44971046bacb3158b082", 0x95, 0x0, &(0x7f0000001380)={0x11, 0xf6, r2, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000013c0)={[0x1ff, 0xa, 0x7, 0x6, 0x9, 0x65d5, 0x80000001, 0xfa2d, 0x40, 0x81, 0xfffffffeffffffff, 0x7, 0x2, 0xffffffff, 0x8, 0x4], 0xbddf2dc92b6fcc78, 0x10}) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000001480)={0x3, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @remote}}}, 0x108) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r1) openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0), 0x48200, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001600)={0xe07, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_open_dev$evdev(&(0x7f00000166c0), 0x0, 0x542) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000016700)={0x3, {{0x2, 0x4e23, @local}}, 0x0, 0x8, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @local}}]}, 0x490) r8 = openat2(0xffffffffffffffff, &(0x7f0000016bc0)='./file0\x00', &(0x7f0000016c00)={0x80800, 0xed}, 0x18) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000016c40)={{r0}, "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"}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000017c40)={0x0, 0x2710}, 0x10) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) r10 = dup2(r1, r9) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000017c80)={0x0, {}, 0x0, {}, 0x2, 0x1, 0x11, 0x0, "ae9e7cedd587b75028266628ffc9ba45d35da3d821a3768df0983d0277f621c144b2beae2644a0e2d70a1720c66af26f80835914ae94a61bc0ca64b1ab1565be", "c5d7d0865d8fa57c08a6427b6e08fe47f9daf969046c137216ab89a743eebe30", [0x4, 0xa1]}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x500000b) r11 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000017d40), &(0x7f0000017d80)=0x4) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000017dc0)=r4) 4.177277403s ago: executing program 32 (id=675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "06cf386d6b25f51f", "9d3212aca86df12acf1262188203cb6e517cb3bf798a6c509d30053be8a3561a", "3ed5cc65", "a6521c34b1809173"}, 0x38) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = gettid() setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x7}, 0x8) sendto$packet(r1, &(0x7f0000000180)="1497c84016caa9e16f2b8afdb2d11ff5559c5430407d8f19f5a20332ce11b58b7d4af50123d46ae42a1168068cfc60fb817868d10008b50b43708e0e06e1039edad16911a871572966043b6d318cbabe89b7f6976721ae1e9d8ad509af4054c430277d4f664d9b806db777502152badaf1e85f5d13b9216fdf7da1a685de3f1474f17b361eb9e19e1b83a9cafe0ef1faf17acdbdf8cb489b46dae8", 0x9b, 0x10, &(0x7f0000000240)={0x11, 0x11, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r5, 0x0, 0x2e, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) sendto$packet(r1, &(0x7f00000012c0)="cbfbe3eeb0c847852997577ef80840d4c4350e6700292e5dbf26892e107aa7418d67c6bd7f899b48aa3b6d803767be099cd35fdaf3d46e48b1bc420d3f1ee4992379760953073784bc01b1430caf5ee7543a0a275757bc9d0ed3c146142f8321363cb71e14eb7194ff7d0e574db8a174872bb01104a923908652cdb6d77f29a8ed07e8ef0ea855cb99e3ec44971046bacb3158b082", 0x95, 0x0, &(0x7f0000001380)={0x11, 0xf6, r2, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000013c0)={[0x1ff, 0xa, 0x7, 0x6, 0x9, 0x65d5, 0x80000001, 0xfa2d, 0x40, 0x81, 0xfffffffeffffffff, 0x7, 0x2, 0xffffffff, 0x8, 0x4], 0xbddf2dc92b6fcc78, 0x10}) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000001480)={0x3, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @remote}}}, 0x108) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r1) openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0), 0x48200, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001600)={0xe07, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_open_dev$evdev(&(0x7f00000166c0), 0x0, 0x542) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000016700)={0x3, {{0x2, 0x4e23, @local}}, 0x0, 0x8, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @local}}]}, 0x490) r8 = openat2(0xffffffffffffffff, &(0x7f0000016bc0)='./file0\x00', &(0x7f0000016c00)={0x80800, 0xed}, 0x18) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000016c40)={{r0}, "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"}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r8, 0x28, 0x6, &(0x7f0000017c40)={0x0, 0x2710}, 0x10) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) r10 = dup2(r1, r9) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000017c80)={0x0, {}, 0x0, {}, 0x2, 0x1, 0x11, 0x0, "ae9e7cedd587b75028266628ffc9ba45d35da3d821a3768df0983d0277f621c144b2beae2644a0e2d70a1720c66af26f80835914ae94a61bc0ca64b1ab1565be", "c5d7d0865d8fa57c08a6427b6e08fe47f9daf969046c137216ab89a743eebe30", [0x4, 0xa1]}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x500000b) r11 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000017d40), &(0x7f0000017d80)=0x4) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000017dc0)=r4) 3.83311222s ago: executing program 0 (id=677): syz_usb_connect(0x3, 0x44, &(0x7f0000001400)={{0x12, 0x1, 0x110, 0x18, 0x7, 0x48, 0x8, 0xbb4, 0xa9f, 0x48fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x35, 0x1, 0x90, 0xe9, "", [{{0x9, 0x4, 0x7b, 0x5, 0x1, 0xe, 0x1, 0x0, 0x8e, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x81, 0x1, 0x47, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x83, 0x3, 0x9, 0x8}]}], [{{0x9, 0x5, 0x8a, 0x0, 0x10, 0x7, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x3}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0xdd, 0x0, 0xa, 0x8, 0x8}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}}) 3.832735599s ago: executing program 1 (id=678): clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{r0, r1/1000+60000}, {r2, r3/1000+10000}}) syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x1d, 0x6}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x1ff, 0x6, 0x4, 0xff, 0xc, 0x3, 0xa, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0xd, 0x7, 0xfa, 0xa}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.263827788s ago: executing program 0 (id=679): syz_usb_connect$midi(0x2, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102400000205247110040000102030109022c00010104c00809040000020103200809050102080000ac02042501000905ee022001"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) syz_io_uring_setup(0x2274, &(0x7f0000000040)={0x0, 0x7df4, 0x100, 0x1, 0xd2}, 0x0, 0x0) r1 = dup(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="3e0f01f29f66b81f0be3ab0f23d00f21f86635200000040f23f866b8f2fb00000f23c80f21f86635040090000f23f866b9c30800000f3265f30fc7f9f30f1eeb0f01c9db9849e564262e670fc7bc03bb250000", 0x53}], 0x1, 0x18, &(0x7f0000000100), 0x0) r4 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0, 0x2c, 0x0, 0x0, 0x1, r4}]) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={0x8, 0xa}) socket$inet6_udplite(0xa, 0x2, 0x88) 3.257707078s ago: executing program 1 (id=680): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000e69000/0x4000)=nil) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mmap(&(0x7f00003aa000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x72dd9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x7d, 0x7, 0x5, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd4000, 0x4888}}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x8a, {"b925030000b884830000ba000000000f306464420f21ba66baf80cb8e69e428fef66bafc0c66b8020066ef8fe97881c866baa000b004ee400f0764643e362e460f01c3c744240000400000c744240200200000c7442406000000000f011c240f3048b8a438deea688d52270f23d80f21f835c00000f00f23f8"}}, @wr_drn={0x68, 0x20, {0x1, 0xffffffff}}, @wr_crn={0x67, 0x20, {0x0, 0x80000001}}, @nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0xd36}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xf3, 0x0, 0x4, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x566, 0x2, 0xe, 0x1}}, @out_dx={0x6a, 0x28, {0xc5f, 0x3, 0x5b7}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x1c2b}}, @wr_drn={0x68, 0x20, {0x2, 0xfffffffffffffffb}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xdc1, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x9, 0x2c04}}, @nested_load_syzos={0x136, 0x70, {0x2, 0x29, [@uexit={0x0, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x5, 0x4}}, @nested_vmresume={0x130, 0x18, 0x3}]}}], 0x34a}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x0}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x2240, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4886) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x82) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f00000004c0)={0x80}) lseek(r9, 0x971, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff000000000000810059208600004f791e00203afffc01000000000000003df02681614c959186510e6a15d24500000000000000ff0200000000000000000000000000018800907806000000fc0200000000000000000000000000011801b0a0bad5c190"], 0x5a) 2.609934291s ago: executing program 0 (id=681): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) r1 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x25, 0x2f, {0x2f, 0x8, "b4acb06de93f80c17183862c6b51d17995f9bf99497a31d5587035f46ade457c086f8500e9db067302a9120caf"}}, 0x0}, 0x0) 2.609508781s ago: executing program 1 (id=682): socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0xe695000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x7ff, 0x4) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="003004000000d0fefceb"], 0x0, 0x0}) 2.606799531s ago: executing program 2 (id=683): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) (async) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) (async, rerun: 64) io_setup(0x7f, &(0x7f0000000100)=0x0) (async, rerun: 64) r3 = eventfd(0x8e) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) (async) clock_settime(0xfffffffc, &(0x7f0000000300)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x82002) r5 = open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000340)={0x0, 0xffff, 0x9, 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x3d, 0xb, 0x3, '\x00', 0x3ff}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000740)={r6, "a2dc8906353ada3ea113271f8dba4b22"}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x14440, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 1.81023606s ago: executing program 0 (id=684): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x862b01) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) syz_usb_connect$uac1(0x5, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x3, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x3, 0x3}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x7], 