last executing test programs: 4m47.287431598s ago: executing program 2 (id=404): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8182480, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m47.047176201s ago: executing program 2 (id=405): r0 = syz_open_dev$audion(&(0x7f0000000a00), 0xffff, 0x701040) connect$unix(r0, &(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffe4e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="17cca1ce87d5ce530001080211000000080211000000"], 0x28) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 4m46.175155319s ago: executing program 2 (id=409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$FITHAW(r1, 0xc0045878) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, 0x0, &(0x7f0000001080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000000000/0x800000)=nil) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x7, 0x7, [{0xbf}, {0x88, 0x0, 0x8000}, {0x5, 0x0, 0xb}, {0xe1, 0x0, 0x2}, {0x925, 0x0, 0x5}, {0x2, 0x0, 0x7fffffffffffffff}, {0xa7, 0x0, 0xa}, {0x4, 0x0, 0x400000004}, {0xfffffffe, 0x0, 0x752}, {0x1, 0x0, 0x8d1}, {0x2, 0x0, 0x4}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0xff}, {0x9ec, 0x0, 0xffff}, {0x7, 0x0, 0x1}, {0x800, 0x0, 0xffffffffffffffff}]}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000300)={0x2, 0xb52153f2917a479c, 0x9, 0x81, 0x0, 0x80000005, 0x0}) select(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x5, 0x7, 0x9b36, 0x3c, 0x8000000000000000, 0x9, 0x7}, &(0x7f0000000200)={0x9, 0x3, 0x0, 0x8b6a, 0xaca, 0x7, 0x1, 0x6}, &(0x7f0000000240)={0x4, 0x4, 0xaccf, 0x948, 0x1, 0xc, 0x10000, 0x7}, &(0x7f0000000280)={0x77359400}) 4m45.829840693s ago: executing program 2 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADDIR(r0, &(0x7f0000000280)={0x68, 0x29, 0x1, {0x7, [{{0x10, 0x0, 0x1}, 0x1c, 0x30, 0x7, './file1'}, {{0x2, 0x2, 0x3}, 0x2031, 0xb, 0x7, './file0'}, {{0x4, 0x2, 0x4}, 0x7, 0x7, 0x7, './file1'}]}}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x7fff, 0x6, 0x81}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7ffffbff, 0x2, 0x80007, 0x7f, 0x20000004, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x9, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x8, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x10000, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x421, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x0, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93692, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x1, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x2, 0x1, 0x4, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x27], [0x9, 0xbb33, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0xffffffff, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x2, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x7f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r1, 0x6f000) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f00000002c0)={0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000000000000004) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(r2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in=@dev, @in=@initdev}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x1800000, &(0x7f0000000a40)={[{@userxattr}, {@xino_off}, {@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@uuid_off}, {@nfs_export_off}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file2'}}], [{@appraise_type}, {@pcr={'pcr', 0x3d, 0x3c}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'smackfshat'}}, {@fsname={'fsname', 0x3d, 'overlay\x00'}}], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) set_mempolicy(0x1, 0x0, 0x3ff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x3b}, {0xbd1, 0xfffffffffffffffc, 0x40000003}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0xffe0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 4m45.40022562s ago: executing program 2 (id=413): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x0, 0xfe}, {0x6}]}, 0x10) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000000)='./file4\x00', 0x149801, 0x1e0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000100)=""/203, &(0x7f0000000040)=0xcb) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000200)={0x7f, {0x30, 0x8000, 0x5, 0x5, 0x6}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x121880, 0x0) 4m44.466834185s ago: executing program 2 (id=416): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x48e081, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x11) (async) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x1) 4m44.011259888s ago: executing program 32 (id=416): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x48e081, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x11) (async) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x1) 4m29.098449445s ago: executing program 0 (id=483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="11326d384a805032", 0x8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f000003f000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/18, 0x12, 0x1, &(0x7f0000000180)=""/173, 0xad}, &(0x7f0000000280)=0x40) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r3 = userfaultfd(0x80001) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1, 0x0) utimes(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000500)={{0x0, 0xea60}}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_control_io$uac1(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r1, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="11326d384a805032", 0x8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) (async) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1}, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f000003f000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/18, 0x12, 0x1, &(0x7f0000000180)=""/173, 0xad}, &(0x7f0000000280)=0x40) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) (async) userfaultfd(0x80001) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1, 0x0) (async) utimes(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000500)={{0x0, 0xea60}}) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) 4m27.814619111s ago: executing program 0 (id=493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = accept(r2, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KIOCSOUND(r5, 0x4b2f, 0x7f) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x0, 0x30314247}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1cc, 0x400, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x8}) sched_rr_get_interval(r7, &(0x7f0000000080)) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, r9, 0x1, 0x1070bd2c, 0x4, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) preadv2(r8, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) 4m26.074624207s ago: executing program 0 (id=498): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x1, 0x9, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x68, 0x0, 0x6, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0xcc, 0x0, 0xb, [0x80, 0x3, 0x1b, 0x10000, 0x2, 0x7]}, @lsrr={0x83, 0x17, 0xf6, [@loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0x10, "e178d120a71a8c44efa4a23865bc"}, {0x6, 0x6, "eb1c84b2"}]}]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=""/41, 0x29, 0x40002002, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000000240)=@deltfilter={0xdf8, 0x2d, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0x1}, {0x6, 0xa}, {0xfff2, 0xe}}, [@f_tcindex={{0xc}, {0x148, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9d8c}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xb4fa}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10, 0xc}}, @TCA_TCINDEX_ACT={0x10c, 0x7, [@m_ife={0x108, 0xb, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x20000000, 0x1425}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x7c, 0x6, "bc022c38f088916941f88cf1898c142d6e1e41e8844037970994e2a2ba3e1c520d83416bfc21676ef0a21928118d1f50dccd289d5f3e85cdf22367a67385b01726982cfeccaf53d0d784f37ab4489fe9cba3c2b4ddc8d84c4ecbbe182eff96a466ee97e85553a39b9f9d9b27e38959e84422716c0351730b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0x9}}]}}, @f_tcindex={{0xc}, {0x8c0, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x8662}, @TCA_TCINDEX_POLICE={0x8a4, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x7, 0xff, 0x6, 0x4, 0x7fff, 0x0, 0x80000000, 0x8, 0xffffff8d, 0x1ff, 0xffff, 0xbfb6, 0x100000, 0x80000000, 0xc, 0x3, 0x1, 0x1, 0x6, 0x7, 0x1ba, 0x100, 0x7, 0x2, 0x3, 0x1, 0x6, 0x80000001, 0x0, 0x43, 0x860, 0x0, 0x2e9d, 0x80000000, 0xc5, 0x2, 0xa, 0xcd, 0x51e3, 0x9, 0x3, 0x4, 0x7, 0x10001, 0x3, 0x3, 0x7fff, 0x0, 0x3a77, 0x3ff, 0x1, 0x3, 0xd, 0x3, 0x8001, 0x4b, 0x0, 0x0, 0x8, 0x4, 0x5, 0x3, 0x5, 0x68418eda, 0x0, 0x40, 0x3, 0xc, 0x72, 0xd, 0x2, 0x0, 0x1, 0x9, 0x9c, 0x101, 0x2, 0x5, 0x3, 0x1, 0x3, 0xfffeffff, 0x4, 0x6, 0x7, 0x7f, 0x7ff, 0xd, 0x9, 0x0, 0x5f, 0xffffffff, 0x80, 0x8, 0x6, 0xff, 0x963b912, 0x9ad4, 0x10000, 0x2302, 0x1, 0x3ff, 0x8, 0x3ff, 0x427, 0x4, 0x0, 0x9, 0x8, 0x400, 0x0, 0xfa, 0x7, 0xc9, 0x6, 0x200, 0x4, 0x9f, 0x3ff, 0x7, 0x1, 0x80000000, 0x10001, 0x2, 0x5, 0x0, 0x1, 0x10001, 0xffff, 0x3, 0x4, 0x8, 0xffffffff, 0x5, 0x3, 0x4, 0x3, 0x5, 0x2, 0x3ff, 0xffff, 0x2, 0xac48, 0x401, 0x9, 0x8e8, 0x3, 0xfa1e, 0x9, 0x3ff, 0x8, 0x8, 0x4, 0x1, 0x1c, 0x7, 0x9, 0x1c0, 0x8, 0x7fff, 0x9, 0x8, 0x4, 0x8, 0x9, 0xf, 0x4, 0x4, 0x7, 0x400, 0x6, 0x14000, 0xfff, 0x1, 0x9, 0x3, 0x2, 0xfffffffa, 0x2, 0x7fffffff, 0xfffffffc, 0x10001, 0x3c, 0x1e, 0x3, 0x0, 0x2, 0x9, 0x0, 0x7fffffff, 0x699, 0x0, 0xb9b, 0x0, 0x5, 0x4, 0x9, 0x5, 0x8, 0x8, 0x80000000, 0xc, 0x5d, 0x100, 0x5, 0x1, 0x0, 0x3, 0x0, 0x7, 0x7d3a, 0xfffffffc, 0x3242, 0xdc9, 0x47, 0x2, 0x37, 0x6, 0x0, 0x80000000, 0x7, 0x0, 0x2, 0x0, 0x10, 0xfffffff7, 0x2e, 0x5, 0xffffffff, 0x8, 0x4, 0x9, 0x5, 0xaa, 0xcf0, 0x3, 0x8001, 0x5, 0x2, 0x401, 0x3, 0x8, 0x3, 0xc, 0x4, 0x3, 0x0, 0x8, 0x0, 0x1, 0x3, 0x5, 0x3, 0x4, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x4, 0x5, 0x889, {0x3, 0x0, 0x8, 0x1, 0x7fff, 0x4}, {0xa, 0x2, 0x8e9, 0x7f, 0x9, 0x6ea095ea}, 0x4, 0xfffffffe, 0xffff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1f, 0x1, 0xcf, 0x6, 0x4, 0xfffffffe, 0x3ff, 0x400, 0x81, 0x3ff, 0x0, 0xc9b3, 0x8, 0x0, 0xff, 0x9, 0x101, 0x3, 0x8, 0xf01a, 0xd, 0x6, 0x0, 0x1, 0x4, 0xfffffffc, 0xf85, 0x2, 0x0, 0xcd4, 0x5, 0x1, 0x70c8e1be, 0x3, 0x9, 0x200, 0x39, 0x6, 0x1, 0x400, 0x2, 0x6, 0x8, 0xb9, 0x2, 0xfffffff8, 0x7, 0x0, 0x8, 0x0, 0x0, 0xfff, 0x101, 0x20, 0x8, 0x3, 0x4, 0xbce3, 0x0, 0x0, 0x1, 0x8, 0xe, 0x0, 0x5, 0x2, 0x40, 0x8, 0xc7, 0xfffffff9, 0x10000, 0xc88, 0x2, 0x8, 0x100, 0x80000000, 0xfffffff8, 0x7, 0x10, 0x7, 0x1, 0x1ff, 0x2, 0x6, 0xfffffffb, 0x9, 0x2, 0x9, 0x2, 0x73, 0x3, 0xef8e, 0x3, 0x4, 0x6, 0x0, 0x8, 0xff, 0x3, 0x0, 0x3, 0x2ba, 0x5, 0x5, 0x1, 0x1, 0x6, 0x0, 0x1, 0xfe, 0x0, 0x347, 0x1, 0x7fffffff, 0xf, 0x4, 0x24e5, 0x6, 0x40, 0xffffffff, 0x0, 0x9, 0x8001, 0x9, 0x9, 0x30, 0x1, 0x7fffffff, 0x0, 0x200, 0xf03, 0x89, 0x9, 0x0, 0x7, 0x1, 0x2, 0x8a3, 0xfffffff9, 0x2, 0x5, 0x9, 0xa, 0x6, 0x7, 0x4, 0x2, 0x1, 0x4, 0xfffffc01, 0x4, 0x2, 0x6, 0x8, 0x4, 0x8c, 0x80000000, 0x4, 0xb, 0x51a, 0x6, 0x6, 0x2, 0x4, 0x7fffffff, 0xfffffff1, 0x0, 0x4b2, 0x0, 0x9, 0x2, 0xd, 0x9f, 0x78, 0x3, 0x3, 0x6, 0x1, 0x3, 0xed, 0x40, 0x3, 0x0, 0x1ff, 0xfffffffc, 0x4, 0x4, 0x2, 0x5, 0x7fffffff, 0xf25, 0x101, 0x2, 0x7f, 0x5, 0x8, 0x100, 0x38ea, 0x9, 0x3, 0x15b0, 0xd, 0x4, 0x6, 0x7, 0x7, 0x7, 0x9, 0x9, 0x7, 0x5, 0x10001, 0x10, 0x10000, 0x2, 0x4, 0x2, 0x1, 0x4, 0x0, 0x4, 0x1000, 0x0, 0x7, 0x3ed, 0x8, 0x8, 0x8000, 0x8, 0x36e67af9, 0x8, 0x2, 0x7, 0x1, 0x5, 0xccab, 0x40, 0x9, 0x78, 0x7, 0x10000, 0x9, 0x8, 0x9a, 0x7, 0x7, 0x8, 0x8, 0x3, 0x4, 0x15, 0x400, 0x7, 0x7, 0x8000, 0x1ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0x6b0bb554, 0x2f69, 0x7ff, {0x7, 0x1, 0x7ff, 0x3, 0x3, 0x1}, {0x5, 0xf18a465d57f612e2, 0x7, 0x1, 0x9, 0x8}, 0x1000, 0xffff3f66, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xfff}, @TCA_TCINDEX_FALL_THROUGH={0x8}]}}, @f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x8}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x2}}]}}, @f_rsvp={{0x9}, {0x330, 0x2, [@TCA_RSVP_ACT={0x2f4, 0x6, [@m_ct={0xd8, 0x17, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}]}, {0x7e, 0x6, "7f01a24df81f8c36e48ae702d6ddb5e349bddde080a002481e221596fa89142e9bf74189666a4e8452f16ad71511de4587c74f09031990b75d155d9cca9b0270bc5085b8d1c03c155ecb91e14315609d6f8e164cd21cead5c020cb836ec022527a01e0287672ac9ef3572c6dbc91b8f26aa8ded85d21253f8892"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x218, 0x14, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x7, 0x20, 0x9}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8000, 0x2, 0x9, 0xfffffffb}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x7, 0xffff, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x20000000, 0x7fff, 0x7f}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x68, 0x7, 0x10, 0x1}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2000000, 0x3, 0x5, 0x1ff}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x8, 0xffffffffffffffff, 0x80000000}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0xa, 0x5}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff801, 0x100, 0x5, 0x6, 0xfffffffc}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff0001, 0x2, 0x7, 0x0, 0x3}, 0x12}}]}, {0xd1, 0x6, "03df0a9aeffedf509163b9e26504e47bc2f2094719766daa8d9dcf4329e31f930a51648affc076bfc843460d0bdcc6f63018e4e036f85b72113241bf5535c88cbbe6ff89007404c564bbb7bd81c96c9b7f2cc543fc9bc0fdba5316f7db171faf6e5f180dc6951452080dddca28d4f2becf5bde0c1caa7e71db61ad3a7fab76c6d0d4a856f0ce0789d54b4fcbb7fac8d8a87b70b85b82a0c1418a4d215ea754406bc3bc18ea6cb6611f8d1d7e957a27219993216e0a604821cfd379dc1fdff8dcd176a77c6457b28195d9d4493a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010100}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb488}]}, @TCA_RSVP_POLICE={0x14, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}, @f_rsvp6={{0xa}, {0x4c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x2, 0xffff8000}, {0x6, 0x4, 0x3}, 0x21, 0xa, 0x2d}}, @TCA_RSVP_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0xdf8}}, 0x4008001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x2) setsockopt$inet6_int(r3, 0x29, 0x1, &(0x7f0000001100)=0x3, 0x4) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000001140)) lsetxattr$security_ima(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000001200)=@md5={0x1, "9a33c3b94e5400e89bd95cc6fbe4d09b"}, 0x11, 0x3) bind$inet6(r3, &(0x7f0000001240)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001280)='ns/user\x00') close_range(r4, r1, 0x2) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000012c0)=0x7f, 0x4) sendmsg$inet6(r3, &(0x7f0000001500)={&(0x7f0000001300)={0xa, 0x4e20, 0x8, @private0, 0xf4}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001340)="a75a031751bbc1264ed59567b28d7644a3a85c9dffc56cb8ba344838ca1bc322fe5f1e9ae5641859f2e1fc04784fab95accd6cec7fa58da563784263a474639ae01c81ca52633b5146056aa181bc9c3efca6cb5b8bc2629e54db39c5f57c83c8c693f0e8cf69faa7c1db00d964dbc10f092b8e689b5f128498a9d5bcb279b9c988fb0ef074a1bfc9116acb68b8b1593476759a7b", 0x94}, {&(0x7f0000001400)="2743069f6ef795d983bbef5d0358e62d8bf8332289283bfc9568b7b4dc58a43bbf072f9b04db4908a27499db182366a7149a2433b23f85c847e07ddece333b192a8d9dd3e39120d2d880b62670e87b366c0e97d410b386eb9161e08756b0fc7c9a565781314d", 0x66}], 0x2, &(0x7f00000014c0)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x18}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001580)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001540), 0x106}}, 0x20) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000015c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = accept4$tipc(r3, &(0x7f0000001800)=@name, &(0x7f0000001840)=0x10, 0x800) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x8, 0x2) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0xa27}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x12, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x1ff, 0x8, 0x2, 0x8}}]}}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x200, 0xf, 0xb6, 0x3, 0xff, 0xff}, 0x19, &(0x7f0000001980)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "07b3329746611bfaec3d457a3f223885"}]}, 0x5, [{0x50, &(0x7f00000019c0)=@string={0x50, 0x3, "43a94948abee1006a43c86cc8dd71f019c695ddd74dc743ac58b6004dcc88152319d2f988cd279de7a4ad53662b776c0cd5faeb8e9a38697bd5b6d4ede8a26b3d22277832d3df7c71ec175fe03da"}}, {0xb4, &(0x7f0000001a40)=@string={0xb4, 0x3, "f705b1b648155f2f1a0e4af83a0f15e1aec5c8c268b56495884a64054e0cdcc6a8d11b445dbe88c7a0811a7895478e7b7860b8e8fcd1ad11244f72acbe6d435ef6dcab3894b8e6da07d8615ab65eac0e554d857a08be7dbba5df35cc28f6486c18c706bf5393c405ad49d31a8cdd7718cf2e4a92e244d5ff90217a049a96142276b99fd6c110bf7767a7ba1c1b461401ce64d141402e3034937dc6540c4c4863a96f60130a99d1d7afc8ccbc79145b7fb585"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x40d}}, {0x61, &(0x7f0000001b80)=@string={0x61, 0x3, "a436778cb8bc399c6ef31250f0486ed5bdfc917687dc9e321f03837f54cc7baacf98a5c8833e0020fb8889d6b719dcbb7c401769ac4dbda1d9d88321a442ee03c95e6862322ed376f2f45910c938acb22426ba6c4156bf1bab5b5fab158003"}}]}) r6 = creat(&(0x7f0000001c80)='./file0\x00', 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000001cc0)='%{\x00') sendmmsg$sock(r1, &(0x7f0000002000)=[{{&(0x7f0000001d00)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x2}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="4e5ef8b822bc32ebde04793b7ea73fa3faf5b8f8f4d91f7479274aba99d4115fc0b43206861d61a722537c0928081b5d6fed321ef017e65d40644dda527c1ddf26249cc18bd1b6d000e9", 0x4a}, {&(0x7f0000001e00)="e16db403646e8751995f88427be08a5553d2cdee11d61b65f75c43d9c91cad09ac0384380cc6b1a97aa5325959b9e41f58d1fa27958ce83446010f7b8c1c254b4046aa2b7c0a", 0x46}, {&(0x7f0000001e80)="d6468217827613fc941bdeb4c65c87d05c7acf1c82cd694f30fe096e9aee2fc005f2788f5db6ed3d1521eceab11b711e1e406dddf88f43a2537cfddc143a70fcc4ab77fc68533e1a665afd7ea97c991e8d1753570bf7d7a452bf92586b2260fc0da3415f4005982bc303503b1190d4a97d16517b0c2b10a1f20db203c28d406d213839ebe03fe450c28300b97d809875f3970ac1b6c532fa8dfa5b9162442bd5900d658f97daff05b354f228d30c25c87841139f11", 0xb5}], 0x3, &(0x7f0000001f80)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}], 0x60}}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000002040), 0x406800, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002080)="8329133b55c5c07bb20d551cc7d580cebaa15ab5c44de25b448292bf9672022c98228c3ace2086bacf810a09dff04be98a7bd53481fb53ab685c73e58adf4dfe5c13d31d7d6138f810503e43f15c4d5bbf4d2215a2a49779711cc03301d21f6c1ad5e29a15e855ca57c066f0d678b039c5a71c1dfbba9e513472ff979b6f0a3e45dde7290ba852e694c52871b02622ab14c054d7173d5c9a75235041de701102b8b583d10f04bd838a15798089152ddbfac5c6", 0xb3) r7 = ioctl$USERFAULTFD_IOC_NEW(r6, 0xaa00) readv(r7, &(0x7f0000003280)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/92, 0x5c}, {&(0x7f00000031c0)=""/133, 0x85}], 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000003340)={0x0, @in6={{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x630}}, 0xbb9, 0xfffc, 0xb, 0x7, 0xa4bebf71fbf208ec, 0xfffffe01, 0xfd}, 0x9c) 4m22.921752766s ago: executing program 0 (id=513): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r0, 0x0, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x202fc9e, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8431, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x42aa40) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000240), 0x7fffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x202040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0xd, 0xffffffffffffffff, {0xf}}, './file0\x00'}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$unix(r7, &(0x7f0000000400)=@abs={0x1, 0x2, 0xfffffffc}, 0x6e) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000200)={0x8, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r9, &(0x7f0000001340)=[{&(0x7f0000000040)=""/125, 0x7d}], 0x1, 0x1, 0x4) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x858, 0x0, 0x4}]}) 4m22.727679375s ago: executing program 0 (id=514): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_init(0xf00, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$unix(0x1, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x52) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x90, 0x40, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xb21b, 0xf91, 0x7, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xe, 0xe, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xff, 0x1, 0x3}}}}}]}}]}}, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4003}, {0x0, 0x3ff}, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) rename(&(0x7f0000000480)='./bus\x00', &(0x7f0000000500)='./file0\x00') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRESHEX], 0xf8) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 4m21.054304477s ago: executing program 0 (id=518): r0 = syz_open_dev$audion(&(0x7f0000000a00), 0xffff, 0x6014c0) connect$unix(r0, &(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r1], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="17cca1ce87d5ce530001080211000000080211000000"], 0x28) connect$unix(0xffffffffffffffff, 0x0, 0x0) 4m20.708928281s ago: executing program 33 (id=518): r0 = syz_open_dev$audion(&(0x7f0000000a00), 0xffff, 0x6014c0) connect$unix(r0, &(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r1], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="17cca1ce87d5ce530001080211000000080211000000"], 0x28) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1m46.871264756s ago: executing program 5 (id=1423): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, 0x0, 0x0) 1m46.616490742s ago: executing program 5 (id=1424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x80000, 0x0, {[0x6, 0x7, 0x1, 0x3, 0x9, 0xfffffffffffffffc, 0xa, 0x1]}}) 1m46.379970585s ago: executing program 5 (id=1426): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 1m45.72256151s ago: executing program 5 (id=1436): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x2d) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m45.716628745s ago: executing program 5 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {0x4}, @device_b, @device_a, @from_mac=@broadcast}, 0x3, @val={0x8c, 0x18, {0x0, "24e5ea3c21c3", @long="561875f04ef7062875d30600006d386c"}}}}]}, 0x54}}, 0x884) 1m45.345645662s ago: executing program 5 (id=1438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 1m45.079426952s ago: executing program 34 (id=1438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 54.676831965s ago: executing program 6 (id=1603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, 0x0, 0x0, 0x734, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x4bd0bdc5}], 0x1, 0x10202, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008055, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = dup(r0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/214, 0xd6}], 0x1) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000080)=""/113, 0x71, 0x734, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe0}], 0x1, 0x40000061, 0x0) 54.526712824s ago: executing program 6 (id=1605): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000000)={0x1}) 54.45742674s ago: executing program 6 (id=1606): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000001090400eb010300000009210500000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0x9, 0x0, 0x0}) 51.326377906s ago: executing program 6 (id=1630): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) dup2(r5, r1) pwrite64(r1, &(0x7f00000003c0)='@', 0x1, 0x100001) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x3, 0x8080000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r10, &(0x7f0000000040)='smaps\x00') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x2, 0x1, 0x7, 0x7, r10}) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="f30fba20e3f20f20e166baf80cb85c48c884ef66bafc0c66ed0f798c5f0b8000008fe978e2d8420f01743a0066360ac6f3ab0f01cab9a40900000f32", 0x3c}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x32600) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r12, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 50.999786293s ago: executing program 6 (id=1633): r0 = socket(0x2, 0x3, 0x67) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000600)="20a87352", 0x4, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 50.698479703s ago: executing program 6 (id=1635): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0xfffffffc) (fail_nth: 2) 50.317439709s ago: executing program 35 (id=1635): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0xfffffffc) (fail_nth: 2) 49.069668858s ago: executing program 1 (id=1643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f2f00000064653d325b8fd1a6a2ba57c5cd6d30305130303030303034303030302c757365725f69146117dee560c185e10e0598c9a8ad1749", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r3, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r1, &(0x7f00000083c0)="428a6ce66c433e7d6473d37a71716ae84216bc67277f3e9626c032a88a7acfd09ce24f4255f37078d380c6723d7aacdc3e0220c069b0e3a64d5f03936770166422985d1b36eaea3166a4f1403dceba822af78c5c09a45e2174bb51f6e9f11deea936b040d91598d4aa373bf4c5765a17e6c33ddad61487bdd32e3e58af5741f560b4b08b02d3254eef9fe9b2f0bdbddffe42ca87595f21dd7ff6c3d5754346b6414d2d7dbb41f5de3181ef343faa894a332cfc895ad40b048dc597478a761ef691d4bad54af2c711334532ad94c6017b49990e1f01bedefed1eea35deff92249b09a7a5d762d4fef1fd20bd95c3fa810d6d99cc5b8c2dd70a8a62ddd217e069cb29c9e7ef5bec625b3a303188d8cad4f423eb71a4aee6bf69c9cf73f0884a277a9d2d39449053d13952eea2b4de2e61715f0b878bb42d48642399e4e5ff2ea4daf9bf21c73ce7d767db0171cb6d436bd0c3ea93920700e0cf64731f7cafb172b0866fbbfaacc940639d6741bb7e4c7ce69dd1a815387838b081b1d9a04bf6192bc0e8d4e16a8da6ff83df1bead9f6218e4684b78026a0b49a2a89d3f05549b12e8b07734ab867c41a9401abc9c3fc6cab66e57eaa9513fd491384a2c65715abadf29aa1036a4b78e47ecb95d76884b23fe89a251626e1c5d827dc1d96f83d6e524a93561fc1d43ceb28b9dc5b476cd0c6ee51f4f37b7792f9b5d862d69184830ab80a5fb6a53729cbef25d612640b688b72c9d77c83538ae181d2065250858adc72786027103a8e1a2d098a33f1a130db154925a8aef6c4752d6262932dc3cd957a9a91ba1021c726b8b16b0027ebf48e9f2f19bc82ac3f6743d584a5f3d3679487925157d5fee7280cac2a26934e35942c4ce233fe962bbc76b7efe9587b564b0b91f6f75c4ff570ccf8e5b15b09ca095ddcff7fef94e28cefbd1592fc30484b142838263ed9b72ee93e9db0dc0d7c60a750d80d90aa7f0fdfa3603aeb92e6f0166ae30ff4225e90ccd2d0fa3bf89407e1c038124bd628bbd864469b5b77eacd7af14a42487bd0bfd6b2fb1962d63d427ef318fc01dfac3c476611209fb2c0e599c62da902c96abb18b91c6d7f2637c5da80900d07557ff62563ae8d84537485d7102e86990476cf34acbb42b2683a247d64788c0500179d0452e879c6263c4a82bb10987dade8c195eaf8368daed13b2f46e62de7e72c5189868372f081b72e48871e6598e5076997755e6d70c8c78b8ff937003e9558b0e7809ca260bac8d2c165818287cfdf7eab197cbe17b9ecb556931dbb2494b4290ab1eed4d00fd4c3c88f942c57b70ccd9e618872d658111c25a7ca4f271fa92ba1f8bb3d625ebdf2c0635b74c6d10e1c67116eee87687974d1be802b883ce2e05296831cf0552454f0b6a1a29ff2d5ac9af44f10817d063142327170f30d15fb49baa3506313f4c859e23dd153d5fa303df32fd52d0c6e27db0860c2cd00128e3fcb7f63832ac42a507b83fa587049fec1cb4b171236835d1ffc2645686edc9e9b5233a38020ba84c7d3744a5041eb4056d0be3fe6a6ed2a9c87ae8c1010a7ae9a08b189cb10b989358f0d9b5501b31b876fa8e78e591d29e82ff391c913c6894b9dc7aee2fba54a03f020473abcaf75ca71b48e43a195de1be70e30895c34fce11dbcaa81d55f674fe84d2ddcfbcb6cda65c206c0d48e73e2d23c16d8871e409313177c564dfc98ae86ff903e1e37a5c7cc1f5e8ba7f2ea4fb2974a1af29d84d4470ab769eda38506d8a5dc6b7dadafd94847ee26ca5e8221e0269147828fb569a0873b50d9b82a698a58b04aaa3c0f39e76b8f5def74ac1921ffce7bd2d5c9e3ae3e1b78040c7492be0854e52ba0df6100c5bb6c1732a5fa989ddfd0713c12531856969f0cf40e4e6a3e7ec1491eb351967b9679cd733977d0cf8629fc7e32a668015de2a79c76e0ba30b1557acbc067a66630aff2d68409d59c04e0d507e88f35fd2d3af2eee43a06a69c963fd30b3606e08a172d2012ae8c7c25475249a3d8a2fb7aa48fec18893c8f8bde721ddae7d9444a5963007ebe36063515094d54f36de8b29877f2d6faf147d50beff0b5b5f17088452dd97c91d5872e3596cf2f26546e8009448ab45fd1351f09ea7138ae510512715692fa181483da711fa6a861c81d27ee0b8e2701c61c8e4844401e26e2136d9371e5edd223c98fcfe3d5ddf7e514ddde1be2450f64a6c6af79ff4ceb529cc573f178de2322d98091d81c0375e42dc600907c236cac3b3dd2a61dc706a228e803a54e4640cfdb318be734686e04e6deba7e85cd2bb5a2135c143cbc25d64d2e5a50df677f518cfdb178090b8be719e96b742d370f9ddfe4852ac3c9a3ca4d0f63ce5ffed0605c1efb72de7e5d79aa70aac1b1e7e622c6cc7732a2a08496d2d22191aa78a037c89f9c7620a7d3a9530f5b02fc460dbbc16b46d814d4c49c55771ba591daf6fe9300e8c2694c438da06383ea67ed6cb22cc1ead51c89a0eae2b221af22969b5e01be6b4ee752465b0b96e7c0bde2e2654260c63c7c711e23ceedfc7c8f60f94ddce5056684e3213e6e79ab800a9464d1c407ae07999d9a1733a075d10621f796aec1b93cfec393e609f6a317768fa6d90f450e3f77f54bbdc254806f22ae03933d72b0526b77679ddd89b1bbcfa7c0a97025dbc7f66e4fc99444ce2f1a9eff1b741de631ee206a53e1b53256c5722587b6722962576a0c519285f09e1a17df9d7da065b14d26d1fa50ec0c67dcae691eef2d581a262004c900243e1dfb39b8a5a8e0c8f565491895e4c589be089b32d0e92e0a6846885e39da03023197061b99c0b2304eb0a41ab1c99079fa99dbe1ad9b3930cbddaf433407b790a40d1669d8e764243488f53c9c5597320dc7abd32ae9e0207919cf2b9a955509f84f6c18e8aa676a13917fef06d65755ef538a624112d8c4f62c4ad4a1c6a39774fcac69fc0ff99e6d36bff208974ce4f08556032cb5b8ac3a75ad24a8f87b5d36119ea43aa37054b4e7d9bd68d5b0500e863464101185c7006082698afb70fba7a9a1db9a294019b195ee5364a77250a0742a0395d22397d57ec972f71955a6ab34f894ff08484a3565cd5e3a1793267cb186b40adb4056837843c90ad254814aae1d6e44406b148c829434fba7caa2c3db16ef5ac904f505a18b1f55c43f16591577ecbfdeaa960363c26f782335772f78a693fb8e45ed0418646e57b12d5ec9f96a4c4dbc96bc0f3a2b18eda4a279428bf34920a55e96c6d50d8c0f7e7728ec8667e39bba86664120fd688ea9f067f64e4d27ea53e14f8ee8560c347df20cf7ca4a7905420bab3e327fc875154a9e0f52596e86bdeadebaf6e79ad4bab8ec079720a414eb20f7938ccbf8204fe04c1b18f3f3e69b79bcd135f60d7c46c22cef7f8f72410516fc4be391c0c7f4a6f1063c0e739f91c757a34f3ff587051d4356c26bb0b2579b6096a912bf8cfdbc7d1d2adbc194441677c22ab17b108ea7f2491ab519f18d8ba2b20aefe1a694941050f27ec6ee6a2c230afac26dc93065f9cd52ca326378bf36e3260bdf011af695ebdb3b0fa321f80ced7d7024020e23d381474844019bf3f72a2afa6ebf43cd853b7852792b7b14a0e23f4ef42911e2c0748c44a8f2117e440c0ffda360d4f8252187b938dcc9b4eeacd97f374281ac31fefc69e6e8ac84300022f307c5c4e7fc96d3bbf8044e72c778ed85a3d02ca5fe9b15cc3245fae21f57a02383f06bfcc6a3b37a4b9df50baa1162b8669d7549e88b8731ec9e5e058d4e41150ce3d3acb17069d1c08519ca1d1896b843877b9c2beda2a5fa839930349e6331488cd3fa1dc8acd598767b03c5e633cdbbb7f84ae29ebbdf16751498cb6fabe81a50d0eea6887d8ed52b77448c1344647aed17903bb9f2ce08e03e73ddc8f94e27053b81066de7666004870094a5bc9902f866b191cad4603a17eb7c3d62bacbaa4ba524908517fb431f51f2777f7de4053113c5083358e696b9969f912376643aabe3b4a6ab9b6baf71f71673f5872f4367afeb514aa9647907776fc8527f48f75a87f8dbaaa59055753e89985864915ab8f323b1e6012009b49afa8201a3f6634882a5f88a9e6eece7a491a8f4652c32f27784d94d1ba715f6146b5ccb0ecb37109ddd4026d8af2c308f9d8475945d497ad5e0a47bcad2e70290c5085f886f3d58d2099b8e47012cb86e67eb3b760e15f345c001b4f950ea739762a752a22bfe0b9844660b92afb5a1fec179f155a95461230dce2607ffcfda4263907fa5053c6f84089677b8766daab786271d08eed53c228ee7d8c9a818c7aff7973dc86c1600a4e3decca6a6047e2e633e682425ec28e3a77dbb3a21fcd0aaf4b4826f5f9a99d52415faa21fc500d5c99a9bf5e43d7b11dd820975cddf18212df99a0166306e5e45d72c75a917ab0f844d35c2934af58e5b8a12e2e9a1f16925a3b342c3509e86885f3a487a5b74c94bdcb150a81f853b431a74cf47510e55f89da8e2089d07faacb650f64473dfbaf308264a361db8cccfdc4c80bf97c8c4bf9db7789c231e62c2878837c2e72585584de5d52c3f59fed0a4a14a8957279a8dcf8b6efa0e81f00c73b52f34eedf8f31840a0b18c9634570cfed3d7f4e13b78c0fcb16628d380de48e2807d884e9a46f7c2737e89cb7fbbff6491db2f9f6dafc248a5e417ba926304784be621e83db65dddb0b84141e5b97728a9bcd1b1916f9c2da403e86bd178a2ffb3a1f5d64253707f8f6da3ca22a00de18c8bb000384a38293da2ce968fc184b696fd5d26618b5d3b633145e971ff010ab9cbfb0f3173cf6f8016cdef01a2ed0921e3608f3e3e0a511a7480464638ecba810df33e2146a7f53258b440339d1eeb5e06eb94814d9fe24d835704cf34be75fc56f4bfb3f8355776f319095b1987a81dce624c6425d080258d355263224b888a8317782101769e1ec4874c20ff75b430037710bc9437234a791fc7606d9498f6c353af33adc0c92c53229574095a7988c59bfcda13bf1a4185fdd6318b250590aeedb15aeaccf049665316eb1873e4d5a4a7b686ec6279a987444c17927e530e598d5b5f672b88ff6f98fbc52b193053a516f19da80fb2873a49fb9cad5b037eaf9e9afd7c5a6bd0e3349c0aac078968f2655b789abc08b82af590bf7e3f1051188ad725dbff39c124915037afeccc741912def5645951b2ded95b29797da1ac40b16a3f89863047131e1d99879896db7d5e019bbbef6753752f665e0cbdb6473bf86da661e63ff8b0893de82ca786d08dd0a4b7f8cb9181aba271ef13bbb6d6b7ed79debf6105ac5a971dbae815ef10303b630cdfcd8ba9a0bcda0052a6c2a8a6135c6f466fc543d44a9e722bd2a3fc3d004e5f6430246c8e2fae6272cd238581412748d4ef37a404b7e4035a03a981be204606dec92a430c5cf303f663878c6b16215e63e41869496f634cdeced1475c47864e78a7cc398c06cd53d229ec08488651695ea5c018b00dcad9e48fdb8006fd38e1f53fcdea59aeb3570a1098659892d20b3be362edd0e587f4c3f78af67301c78e83b8aff103667709afd8968846caa34d9291fd549b4aaad4cc783042a117f3bdb009169eebde40bea76925218c7e964cd3e42c09220cbf27e2c253b3a4615af8039c4a713e9afb3dea376152cc9d011886674ca84f9aa413dc1ddc9936472bb7e9107c792da1dd56a7a396fd036f5caab4d4ffe35ee1f0771f3d04c9933a94aa0f28bc489bd81ad331a1cffaf1fcb44694bca71886978ac7ea1aeaf1e8cda64d195414c4da561a074ee28e2c983742477d7de8eeca587cf279aa948a037bd3b596862f928910d0d0e077c4949a0c7b340e41d41f5b217bd6ae4cb2b2a34561652978e64616863f56ffe91f896eb85823ade588333e6f9acccaeee63d0d4f19bf6eb58ce9311cfc1a731705e484ce612eba0bb81f89fe2ca223df2c3b9f37684c5d4419379e96e65830cff6e0e03c146f171cd9f9d287e8edc631d21887e7f63109dc9c57feb3cb3e67f3146c3d7c8735f73d5d6f038ed2ab29b6ab7a64aa936671d71a2a82abc41d907ec91d4aa187b53e1a5790974b3a65ef3e7f145b040a17991b287513c43ffc35d58440c200e1f5914f216dd2d8c1477bb7715dcb96b4ac12263e52bbf7869e82a0f1a2de61ac65af1e016f5cf811031c3ef2be67fc442114082688aba559ce993c523a9d60eb19245bca03dc2783fba384740295e86cdf6433ae624f0a84eea3d1d133f3cb8d3655601debfdfb89995aa86bdeaab4bf37ecd728958f32739030527b51532fad7ca3861ed5599568dbe9445f622b0a1cd9d5864544265752fecc10e874c2f1a0c6f11d5dc945696fcae70b50fdde191d0aafe50632a786dff3fd5f976aaa5af332156bc96c3c86a88f35f2ea876d050a0aeea72e61d57a988183bf3ff14508f825f86f2cb6742c809096c1c16a343e5e38be54b8426ed809e1ce15600b92f251ddfbc6244b82d3ec22bf888929a11cf9e591dbc06007cd15ab7edc093dfbcdae3a145