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x1, 0x2b, 0x82, 0x6, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x8, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x54}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf, 0x5, 0x1, {0x7, 0x25, 0x1, 0x8, 0xe, 0x9}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 1.8097873s ago: executing program 1 (id=685): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0xf, 0x6, 0xffffffff, 0x81, 0x5, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x2}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) syz_open_procfs(r1, &(0x7f0000000100)='net/sctp\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000086fb3d0601008300000000ab8a159a98853893c83e2503882bb09ea54983ce9abc16", @ANYRESHEX=r0], 0x0}, 0x0) 1.80942241s ago: executing program 2 (id=686): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x200000000000000, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000140)='projid_map\x00') (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) ptrace$peeksig(0x4209, r0, &(0x7f0000000180), &(0x7f0000000300)) (rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x5) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) r7 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_mtu(r7, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0xa, 0x4) (async, rerun: 32) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffff8, 0x4) (async, rerun: 32) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) (async) write$binfmt_elf64(r4, 0x0, 0xfdef) (async) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) (async, rerun: 64) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0xfffffffffffffc28, &(0x7f0000000200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x3, 0x0, [@remote, @rand_addr=' \x01\x00', @remote, @loopback, @empty, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x67, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 975.229112ms ago: executing program 1 (id=687): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x100010, r0, 0xf4f95000) lseek(r0, 0x0, 0x4) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "6819e85c1fc53156cfea526c55f1f2e15ac419b8948b1aec81e0f9ad73f19ae15287f08832ac1068a8450a65475e41bdbf8d434c889c9117cef0e77399480ca549fd4f5b11fcbe47a397a6090168e23b343742bd9e1c07d37addab27af0a6702097ca74a8a91527fc13160f1cff29957eeb01d874f4831c3ad892091538e4ef453521a6703c08c9bcbe8b11bcf"}}}, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00') 974.770062ms ago: executing program 2 (id=688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf0000000000080001000100000023a7722963ac80be74a15c681041bca16cb7a178254beb732dbd39fb0f3d2d99e8b2511382d0ad7eca486ba3ed948195ac80123d0b654ccc0fe699073fd09e1e837b890f8497c5e576d0e90991e2c631bd150bb48857b1e0439a109e3636950891ab4ca5d69cac3faa96c56c5880eff75c7d76579ef9adc9543496f95ced7d850000000000"], 0x1c}}, 0x20040890) 3.19934ms ago: executing program 1 (id=689): mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, &(0x7f0000000180)}}, &(0x7f00000000c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x1, 0xc0000) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x1, 0x2f}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x17}, @fda={0x66646185, 0x8, 0x2, 0x9}}, &(0x7f0000000740)={0x675fee0ae9b6f9b0, 0x28, 0x50}}, 0x1002}], 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902b00003010000000904008000010100000a24010800000201020d2406000003080000000000000c24020601010608000010000c24020800000300000000000924060506010129000924030001030005000c240206"], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0xfc, r7}, 0xc) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000040)=0xd, 0x4) wait4(0x0, &(0x7f0000000280), 0x1, &(0x7f00000002c0)={{}, {0x0, 0x0}}) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) syz_usb_connect(0x3, 0x62, &(0x7f0000000540)=ANY=[@ANYRES16=r9, @ANYBLOB="742842044bb171251f44c1a7a11680a15b947933", @ANYRESDEC=r7, @ANYRES32=r8, @ANYRES8=r3, @ANYRESDEC=r4], 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) 0s ago: executing program 2 (id=690): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x800, 0x0, 0x2, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0xfffffffe) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 12.052911][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 12.052930][ T36] audit: type=1400 audit(1774389249.550:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.056954][ T36] audit: type=1400 audit(1774389249.550:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.059585][ T36] audit: type=1400 audit(1774389249.550:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2882]" dev="pipefs" ino=2882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.062761][ T36] audit: type=1400 audit(1774389249.550:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.065508][ T36] audit: type=1400 audit(1774389249.550:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 19.411743][ T36] audit: type=1400 audit(1774389256.910:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.413055][ T282] cgroup: Unknown subsys name 'net' [ 19.414925][ T36] audit: type=1400 audit(1774389256.910:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.418624][ T36] audit: type=1400 audit(1774389256.910:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.418766][ T282] cgroup: Unknown subsys name 'devices' [ 19.523550][ T282] cgroup: Unknown subsys name 'hugetlb' [ 19.529151][ T282] cgroup: Unknown subsys name 'rlimit' [ 19.683157][ T36] audit: type=1400 audit(1774389257.180:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.706405][ T36] audit: type=1400 audit(1774389257.180:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.731206][ T36] audit: type=1400 audit(1774389257.180:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.760677][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.769589][ T36] audit: type=1400 audit(1774389257.270:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.794410][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.795145][ T36] audit: type=1400 audit(1774389257.270:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.829936][ T36] audit: type=1400 audit(1774389257.290:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.856608][ T36] audit: type=1400 audit(1774389257.290:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.673736][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.680786][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.687994][ T291] bridge_slave_0: entered allmulticast mode [ 20.694331][ T291] bridge_slave_0: entered promiscuous mode [ 20.703216][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.710246][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.717338][ T290] bridge_slave_0: entered allmulticast mode [ 20.723642][ T290] bridge_slave_0: entered promiscuous mode [ 20.731654][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.738776][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.746061][ T291] bridge_slave_1: entered allmulticast mode [ 20.752992][ T291] bridge_slave_1: entered promiscuous mode [ 20.762109][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.769150][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.776424][ T290] bridge_slave_1: entered allmulticast mode [ 20.782723][ T290] bridge_slave_1: entered promiscuous mode [ 20.830340][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.837455][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.844579][ T292] bridge_slave_0: entered allmulticast mode [ 20.850755][ T292] bridge_slave_0: entered promiscuous mode [ 20.860024][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.867092][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.874206][ T292] bridge_slave_1: entered allmulticast mode [ 20.880533][ T292] bridge_slave_1: entered promiscuous mode [ 20.891699][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.898759][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.905880][ T289] bridge_slave_0: entered allmulticast mode [ 20.912342][ T289] bridge_slave_0: entered promiscuous mode [ 20.926286][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.933354][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.940393][ T289] bridge_slave_1: entered allmulticast mode [ 20.946671][ T289] bridge_slave_1: entered promiscuous mode [ 21.091403][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.098466][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.105800][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.112925][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.120911][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.128001][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.135389][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.142426][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.151407][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.158445][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.165716][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.172743][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.191832][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.198889][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.206164][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.213194][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.252861][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.260343][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.268564][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.275816][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.283549][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.302509][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.309536][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.330525][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.337601][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.351532][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.358580][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.382447][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.389496][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.405166][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.412215][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.424845][ T290] veth0_vlan: entered promiscuous mode [ 21.438141][ T291] veth0_vlan: entered promiscuous mode [ 21.454137][ T292] veth0_vlan: entered promiscuous mode [ 21.469381][ T291] veth1_macvtap: entered promiscuous mode [ 21.478710][ T290] veth1_macvtap: entered promiscuous mode [ 21.491509][ T289] veth0_vlan: entered promiscuous mode [ 21.514467][ T292] veth1_macvtap: entered promiscuous mode [ 21.522841][ T289] veth1_macvtap: entered promiscuous mode [ 21.556049][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.620478][ T315] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4'. [ 21.634896][ T320] overlay: Unknown parameter 'euid<00000000000000000000' [ 21.645250][ T321] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.663622][ T320] tracefs: Invalid uid '0x00000000ffffffff' [ 21.841422][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 21.843508][ T336] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 21.889828][ T338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=338 comm=syz.3.4 [ 22.002842][ T64] usb 1-1: unable to get BOS descriptor or descriptor too short [ 22.012984][ T64] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 22.022459][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.030564][ T64] usb 1-1: Product: syz [ 22.034889][ T64] usb 1-1: Manufacturer: syz [ 22.039491][ T64] usb 1-1: SerialNumber: syz [ 22.111637][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.151399][ T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 22.249874][ T312] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 22.258579][ T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 22.267302][ T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 22.271294][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 22.281527][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.293623][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.303475][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 22.312581][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 22.317816][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.327180][ T45] usb 2-1: config 0 descriptor?? [ 22.332509][ T307] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 22.345842][ T307] usb 4-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 22.360700][ T45] hub 2-1:0.0: USB hub found [ 22.366435][ T307] usb 4-1: config 0 interface 0 has no altsetting 0 [ 22.374973][ T307] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 22.394324][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 22.402476][ T307] usb 4-1: SerialNumber: syz [ 22.404676][ T64] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 22.407919][ T307] usb 4-1: config 0 descriptor?? [ 22.425293][ T64] usb 1-1: USB disconnect, device number 2 [ 22.443011][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 22.562408][ T45] hub 2-1:0.0: 1 port detected [ 22.640465][ T345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10'. [ 22.901310][ T64] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 22.956013][ T350] rust_binder: Write failure EINVAL in pid:5 [ 22.956803][ T350] random: crng reseeded on system resumption [ 23.062511][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.073171][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 23.082186][ T64] usb 3-1: config 1 has no interface number 0 [ 23.088412][ T64] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 23.111208][ T64] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 23.122165][ T64] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 23.131700][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 23.142530][ T64] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.157232][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.166631][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.175140][ T64] usb 3-1: Product: syz [ 23.179338][ T64] usb 3-1: Manufacturer: syz [ 23.184331][ T64] usb 3-1: SerialNumber: syz [ 23.189975][ T348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 23.231412][ T314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.382385][ T314] usb 1-1: config 0 has no interfaces? [ 23.387929][ T314] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 23.397878][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.407144][ T348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 23.411443][ T314] usb 1-1: config 0 descriptor?? [ 23.619696][ T348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 23.629630][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 23.630414][ T350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.648042][ T350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.772693][ T343] usb 1-1: USB disconnect, device number 3 [ 23.793051][ T45] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 23.799449][ T45] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 23.808312][ T45] usbhid 2-1:0.0: can't add hid device: -32 [ 23.814408][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 23.842192][ T45] usb 2-1: USB disconnect, device number 2 [ 24.028761][ T348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.037437][ T348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.046336][ T64] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 24.071661][ T64] cdc_ncm 3-1:1.1: bind() failure [ 24.078871][ T64] usb 3-1: USB disconnect, device number 2 [ 24.425056][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 24.425076][ T36] audit: type=1400 audit(1774389261.920:161): avc: denied { write } for pid=359 comm="syz.1.16" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 24.521336][ T64] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 24.627372][ T307] hub 4-1:0.0: bad descriptor, ignoring hub [ 24.629709][ T36] audit: type=1400 audit(1774389262.120:162): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 24.633610][ T307] hub 4-1:0.0: probe with driver hub failed with error -5 [ 24.653501][ T64] usb 1-1: device descriptor read/64, error -71 [ 24.661309][ T307] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 24.667276][ T314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.675028][ T307] usb 4-1: Detected SIO [ 24.695750][ T307] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 24.700885][ T36] audit: type=1400 audit(1774389262.190:163): avc: denied { ioctl } for pid=365 comm="syz.3.18" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3957 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.739473][ T307] usb 4-1: USB disconnect, device number 2 [ 24.752566][ T307] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 24.766733][ T36] audit: type=1400 audit(1774389262.260:164): avc: denied { create } for pid=367 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.767735][ T307] ftdi_sio 4-1:0.0: device disconnected [ 24.787300][ T36] audit: type=1400 audit(1774389262.260:165): avc: denied { create } for pid=367 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 24.812294][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.832475][ T314] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 24.844415][ T314] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 24.855719][ T314] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 24.867647][ T314] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 24.876785][ T314] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 24.885216][ T314] usb 2-1: Manufacturer: syz [ 24.890676][ T360] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 24.951398][ T64] usb 1-1: device descriptor read/64, error -71 [ 24.962497][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.974539][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.983843][ T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 24.991958][ T10] usb 3-1: Product: syz [ 24.996114][ T10] usb 3-1: SerialNumber: syz [ 25.099281][ T360] rust_binder: Write failure EFAULT in pid:16 [ 25.099598][ T314] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 25.114152][ T314] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input4 [ 25.126538][ T314] usb 2-1: USB disconnect, device number 3 [ 25.126577][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 25.191354][ T64] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 25.205032][ T362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.213604][ T362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.304795][ T36] audit: type=1400 audit(1774389262.800:166): avc: denied { create } for pid=371 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 25.324853][ T64] usb 1-1: device descriptor read/64, error -71 [ 25.561338][ T64] usb 1-1: device descriptor read/64, error -71 [ 25.581311][ T307] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.671746][ T64] usb usb1-port1: attempt power cycle [ 25.711700][ T307] usb 4-1: device descriptor read/64, error -71 [ 25.824136][ T362] ======================================================= [ 25.824136][ T362] WARNING: The mand mount option has been deprecated and [ 25.824136][ T362] and is ignored by this kernel. Remove the mand [ 25.824136][ T362] option from the mount to silence this warning. [ 25.824136][ T362] ======================================================= [ 25.824141][ T36] audit: type=1400 audit(1774389263.320:167): avc: denied { remount } for pid=361 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 25.824199][ T362] SELinux: security_context_str_to_sid (syste_uGй :ߴdƧby:흝۫~ `rUrǙ) failed with errno=-22 [ 25.861327][ T314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.951330][ T307] usb 4-1: device descriptor read/64, error -71 [ 26.011342][ T64] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 26.032587][ T64] usb 1-1: device descriptor read/8, error -71 [ 26.051307][ T314] usb 2-1: Using ep0 maxpacket: 32 [ 26.057509][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.068506][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.078360][ T314] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.087480][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.096429][ T314] usb 2-1: config 0 descriptor?? [ 26.103156][ T314] hub 2-1:0.0: USB hub found [ 26.107841][ T10] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.114697][ T10] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 26.162415][ T64] usb 1-1: device descriptor read/8, error -71 [ 26.191554][ T307] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.302671][ T314] hub 2-1:0.0: 1 port detected [ 26.311765][ T10] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 26.326176][ T10] usb 3-1: USB disconnect, device number 3 [ 26.331334][ T307] usb 4-1: device descriptor read/64, error -71 [ 26.333412][ T10] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 26.348564][ T36] audit: type=1400 audit(1774389263.830:168): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.371270][ T36] audit: type=1400 audit(1774389263.830:169): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.394879][ T36] audit: type=1400 audit(1774389263.830:170): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.421311][ T64] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 26.442315][ T64] usb 1-1: device descriptor read/8, error -71 [ 26.571310][ T307] usb 4-1: device descriptor read/64, error -71 [ 26.582624][ T64] usb 1-1: device descriptor read/8, error -71 [ 26.681481][ T307] usb usb4-port1: attempt power cycle [ 26.701395][ T64] usb usb1-port1: unable to enumerate USB device [ 27.021311][ T307] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.042341][ T307] usb 4-1: device descriptor read/8, error -71 [ 27.172371][ T307] usb 4-1: device descriptor read/8, error -71 [ 27.221321][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.371322][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 27.379104][ T31] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 27.388181][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.396833][ T31] usb 3-1: Product: syz [ 27.400993][ T31] usb 3-1: Manufacturer: syz [ 27.405832][ T31] usb 3-1: SerialNumber: syz [ 27.411746][ T307] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 27.432357][ T307] usb 4-1: device descriptor read/8, error -71 [ 27.551837][ T314] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 27.558245][ T314] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 27.566773][ T307] usb 4-1: device descriptor read/8, error -71 [ 27.567608][ T314] usbhid 2-1:0.0: can't add hid device: -32 [ 27.579468][ T314] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 27.603242][ T314] usb 2-1: USB disconnect, device number 4 [ 27.681398][ T307] usb usb4-port1: unable to enumerate USB device [ 27.691480][ T343] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 27.842583][ T343] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.852461][ T343] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 27.861565][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.869545][ T343] usb 1-1: Product: syz [ 27.873765][ T343] usb 1-1: Manufacturer: syz [ 27.878359][ T343] usb 1-1: SerialNumber: syz [ 28.125735][ T419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 28.134477][ T419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 28.415778][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 28.434516][ T31] usb 3-1: USB disconnect, device number 4 [ 28.592602][ T343] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 28.605245][ T343] usb 1-1: USB disconnect, device number 8 [ 28.630222][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.911487][ T343] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 28.971744][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 29.113072][ T343] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.121282][ T343] usb 1-1: not running at top speed; connect to a high speed hub [ 29.137208][ T343] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 29.146301][ T343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.154463][ T343] usb 1-1: Product: К [ 29.158759][ T343] usb 1-1: Manufacturer: Ц [ 29.163328][ T343] usb 1-1: SerialNumber: 懯쒯ⱔ耍ྻ脁驀✨啂䎴䌱⽕韸쌚ͬ貇给⸋棶ቇ铐朰Ứ蕖ത溺嘭蒅ꛎ뛝잵櫝ﵣ嬦週䠀꼰믕蝟㦪ⓥꌏ쨔咅䔾⡼ꐞꁳ悺嶠᤮躸쒫䷯腼훻鷉㿢돶䜐⢧Ϩ遄Í젩ᛶ墤袙ൠ牄囉 [ 29.188636][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 29.197592][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.244676][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.255768][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 29.266060][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.279259][ T31] usb 4-1: config 0 descriptor?? [ 29.289680][ T31] hub 4-1:0.0: USB hub found [ 29.431371][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.487421][ T31] hub 4-1:0.0: 1 port detected [ 29.501018][ T432] mmap: syz.0.32 (432) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.519208][ T343] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 29.529353][ T343] usb 1-1: failed to enable PITCH for EP 0x1 [ 29.537084][ T343] usb 1-1: unit 2 not found! [ 29.541787][ T343] usb 1-1: unit 8 not found! [ 29.550066][ T343] usb 1-1: USB disconnect, device number 9 [ 29.563569][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.601303][ T314] usb 2-1: Using ep0 maxpacket: 8 [ 29.607654][ T314] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 98, using maximum allowed: 30 [ 29.618613][ T314] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 98 [ 29.631848][ T314] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 29.640956][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.649951][ T314] usb 2-1: config 0 descriptor?? [ 29.655970][ T314] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 29.664272][ T314] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 29.855962][ T343] usb 2-1: USB disconnect, device number 5 [ 30.135276][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 30.135295][ T36] audit: type=1400 audit(1774389267.630:196): avc: denied { create } for pid=474 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 30.401380][ T314] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 30.494327][ T36] audit: type=1400 audit(1774389267.990:197): avc: denied { ioctl } for pid=486 comm="syz.2.48" path="socket:[4479]" dev="sockfs" ino=4479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.572747][ T314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.581173][ T314] usb 1-1: config 4 has an invalid interface number: 77 but max is 0 [ 30.590424][ T314] usb 1-1: config 4 has no interface number 0 [ 30.596749][ T314] usb 1-1: config 4 interface 77 altsetting 15 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 30.608465][ T314] usb 1-1: config 4 interface 77 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 30.619428][ T314] usb 1-1: config 4 interface 77 altsetting 15 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 30.630737][ T314] usb 1-1: config 4 interface 77 has no altsetting 0 [ 30.647510][ T314] usb 1-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=7a.09 [ 30.656820][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.665428][ T314] usb 1-1: Product: syz [ 30.669740][ T314] usb 1-1: Manufacturer: syz [ 30.674872][ T314] usb 1-1: SerialNumber: syz [ 30.751925][ T31] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 30.758779][ T31] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 30.767858][ T31] usbhid 4-1:0.0: can't add hid device: -32 [ 30.774127][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 30.776972][ T36] audit: type=1400 audit(1774389268.270:198): avc: denied { setopt } for pid=494 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.811929][ T31] usb 4-1: USB disconnect, device number 7 [ 30.840550][ T36] audit: type=1400 audit(1774389268.330:199): avc: denied { create } for pid=503 comm="syz.2.52" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 30.841358][ T343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.861924][ T36] audit: type=1400 audit(1774389268.360:200): avc: denied { mounton } for pid=503 comm="syz.2.52" path="/16/file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 30.892777][ T314] rndis_host 1-1:4.77: skipping garbage [ 30.898538][ T314] usb 1-1: bad CDC descriptors [ 30.903648][ T314] cdc_acm 1-1:4.77: skipping garbage [ 30.911528][ T36] audit: type=1400 audit(1774389268.410:201): avc: denied { create } for pid=503 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.931899][ T36] audit: type=1400 audit(1774389268.420:202): avc: denied { getopt } for pid=503 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.932606][ T314] usb 1-1: USB disconnect, device number 10 [ 31.011319][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 31.016860][ T343] usb 2-1: no configurations [ 31.021508][ T343] usb 2-1: can't read configurations, error -22 [ 31.151771][ T343] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 31.305104][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 31.310679][ T343] usb 2-1: no configurations [ 31.315375][ T343] usb 2-1: can't read configurations, error -22 [ 31.321871][ T343] usb usb2-port1: attempt power cycle [ 31.400155][ T36] audit: type=1400 audit(1774389268.890:203): avc: denied { relabelfrom } for pid=511 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.420079][ T36] audit: type=1400 audit(1774389268.890:204): avc: denied { relabelto } for pid=511 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.440312][ T36] audit: type=1400 audit(1774389268.900:205): avc: denied { mounton } for pid=511 comm="syz.0.55" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.470661][ T517] Zero length message leads to an empty skb [ 31.611334][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 31.671341][ T343] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 31.688312][ T521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 31.697610][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 31.705213][ T343] usb 2-1: no configurations [ 31.709902][ T343] usb 2-1: can't read configurations, error -22 [ 31.721301][ T314] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 31.762694][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.772595][ T31] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 31.781920][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.790036][ T31] usb 4-1: Product: syz [ 31.794457][ T31] usb 4-1: Manufacturer: syz [ 31.799131][ T31] usb 4-1: SerialNumber: syz [ 31.851317][ T343] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 31.871751][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 31.877353][ T343] usb 2-1: no configurations [ 31.882125][ T343] usb 2-1: can't read configurations, error -22 [ 31.882848][ T314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.888565][ T343] usb usb2-port1: unable to enumerate USB device [ 31.896963][ T314] usb 1-1: not running at top speed; connect to a high speed hub [ 31.911332][ T314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.921642][ T314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.932952][ T314] usb 1-1: string descriptor 0 read error: -22 [ 31.939185][ T314] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.948498][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.956152][ T314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.967283][ T314] usb 1-1: 0:2 : does not exist [ 32.112471][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 