ece8ded5f0b63bb5f3928ea0a1996762b982e10394fb8a6b33bf62dc4a6f8f614ec856a9b1d790b9d06e675320afa41e1a465dcf6fbb49d737f66ff492f019b0c4b34f9dad26e088ec3b9019a19a78a6a25f7421702d87ce9d50415ecfb3cb4d5c6f3ed0c24ed3bc5dc7fcc26e54403d319a7e629664953aed9f96fa63f2b1aa9a6a066a12d004b7ec28bb92457ca3fd863745085bf6eb40794beb5363ccaf0371844a24252aae1e49ca4bac41961e7a155fb8938a01ba73ad66f55ce33c415a6c6b860021dbc61b0fbde29ad55556a11a7ca4c5a85b0608ca2a2a649ae7654974e8aca57c5d013a02de7f389245aba981d23fe4e115415d3f5c7a52951f122ef4ac3efd9783f6229576ee88e3320112e885038b17d9ce1847c84c972bf57b0cdbc30794b9f3ef626c897fb38db40141f8a0049a998524f90dec8e657289c49634e773e9d3e776b0fd14afcb3f54127d95f062c8078540efa31a11aaeffc8c68cd981ef531a1f166ea73c00590e1044db5e719947dabe2a8dff7ae0b8400a9fcdd6f5cf69250acec7b06ee2db86a45fc90bf5abeb90d1d11cb2b657475bac2a5cc4606fda1f19171fe63f72746d29a218cca87616d283fc5d35f0d36840bde80577ae91f1148960079d027a72a8084b5aebed10b201eacc4924bed0ca734772c8dbec33bc256cbbb08a80bbc4545d5b5ac9f610aa4ac32faa0bd741e6bc39c5840559a9a6de4646ff5b62ccaf3340985151203e885bfcffa11b9c77e0b42b903de4fd7db842135ea3efb1c227aa7eac69102b09832c6d5456315b894c15d706386a0cd336cb57dbd8b97fe4e03cba770ac356445449bc53754dcc18abee099ff5674c6637e433b448221bac334475f45ebaeabb3e0cc1d35164d501a75205253060c80db6c0e65b307375adeab281eb4433b3eccb1dc27d4e2db0b712dc21b0aafd05d07d59995f94d6b45070eee5174f54067871b29b02ec23fc2c6eb122fe690cbab49b040d48d9dc0217b9ac439001ad5ed7f73b673739010ca8b99ec3b2f1fb528e3db34c698fd5dee32794b31fd63c2b72f32bda74506e40b6f88e4495739f6c3863542ca7cb4ec69b5b48a3da1b808e9249c285811d6eb031ff7449e75f0ab1235c44bdadfb7f4549cc361f3d370831580269a2a0004596fb719dfe15faf4db82cf533f0e813e25e5ada6d06f235c695be58ae02bd0a05ea836d15faac2ceb330bd93abe5abe4355a4bcc00382845a0fee4d4c5b831cceb8d6c8bf543b18f34355a7d03e89be95f0ddce76625af30aa71a5090f7639f85accd686fce53abc71512a4289d14e992a64ad5303fb0fb1298648d268939136f1625039b472f0d144599290c909aa2924563a7ff5fd5cdaa5018e592e9b4853bcba57c34c1167f77dc7fc010a2fe8a8e3e82e5dfd8cbde7a73d1f0f84691b452c263ed4bf0fe336ab05910d42f95b8fe1b52421315d611b16820ae75089ddbc222edc1830a952c91180a6d3228d1e1fe823d908bfa4d24c1a6424461007d1b94f0fbc13a9e718243ced7e6f24522a80005a4fcff858dff00585cd9283ea1a597f0ca1e76c54747d050f392cd0e086326d0ddc766ab1fbe30c3b8cba924c01475b160e775c3d1d26c35840f83269a7e28f1338ea375e53dc98b862c8d15a19f772ac23b3ee9f90bb04e03dfde4e82fb9dd3a0890fe06a99101c59ae696ff1e1bb1d652b6f3f9635c18616a7c86b1b6ace325a6c62d132cda8d826654641b6e802acba840a4265e24e85cc274b55e0fbd01a76dd9af91441ae349e5bf7f585c9860f5c4500da889c3b72497b86f193fcf969d1424eb0f64e9ae1db82c102e1d57bb4f6646209a691cd0b286182f2a66dfd3dbda20a83156b0a108bb0e0a5c8e2bc7a2c19cbab09f25db581771af9fdcb09d77a46f337f2443962f1858e374c16b37f8e993646cf84b2869d9f93a4e38e0f4db5444c287d4030f4ed1bfaded4f37646d81255ec9bbad06687f49678dcb4690284c2db493464e7fc5c2e39832ae3ede01b136ff32532f5e670ba2d753983fdd2052f42311fbf917e96a1e29b4898d62130c683bc0d45cc2be5945cc41e35475fda252ee1c3f035afc352f34b77ea13a4fb09c09dea26110e700693cff04ce8e06b30f66535608968e65d2ebef57698ad72e69beea4db56b0e8c6f91cdf187fd0d49c84c1d5ab34900f6004b00503131e7d6c996dce0a84341ae8236bb5741adf6cf5b447d750f1e5f0cb5b3787e22992a9f26310f28d4789d09c53df3057113f6ffbf2978984762fa679cdacbe509d6dc4b637f17b6cf49283d5a523e04a2205b1a1af1c6880fce33502a83170a5b0ed1f384ed1451e683b622f44ccc0d385b3d7540ca3116d6112aaf905039471b564d3cf615ccb8823cfd34e635c3b2af982ed0a98fdf2358b42cfa8e8cf2ac184b7e08bf48988f000850163bffafe7f69b3f8a761936a3e1974e79ec92ce893f6a8474fe900b42025c9bf56799dc9a0db57239e8fa5dbb3b1972b0d2c456f7777ab2baa1aef60f5be9d48b4aba1aa934a493682c70687b4e7b05f5226eafe9a25d4fc33cc2af7a7315b37c7db101ad3456d8ad04ddc3b76d2baa96129da53c810d55377382a2a25d6ce0d4c113c3367fc906034eb775290c1d5e5c881d9a8c6567d8470d68b33b506bfab2d6b61a9a7ca6eb003772e30165ed01544d896f96c0f286a23ab55ae258c1554b8054e9f6de37e9f29bb644c4f2ee3ec42d51daf7d4da1cda30f16a56f12e299b5e302deae593fbbd6f75390f4eb25555185bf62eeaa882c23416872a4cc18d2534ddc4d2a1f3a0c3ca461d9b9e4fda10c3294ee74c631c65e840d5e4a94a1798e07a5e151968b7b22892d65ac2c81e7e8d9a471a790f66a9391b4e8c19a2251488255c96d498cda6ddb3aaef264454f2b4ff43a70c48b1fba3ed45c43d0dd44bc26452045e9fffa2b25901b3d5704ae3b0352fa3e8830774b6e38025c7552c13d312a273cb88c1649dc6d8ab38ebd1b2bfb16b2cc056f870c138052b951baacdee560e218972b1a0932bc266855062fafed6064bcc637db59713538c45a69c838b09e1b143b7c1e2e6b72a6a00b7cd0afff8d20b9008d61023aadf193d8ff8040220564c0bcbd9dc03a98ab1b8eb96c576291636c0c1de5e3d872c095876efafa7575f994f45c29cb3fa9e96f98012b7a84ce820e172e625b1de98031e5471cf5c9036864289d95d2f1956abf5d4f9a7e81ac2796c67a4aec8f54a5896bffd05b4514df6b2a7df1038183ea740459db4a07ad275e153a08cef7542abf7775a8ff164e73a424bd22815da91265c8c86c1dd90ed926fe313fe32be9c040f7065b27c8cd03d585bbdef6f149ebb3e3906fed7290a19ee7d42621393d634940c771c6dd95a9fd153bf25e029b453a69b10cd3c9d3fb17fd936ee6243a5357b38ccdfacff843aa2a51081925acac1b7ef3dae20304562be99ee3464885988d6e08b8f1ec22e51d5960b25c799d4ec379bec80219cacbcb4e312e744b6e5da1cb39e6d7b90c492ddacc215d1218891f65acb3d3917ed208bd6e8fd520eddf7584ecc920c9243c657cb6482dbf6a38af25d199f2137880b605f640a4f996f48da1f7058d81604a70c672414230105990aeb151560ab80379e346a1326c0438b68ce6bd291654d736881176ad30d11e1fad2871eb83f4b339e5fb0bb68eabe3b707324673b3ba607fa27953c9109185ecc2eeff24cc3a7494cbf04f70bbda0b85e644d8e2434bfdeb2bb242016bd82fc78e8ff2b1bb18167e7834f621225eef2607be6d2318ea29e507f7be94764f67aa5c61c7d15dba36cbea919c665137f9216e30310c1c3a410eb7ffd8bfb3d339273a8934b4089efeea8ce06cd5dcdc46907e169dad730be362e6583a512071d6a2b7ead9c4482dc91f55a62592925adcd3892dd57461ac830d74cb8ceb47c78ddaf2558cb8bde9dd3ce2edb882cbb0fe019ea611bbf778493d63a3b68b3d94a283470e4e682ee4cc569ebc6629b4f0a5e10fa9bbd6dc044cf7d61d11d0ec5563c0b7b86141e7a852fe64fa7c8496b112f366ca2e4afefc68ebd78bddfd5bf95b40f691b0d81fdb5126e9ed55e32db62af1dca33a3449aba59f12bd03c0f4a64e1fefb18ed08f6a9a1325248139659687a73d378f09002ebc4b2baab643ca44b4a7ee63dc4631f211181647daea7e36806eb0a79980ae519fbc77c9988db03cebecc1ce2db3acbdc928e2de2111fd171c89feac400249b28c14267f3e6f711206b0517aea57817e13d0f6553e6e9b73d99a3f85e5a9cc8bd7e3605dbf5b4f4e665bc7541fe888c7d86cac5811d560e044ebe3bb4768eb9307369da53a32201a7467c066b83b86c333876e821801f98b466dcd2dd6077468029722b01988324e101b8dc37d5d45be0cfa5655e232bebbdae8bd70e92a66140ddfa4bd182beecf5038d4f0bc31b37fa26ed21820c78450770d380c2f42386a5c27a93b2f85f37756d9b32df934ec4d1598e5b3ff6fc53d5cdaf6acdaa53566a122349bd1c21a73b634dfaf23130db368a236376144efbdfbcbea34e78000a261b3817a10eb7c0413534dafdc55cb12f65bbcb73a4467bbc2c2319ab070ffaaa8e4eb24ef9cfa2cdeab19e16e0b1a502104492ca060ce50381e7ebeae0341ab532bc8a4e9a4bdf31e25fbf7674353f347c274fcc40083486fd48c08602c12c9c6806c7517c5b8aa178f65286f5007ea8d94170a7b070e66bae28e5e143b477a2629efa8e33883c03e0e58a6f21e253d87683d4852abd31f1199496337eef9c8bb81c5e3313a0a4c96cd4e4a3997144340f0bd5d3fe3ecdcd0feeee6bcb3ba0cbd160298936e6c26e3be0b86644e2704b0ead40f64e486a95856736f04d5493944eba60794ebc538fe149367eec24d8855061ca11078832d771d0efdfa221f66af302e1424bd3e4afef26dab0cf76b51d95b90d75d4ea196f5eff677e4260170b21918b0882eeab5dba283b07b4feb99bdce197c6e453371c41be2a8fa6e29d6ab5cbeff6", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0xd, "f95bffe6110e2d1df74d8c366a"}, &(0x7f0000000340)=0x31) getdents64(r4, 0x0, 0xc0) getdents(r4, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x10, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0c4}, 0x4004080) 49.016253014s ago: executing program 1 (id=1644): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af83, &(0x7f0000000000)={0x1}) 48.843910315s ago: executing program 1 (id=1645): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 48.052577224s ago: executing program 1 (id=1647): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x5) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x300, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0xfffffffc) 47.037387232s ago: executing program 1 (id=1648): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a04700102030f0942120001000000000904000000ff0523c6"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1, 0x2000) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/llc/core\x00') r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="04005b00060065"], 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) fchmod(r4, 0x11) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r11 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x40049366, 0x0) write(r9, &(0x7f0000000040)="240000001e00000038eb9314ae672f85c34d416600000000080009000000aa000000000000", 0x25) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f00000001c0)={r10, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}}, &(0x7f0000000300)=0x84) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/93, 0x5d}], 0x1, 0x6, 0xf) 45.861954483s ago: executing program 1 (id=1651): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000000000002d0000001800018014000200626f6e645f736c6176655f30"], 0x2c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x941) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r6, 0xab03) 30.10026528s ago: executing program 36 (id=1651): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000000000002d0000001800018014000200626f6e645f736c6176655f30"], 0x2c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x941) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r6, 0xab03) 28.581417684s ago: executing program 7 (id=1691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x3, 0xb000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="f30fba20e3f20f20e166baf80cb85c48c884ef66bafc0c66ed0f798c5f0b8000008fe978e2d8420f01743a0066360ac6f3ab0f01cab9a40900000f32", 0x3c}], 0x1, 0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000440)={0xf, {"a2e3ad21e08eeb661b5d350987f70e06d038e7ff7fc6e5539b0d750e8b089b3f363b68090890e0878f0e1ac6e7049b3b48959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63da1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e6409000000000000002fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec1109110900d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e1505f6bf39ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97912507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000010000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227eabc1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b649f07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c47f8156832369c33076da865d258734dd73583df292892448839ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059ec01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c27155005e797b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02c67141a360c3ace48aee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7fdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e44e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333b25bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475fb7807fb33b72685ec37a2d3f7664fe2f0459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b6cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5dd40b0000000000005f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128060000008261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb00600000000000000dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69cce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.310111542s ago: executing program 7 (id=1693): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000200)=""/226, 0xe2) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0xa702) mmap(&(0x7f0000371000/0x5000)=nil, 0x5000, 0x0, 0x11, r4, 0x0) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0d, &(0x7f0000000040)) 28.165793667s ago: executing program 7 (id=1694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x4, 0x7}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27.34920869s ago: executing program 7 (id=1698): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="2703022b590200c90000002f1eaf", 0xe}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.713244594s ago: executing program 7 (id=1699): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r3 = gettid() syz_pidfd_open(r3, 0x0) r4 = dup(r1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x7ff, 0x2, 0xfffffffc, 0x7, 0x5, 0xb9, 0x8}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004840}, 0x4000001) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) sendmmsg(r4, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="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", 0xeb7}], 0x1}}, {{&(0x7f00000002c0)=@isdn={0x22, 0xde, 0x7, 0x92, 0x92}, 0x80, &(0x7f0000003b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000003c00)}}], 0x2, 0x8080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 25.543164811s ago: executing program 7 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r1, 0x3141e0b2751b0f9b, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0xfffffffd, 0xf5, 0xb0b}}) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x52aa5ded, 0x51}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4044019) 15.175678079s ago: executing program 8 (id=1734): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, 0x0) 15.114419208s ago: executing program 8 (id=1735): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x1000, r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x2, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfb}, 0x10}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) read$FUSE(r3, &(0x7f0000002700)={0x2020}, 0x2020) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000040)=0xfffffffc) 10.529454972s ago: executing program 37 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r1, 0x3141e0b2751b0f9b, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0xfffffffd, 0xf5, 0xb0b}}) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x52aa5ded, 0x51}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4044019) 7.035108103s ago: executing program 4 (id=1760): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000000)={0x1}) (fail_nth: 2) 6.622489371s ago: executing program 4 (id=1762): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) read(r2, &(0x7f0000000040)=""/252, 0xfc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) 5.8152992s ago: executing program 8 (id=1763): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x2000, 0x0) (async) memfd_create(&(0x7f0000000000)='/dev/rnullb0\x00', 0xd) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x480083, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ec0)="d80000001d0081044e81f782db44b9042dbd4f6b6c8946d13b040000a10e1208000f0100810401a8001600060001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11513c6baa3a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6bc09000000000000002483916ddf50b8b351f55551715b52fa00"/145, 0x91}, {&(0x7f00000006c0)="54f6d4d87eb3f1c0c5", 0x9}, {&(0x7f0000000080)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d", 0x34}, {&(0x7f0000000140)="cc441f3004a58e924e9f", 0xa}], 0x4, 0x0, 0x0, 0x7400}, 0xd0) (async) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0xf, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[r0, r1, r2, r3, r4, r5], 0x6}) (async) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) 5.253732502s ago: executing program 4 (id=1764): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x4, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x37]}, 0x8, 0x80000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r1, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000b000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$sg(&(0x7f0000001180), 0xf474, 0x4800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb}, @flat=@binder={0x73622a85, 0x1000, 0x20000}, @flat=@weak_binder={0x77622a85, 0x8a, 0x5}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000340)="b5"}) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) socket$inet6(0xa, 0x5, 0x0) 5.054577608s ago: executing program 4 (id=1765): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1fd, 0x0, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="400100001000010026bd7000fcdbdf25636263286165732d6165736e6929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000040000000000000000000008000100000001000800010001040000080001000600000008000100faffffff080001000800ddff070001"], 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x100008c0) 4.485014576s ago: executing program 8 (id=1768): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0xb, 0xe1, {0xe1, 0x31, "a34cc7657482c70f1ef4f0cda5b40e7bf8d3dd113309a0522fc3d526f05a445defa69215b1c64386a5501ef09a1e367efe753c3d4127ebd3ad7b7829a0610457bd37b3f91d81fc4fd53f316a6ae76a94187831b573cd9657a5fe2103bfb18644da7c2fab3cae36b463bc72976b15879672d3f883ee3a1a79c50406b80a3f9f1a99a62a984e0f8fa8000e0c9b3063ad8495297641d25916c71ca97646882d2e0a71c8180d431cd5ffd01e8226be787f7fcb5ee0fc255f3da07c175a1a64fd4f5cab84fa2a269253006950adb396fb34b7099d8896a4e527125dedfe7c4783a9"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x14, 0x86, "0bf74fe3795ccc77fb1683d436e5b587a06d17139603a6799d5c067edeb45ec47ae93d4f20d9f49ed2f6e968d75ce1dbd24a14bf53b719eec6873bc31934f3fab8625feae7b3b16ce0502ef5d5dd63f3c02eb1da56caf3830aa52fc3412cafb872353174794d7da7659318c28cefb05339733065f6754bb4d32b86c66fb5024d6c3284d55018"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0xc0, 