32.120590][ T10] usb 3-1: config 0 has no interface number 0 [ 32.126776][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 32.135862][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.144655][ T10] usb 3-1: config 0 descriptor?? [ 32.153658][ T10] ftdi_sio 3-1:0.2: FTDI USB Serial Device converter detected [ 32.161605][ T10] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 32.358230][ T343] usb 3-1: USB disconnect, device number 5 [ 32.376303][ T343] ftdi_sio 3-1:0.2: device disconnected [ 32.776519][ T314] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 32.786074][ T314] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 32.795833][ T314] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 32.808556][ T314] usb 1-1: USB disconnect, device number 11 [ 32.818293][ T31] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 32.832412][ T31] usb 4-1: USB disconnect, device number 8 [ 32.838312][ T343] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 33.003920][ T343] usb 3-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 33.013176][ T343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.021848][ T343] usb 3-1: Product: ᢨ걢潽윪櫞ꨶ䶋䫌㈶桵봒ࣀᄗ鉅橰눚朦宬砈즤ꍧ敢撾꟝࣭䙁칇⌈蛲桼㜆 [ 33.034121][ T343] usb 3-1: Manufacturer:  [ 33.038712][ T343] usb 3-1: SerialNumber: syz [ 33.248775][ T343] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.255753][ T343] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.262773][ T343] usb 3-1: unit 6 not found! [ 33.270339][ T343] usb 3-1: USB disconnect, device number 6 [ 33.289671][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.561345][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 33.591327][ T314] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 33.711446][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 33.717743][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.728737][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.738552][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.747661][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.751283][ T314] usb 4-1: Using ep0 maxpacket: 32 [ 33.756656][ T31] usb 1-1: config 0 descriptor?? [ 33.767785][ T31] hub 1-1:0.0: USB hub found [ 33.769926][ T314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.791310][ T314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 33.812719][ T314] usb 4-1: New USB device found, idVendor=0582, idProduct=0456, bcdDevice= 0.41 [ 33.831381][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.839505][ T314] usb 4-1: Product: syz [ 33.846845][ T314] usb 4-1: Manufacturer: syz [ 33.851614][ T314] usb 4-1: SerialNumber: syz [ 33.947724][ T557] kvm: MONITOR instruction emulated as NOP! [ 33.967548][ T31] hub 1-1:0.0: 1 port detected [ 34.051316][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 34.065163][ T537] cgroup: noprefix used incorrectly [ 34.075221][ T314] usb 4-1: MIDIStreaming interface descriptor not found [ 34.086063][ T314] usb 4-1: USB disconnect, device number 9 [ 34.098611][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.202360][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.214057][ T10] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 34.223246][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.231369][ T10] usb 2-1: Product: syz [ 34.235600][ T10] usb 2-1: Manufacturer: syz [ 34.240198][ T10] usb 2-1: SerialNumber: syz [ 34.245786][ T10] usb 2-1: config 0 descriptor?? [ 34.251955][ T10] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 34.452709][ T10] usb 2-1: USB disconnect, device number 10 [ 34.871284][ T343] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.001292][ T343] usb 4-1: device descriptor read/64, error -71 [ 35.241304][ T343] usb 4-1: device descriptor read/64, error -71 [ 35.311317][ T364] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 35.461314][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 35.467633][ T364] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 35.480175][ T364] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 35.481292][ T343] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 35.489307][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.505049][ T364] usb 2-1: Product: syz [ 35.509219][ T364] usb 2-1: Manufacturer: syz [ 35.513857][ T364] usb 2-1: SerialNumber: syz [ 35.552251][ T31] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 35.571456][ T10] usb 1-1: USB disconnect, device number 12 [ 35.621329][ T343] usb 4-1: device descriptor read/64, error -71 [ 35.721757][ T364] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 35.735340][ T364] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 35.752098][ T364] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 35.772678][ T364] usb 2-1: USB disconnect, device number 11 [ 35.861379][ T343] usb 4-1: device descriptor read/64, error -71 [ 35.971418][ T343] usb usb4-port1: attempt power cycle [ 36.041319][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 36.091469][ T580] netlink: 9 bytes leftover after parsing attributes in process `syz.0.75'. [ 36.100462][ T580] gretap0: entered promiscuous mode [ 36.106933][ T580] netlink: 5 bytes leftover after parsing attributes in process `syz.0.75'. [ 36.115914][ T580] 0{X: renamed from gretap0 [ 36.121624][ T580] 0{X: left promiscuous mode [ 36.126703][ T580] 0{X: entered allmulticast mode [ 36.132741][ T580] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 36.151425][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 36.151440][ T36] audit: type=1400 audit(1774389273.650:222): avc: denied { read } for pid=579 comm="syz.0.75" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.179915][ T36] audit: type=1400 audit(1774389273.650:223): avc: denied { open } for pid=579 comm="syz.0.75" path="/12/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.203941][ T36] audit: type=1400 audit(1774389273.650:224): avc: denied { mounton } for pid=579 comm="syz.0.75" path="/12/file0" dev="incremental-fs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.227767][ T36] audit: type=1400 audit(1774389273.710:225): avc: denied { read } for pid=579 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.247986][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 36.257108][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.265140][ T10] usb 3-1: Product: ᢨ걢潽윪櫞ꨶ䶋䫌㈶桵봒ࣀᄗ鉅橰눚朦宬砈즤ꍧ敢撾꟝࣭䙁칇⌈蛲桼㜆 [ 36.277442][ T10] usb 3-1: Manufacturer:  [ 36.282107][ T10] usb 3-1: SerialNumber: syz [ 36.311355][ T343] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 36.332521][ T343] usb 4-1: device descriptor read/8, error -71 [ 36.373471][ T36] audit: type=1400 audit(1774389273.870:226): avc: denied { create } for pid=585 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.393473][ T36] audit: type=1400 audit(1774389273.890:227): avc: denied { write } for pid=585 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.462595][ T343] usb 4-1: device descriptor read/8, error -71 [ 36.491141][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.498133][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 36.505092][ T10] usb 3-1: unit 6 not found! [ 36.513550][ T10] usb 3-1: USB disconnect, device number 7 [ 36.524909][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.671747][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 36.701362][ T343] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 36.722347][ T343] usb 4-1: device descriptor read/8, error -71 [ 36.821317][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 36.827777][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.838757][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.851768][ T31] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 36.860841][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.869603][ T343] usb 4-1: device descriptor read/8, error -71 [ 36.876106][ T31] usb 2-1: config 0 descriptor?? [ 36.975791][ T36] audit: type=1400 audit(1774389274.470:228): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.981422][ T343] usb usb4-port1: unable to enumerate USB device [ 37.048137][ T592] tipc: Enabling of bearer rejected, failed to enable media [ 37.290828][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 37.299026][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 37.301343][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 37.305031][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 37.321748][ T31] usb 2-1: USB disconnect, device number 12 [ 37.371344][ T314] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 37.462297][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.473286][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 37.482344][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.491041][ T10] usb 1-1: config 0 descriptor?? [ 37.521286][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 37.527625][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.539171][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.548940][ T314] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 37.558084][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.566961][ T314] usb 3-1: config 0 descriptor?? [ 37.573017][ T314] hub 3-1:0.0: USB hub found [ 37.603307][ T36] audit: type=1400 audit(1774389275.100:229): avc: denied { read } for pid=608 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.654186][ T36] audit: type=1400 audit(1774389275.150:230): avc: denied { setopt } for pid=608 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.685550][ T612] TCP: TCP_TX_DELAY enabled [ 37.690590][ T36] audit: type=1400 audit(1774389275.180:231): avc: denied { bind } for pid=611 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.772985][ T314] hub 3-1:0.0: 1 port detected [ 37.837135][ T622] overlayfs: conflicting options: nfs_export=on,index=off [ 37.914583][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 37.921526][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 37.928340][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 37.935405][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 37.947409][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 37.954277][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 37.961076][ T10] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 37.969156][ T10] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 38.153409][ T10] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 38.161593][ T10] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 38.169299][ T10] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -71 [ 38.179568][ T10] usb 1-1: USB disconnect, device number 13 [ 38.495328][ T628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.90'. [ 38.514033][ T630] fuse: Unknown parameter '0x0000000000000004' [ 38.761323][ T31] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 38.841296][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 38.912722][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.920961][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 38.928808][ T343] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 38.937364][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 38.946095][ T31] usb 2-1: string descriptor 0 read error: -22 [ 38.952376][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.40 [ 38.961454][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.992359][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 39.003492][ T10] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 39.016632][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 39.025448][ T10] usb 4-1: string descriptor 0 read error: -22 [ 39.031795][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 39.040855][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.081314][ T343] usb 1-1: Using ep0 maxpacket: 16 [ 39.087771][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.098751][ T343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.111631][ T343] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 39.120682][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.129578][ T343] usb 1-1: config 0 descriptor?? [ 39.312096][ T314] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 39.331442][ T364] usb 3-1: USB disconnect, device number 8 [ 39.372473][ T635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.381030][ T635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.390701][ T31] usbhid 2-1:1.0: can't add hid device: -32 [ 39.398383][ T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 39.407402][ T31] usb 2-1: USB disconnect, device number 13 [ 39.452096][ T651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.460668][ T651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.473628][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 39.479613][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 39.493565][ T10] usb 4-1: USB disconnect, device number 14 [ 39.555617][ T656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 39.564446][ T656] bridge_slave_1: left allmulticast mode [ 39.570116][ T656] bridge_slave_1: left promiscuous mode [ 39.575789][ T656] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.583395][ T656] bridge_slave_0: left allmulticast mode [ 39.589044][ T656] bridge_slave_0: left promiscuous mode [ 39.594957][ T656] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.694579][ T658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=658 comm=syz.3.100 [ 39.708383][ T659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 39.717338][ T658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 39.740652][ T343] usbhid 1-1:0.0: can't add hid device: -71 [ 39.748091][ T343] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.759363][ T343] usb 1-1: USB disconnect, device number 14 [ 40.477797][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 40.815509][ T737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=737 comm=syz.3.128 [ 40.828370][ T737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 40.847985][ T737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=737 comm=syz.3.128 [ 41.173756][ T36] kauditd_printk_skb: 136 callbacks suppressed [ 41.173772][ T36] audit: type=1400 audit(1774389278.670:368): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.203993][ T36] audit: type=1400 audit(1774389278.670:369): avc: denied { create } for pid=748 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 41.223339][ T36] audit: type=1400 audit(1774389278.670:370): avc: denied { create } for pid=748 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 41.281284][ T36] audit: type=1400 audit(1774389278.770:371): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.305317][ T36] audit: type=1400 audit(1774389278.770:372): avc: denied { read write } for pid=751 comm="syz.1.133" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 41.412352][ T36] audit: type=1400 audit(1774389278.910:373): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.436439][ T36] audit: type=1400 audit(1774389278.910:374): avc: denied { block_suspend } for pid=753 comm="syz.0.134" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 41.458065][ T36] audit: type=1400 audit(1774389278.910:375): avc: denied { block_suspend } for pid=753 comm="syz.0.134" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 41.479557][ T36] audit: type=1400 audit(1774389278.910:376): avc: denied { read write } for pid=753 comm="syz.0.134" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 41.569394][ T36] audit: type=1400 audit(1774389279.060:377): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 41.595876][ T756] netlink: 'syz.3.135': attribute type 12 has an invalid length. [ 42.376330][ T795] syz.1.151 uses obsolete (PF_INET,SOCK_PACKET) [ 42.966966][ T817] veth1_macvtap: left promiscuous mode [ 43.018188][ T824] netlink: 96 bytes leftover after parsing attributes in process `syz.1.162'. [ 43.150527][ T843] t: renamed from vlan0 (while UP) [ 43.427614][ T853] syzkaller1: entered promiscuous mode [ 43.433233][ T853] syzkaller1: entered allmulticast mode [ 46.247210][ T36] kauditd_printk_skb: 349 callbacks suppressed [ 46.247230][ T36] audit: type=1400 audit(1774389283.750:727): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.277501][ T36] audit: type=1400 audit(1774389283.750:728): avc: denied { read write } for pid=967 comm="syz.0.218" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 46.408053][ T36] audit: type=1400 audit(1774389283.900:729): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.432083][ T36] audit: type=1400 audit(1774389283.910:730): avc: denied { create } for pid=970 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 46.452460][ T36] audit: type=1400 audit(1774389283.910:731): avc: denied { create } for pid=970 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 46.472945][ T36] audit: type=1400 audit(1774389283.910:732): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.502688][ T36] audit: type=1400 audit(1774389283.920:733): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 46.531307][ T36] audit: type=1400 audit(1774389283.930:734): avc: denied { create } for pid=972 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 46.552033][ T36] audit: type=1400 audit(1774389283.930:735): avc: denied { create } for pid=972 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 46.582372][ T36] audit: type=1400 audit(1774389283.930:736): avc: denied { create } for pid=972 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 47.115441][ T995] syzkaller1: entered promiscuous mode [ 47.133796][ T998] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 47.145342][ T998] netlink: 'syz.3.228': attribute type 4 has an invalid length. [ 49.187187][ T1070] FAULT_INJECTION: forcing a failure. [ 49.187187][ T1070] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.200373][ T1070] CPU: 1 UID: 0 PID: 1070 Comm: syz.2.256 Not tainted syzkaller #0 f5ac747b36c456989d7181d0133b7a324c782226 [ 49.200395][ T1070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.200403][ T1070] Call Trace: [ 49.200407][ T1070] [ 49.200412][ T1070] __dump_stack+0x21/0x30 [ 49.200438][ T1070] dump_stack_lvl+0x140/0x1c0 [ 49.200452][ T1070] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.200466][ T1070] ? check_stack_object+0x12b/0x150 [ 49.200483][ T1070] dump_stack+0x19/0x20 [ 49.200495][ T1070] should_fail_ex+0x3d7/0x530 [ 49.200510][ T1070] should_fail+0xf/0x20 [ 49.200521][ T1070] should_fail_usercopy+0x1e/0x30 [ 49.200534][ T1070] _copy_to_user+0x24/0xa0 [ 49.200550][ T1070] simple_read_from_buffer+0xed/0x160 [ 49.200563][ T1070] proc_fail_nth_read+0x1aa/0x220 [ 49.200576][ T1070] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.200588][ T1070] ? bpf_lsm_file_permission+0xd/0x20 [ 49.200605][ T1070] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 49.200617][ T1070] vfs_read+0x289/0xcb0 [ 49.200632][ T1070] ? __cfi_vfs_read+0x10/0x10 [ 49.200645][ T1070] ? __kasan_check_write+0x18/0x20 [ 49.200660][ T1070] ? mutex_lock+0x97/0x1d0 [ 49.200671][ T1070] ? __cfi_mutex_lock+0x10/0x10 [ 49.200680][ T1070] ? __fget_files+0x2c5/0x340 [ 49.200690][ T1070] ksys_read+0x145/0x260 [ 49.200703][ T1070] ? __cfi_ksys_read+0x10/0x10 [ 49.200716][ T1070] ? fdget+0x188/0x1e0 [ 49.200726][ T1070] ? __kasan_check_read+0x15/0x20 [ 49.200739][ T1070] __x64_sys_read+0x7f/0x90 [ 49.200753][ T1070] x64_sys_call+0x2638/0x2ee0 [ 49.200768][ T1070] do_syscall_64+0x57/0xf0 [ 49.200782][ T1070] ? clear_bhb_loop+0x50/0xa0 [ 49.200798][ T1070] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.200811][ T1070] RIP: 0033:0x7fbe8bd5cfce [ 49.200827][ T1070] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 49.200836][ T1070] RSP: 002b:00007fbe8cbdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.200851][ T1070] RAX: ffffffffffffffda RBX: 00007fbe8cbdb6c0 RCX: 00007fbe8bd5cfce [ 49.200859][ T1070] RDX: 000000000000000f RSI: 00007fbe8cbdb0a0 RDI: 0000000000000003 [ 49.200866][ T1070] RBP: 00007fbe8cbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 49.200873][ T1070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.200880][ T1070] R13: 00007fbe8c016038 R14: 00007fbe8c015fa0 R15: 00007ffccfebd128 [ 49.200888][ T1070] [ 49.883699][ T1082] netlink: 'syz.1.262': attribute type 3 has an invalid length. [ 50.395750][ T1096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1096 comm=syz.0.269 [ 51.094311][ T1114] netlink: 72 bytes leftover after parsing attributes in process `syz.2.277'. [ 51.277821][ T36] kauditd_printk_skb: 279 callbacks suppressed [ 51.277840][ T36] audit: type=1400 audit(1774389288.770:1016): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.308085][ T36] audit: type=1400 audit(1774389288.780:1017): avc: denied { read write } for pid=1117 comm="syz.3.279" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 51.332232][ T36] audit: type=1400 audit(1774389288.780:1018): avc: denied { read write } for pid=1117 comm="syz.3.279" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 51.514332][ T36] audit: type=1400 audit(1774389289.010:1019): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.538571][ T36] audit: type=1400 audit(1774389289.010:1020): avc: denied { create } for pid=1119 comm="syz.0.280" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 51.562678][ T36] audit: type=1400 audit(1774389289.020:1021): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.587022][ T36] audit: type=1400 audit(1774389289.030:1022): avc: denied { create } for pid=1124 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 51.607252][ T36] audit: type=1400 audit(1774389289.030:1023): avc: denied { create } for pid=1124 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 51.627574][ T36] audit: type=1400 audit(1774389289.040:1024): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 51.654990][ T36] audit: type=1400 audit(1774389289.060:1025): avc: denied { create } for pid=1126 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 52.883529][ T1189] netlink: 'syz.3.309': attribute type 27 has an invalid length. [ 52.915447][ T1191] netlink: 'syz.3.309': attribute type 27 has an invalid length. [ 53.616182][ T1216] netlink: 'syz.3.317': attribute type 27 has an invalid length. [ 53.795229][ T1227] x_tables: duplicate underflow at hook 1 [ 53.844036][ T1234] netlink: 'syz.2.325': attribute type 6 has an invalid length. [ 53.861025][ T1234] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.026859][ T1257] syz.2.332 (1257): /proc/1255/oom_adj is deprecated, please use /proc/1255/oom_score_adj instead. [ 54.761473][ T1273] syzkaller0: entered promiscuous mode [ 54.767027][ T1273] syzkaller0: entered allmulticast mode [ 55.090416][ T1313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1313 comm=syz.0.350 [ 56.386186][ T36] kauditd_printk_skb: 295 callbacks suppressed [ 56.386205][ T36] audit: type=1400 audit(1774389293.880:1321): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.407442][ T1351] bridge0: entered promiscuous mode [ 56.416766][ T36] audit: type=1400 audit(1774389293.890:1322): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 56.421740][ T1351] bridge0: entered allmulticast mode [ 56.446257][ T36] audit: type=1400 audit(1774389293.900:1323): avc: denied { read } for pid=1350 comm="syz.1.366" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 56.473589][ T36] audit: type=1400 audit(1774389293.900:1324): avc: denied { read write } for pid=1350 comm="syz.1.366" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 56.498046][ T36] audit: type=1400 audit(1774389293.900:1325): avc: denied { read write } for pid=1350 comm="syz.1.366" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 56.521420][ T36] audit: type=1400 audit(1774389293.950:1326): avc: denied { write } for pid=1350 comm="syz.1.366" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 56.544537][ T36] audit: type=1400 audit(1774389293.950:1327): avc: denied { read write } for pid=1350 comm="syz.1.366" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 56.567943][ T36] audit: type=1400 audit(1774389293.950:1328): avc: denied { read write } for pid=1350 comm="syz.1.366" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 56.591510][ T36] audit: type=1400 audit(1774389294.000:1329): avc: denied { read append } for pid=1350 comm="syz.1.366" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 56.614705][ T36] audit: type=1400 audit(1774389294.000:1330): avc: denied { read write } for pid=1350 comm="syz.1.366" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 57.200677][ T1375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=1375 comm=syz.0.375 [ 58.252786][ T1402] syzkaller1: entered promiscuous mode [ 58.258456][ T1402] syzkaller1: entered allmulticast mode [ 60.213895][ T1465] capability: warning: `syz.3.410' uses 32-bit capabilities (legacy support in use) [ 60.229643][ T1464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.410'. [ 60.786955][ T1478] capability: warning: `syz.1.414' uses deprecated v2 capabilities in a way that may be insecure [ 61.428493][ T36] kauditd_printk_skb: 18723 callbacks suppressed [ 61.428513][ T36] audit: type=1400 audit(1774389298.920:20054): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.467791][ T36] audit: type=1400 audit(1774389298.960:20055): avc: denied { write } for pid=1483 comm="syz.3.416" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 61.502600][ T36] audit: type=1400 audit(1774389298.970:20056): avc: denied { create } for pid=1495 comm="syz.2.419" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 61.524295][ T36] audit: type=1400 audit(1774389298.990:20057): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.548866][ T36] audit: type=1400 audit(1774389298.990:20058): avc: denied { read write } for pid=1497 comm="syz.2.420" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 61.572837][ T36] audit: type=1400 audit(1774389298.990:20059): avc: denied { create } for pid=1497 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 61.762855][ T36] audit: type=1400 audit(1774389299.260:20060): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 61.787083][ T36] audit: type=1400 audit(1774389299.260:20061): avc: denied { mounton } for pid=1499 comm="syz.3.421" path="/109/file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 62.005975][ T36] audit: type=1400 audit(1774389299.500:20062): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.030413][ T36] audit: type=1400 audit(1774389299.500:20063): avc: denied { create } for pid=1502 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 62.103768][ T1510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=1510 comm=syz.2.425 [ 63.964663][ T1569] netlink: 'syz.0.447': attribute type 15 has an invalid length. [ 63.972563][ T1569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.447'. [ 64.862423][ T1592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 66.679821][ T36] kauditd_printk_skb: 319 callbacks suppressed [ 66.679839][ T36] audit: type=1400 audit(1774389304.170:20383): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.710348][ T36] audit: type=1400 audit(1774389304.180:20384): avc: denied { mounton } for pid=1681 comm="syz.2.486" path="/120/file1" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 66.726856][ T1686] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.733090][ T36] audit: type=1400 audit(1774389304.180:20385): avc: denied { create } for pid=1681 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 66.760579][ T36] audit: type=1400 audit(1774389304.180:20386): avc: denied { create } for pid=1681 comm="syz.2.486" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 66.782075][ T36] audit: type=1400 audit(1774389304.180:20387): avc: denied { read append } for pid=1681 comm="syz.2.486" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 66.806891][ T36] audit: type=1400 audit(1774389304.180:20388): avc: denied { read } for pid=1681 comm="syz.2.486" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 66.831171][ T36] audit: type=1400 audit(1774389304.180:20389): avc: denied { read write } for pid=1681 comm="syz.2.486" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 66.854384][ T36] audit: type=1400 audit(1774389304.190:20390): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.878470][ T36] audit: type=1400 audit(1774389304.220:20391): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 66.902536][ T36] audit: type=1400 audit(1774389304.240:20392): avc: denied { read write } for pid=1685 comm="syz.2.488" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 66.999990][ T1706] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 67.568915][ T1725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1725 comm=syz.3.504 [ 67.823879][ T1756] netlink: 'syz.2.516': attribute type 32 has an invalid length. [ 67.831671][ T1756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 68.801770][ T1829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1829 comm=syz.3.542 [ 68.814833][ T1829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1829 comm=syz.3.542 [ 69.219291][ T1859] syzkaller1: entered promiscuous mode [ 69.224797][ T1859] syzkaller1: entered allmulticast mode [ 69.322440][ T1866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 70.419823][ T1949] syz.2.587 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.631731][ T1959] x_tables: duplicate underflow at hook 1 [ 70.708534][ T1967] netlink: 188 bytes leftover after parsing attributes in process `syz.0.594'. [ 70.847196][ T1990] syzkaller1: entered promiscuous mode [ 70.852721][ T1990] syzkaller1: entered allmulticast mode [ 70.906121][ T1998] netlink: 92 bytes leftover after parsing attributes in process `syz.3.605'. [ 70.987558][ T2009] netlink: 57 bytes leftover after parsing attributes in process `syz.3.610'. [ 71.372252][ T2021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 71.381250][ T2022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 71.707172][ T2054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2054 comm=syz.2.623 [ 71.720822][ T2054] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.623'. [ 71.832812][ T36] kauditd_printk_skb: 736 callbacks suppressed [ 71.832831][ T36] audit: type=1400 audit(1774389309.253:21114): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 71.863139][ T36] audit: type=1400 audit(1774389309.253:21115): avc: denied { read write } for pid=2055 comm="syz.0.627" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 71.886250][ T36] audit: type=1400 audit(1774389309.253:21116): avc: denied { read write } for pid=2055 comm="syz.0.627" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 71.909886][ T36] audit: type=1400 audit(1774389309.262:21117): avc: denied { read } for pid=2055 comm="syz.0.627" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 71.932509][ T36] audit: type=1400 audit(1774389309.262:21118): avc: denied { write } for pid=2055 comm="syz.0.627" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 71.955177][ T36] audit: type=1400 audit(1774389309.262:21119): avc: denied { read write } for pid=2055 comm="syz.0.627" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 71.978694][ T36] audit: type=1400 audit(1774389309.262:21120): avc: denied { read write } for pid=2055 comm="syz.0.627" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 72.233948][ T36] audit: type=1400 audit(1774389309.638:21121): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.258213][ T36] audit: type=1400 audit(1774389309.638:21122): avc: denied { create } for pid=2057 comm="syz.3.