0x5, 0x6, "c4cb5c5963d4"}, &(0x7f0000000340)={0x40, 0x5, 0x5, "bb521e9154"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.362654828s ago: executing program 3 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="f30fba20e3f20f20e166baf80cb85c48c884ef66bafc0c66ed0f798c5f0b8000008fe978e2d8420f01743a0066360ac6f3ab0f01cab9a40900000f32", 0x3c}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.993828989s ago: executing program 3 (id=1770): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgctl$MSG_STAT(r1, 0xb, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800) socket$inet6(0xa, 0x1, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x3) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) r4 = socket(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'L+', 0x6}, 0x16, 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000300)={{0x3001, 0xdddd1000, 0xd, 0x7, 0x2, 0x7, 0xc, 0x82, 0x0, 0xd, 0x1f, 0x5}, {0xeeee0000, 0xeeee0000, 0xa, 0xa, 0x7, 0xf5, 0xf7, 0x2, 0x5, 0x6, 0x4, 0x9}, {0x80a0000, 0xeeee0000, 0x8, 0x8, 0x7, 0x2d, 0x3, 0x7f, 0x7, 0x6, 0x29, 0x80}, {0xeeee8000, 0x3000, 0xc, 0x4, 0x9, 0x2, 0x80, 0x0, 0x5, 0x83, 0x6, 0xe7}, {0x80a0000, 0x4, 0x10, 0xbb, 0x80, 0xad, 0x2, 0xfc, 0x10, 0x3, 0x1, 0xd}, {0x1, 0x8000000, 0x0, 0x9, 0x5f, 0xe8, 0x5, 0x7, 0x2, 0x25, 0x6, 0x9}, {0xeeee0000, 0xdddd0000, 0xb, 0x0, 0x6, 0x7, 0x2, 0xfc, 0xc6, 0x20, 0x2, 0x81}, {0xffff1000, 0x2, 0x4, 0x51, 0x82, 0xfe, 0x2, 0x0, 0x5, 0x8, 0x5, 0x7}, {0xeeee0000, 0x3}, {0xd000, 0x43}, 0x80000001, 0x0, 0x1, 0x0, 0x9, 0xe900, 0xdddd1000, 0x1, [0x40, 0xd4df, 0x8, 0x6bbb]}) getpid() capset(&(0x7f0000000380)={0x19971634}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8}) 3.762358992s ago: executing program 3 (id=1771): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000000)={0x1}) (fail_nth: 3) 3.599639932s ago: executing program 3 (id=1772): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x4, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x400400c1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0xaa, 0x1, 0x0, 0x1, [@generic="0c1c30d810a5bb5565624a68a8f00ff26d23502d445fbb82737e5a8d9d1342e50fe03ebe9e220986db7a45c57354badf8e5f6cbda021295ba717b87b8581f7faf0e5f52800f12cc8991b56db4521315373061e1dafb9bcbaeb1c0019865dc3b146ccae405e952b36271f730674b96ed6c733950eee1df84095b190ae1bfef7aeacae5319e760299aa1345a21590449da51b1163a7f650f0dcd903a21f837c9a3758393c7f143"]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc044}, 0x2000c0d0) r4 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400030000000b2fa2560d"], 0x20, 0x2400e044}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 3.401392007s ago: executing program 3 (id=1773): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x800a, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x95, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x12, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa0, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10002, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x60000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x3, 0x3, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x20, 0x17, 0x6, "68bc62061ef1"}, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000040)=0xfffffffc) 1.910575441s ago: executing program 4 (id=1774): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000200000000000800a000940b0000080026009409000008002700"], 0x48}}, 0x0) dup(r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x258000, 0x0) write$fb(r6, &(0x7f0000000400)="00800100000001000000dd11ce85a9cb92110a00000000000000000000feffffffff7f0000000000b348000000009d00000000b23d540651b162ffc453d027123d3dd17d9e1d8c80915d08ed470063a0473d1265cf13373699c3e5dd2db697e7c2855e0a16e0dd5276259fb5fffce60ac05c1e412de2df56bc464f3bb6af8aae6ead515e3463", 0xfffffffffffffc6e) 1.606746082s ago: executing program 4 (id=1775): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000080), 0x3, &(0x7f0000000000)={&(0x7f0000000600)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "977e809d15632d16"}, 0x10}}, 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x80, 0xa, 0x3, "0ca000"}}, 0x0}, 0x0) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000240)={r4, r5, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={r4, r5, 0x1, 0x0, 0x3}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000118, 0x0, 0x6}]}) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x6, 0x40, 0x71, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "bbeb34b8de5c"}, {0x5, 0x24, 0x0, 0x18}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x101, 0x10, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x82, 0x4, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x5, 0x7}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0x3, 0xfa, 0x20, 0x7}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xe8, &(0x7f0000000400)=@string={0xe8, 0x3, "80194603d9aa52ae4cef253707fa04a2401ad0834e7edb5c954201b9be20f0b1d41d1868da956a448f00ace379d60b6aa8f9b40eaf573ee3067c10b168b2462b8a6a09d3de7f6b808b05533ead78fb66d5fcb9871586aa1c98e38d1f542079f7f27e3b4f4287ce830d8d83d857194c0301a4e2ae9acabf2b854c45fffa35a9a3a81b7712b7053c158087b8796ef4c33f9df0773da702254e593b6ca7e9a55d80fc7e6f40cba6503dc0d4874507ed65a28ec18464042bff842d256342624dfe95f5f3aa382f4d7391eb9636ff88e9248c16b59b262fbe265a5a38dc9ad772313ea3d4c35e39f4"}}, {0x76, &(0x7f0000000500)=@string={0x76, 0x3, "9adb8cc2bc97b3350eebee11d9247e77266a0f5e65b1db35ad0768400350bb9349be013dba961da6cd2e1888325b9fe5143b7567932f3ba44ef0947ef85f1a0929ac13c8b8c29481744f9a1f60cf6cac9e710a9b94815b2718de4209481055b479b6974f55f85dca809f103c191ffc1804399a0c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xba6361e8073cf6cd}}]}) sendmsg$nl_xfrm(r11, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="400100002700010000000000000000006401"], 0x140}}, 0x0) 1.413617374s ago: executing program 8 (id=1776): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r3 = signalfd4(r2, &(0x7f0000000100)={[0x37]}, 0x8, 0x80000) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d03, 0x0, 0x8000000000000000}]}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000180)=0x81, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4119, 0x437aba2}], 0x1, 0x0, 0xfffffe01, 0x407006}, 0x10126) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002200)={0x2020}, 0xf30) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0x80885659, &(0x7f0000000040)={0x0, 0x980902}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x8008af83, &(0x7f0000000000)={0x1}) 1.365375509s ago: executing program 9 (id=1753): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 698.485532ms ago: executing program 9 (id=1777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000280), 0x10000000000006, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0x40045702, 0xfffffffffffffffe) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 331.378973ms ago: executing program 8 (id=1778): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000002, 0x4018831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x559}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xce, 0x30, 0xe5, 0x40, 0x61d, 0xc170, 0xe559, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x9, 0x0, 0xf6, 0xae, 0x21, 0x40}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) fcntl$lock(r4, 0x25, &(0x7f0000000740)={0x2, 0x2, 0x8, 0xfffffffffffffffe}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000053) 246.406064ms ago: executing program 9 (id=1779): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, &(0x7f0000002000/0x1000)=nil, 0x1000}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 0s ago: executing program 3 (id=1780): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_notify(r1, &(0x7f0000000280)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000480)='./file0\x00', 0xecf86c37d53049cc) socket$inet6(0xa, 0x80000, 0x9) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f00000004c0)='/\x82\xe5v/uinp\x8f2\r\xad\x93!\x9dP\xbf\xa3\xd0\xfe\xb9p;c#v&\xa6\x93\x9c=^v\xa0HAF\xb8\x98\xfd\xbc\xd9\x1d\x98u^`\xec\xe5\xb0D\xaa\x94\xd5xe\x99g{\xfe\x16S\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) close(r0) (async) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) (async) mq_notify(r1, &(0x7f0000000280)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) creat(&(0x7f0000000480)='./file0\x00', 0xecf86c37d53049cc) (async) socket$inet6(0xa, 0x80000, 0x9) (async) close(r2) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f00000004c0)='/\x82\xe5v/uinp\x8f2\r\xad\x93!\x9dP\xbf\xa3\xd0\xfe\xb9p;c#v&\xa6\x93\x9c=^v\xa0HAF\xb8\x98\xfd\xbc\xd9\x1d\x98u^`\xec\xe5\xb0D\xaa\x94\xd5xe\x99g{\xfe\x16S\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) (async) kernel console output (not intermixed with test programs): [ 416.868725][T11177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.039756][ T5921] usb 4-1: usb_control_msg returned -32 [ 417.045693][ T5921] usbtmc 4-1:16.0: can't read capabilities [ 417.053919][ T5917] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 417.227662][ T5917] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.237075][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.245178][ T5917] usb 7-1: Product: syz [ 417.249466][ T5917] usb 7-1: Manufacturer: syz [ 417.256102][ T5917] usb 7-1: SerialNumber: syz [ 417.267870][ T5917] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 417.295522][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 417.573090][T11182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.585743][T11182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.603539][T11182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.615876][T11182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.630798][T11182] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71 [ 417.728140][ T5917] usb 7-1: USB disconnect, device number 12 [ 418.185245][T11184] FAULT_INJECTION: forcing a failure. [ 418.185245][T11184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.199215][T11184] CPU: 1 UID: 0 PID: 11184 Comm: syz.1.1601 Not tainted syzkaller #0 PREEMPT(full) [ 418.199236][T11184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.199246][T11184] Call Trace: [ 418.199252][T11184] [ 418.199258][T11184] dump_stack_lvl+0x189/0x250 [ 418.199276][T11184] ? __pfx____ratelimit+0x10/0x10 [ 418.199297][T11184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.199311][T11184] ? __pfx__printk+0x10/0x10 [ 418.199333][T11184] ? __might_fault+0xb0/0x130 [ 418.199359][T11184] should_fail_ex+0x414/0x560 [ 418.199380][T11184] _copy_from_iter+0x1cd/0x1630 [ 418.199403][T11184] ? __build_skb_around+0x22d/0x3c0 [ 418.199427][T11184] ? __pfx__copy_from_iter+0x10/0x10 [ 418.199445][T11184] ? __alloc_skb+0x2f1/0x430 [ 418.199467][T11184] ? __pfx___alloc_skb+0x10/0x10 [ 418.199489][T11184] ? netlink_sendmsg+0x642/0xb30 [ 418.199504][T11184] ? skb_put+0x11b/0x210 [ 418.199528][T11184] netlink_sendmsg+0x6b2/0xb30 [ 418.199543][T11184] ? aa_sk_perm+0x15f/0x920 [ 418.199566][T11184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.199583][T11184] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 418.199610][T11184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.199626][T11184] sock_sendmsg_nosec+0x18f/0x1d0 [ 418.199646][T11184] ____sys_sendmsg+0x577/0x880 [ 418.199666][T11184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.199687][T11184] ? import_iovec+0x74/0xa0 [ 418.199711][T11184] ___sys_sendmsg+0x21f/0x2a0 [ 418.199726][T11184] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.199747][T11184] ? rcu_read_lock_any_held+0xb3/0x120 [ 418.199783][T11184] ? __fget_files+0x2a/0x420 [ 418.199798][T11184] ? __fget_files+0x3a0/0x420 [ 418.199826][T11184] __x64_sys_sendmsg+0x19b/0x260 [ 418.199851][T11184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.199882][T11184] ? __pfx_ksys_write+0x10/0x10 [ 418.199917][T11184] ? do_syscall_64+0xbe/0xf80 [ 418.199947][T11184] do_syscall_64+0xfa/0xf80 [ 418.199970][T11184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.199991][T11184] ? clear_bhb_loop+0x60/0xb0 [ 418.200009][T11184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.200024][T11184] RIP: 0033:0x7fc1d418f749 [ 418.200038][T11184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.200051][T11184] RSP: 002b:00007fc1d4fd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.200068][T11184] RAX: ffffffffffffffda RBX: 00007fc1d43e5fa0 RCX: 00007fc1d418f749 [ 418.200080][T11184] RDX: 0000000004040100 RSI: 00002000000000c0 RDI: 0000000000000003 [ 418.200090][T11184] RBP: 00007fc1d4fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 418.200099][T11184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.200108][T11184] R13: 00007fc1d43e6038 R14: 00007fc1d43e5fa0 R15: 00007ffcbea85ea8 [ 418.200136][T11184] [ 418.503709][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 418.512339][ T24] ath9k_htc: Failed to initialize the device [ 418.515599][ T10] usb 5-1: USB disconnect, device number 60 [ 418.520728][ T5917] usb 7-1: ath9k_htc: USB layer deinitialized [ 418.691762][T11190] syzkaller0: entered promiscuous mode [ 418.698720][T11190] syzkaller0: entered allmulticast mode [ 418.711094][T11188] syzkaller1: entered promiscuous mode [ 418.735685][T11188] syzkaller1: entered allmulticast mode [ 418.912954][T11198] syzkaller1: entered promiscuous mode [ 418.919744][T11198] syzkaller1: entered allmulticast mode [ 418.967809][T11201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.977111][T11201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.006644][T11201] MTD: Attempt to mount non-MTD device "./file0" [ 419.014684][T11201] ./file0: Can't open blockdev [ 419.033883][ T5917] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 419.183804][ T5917] usb 7-1: Using ep0 maxpacket: 16 [ 419.191050][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.203998][ T5917] usb 7-1: config 0 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.217222][ T5917] usb 7-1: config 0 interface 0 has no altsetting 0 [ 419.224015][ T5917] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 419.233168][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.243915][ T5917] usb 7-1: config 0 descriptor?? [ 419.255624][ T5917] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 419.353017][ T5917] usb 4-1: USB disconnect, device number 118 [ 419.625377][T11208] FAULT_INJECTION: forcing a failure. [ 419.625377][T11208] name failslab, interval 1, probability 0, space 0, times 0 [ 419.638258][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.1.1611 Not tainted syzkaller #0 PREEMPT(full) [ 419.638287][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.638300][T11208] Call Trace: [ 419.638308][T11208] [ 419.638317][T11208] dump_stack_lvl+0x189/0x250 [ 419.638341][T11208] ? __pfx____ratelimit+0x10/0x10 [ 419.638372][T11208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.638392][T11208] ? __pfx__printk+0x10/0x10 [ 419.638430][T11208] ? __pfx___might_resched+0x10/0x10 [ 419.638461][T11208] ? fs_reclaim_acquire+0x7d/0x100 [ 419.638496][T11208] should_fail_ex+0x414/0x560 [ 419.638524][T11208] should_failslab+0xa8/0x100 [ 419.638545][T11208] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 419.638575][T11208] ? dup_task_struct+0x57/0x9a0 [ 419.638651][T11208] dup_task_struct+0x57/0x9a0 [ 419.638683][T11208] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.638711][T11208] ? lockdep_hardirqs_on+0x98/0x140 [ 419.638746][T11208] copy_process+0x4ea/0x3950 [ 419.638803][T11208] ? __pfx_copy_process+0x10/0x10 [ 419.638848][T11208] vhost_task_create+0x1ce/0x320 [ 419.638869][T11208] ? unwind_get_return_address+0x4d/0x90 [ 419.638903][T11208] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 419.638926][T11208] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 419.638949][T11208] ? __pfx_vhost_task_create+0x10/0x10 [ 419.638981][T11208] ? __pfx_vhost_task_fn+0x10/0x10 [ 419.639009][T11208] ? __lock_acquire+0x6b6/0x2cf0 [ 419.639050][T11208] kvm_mmu_post_init_vm+0x14c/0x300 [ 419.639079][T11208] kvm_arch_vcpu_ioctl_run+0xdc/0x1c90 [ 419.639118][T11208] ? register_lock_class+0x51/0x320 [ 419.639149][T11208] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 419.639185][T11208] ? __lock_acquire+0x6b6/0x2cf0 [ 419.639217][T11208] ? __mutex_lock+0x335/0x1350 [ 419.639257][T11208] ? kasan_quarantine_put+0xdd/0x220 [ 419.639286][T11208] ? lockdep_hardirqs_on+0x98/0x140 [ 419.639345][T11208] kvm_vcpu_ioctl+0x99a/0xed0 [ 419.639374][T11208] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 419.639398][T11208] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 419.639449][T11208] ? __fget_files+0x2a/0x420 [ 419.639476][T11208] ? __fget_files+0x3a0/0x420 [ 419.639497][T11208] ? __fget_files+0x2a/0x420 [ 419.639523][T11208] ? bpf_lsm_file_ioctl+0x9/0x20 [ 419.639555][T11208] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 419.639579][T11208] __se_sys_ioctl+0xfc/0x170 [ 419.639618][T11208] do_syscall_64+0xfa/0xf80 [ 419.639643][T11208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.639658][T11208] ? clear_bhb_loop+0x60/0xb0 [ 419.639676][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.639690][T11208] RIP: 0033:0x7fc1d418f749 [ 419.639705][T11208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.639718][T11208] RSP: 002b:00007fc1d4fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 419.639734][T11208] RAX: ffffffffffffffda RBX: 00007fc1d43e6090 RCX: 00007fc1d418f749 [ 419.639746][T11208] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 419.639755][T11208] RBP: 00007fc1d4fb0090 R08: 0000000000000000 R09: 0000000000000000 [ 419.639764][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.639772][T11208] R13: 00007fc1d43e6128 R14: 00007fc1d43e6090 R15: 00007ffcbea85ea8 [ 419.639796][T11208] [ 419.703956][ T5917] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 419.938497][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1612'. [ 420.095742][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 420.106232][ T5917] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 420.117774][ T5917] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.134636][ T5917] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.153836][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.187345][ T5917] usbtmc 4-1:16.0: bulk endpoints not found [ 420.345393][T11224] FAULT_INJECTION: forcing a failure. [ 420.345393][T11224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.359311][T11224] CPU: 1 UID: 0 PID: 11224 Comm: syz.4.1616 Not tainted syzkaller #0 PREEMPT(full) [ 420.359342][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.359356][T11224] Call Trace: [ 420.359365][T11224] [ 420.359374][T11224] dump_stack_lvl+0x189/0x250 [ 420.359401][T11224] ? __pfx____ratelimit+0x10/0x10 [ 420.359432][T11224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.359454][T11224] ? __pfx__printk+0x10/0x10 [ 420.359500][T11224] should_fail_ex+0x414/0x560 [ 420.359531][T11224] _copy_to_user+0x31/0xb0 [ 420.359567][T11224] vhost_net_ioctl+0x509/0x1640 [ 420.359610][T11224] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 420.359646][T11224] ? __fget_files+0x3a0/0x420 [ 420.359669][T11224] ? __fget_files+0x2a/0x420 [ 420.359695][T11224] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.359730][T11224] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 420.359754][T11224] __se_sys_ioctl+0xfc/0x170 [ 420.359788][T11224] do_syscall_64+0xfa/0xf80 [ 420.359821][T11224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.359844][T11224] ? clear_bhb_loop+0x60/0xb0 [ 420.359871][T11224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.359894][T11224] RIP: 0033:0x7f5b8c98f749 [ 420.359913][T11224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.359933][T11224] RSP: 002b:00007f5b8abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.359957][T11224] RAX: ffffffffffffffda RBX: 00007f5b8cbe5fa0 RCX: 00007f5b8c98f749 [ 420.359973][T11224] RDX: 0000200000000000 RSI: 000000008008af83 RDI: 0000000000000003 [ 420.359988][T11224] RBP: 00007f5b8abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.360003][T11224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.360016][T11224] R13: 00007f5b8cbe6038 R14: 00007f5b8cbe5fa0 R15: 00007ffe4f304a28 [ 420.360051][T11224] [ 420.653552][T11226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.672761][T11226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.698105][T11228] syzkaller0: entered promiscuous mode [ 420.703622][T11228] syzkaller0: entered allmulticast mode [ 420.858995][T11230] Bluetooth: MGMT ver 1.23 [ 420.864596][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1619'. [ 420.987225][T11235] FAULT_INJECTION: forcing a failure. [ 420.987225][T11235] name failslab, interval 1, probability 0, space 0, times 0 [ 421.004890][T11235] CPU: 1 UID: 0 PID: 11235 Comm: syz.4.1621 Not tainted syzkaller #0 PREEMPT(full) [ 421.004924][T11235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.004937][T11235] Call Trace: [ 421.004947][T11235] [ 421.004956][T11235] dump_stack_lvl+0x189/0x250 [ 421.004982][T11235] ? __pfx____ratelimit+0x10/0x10 [ 421.005014][T11235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.005034][T11235] ? __pfx__printk+0x10/0x10 [ 421.005062][T11235] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 421.005109][T11235] should_fail_ex+0x414/0x560 [ 421.005141][T11235] should_failslab+0xa8/0x100 [ 421.005165][T11235] kmem_cache_alloc_noprof+0x88/0x710 [ 421.005193][T11235] ? __netlink_lookup+0xbd/0x8a0 [ 421.005218][T11235] ? skb_clone+0x212/0x3a0 [ 421.005246][T11235] skb_clone+0x212/0x3a0 [ 421.005273][T11235] __netlink_deliver_tap+0x424/0x8b0 [ 421.005309][T11235] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.005335][T11235] netlink_deliver_tap+0x19c/0x1b0 [ 421.005361][T11235] netlink_unicast+0x7fa/0x9e0 [ 421.005405][T11235] ? __pfx_netlink_unicast+0x10/0x10 [ 421.005441][T11235] ? netlink_sendmsg+0x642/0xb30 [ 421.005462][T11235] ? skb_put+0x11b/0x210 [ 421.005500][T11235] netlink_sendmsg+0x805/0xb30 [ 421.005523][T11235] ? aa_sk_perm+0x15f/0x920 [ 421.005568][T11235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.005594][T11235] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 421.005636][T11235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.005659][T11235] sock_sendmsg_nosec+0x18f/0x1d0 [ 421.005690][T11235] ____sys_sendmsg+0x577/0x880 [ 421.005722][T11235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.005754][T11235] ? import_iovec+0x74/0xa0 [ 421.005791][T11235] ___sys_sendmsg+0x21f/0x2a0 [ 421.005816][T11235] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.005846][T11235] ? rcu_read_lock_any_held+0xb3/0x120 [ 421.005900][T11235] ? __fget_files+0x2a/0x420 [ 421.005923][T11235] ? __fget_files+0x3a0/0x420 [ 421.005959][T11235] __x64_sys_sendmsg+0x19b/0x260 [ 421.005986][T11235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.006019][T11235] ? __pfx_ksys_write+0x10/0x10 [ 421.006056][T11235] ? do_syscall_64+0xbe/0xf80 [ 421.006094][T11235] do_syscall_64+0xfa/0xf80 [ 421.006127][T11235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.006150][T11235] ? clear_bhb_loop+0x60/0xb0 [ 421.006175][T11235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.006197][T11235] RIP: 0033:0x7f5b8c98f749 [ 421.006216][T11235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.006235][T11235] RSP: 002b:00007f5b8abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.006258][T11235] RAX: ffffffffffffffda RBX: 00007f5b8cbe5fa0 RCX: 00007f5b8c98f749 [ 421.006275][T11235] RDX: 0000000004040100 RSI: 00002000000000c0 RDI: 0000000000000003 [ 421.006291][T11235] RBP: 00007f5b8abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.006305][T11235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.006319][T11235] R13: 00007f5b8cbe6038 R14: 00007f5b8cbe5fa0 R15: 00007ffe4f304a28 [ 421.006355][T11235] [ 421.431241][T11240] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1623'. [ 421.644302][T11251] syzkaller0: entered promiscuous mode [ 421.650094][T11251] syzkaller0: entered allmulticast mode [ 421.861508][ T5921] usb 7-1: USB disconnect, device number 13 [ 421.964220][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 422.015458][T11262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.024447][T11262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.064478][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 422.220008][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.238986][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.250001][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.258676][ T24] usb 5-1: Product: syz [ 422.263156][ T24] usb 5-1: Manufacturer: syz [ 422.269767][ T24] usb 5-1: SerialNumber: syz [ 422.422505][ T5921] usb 4-1: USB disconnect, device number 119 [ 422.538647][ T3954] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.675645][ T3954] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.729272][T11272] syzkaller0: entered promiscuous mode [ 422.735674][T11272] syzkaller0: entered allmulticast mode [ 422.822218][ T3954] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.919646][ T3954] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.154845][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.165042][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.175555][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.184038][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.192920][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.314168][ T3954] bridge_slave_1: left allmulticast mode [ 423.321133][ T24] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 423.330776][ T24] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 423.331536][ T3954] bridge_slave_1: left promiscuous mode [ 423.355092][ T24] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 423.358439][ T3954] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.383581][ T3954] bridge_slave_0: left allmulticast mode [ 423.390905][ T3954] bridge_slave_0: left promiscuous mode [ 423.398248][ T3954] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.420077][T11287] FAULT_INJECTION: forcing a failure. [ 423.420077][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 423.438327][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.1.1641 Not tainted syzkaller #0 PREEMPT(full) [ 423.438360][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.438374][T11287] Call Trace: [ 423.438384][T11287] [ 423.438394][T11287] dump_stack_lvl+0x189/0x250 [ 423.438422][T11287] ? __pfx____ratelimit+0x10/0x10 [ 423.438452][T11287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.438474][T11287] ? __pfx__printk+0x10/0x10 [ 423.438513][T11287] ? __pfx___might_resched+0x10/0x10 [ 423.438551][T11287] ? fs_reclaim_acquire+0x7d/0x100 [ 423.438591][T11287] should_fail_ex+0x414/0x560 [ 423.438623][T11287] should_failslab+0xa8/0x100 [ 423.438647][T11287] __kmalloc_noprof+0xdf/0x800 [ 423.438677][T11287] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 423.438716][T11287] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 423.438756][T11287] genl_start+0x180/0x6c0 [ 423.438786][T11287] ? netlink_lookup+0x30/0x200 [ 423.438815][T11287] __netlink_dump_start+0x469/0x7e0 [ 423.438848][T11287] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 423.438883][T11287] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 423.438913][T11287] ? genl_get_cmd+0x67f/0x910 [ 423.438948][T11287] ? __pfx_genl_start+0x10/0x10 [ 423.438976][T11287] ? __pfx_genl_dumpit+0x10/0x10 [ 423.439002][T11287] ? __pfx_genl_done+0x10/0x10 [ 423.439036][T11287] ? trim_netdev_trace+0x2a3/0x3d0 [ 423.439073][T11287] genl_rcv_msg+0x5da/0x790 [ 423.439110][T11287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.439138][T11287] ? __pfx_ethnl_default_start+0x10/0x10 [ 423.439163][T11287] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 423.439189][T11287] ? __pfx_ethnl_default_done+0x10/0x10 [ 423.439231][T11287] netlink_rcv_skb+0x208/0x470 [ 423.439256][T11287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.439288][T11287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.439330][T11287] ? down_read+0x274/0x2e0 [ 423.439350][T11287] ? genl_rcv+0xd/0x40 [ 423.439380][T11287] genl_rcv+0x28/0x40 [ 423.439407][T11287] netlink_unicast+0x82f/0x9e0 [ 423.439452][T11287] ? __pfx_netlink_unicast+0x10/0x10 [ 423.439490][T11287] ? netlink_sendmsg+0x642/0xb30 [ 423.439512][T11287] ? skb_put+0x11b/0x210 [ 423.439557][T11287] netlink_sendmsg+0x805/0xb30 [ 423.439580][T11287] ? aa_sk_perm+0x15f/0x920 [ 423.439616][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.439646][T11287] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 423.439689][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.439712][T11287] sock_sendmsg_nosec+0x18f/0x1d0 [ 423.439744][T11287] ____sys_sendmsg+0x577/0x880 [ 423.439777][T11287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.439810][T11287] ? import_iovec+0x74/0xa0 [ 423.439846][T11287] ___sys_sendmsg+0x21f/0x2a0 [ 423.439872][T11287] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.439902][T11287] ? rcu_read_lock_any_held+0xb3/0x120 [ 423.439954][T11287] ? __fget_files+0x2a/0x420 [ 423.439977][T11287] ? __fget_files+0x3a0/0x420 [ 423.440012][T11287] __x64_sys_sendmsg+0x19b/0x260 [ 423.440037][T11287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.440071][T11287] ? __pfx_ksys_write+0x10/0x10 [ 423.440107][T11287] ? do_syscall_64+0xbe/0xf80 [ 423.440143][T11287] do_syscall_64+0xfa/0xf80 [ 423.440176][T11287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.440200][T11287] ? clear_bhb_loop+0x60/0xb0 [ 423.440227][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.440249][T11287] RIP: 0033:0x7fc1d418f749 [ 423.440270][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.440289][T11287] RSP: 002b:00007fc1d4fd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.440313][T11287] RAX: ffffffffffffffda RBX: 00007fc1d43e5fa0 RCX: 00007fc1d418f749 [ 423.440331][T11287] RDX: 0000000004040100 RSI: 00002000000000c0 RDI: 0000000000000003 [ 423.440346][T11287] RBP: 00007fc1d4fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 423.440361][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.440374][T11287] R13: 00007fc1d43e6038 R14: 00007fc1d43e5fa0 R15: 00007ffcbea85ea8 [ 423.440411][T11287] [ 424.034894][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.049134][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.149341][T11298] fuse: Unknown parameter 'ro/' [ 424.158885][T11298] loop6: detected capacity change from 0 to 2640 [ 424.244013][ T7564] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 424.404079][ T7564] usb 4-1: Using ep0 maxpacket: 8 [ 424.416843][ T7564] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 424.464768][ T7564] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.501362][ T7564] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.510876][ T24] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 424.517554][ T7564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.550300][ T7564] usbtmc 4-1:16.0: bulk endpoints not found [ 424.558286][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.604666][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.732638][ T3954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.749302][ T3954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.760811][ T3954] bond0 (unregistering): Released all slaves [ 424.799554][ T24] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 424.815766][T11280] lo speed is unknown, defaulting to 1000 [ 424.864401][ T24] usb 5-1: USB disconnect, device number 61 [ 424.888527][ T24] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 425.265448][ T5834] Bluetooth: hci2: command tx timeout [ 425.355202][ T3954] hsr_slave_0: left promiscuous mode [ 425.362746][ T3954] hsr_slave_1: left promiscuous mode [ 425.369543][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.377557][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.390147][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.398545][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.428486][ T3954] veth1_macvtap: left promiscuous mode [ 425.434436][ T3954] veth0_macvtap: left promiscuous mode [ 425.448356][ T3954] veth1_vlan: left promiscuous mode [ 425.454296][ T3954] veth0_vlan: left promiscuous mode [ 426.129548][ T3954] team0 (unregistering): Port device team_slave_1 removed [ 426.191860][ T3954] team0 (unregistering): Port device team_slave_0 removed [ 426.225672][T11338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.249727][T11338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.764661][T11329] syzkaller0: entered promiscuous mode [ 426.770221][T11329] syzkaller0: entered allmulticast mode [ 427.009731][T11280] chnl_net:caif_netlink_parms(): no params data found [ 427.082848][ T5921] usb 4-1: USB disconnect, device number 120 [ 427.301703][T11351] syzkaller1: entered promiscuous mode [ 427.317057][T11351] syzkaller1: entered allmulticast mode [ 427.344305][ T5834] Bluetooth: hci2: command tx timeout [ 427.416056][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.423602][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.431228][T11280] bridge_slave_0: entered allmulticast mode [ 427.439718][T11280] bridge_slave_0: entered promiscuous mode [ 427.449998][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.458200][ T5921] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 427.468941][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.477993][T11280] bridge_slave_1: entered allmulticast mode [ 427.486502][T11280] bridge_slave_1: entered promiscuous mode [ 427.592261][T11280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.632654][T11280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.636538][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.673152][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.696178][ T5921] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 427.716838][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.738611][T11280] team0: Port device team_slave_0 added [ 427.745672][ T5921] usb 4-1: config 0 descriptor?? [ 427.758144][T11280] team0: Port device team_slave_1 added [ 427.835839][T11280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.843135][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.872710][T11280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.886859][T11280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.894429][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.921529][T11280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.018531][T11280] hsr_slave_0: entered promiscuous mode [ 428.026456][T11280] hsr_slave_1: entered promiscuous mode [ 428.138056][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 428.167616][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 428.191172][ T5921] usb 4-1: USB disconnect, device number 121 [ 428.401835][T11280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.418933][T11280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.433515][T11280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.454426][T11280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 428.598145][T11280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.662276][T11280] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.721239][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.728522][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.756061][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.763374][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.994309][ T5921] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 429.137691][T11280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.184020][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 429.197443][ T5921] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 429.228732][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 429.251648][ T5921] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.275385][ T5921] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.298067][ T5921] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.324133][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.423841][ T5834] Bluetooth: hci2: command tx timeout [ 429.508073][T11280] veth0_vlan: entered promiscuous mode [ 429.527058][T11280] veth1_vlan: entered promiscuous mode [ 429.553602][ T5921] usb 5-1: usb_control_msg returned -32 [ 429.564030][ T5921] usbtmc 5-1:16.0: can't read capabilities [ 429.586719][ T5921] usb 5-1: USB disconnect, device number 62 [ 429.598890][T11280] veth0_macvtap: entered promiscuous mode [ 429.640416][T11280] veth1_macvtap: entered promiscuous mode [ 429.679514][T11280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.702641][T11280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.720123][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.738532][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.762794][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.771973][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.856048][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.870762][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.901568][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.910068][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.994042][ T5828] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 430.153943][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 430.163490][ T5828] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 430.174798][ T5828] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.188018][ T5828] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.197726][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.215251][ T5828] usbtmc 4-1:16.0: bulk endpoints not found [ 430.233898][T11422] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 430.344325][ T5917] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 430.384008][T11422] usb 8-1: Using ep0 maxpacket: 16 [ 430.391700][T11422] usb 8-1: config 0 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.406214][T11422] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.412890][T11422] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 430.423455][T11422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.434293][T11422] usb 8-1: config 0 descriptor?? [ 430.445022][T11422] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 430.493819][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 430.500881][ T5917] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 430.511497][ T5917] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.521274][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.505345][ T5834] Bluetooth: hci2: command tx timeout [ 432.765815][ T5893] usb 4-1: USB disconnect, device number 122 [ 433.003935][ T24] usb 8-1: USB disconnect, device number 2 [ 433.124254][ T5893] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 433.154184][T11422] usb 5-1: USB disconnect, device number 63 [ 433.293764][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 433.301126][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 433.310644][ T5893] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 433.321811][ T5893] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 433.332488][ T5893] usb 4-1: config 8 interface 0 has no altsetting 0 [ 433.341790][ T5893] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 433.351273][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.359516][ T5893] usb 4-1: Product: syz [ 433.363803][ T5893] usb 4-1: Manufacturer: syz [ 433.368435][ T5893] usb 4-1: SerialNumber: syz [ 433.435042][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 433.504021][T11422] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 433.608875][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 433.617632][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 433.627166][ T24] usb 8-1: config 4 interface 0 has no altsetting 0 [ 433.641534][ T24] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 433.651447][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.667129][T11422] usb 5-1: unable to get BOS descriptor or descriptor too short [ 433.675818][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 433.682816][ T5893] usb 4-1: selecting invalid altsetting 0 [ 433.688675][ T24] usb 8-1: Product: syz [ 433.692867][ T24] usb 8-1: Manufacturer: syz [ 433.697846][ T24] usb 8-1: SerialNumber: syz [ 433.704252][T11422] usb 5-1: not running at top speed; connect to a high speed hub [ 433.717116][T11422] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 433.728744][T11422] usb 5-1: config 129 has no interface number 0 [ 433.736748][T11422] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 433.754061][T11422] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 433.768853][T11422] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 433.788660][ T5893] usb 4-1: USB disconnect, device number 123 [ 433.797057][T11422] usb 5-1: config 129 interface 28 has no altsetting 0 [ 433.813864][T11422] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 433.823028][T11422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.836141][T11422] usb 5-1: Product: syz [ 433.842355][T11422] usb 5-1: Manufacturer: syz [ 433.854298][T11422] usb 5-1: SerialNumber: syz [ 433.861170][ T5995] udevd[5995]: setting owner of /dev/bus/usb/004/123 to uid=0, gid=0 failed: No such file or directory [ 433.876492][T11442] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 433.901046][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.936505][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.951928][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.968370][ T24] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 433.981023][ T24] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 434.005358][ T24] usb 8-1: USB disconnect, device number 3 [ 434.093257][T11422] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 434.101904][T11422] etas_es58x 5-1:129.28: could not retrieve the product info string [ 434.129387][T11422] usb 5-1: USB disconnect, device number 64 [ 434.139697][T11422] etas_es58x 5-1:129.28: Disconnecting syz syz [ 434.493905][ T128] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 434.544645][T11447] syzkaller0: entered promiscuous mode [ 434.550237][T11447] syzkaller0: entered allmulticast mode [ 434.672639][ T128] usb 4-1: Using ep0 maxpacket: 8 [ 434.686728][T11449] syzkaller1: entered promiscuous mode [ 434.692823][T11449] syzkaller1: entered allmulticast mode [ 434.694965][ T128] usb 4-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 434.713273][ T128] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.730645][ T128] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.742527][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.754976][ T128] usb 4-1: Product: á°‰ [ 434.759207][ T128] usb 4-1: Manufacturer: à ‡ [ 434.765070][ T128] usb 4-1: SerialNumber: syz [ 434.963865][T11422] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 434.989099][ T128] usb 4-1: 0:2 : does not exist [ 435.003446][ T128] usb 4-1: USB disconnect, device number 124 [ 435.032284][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.083811][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 435.123878][T11422] usb 8-1: Using ep0 maxpacket: 8 [ 435.130731][T11422] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 435.143023][T11422] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 435.153162][T11422] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.163355][T11422] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.177886][T11422] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.187292][T11422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.253872][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 435.260696][ T24] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 435.271413][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 435.283558][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 435.293913][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 435.306977][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.316256][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.331206][ T24] usbtmc 5-1:16.0: bulk endpoints not found [ 435.403458][T11422] usb 8-1: usb_control_msg returned -32 [ 435.409411][T11422] usbtmc 8-1:16.0: can't read capabilities [ 435.423463][T11422] usb 8-1: USB disconnect, device number 4 [ 435.833881][ T128] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 435.984408][ T128] usb 4-1: Using ep0 maxpacket: 16 [ 435.997829][ T128] usb 4-1: config 0 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.024332][ T128] usb 4-1: config 0 interface 0 has no altsetting 0 [ 436.031034][ T128] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 436.041768][ T128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.055777][ T128] usb 4-1: config 0 descriptor?? [ 436.069687][ T128] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 436.263799][T11422] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 436.417120][T11422] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 436.425627][T11422] usb 8-1: config 0 has no interface number 0 [ 436.434933][T11422] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 436.444161][T11422] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.452219][T11422] usb 8-1: Product: syz [ 436.456842][T11422] usb 8-1: Manufacturer: syz [ 436.461490][T11422] usb 8-1: SerialNumber: syz [ 436.469462][T11422] usb 8-1: config 0 descriptor?? [ 436.681117][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.690266][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.902622][T11422] usb 8-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 437.105228][T11422] usb 8-1: failed to fetch extended address, random address set [ 437.162423][T11422] usb 8-1: USB disconnect, device number 5 [ 437.713139][T11470] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1671'. [ 437.863939][ T128] usb 5-1: USB disconnect, device number 65 [ 438.033818][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 438.213853][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 438.221038][ T10] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 438.230075][ T10] usb 8-1: config 0 has no interface number 0 [ 438.237280][ T10] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 438.250647][ T10] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 438.260292][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.269344][ T10] usb 8-1: Product: syz [ 438.273583][ T10] usb 8-1: Manufacturer: syz [ 438.278610][ T10] usb 8-1: SerialNumber: syz [ 438.287769][ T10] usb 8-1: config 0 descriptor?? [ 438.294127][T11472] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 438.504169][T11472] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 438.612397][ T9] usb 4-1: USB disconnect, device number 125 [ 438.678163][T11479] syzkaller1: entered promiscuous mode [ 438.686618][T11479] syzkaller1: entered allmulticast mode [ 438.861366][T11483] syzkaller0: entered promiscuous mode [ 438.867725][T11483] syzkaller0: entered allmulticast mode [ 439.073842][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 439.114512][ T10] asix 8-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 439.233949][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 439.242139][ T9] usb 4-1: config 9 has an invalid interface number: 88 but max is 1 [ 439.245094][T11422] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 439.251238][ T9] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 439.270279][ T9] usb 4-1: config 9 has an invalid interface number: 255 but max is 1 [ 439.279850][ T9] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 439.291172][ T9] usb 4-1: config 9 has no interface number 0 [ 439.299346][ T9] usb 4-1: config 9 has no interface number 1 [ 439.313841][ T9] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 439.326780][ T9] usb 4-1: config 9 interface 88 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 16 [ 439.337343][ T9] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 439.352818][ T9] usb 4-1: config 9 interface 88 altsetting 9 bulk endpoint 0x6 has invalid maxpacket 8 [ 439.363255][ T9] usb 4-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 439.379687][ T9] usb 4-1: too many endpoints for config 9 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 439.392953][ T9] usb 4-1: config 9 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 439.409825][ T9] usb 4-1: config 9 interface 88 has no altsetting 0 [ 439.414158][T11422] usb 5-1: Using ep0 maxpacket: 8 [ 439.417247][ T9] usb 4-1: config 9 interface 255 has no altsetting 0 [ 439.433179][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 439.436755][T11422] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 439.444864][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.466759][ T9] usb 4-1: Product: syz [ 439.471127][ T9] usb 4-1: Manufacturer: syz [ 439.479523][ T9] usb 4-1: SerialNumber: syz [ 439.491323][T11481] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.493768][T11422] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 439.501235][T11481] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.523535][T11481] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.543463][T11422] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 439.570375][T11422] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.602575][T11422] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 439.624763][T11422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.742028][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.767272][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.795719][ T9] qmi_wwan 4-1:9.88: skipping garbage [ 439.817971][ T9] qmi_wwan 4-1:9.88: probe with driver qmi_wwan failed with error -22 [ 439.866676][T11422] usb 5-1: usb_control_msg returned -32 [ 439.886079][T11422] usbtmc 5-1:16.0: can't read capabilities [ 439.932368][T11422] usb 5-1: USB disconnect, device number 66 [ 440.037278][ T9] usb 4-1: USB disconnect, device number 126 [ 440.502089][T11505] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 440.924560][T11515] FAULT_INJECTION: forcing a failure. [ 440.924560][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 440.938398][T11515] CPU: 0 UID: 0 PID: 11515 Comm: syz.4.1681 Not tainted syzkaller #0 PREEMPT(full) [ 440.938434][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.938455][T11515] Call Trace: [ 440.938466][T11515] [ 440.938476][T11515] dump_stack_lvl+0x189/0x250 [ 440.938506][T11515] ? __pfx____ratelimit+0x10/0x10 [ 440.938540][T11515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.938563][T11515] ? __pfx__printk+0x10/0x10 [ 440.938606][T11515] ? __pfx___might_resched+0x10/0x10 [ 440.938642][T11515] ? fs_reclaim_acquire+0x7d/0x100 [ 440.938692][T11515] should_fail_ex+0x414/0x560 [ 440.938725][T11515] should_failslab+0xa8/0x100 [ 440.938751][T11515] __kmalloc_noprof+0xdf/0x800 [ 440.938784][T11515] ? ethnl_default_start+0x148/0x3f0 [ 440.938811][T11515] ? __kasan_kmalloc+0x93/0xb0 [ 440.938851][T11515] ethnl_default_start+0x148/0x3f0 [ 440.938886][T11515] genl_start+0x4c3/0x6c0 [ 440.938928][T11515] __netlink_dump_start+0x469/0x7e0 [ 440.938963][T11515] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 440.939020][T11515] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 440.939054][T11515] ? genl_get_cmd+0x67f/0x910 [ 440.939092][T11515] ? __pfx_genl_start+0x10/0x10 [ 440.939121][T11515] ? __pfx_genl_dumpit+0x10/0x10 [ 440.939151][T11515] ? __pfx_genl_done+0x10/0x10 [ 440.939190][T11515] ? trim_netdev_trace+0x2a3/0x3d0 [ 440.939230][T11515] genl_rcv_msg+0x5da/0x790 [ 440.939273][T11515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.939305][T11515] ? __pfx_ethnl_default_start+0x10/0x10 [ 440.939333][T11515] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 440.939361][T11515] ? __pfx_ethnl_default_done+0x10/0x10 [ 440.939406][T11515] netlink_rcv_skb+0x208/0x470 [ 440.939435][T11515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.939471][T11515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.939520][T11515] ? down_read+0x274/0x2e0 [ 440.939543][T11515] ? genl_rcv+0xd/0x40 [ 440.939578][T11515] genl_rcv+0x28/0x40 [ 440.939609][T11515] netlink_unicast+0x82f/0x9e0 [ 440.939658][T11515] ? __pfx_netlink_unicast+0x10/0x10 [ 440.939710][T11515] ? netlink_sendmsg+0x642/0xb30 [ 440.939735][T11515] ? skb_put+0x11b/0x210 [ 440.939777][T11515] netlink_sendmsg+0x805/0xb30 [ 440.939802][T11515] ? aa_sk_perm+0x15f/0x920 [ 440.939842][T11515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.939872][T11515] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 440.939921][T11515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.939949][T11515] sock_sendmsg_nosec+0x18f/0x1d0 [ 440.939986][T11515] ____sys_sendmsg+0x577/0x880 [ 440.940022][T11515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.940059][T11515] ? import_iovec+0x74/0xa0 [ 440.940103][T11515] ___sys_sendmsg+0x21f/0x2a0 [ 440.940130][T11515] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.940163][T11515] ? rcu_read_lock_any_held+0xb3/0x120 [ 440.940223][T11515] ? __fget_files+0x2a/0x420 [ 440.940250][T11515] ? __fget_files+0x3a0/0x420 [ 440.940289][T11515] __x64_sys_sendmsg+0x19b/0x260 [ 440.940318][T11515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.940355][T11515] ? __pfx_ksys_write+0x10/0x10 [ 440.940395][T11515] ? do_syscall_64+0xbe/0xf80 [ 440.940434][T11515] do_syscall_64+0xfa/0xf80 [ 440.940471][T11515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.940496][T11515] ? clear_bhb_loop+0x60/0xb0 [ 440.940526][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.940561][T11515] RIP: 0033:0x7f5b8c98f749 [ 440.940585][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.940608][T11515] RSP: 002b:00007f5b8abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.940635][T11515] RAX: ffffffffffffffda RBX: 00007f5b8cbe5fa0 RCX: 00007f5b8c98f749 [ 440.940655][T11515] RDX: 0000000004040100 RSI: 00002000000000c0 RDI: 0000000000000003 [ 440.940679][T11515] RBP: 00007f5b8abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 440.940695][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.940711][T11515] R13: 00007f5b8cbe6038 R14: 00007f5b8cbe5fa0 R15: 00007ffe4f304a28 [ 440.940751][T11515] [ 441.466726][ T10] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 441.477070][ T10] asix 8-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 441.488309][ T10] asix 8-1:0.188: probe with driver asix failed with error -71 [ 441.501943][ T10] usb 8-1: USB disconnect, device number 6 [ 441.794050][ T5893] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 441.964399][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 441.972878][ T5893] usb 5-1: config 0 interface 0 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.992982][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 442.006034][ T5893] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 442.017067][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.044028][ T5893] usb 5-1: config 0 descriptor?? [ 442.068845][ T5893] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 442.173802][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 442.337969][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 442.354443][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 442.369327][ T10] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 442.374090][ T5893] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 442.381382][ T10] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 442.398997][ T10] usb 8-1: Product: syz [ 442.403475][ T10] usb 8-1: Manufacturer: syz [ 442.411109][ T10] usb 8-1: SerialNumber: syz [ 442.544474][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 442.558617][ T5893] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 442.569485][ T5893] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.583125][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.596020][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.620015][ T5893] usbtmc 4-1:16.0: bulk endpoints not found [ 442.642428][ T10] usb 8-1: Handspring Visor / Palm OS: No valid connect info available [ 442.673741][ T10] usb 8-1: Handspring Visor / Palm OS: port 0, is for Remote File System use [ 442.682595][ T10] usb 8-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 442.690689][ T10] usb 8-1: Handspring Visor / Palm OS: Number of ports: 2 [ 442.846182][ T10] usb 8-1: palm_os_3_probe - error -71 getting bytes available request [ 442.865732][ T10] visor 8-1:1.0: Handspring Visor / Palm OS converter detected [ 442.882418][ T10] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 442.897012][ T10] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 442.921512][ T10] usb 8-1: USB disconnect, device number 7 [ 442.939268][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 442.956380][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 442.968283][ T10] visor 8-1:1.0: device disconnected [ 443.249118][ T10] usb 2-1: USB disconnect, device number 81 [ 443.547362][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.559924][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.570028][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.580417][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.588766][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.665163][ T3954] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 443.678645][T11572] lo speed is unknown, defaulting to 1000 [ 444.005519][T11572] chnl_net:caif_netlink_parms(): no params data found [ 444.147616][T11572] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.155845][T11572] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.163340][T11572] bridge_slave_0: entered allmulticast mode [ 444.173249][T11572] bridge_slave_0: entered promiscuous mode [ 444.185660][T11572] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.193243][T11572] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.201845][T11572] bridge_slave_1: entered allmulticast mode [ 444.212804][T11572] bridge_slave_1: entered promiscuous mode [ 444.282760][T11572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.318523][T11572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.392290][T11572] team0: Port device team_slave_0 added [ 444.403104][T11572] team0: Port device team_slave_1 added [ 444.477150][T11572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.486196][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.515187][T11572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.529693][T11572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.538520][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.544922][ T5828] usb 5-1: USB disconnect, device number 67 [ 444.574912][T11572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.718353][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.874982][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.972980][T11572] hsr_slave_0: entered promiscuous mode [ 444.980230][T11572] hsr_slave_1: entered promiscuous mode [ 444.988034][T11572] debugfs: 'hsr0' already exists in 'hsr' [ 444.993963][T11572] Cannot create hsr debugfs directory [ 445.008791][ T148] tipc: Resetting bearer [ 445.019318][T11595] syzkaller1: entered promiscuous mode [ 445.026752][T11595] syzkaller1: entered allmulticast mode [ 445.077097][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.171139][ T10] usb 4-1: USB disconnect, device number 127 [ 445.238101][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.249442][T11603] FAULT_INJECTION: forcing a failure. [ 445.249442][T11603] name failslab, interval 1, probability 0, space 0, times 0 [ 445.262555][T11603] CPU: 1 UID: 0 PID: 11603 Comm: syz.3.1695 Not tainted syzkaller #0 PREEMPT(full) [ 445.262584][T11603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.262599][T11603] Call Trace: [ 445.262609][T11603] [ 445.262619][T11603] dump_stack_lvl+0x189/0x250 [ 445.262645][T11603] ? __pfx____ratelimit+0x10/0x10 [ 445.262676][T11603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.262698][T11603] ? __pfx__printk+0x10/0x10 [ 445.262734][T11603] ? __pfx___might_resched+0x10/0x10 [ 445.262769][T11603] ? fs_reclaim_acquire+0x7d/0x100 [ 445.262807][T11603] should_fail_ex+0x414/0x560 [ 445.262838][T11603] should_failslab+0xa8/0x100 [ 445.262862][T11603] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 445.262893][T11603] ? __alloc_skb+0x255/0x430 [ 445.262923][T11603] ? napi_skb_cache_get+0x4a5/0x780 [ 445.262954][T11603] ? napi_skb_cache_get+0x151/0x780 [ 445.262991][T11603] __alloc_skb+0x255/0x430 [ 445.263026][T11603] ? __pfx___alloc_skb+0x10/0x10 [ 445.263066][T11603] ? netlink_ack_tlv_len+0x1a0/0x210 [ 445.263094][T11603] netlink_ack+0x146/0xa50 [ 445.263114][T11603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.263142][T11603] ? __pfx_ethnl_default_start+0x10/0x10 [ 445.263169][T11603] ? __pfx_ethnl_default_done+0x10/0x10 [ 445.263212][T11603] netlink_rcv_skb+0x28c/0x470 [ 445.263237][T11603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.263269][T11603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.263314][T11603] ? down_read+0x274/0x2e0 [ 445.263334][T11603] ? genl_rcv+0xd/0x40 [ 445.263364][T11603] genl_rcv+0x28/0x40 [ 445.263392][T11603] netlink_unicast+0x82f/0x9e0 [ 445.263436][T11603] ? __pfx_netlink_unicast+0x10/0x10 [ 445.263474][T11603] ? netlink_sendmsg+0x642/0xb30 [ 445.263505][T11603] ? skb_put+0x11b/0x210 [ 445.263543][T11603] netlink_sendmsg+0x805/0xb30 [ 445.263566][T11603] ? aa_sk_perm+0x15f/0x920 [ 445.263601][T11603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.263633][T11603] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 445.263673][T11603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.263697][T11603] sock_sendmsg_nosec+0x18f/0x1d0 [ 445.263729][T11603] ____sys_sendmsg+0x577/0x880 [ 445.263761][T11603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.263794][T11603] ? import_iovec+0x74/0xa0 [ 445.263832][T11603] ___sys_sendmsg+0x21f/0x2a0 [ 445.263856][T11603] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.263886][T11603] ? rcu_read_lock_any_held+0xb3/0x120 [ 445.263940][T11603] ? __fget_files+0x2a/0x420 [ 445.263962][T11603] ? __fget_files+0x3a0/0x420 [ 445.263997][T11603] __x64_sys_sendmsg+0x19b/0x260 [ 445.264023][T11603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.264056][T11603] ? __pfx_ksys_write+0x10/0x10 [ 445.264092][T11603] ? do_syscall_64+0xbe/0xf80 [ 445.264123][T11603] do_syscall_64+0xfa/0xf80 [ 445.264153][T11603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.264170][T11603] ? clear_bhb_loop+0x60/0xb0 [ 445.264191][T11603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.264209][T11603] RIP: 0033:0x7f680198f749 [ 445.264226][T11603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.264245][T11603] RSP: 002b:00007f680280b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.264266][T11603] RAX: ffffffffffffffda RBX: 00007f6801be5fa0 RCX: 00007f680198f749 [ 445.264280][T11603] RDX: 0000000004040100 RSI: 00002000000000c0 RDI: 0000000000000003 [ 445.264293][T11603] RBP: 00007f680280b090 R08: 0000000000000000 R09: 0000000000000000 [ 445.264305][T11603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.264316][T11603] R13: 00007f6801be6038 R14: 00007f6801be5fa0 R15: 00007fff14038368 [ 445.264345][T11603] [ 445.637772][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.644556][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.670796][ T5834] Bluetooth: hci4: command tx timeout [ 445.694320][T11600] syzkaller0: entered promiscuous mode [ 445.699984][T11600] syzkaller0: entered allmulticast mode [ 445.974227][ T5828] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 445.988939][ T50] bridge_slave_0: left allmulticast mode [ 446.008928][ T50] bridge_slave_0: left promiscuous mode [ 446.033934][ T5921] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 446.042538][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.125280][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 446.135686][ T5828] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.144873][ T5828] usb 5-1: config 0 has no interface number 0 [ 446.161908][ T5828] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 446.185076][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.196091][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 446.199041][ T5828] usb 5-1: Product: syz [ 446.206391][ T5828] usb 5-1: Manufacturer: syz [ 446.209326][ T5921] usb 4-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.223965][ T5828] usb 5-1: SerialNumber: syz [ 446.231004][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 446.236364][ T5828] usb 5-1: config 0 descriptor?? [ 446.243599][ T5921] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 446.263769][ T128] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 446.275635][ T5828] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 446.288288][ T5828] usb 5-1: selecting invalid altsetting 1 [ 446.290774][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.294795][ T5828] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 446.326347][ T5921] usb 4-1: config 0 descriptor?? [ 446.327937][ T5828] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 446.345901][ T5921] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 446.346934][ T5828] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 446.379797][ T5828] usb 5-1: media controller created [ 446.428918][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 446.457220][ T128] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.486089][ T128] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.489165][T11606] nbd: must specify an index to disconnect [ 446.496747][ T128] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 446.531873][ T128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.557164][ T128] usb 8-1: config 0 descriptor?? [ 446.683265][ T5828] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 446.695232][ T5828] zl10353_read_register: readreg error (reg=127, ret==-32) [ 446.954987][ T128] usbhid 8-1:0.0: can't add hid device: -71 [ 446.961111][ T128] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 446.984789][ T128] usb 8-1: USB disconnect, device number 8 [ 447.174146][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.189373][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.201287][ T50] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 447.218517][ T50] bond0 (unregistering): Released all slaves [ 447.297625][ T50] !: left promiscuous mode [ 447.385227][ T50] tipc: Disabling bearer [ 447.397985][ T50] tipc: Disabling bearer [ 447.431093][ T50] tipc: Left network mode [ 447.436526][T11572] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 447.583972][T11572] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 447.622120][T11572] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 447.658514][T11572] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 447.739470][ T50] hsr_slave_0: left promiscuous mode [ 447.745240][ T5834] Bluetooth: hci4: command tx timeout [ 447.750839][T11621] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 447.760588][ T50] hsr_slave_1: left promiscuous mode [ 447.769378][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.777804][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.787096][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.794991][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.819673][ T50] veth1_macvtap: left promiscuous mode [ 447.825799][ T50] veth0_macvtap: left allmulticast mode [ 447.831586][ T50] veth0_macvtap: left promiscuous mode [ 447.837627][ T50] veth1_vlan: left promiscuous mode [ 447.843038][ T50] veth0_vlan: left promiscuous mode [ 448.472878][ T50] team0 (unregistering): Port device team_slave_1 removed [ 448.527335][ T50] team0 (unregistering): Port device team_slave_0 removed [ 448.810954][ T10] usb 4-1: USB disconnect, device number 2 [ 449.190267][ T5828] usb 5-1: USB disconnect, device number 68 [ 449.269072][T11652] syzkaller1: entered promiscuous mode [ 