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 72.298657][ T36] audit: type=1400 audit(1774389309.694:21123): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 72.323984][ T2062] tc_dump_action: action bad kind [ 72.399812][ T2078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.636'. [ 72.549558][ T2091] netlink: 316 bytes leftover after parsing attributes in process `syz.0.640'. [ 73.591066][ T2125] PM: Enabling pm_trace changes system date and time during resume. [ 73.591066][ T2125] PM: Correct system time has to be restored manually after resume. [ 74.019605][ T2134] __nla_validate_parse: 1 callbacks suppressed [ 74.019626][ T2134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 74.034819][ T2133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 74.045631][ T2133] syzkaller1: entered allmulticast mode [ 76.457264][ T306] veth1_macvtap: left promiscuous mode [ 76.462776][ T306] veth0_vlan: left promiscuous mode [ 77.519193][ T36] kauditd_printk_skb: 188 callbacks suppressed [ 77.519213][ T36] audit: type=1400 audit(1774389314.583:21312): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.549475][ T36] audit: type=1400 audit(1774389314.583:21313): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.732353][ T36] audit: type=1400 audit(1774389314.780:21314): avc: denied { execmem } for pid=2211 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 77.753022][ T36] audit: type=1400 audit(1774389314.780:21316): avc: denied { write } for pid=2212 comm="syz.0.684" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 77.776439][ T36] audit: type=1400 audit(1774389314.780:21315): avc: denied { read write } for pid=2213 comm="syz.1.685" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 77.800015][ T36] audit: type=1400 audit(1774389314.789:21317): avc: denied { read write } for pid=2214 comm="syz.2.686" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 77.823542][ T36] audit: type=1400 audit(1774389314.808:21318): avc: denied { create } for pid=2214 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 77.843219][ T36] audit: type=1400 audit(1774389314.808:21319): avc: denied { write } for pid=2213 comm="syz.1.685" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 77.866541][ T36] audit: type=1400 audit(1774389314.808:21320): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.890643][ T36] audit: type=1400 audit(1774389314.855:21321): avc: denied { read write } for pid=2212 comm="syz.0.684" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 79.780178][ T46] bridge_slave_1: left allmulticast mode [ 79.789197][ T46] bridge_slave_1: left promiscuous mode [ 79.794852][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.802793][ T46] bridge_slave_0: left allmulticast mode [ 79.808431][ T46] bridge_slave_0: left promiscuous mode [ 79.814420][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.940391][ T46] veth1_macvtap: left promiscuous mode [ 79.945911][ T46] veth0_vlan: left promiscuous mode [ 80.184403][ T46] ------------[ cut here ]------------ [ 80.189882][ T46] WARNING: CPU: 1 PID: 46 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 80.199798][ T46] Modules linked in: [ 80.203702][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/u8:2 Not tainted syzkaller #0 f5ac747b36c456989d7181d0133b7a324c782226 [ 80.215249][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.225317][ T46] Workqueue: netns cleanup_net [ 80.230106][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 80.236193][ T46] Code: e8 31 86 d9 fc 4b 83 3c 3e 00 75 19 e8 55 59 81 fc 49 81 ff f8 07 00 00 74 1b e8 47 59 81 fc 49 83 c7 08 eb c9 e8 3c 59 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 80.256030][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 80.262126][ T46] RAX: ffffffff85064f64 RBX: ffff88812b148000 RCX: ffff88810367df00 [ 80.270110][ T46] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888105ad4118 [ 80.278078][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d38087 R09: 1ffffffff0fa7010 [ 80.286163][ T46] R10: dffffc0000000000 R11: fffffbfff0fa7011 R12: dffffc0000000000 [ 80.294174][ T46] R13: dffffc0000000000 R14: ffff888105ad4000 R15: 0000000000000118 [ 80.302154][ T46] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 80.311083][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.317666][ T46] CR2: 00007f541f3e9e80 CR3: 00000001169a8000 CR4: 00000000003526b0 [ 80.325661][ T46] Call Trace: [ 80.328927][ T46] [ 80.331848][ T46] cleanup_net+0x6bd/0xc90 [ 80.336281][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 80.341222][ T46] ? __schedule+0x1357/0x1ea0 [ 80.345910][ T46] ? kick_pool+0xb9/0x550 [ 80.350235][ T46] process_scheduled_works+0x7d1/0x1020 [ 80.355788][ T46] worker_thread+0xc70/0x10b0 [ 80.360470][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 80.365670][ T46] kthread+0x2c6/0x370 [ 80.369738][ T46] ? __cfi_worker_thread+0x10/0x10 [ 80.374842][ T46] ? __cfi_kthread+0x10/0x10 [ 80.379431][ T46] ret_from_fork+0x67/0xa0 [ 80.383934][ T46] ? __cfi_kthread+0x10/0x10 [ 80.388530][ T46] ret_from_fork_asm+0x1a/0x30 [ 80.393298][ T46] [ 80.396298][ T46] ---[ end trace 0000000000000000 ]--- [ 80.402008][ T46] ------------[ cut here ]------------ [ 80.407495][ T46] WARNING: CPU: 0 PID: 46 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 80.417482][ T46] Modules linked in: [ 80.421392][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 f5ac747b36c456989d7181d0133b7a324c782226 [ 80.434435][ T46] Tainted: [W]=WARN [ 80.438222][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.448275][ T46] Workqueue: netns cleanup_net [ 80.453056][ T46] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 80.459104][ T46] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 00 59 81 fc 49 81 ff f8 07 00 00 74 1b e8 f2 58 81 fc 49 83 c7 08 eb c5 e8 e7 58 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 d7 58 81 fc 5b 41 5c 41 5e 41 [ 80.478729][ T46] RSP: 0018:ffffc900002ffb90 EFLAGS: 00010293 [ 80.484889][ T46] RAX: ffffffff85064fb9 RBX: ffff888105ad4800 RCX: ffff88810367df00 [ 80.492866][ T46] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888105ad4810 [ 80.500828][ T46] RBP: ffffc900002ffbb0 R08: ffffffff87d38087 R09: 1ffffffff0fa7010 [ 80.508795][ T46] R10: dffffc0000000000 R11: fffffbfff0fa7011 R12: dffffc0000000000 [ 80.516778][ T46] R13: dffffc0000000000 R14: ffff888105ad4000 R15: 0000000000000010 [ 80.524770][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 80.533694][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.540300][ T46] CR2: 00007f32a934aae0 CR3: 000000010cb3c000 CR4: 00000000003526b0 [ 80.548281][ T46] Call Trace: [ 80.551544][ T46] [ 80.554456][ T46] cleanup_net+0x6bd/0xc90 [ 80.558878][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 80.563822][ T46] ? __schedule+0x1357/0x1ea0 [ 80.568504][ T46] ? kick_pool+0xb9/0x550 [ 80.572829][ T46] process_scheduled_works+0x7d1/0x1020 [ 80.578388][ T46] worker_thread+0xc70/0x10b0 [ 80.583070][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 80.588256][ T46] kthread+0x2c6/0x370 [ 80.592324][ T46] ? __cfi_worker_thread+0x10/0x10 [ 80.597440][ T46] ? __cfi_kthread+0x10/0x10 [ 80.602051][ T46] ret_from_fork+0x67/0xa0 [ 80.606465][ T46] ? __cfi_kthread+0x10/0x10 [ 80.611051][ T46] ret_from_fork_asm+0x1a/0x30 [ 80.615824][ T46] [ 80.618822][ T46] ---[ end trace 0000000000000000 ]--- [ 80.626349][ T46] ------------[ cut here ]------------ [ 80.631803][ T46] WARNING: CPU: 0 PID: 46 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 80.641186][ T46] Modules linked in: [ 80.645086][ T46] CPU: 0 UID: 0 PID: 46 Comm: kworker/u8:2 Tainted: G W syzkaller #0 f5ac747b36c456989d7181d0133b7a324c782226 [ 80.658113][ T46] Tainted: [W]=WARN [ 80.661892][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.671998][ T46] Workqueue: netns cleanup_net [ 80.676794][ T46] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 80.682349][ T46] Code: 3c 20 00 74 08 48 89 df e8 2f 50 f4 fc 48 8b 3b e8 97 78 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 cc b7 00 cc e8 42 23 9c fc <0f> 0b e9 b0 fd ff ff e8 36 23 9c fc 0f 0b e9 18 fe ff ff e8 2a 23 [ 80.701955][ T46] RSP: 0018:ffffc900002ffb70 EFLAGS: 00010293 [ 80.708031][ T46] RAX: ffffffff84eb855e RBX: ffff88812b148000 RCX: ffff88810367df00 [ 80.715995][ T46] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810367df00 [ 80.723971][ T46] RBP: ffffc900002ffb98 R08: ffffffff87d38087 R09: 1ffffffff0fa7010 [ 80.731959][ T46] R10: dffffc0000000000 R11: fffffbfff0fa7011 R12: 1ffffffff0fa6d60 [ 80.739967][ T46] R13: dffffc0000000000 R14: ffff88812b148c00 R15: dffffc0000000000 [ 80.747935][ T46] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 80.756866][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.763464][ T46] CR2: 00007f32a934aae0 CR3: 000000010cb3c000 CR4: 00000000003526b0 [ 80.771461][ T46] Call Trace: [ 80.774735][ T46] [ 80.777671][ T46] xfrm_net_exit+0x31/0x80 [ 80.782097][ T46] cleanup_net+0x6bd/0xc90 [ 80.786516][ T46] ? __cfi_cleanup_net+0x10/0x10 [ 80.791477][ T46] ? __schedule+0x1357/0x1ea0 [ 80.796155][ T46] ? kick_pool+0xb9/0x550 [ 80.800471][ T46] process_scheduled_works+0x7d1/0x1020 [ 80.806026][ T46] worker_thread+0xc70/0x10b0 [ 80.810704][ T46] ? __cfi_try_to_wake_up+0x10/0x10 [ 80.815904][ T46] kthread+0x2c6/0x370 [ 80.819966][ T46] ? __cfi_worker_thread+0x10/0x10 [ 80.825373][ T46] ? __cfi_kthread+0x10/0x10 [ 80.829951][ T46] ret_from_fork+0x67/0xa0 [ 80.834570][ T46] ? __cfi_kthread+0x10/0x10 [ 80.839147][ T46] ret_from_fork_asm+0x1a/0x30 [ 80.843897][ T46] [ 80.846919][ T46] ---[ end trace 0000000000000000 ]--- [ 81.106384][ T46] bridge_slave_1: left allmulticast mode [ 81.114348][ T46] bridge_slave_1: left promiscuous mode [ 81.119984][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.132239][ T46] bridge_slave_0: left allmulticast mode [ 81.137887][ T46] bridge_slave_0: left promiscuous mode [ 81.145517][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.294058][ T46] veth1_macvtap: left promiscuous mode [ 81.299565][ T46] veth0_vlan: left promiscuous mode [ 81.655637][ T46] bridge_slave_1: left allmulticast mode [ 81.661292][ T46] bridge_slave_1: left promiscuous mode [ 81.667103][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.674534][ T46] bridge_slave_0: left allmulticast mode [ 81.680265][ T46] bridge_slave_0: left promiscuous mode [ 81.685856][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.805627][ T46] veth0_vlan: left promiscuous mode