449.296539][T11652] syzkaller1: entered allmulticast mode [ 449.594410][T11572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.643561][T11572] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.655735][ T5828] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 449.683754][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.691007][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.756549][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.763850][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.825073][ T5834] Bluetooth: hci4: command tx timeout [ 449.833928][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 449.849749][ T5828] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 449.904139][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.952233][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.979617][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.021528][ T5828] usbtmc 5-1:16.0: bulk endpoints not found [ 450.424628][T11572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.815218][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 450.967375][T11572] veth0_vlan: entered promiscuous mode [ 450.987867][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 450.999446][T11572] veth1_vlan: entered promiscuous mode [ 451.007127][ T9] usb 4-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.031202][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 451.050257][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 451.071648][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.101868][ T9] usb 4-1: config 0 descriptor?? [ 451.107498][T11572] veth0_macvtap: entered promiscuous mode [ 451.133199][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 451.151520][T11572] veth1_macvtap: entered promiscuous mode [ 451.170225][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807af55400: rx timeout, send abort [ 451.215780][T11572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.238288][T11572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.283953][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.324632][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.360361][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.399293][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.449879][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.465197][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.529714][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.539531][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.678632][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807af55400: abort rx timeout. Force session deactivation [ 451.904180][ T5834] Bluetooth: hci4: command tx timeout [ 451.933827][ T5828] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 452.094099][ T5828] usb 9-1: Using ep0 maxpacket: 8 [ 452.101623][ T5828] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.113266][ T5828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.123751][ T5828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.134844][ T5828] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.148606][ T5828] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.157789][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.345094][ T5893] usb 5-1: USB disconnect, device number 69 [ 452.383574][ T5828] usb 9-1: usb_control_msg returned -32 [ 452.413434][ T5828] usbtmc 9-1:16.0: can't read capabilities [ 452.436980][ T5828] usb 9-1: USB disconnect, device number 2 [ 452.923885][ T5893] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 453.097278][ T5893] usb 5-1: not running at top speed; connect to a high speed hub [ 453.109786][ T5893] usb 5-1: config 129 has an invalid interface number: 58 but max is 1 [ 453.119633][ T5893] usb 5-1: config 129 has no interface number 1 [ 453.126752][ T5893] usb 5-1: config 129 interface 0 has no altsetting 0 [ 453.134572][ T5893] usb 5-1: config 129 interface 58 has no altsetting 0 [ 453.143024][T11747] syzkaller0: entered promiscuous mode [ 453.149021][T11747] syzkaller0: entered allmulticast mode [ 453.157404][ T5893] usb 5-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=f4.af [ 453.169075][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.180963][ T5893] usb 5-1: Product: syz [ 453.185385][ T5893] usb 5-1: Manufacturer: syz [ 453.190112][ T5893] usb 5-1: SerialNumber: syz [ 453.331946][T11749] syzkaller1: entered promiscuous mode [ 453.337964][T11749] syzkaller1: entered allmulticast mode [ 453.421897][ T5893] gspca_main: sunplus-2.14.0 probing 08ca:2022 [ 453.430199][ T5893] gspca_sunplus: reg_r err -71 [ 453.436645][ T5893] sunplus 5-1:129.0: probe with driver sunplus failed with error -71 [ 453.474649][ T5893] usb 5-1: USB disconnect, device number 70 [ 453.531640][ T5834] Bluetooth: hci4: unexpected subevent 0x01 length: 42 > 18 [ 453.540437][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 453.550788][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 453.550816][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.550832][ T5834] Workqueue: hci4 hci_rx_work [ 453.550869][ T5834] Call Trace: [ 453.550879][ T5834] [ 453.550889][ T5834] dump_stack_lvl+0x189/0x250 [ 453.550916][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.550939][ T5834] ? __pfx__printk+0x10/0x10 [ 453.550976][ T5834] ? kernfs_path_from_node+0x250/0x290 [ 453.551007][ T5834] ? kernfs_path_from_node+0x2f/0x290 [ 453.551044][ T5834] sysfs_create_dir_ns+0x259/0x280 [ 453.551082][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 453.551118][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 453.551151][ T5834] kobject_add_internal+0x6ab/0xcc0 [ 453.551185][ T5834] kobject_add+0x155/0x220 [ 453.551212][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 453.551247][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 453.551291][ T5834] ? get_device_parent+0x366/0x3a0 [ 453.551321][ T5834] device_add+0x408/0xb80 [ 453.551351][ T5834] hci_conn_add_sysfs+0xd5/0x210 [ 453.551387][ T5834] le_conn_complete_evt+0xf1d/0x1420 [ 453.551424][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 453.551447][ T5834] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 453.551490][ T5834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 453.551534][ T5834] ? skb_pull_data+0xfb/0x200 [ 453.551566][ T5834] hci_le_conn_complete_evt+0x187/0x480 [ 453.551599][ T5834] hci_event_packet+0x78f/0x1260 [ 453.551637][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 453.551664][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 453.551701][ T5834] ? kcov_remote_start+0x4d3/0x7f0 [ 453.551726][ T5834] ? lockdep_hardirqs_on+0x98/0x140 [ 453.551761][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 453.551792][ T5834] hci_rx_work+0x3ee/0x1060 [ 453.551837][ T5834] ? process_one_work+0x868/0x15a0 [ 453.551866][ T5834] process_one_work+0x93a/0x15a0 [ 453.551923][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 453.551965][ T5834] ? assign_work+0x3a1/0x410 [ 453.552003][ T5834] worker_thread+0x9b0/0xee0 [ 453.552064][ T5834] kthread+0x711/0x8a0 [ 453.552092][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 453.552125][ T5834] ? __pfx_kthread+0x10/0x10 [ 453.552152][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.552182][ T5834] ? lockdep_hardirqs_on+0x98/0x140 [ 453.552212][ T5834] ? __pfx_kthread+0x10/0x10 [ 453.552238][ T5834] ret_from_fork+0x599/0xb30 [ 453.552272][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 453.552315][ T5834] ? __switch_to_asm+0x39/0x70 [ 453.552339][ T5834] ? __switch_to_asm+0x33/0x70 [ 453.552361][ T5834] ? __pfx_kthread+0x10/0x10 [ 453.552388][ T5834] ret_from_fork_asm+0x1a/0x30 [ 453.552431][ T5834] [ 453.552464][ T5834] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 453.616383][ T10] usb 4-1: USB disconnect, device number 3 [ 453.622780][ T5834] Bluetooth: hci4: failed to register connection device [ 453.734479][T11753] input: syz1 as /devices/virtual/input/input40 [ 454.253845][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 454.416221][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 454.438270][ T10] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 454.464183][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.479915][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.503967][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.534960][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.545418][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.587670][ T10] usbtmc 4-1:16.0: bulk endpoints not found [ 454.599271][T11773] syzkaller0: entered promiscuous mode [ 454.608174][T11773] syzkaller0: entered allmulticast mode [ 454.801750][T11781] netlink: 'syz.4.1726': attribute type 3 has an invalid length. [ 454.812598][T11781] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1726'. [ 455.014017][ T10] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 455.063788][ T978] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 455.176507][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 455.186001][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 455.198741][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.208941][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.216500][ T978] usb 5-1: config 118 interface 0 has no altsetting 0 [ 455.222644][ T10] usb 9-1: string descriptor 0 read error: -22 [ 455.229062][ T978] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 455.231627][ T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.242366][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.258249][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.258517][ T978] usb 5-1: Product: syz [ 455.272187][ T978] usb 5-1: Manufacturer: syz [ 455.277171][ T978] usb 5-1: SerialNumber: syz [ 455.288115][ T10] usb 9-1: 0:2 : does not exist [ 455.491555][ T978] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 455.503470][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 455.515221][ T978] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 455.522638][ T978] usb 5-1: media controller created [ 455.540503][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.599233][ T978] DVB: Unable to find symbol mt352_attach() [ 455.609099][ T978] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 455.624910][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 455.638278][ T978] dvb-usb: schedule remote query interval to 100 msecs. [ 455.645944][ T978] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 455.656081][ T978] dvb_usb_m920x 5-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 455.669623][ T978] usb 5-1: USB disconnect, device number 71 [ 455.757847][ T5893] m920x_read = error: -19 [ 455.762486][ T5893] dvb-usb: error while querying for an remote control event. [ 455.874313][ T978] m920x_read = error: -19 [ 455.878762][ T978] dvb-usb: error while querying for an remote control event. [ 455.995956][ T978] m920x_read = error: -19 [ 456.000408][ T978] dvb-usb: error while querying for an remote control event. [ 456.104517][T11786] syzkaller1: entered promiscuous mode [ 456.110080][T11786] syzkaller1: entered allmulticast mode [ 456.131410][ T978] m920x_read = error: -19 [ 456.135943][ T978] dvb-usb: error while querying for an remote control event. [ 456.243900][ T978] m920x_read = error: -19 [ 456.252476][ T978] dvb-usb: error while querying for an remote control event. [ 456.376359][ T978] m920x_read = error: -19 [ 456.382101][ T978] dvb-usb: error while querying for an remote control event. [ 456.494023][ T978] m920x_read = error: -19 [ 456.498421][ T978] dvb-usb: error while querying for an remote control event. [ 456.613935][ T5893] m920x_read = error: -19 [ 456.618342][ T5893] dvb-usb: error while querying for an remote control event. [ 456.663767][ T978] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 456.735135][ T5893] m920x_read = error: -19 [ 456.739591][ T5893] dvb-usb: error while querying for an remote control event. [ 456.816322][ T978] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 456.828214][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 456.839203][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 456.849270][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.864548][ T5893] m920x_read = error: -19 [ 456.869054][ T5893] dvb-usb: error while querying for an remote control event. [ 456.876927][ T978] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.887457][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.899706][ T978] usb 5-1: config 0 descriptor?? [ 456.971751][ T10] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 456.990166][ T10] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 457.003819][ T5893] m920x_read = error: -19 [ 457.009353][ T5893] dvb-usb: error while querying for an remote control event. [ 457.034172][ T10] usb 9-1: USB disconnect, device number 3 [ 457.079390][ T5921] usb 4-1: USB disconnect, device number 4 [ 457.124054][ T5893] m920x_read = error: -19 [ 457.131647][ T5893] dvb-usb: error while querying for an remote control event. [ 457.273853][ T5893] m920x_read = error: -19 [ 457.278263][ T5893] dvb-usb: error while querying for an remote control event. [ 457.393943][ T5893] m920x_read = error: -19 [ 457.398404][ T5893] dvb-usb: error while querying for an remote control event. [ 457.443852][ T978] usbhid 5-1:0.0: can't add hid device: -71 [ 457.463031][ T978] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 457.487606][ T978] usb 5-1: USB disconnect, device number 72 [ 457.495707][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 457.531336][ T5893] m920x_read = error: -19 [ 457.540862][ T5893] dvb-usb: error while querying for an remote control event. [ 457.684504][ T5893] m920x_read = error: -19 [ 457.688572][ T5921] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 457.688952][ T5893] dvb-usb: error while querying for an remote control event. [ 457.708306][ T5921] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 457.718920][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 457.727991][ T5921] usb 4-1: config 1 has no interface number 0 [ 457.734343][ T5921] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 457.748452][ T5921] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 457.764412][ T5921] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.774919][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.783009][ T5921] usb 4-1: Product: syz [ 457.787844][ T5921] usb 4-1: Manufacturer: syz [ 457.792562][ T5921] usb 4-1: SerialNumber: syz [ 457.806195][ T5921] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 457.813171][ T5921] cdc_ncm 4-1:1.1: bind() failure [ 457.823873][ T5893] m920x_read = error: -19 [ 457.836228][ T5893] dvb-usb: error while querying for an remote control event. [ 457.941761][T11806] syzkaller0: entered promiscuous mode [ 457.950227][T11806] syzkaller0: entered allmulticast mode [ 457.964476][ T978] m920x_read = error: -19 [ 457.971322][ T978] dvb-usb: error while querying for an remote control event. [ 458.009289][ T5893] usb 4-1: USB disconnect, device number 5 [ 458.084148][ T978] m920x_read = error: -19 [ 458.094314][ T978] dvb-usb: error while querying for an remote control event. [ 458.162825][T11811] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1736'. [ 458.213828][ T5893] m920x_read = error: -19 [ 458.225741][ T5893] dvb-usb: error while querying for an remote control event. [ 458.250358][T11814] syzkaller1: entered promiscuous mode [ 458.256114][T11814] syzkaller1: entered allmulticast mode [ 458.266714][T11814] comedi comedi0: Minor 3 could not be opened [ 458.332475][T11814] syzkaller1: left promiscuous mode [ 458.337896][T11814] syzkaller1: left allmulticast mode [ 458.344248][ T5893] m920x_read = error: -19 [ 458.348931][ T5893] dvb-usb: error while querying for an remote control event. [ 458.466295][ T5893] m920x_read = error: -19 [ 458.473712][ T5893] dvb-usb: error while querying for an remote control event. [ 458.584171][ T5893] m920x_read = error: -19 [ 458.588626][ T5893] dvb-usb: error while querying for an remote control event. [ 458.704153][ T978] m920x_read = error: -19 [ 458.709160][ T978] dvb-usb: error while querying for an remote control event. [ 458.793786][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 458.834801][ T978] m920x_read = error: -19 [ 458.840079][ T978] dvb-usb: error while querying for an remote control event. [ 458.943820][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 458.950599][ T5921] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 458.961032][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 458.963894][ T978] m920x_read = error: -19 [ 458.972459][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 458.978433][ T978] dvb-usb: error while querying for an remote control event. [ 458.986844][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 459.007744][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.017041][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.043069][ T5921] usbtmc 4-1:16.0: bulk endpoints not found [ 459.115911][ T978] m920x_read = error: -19 [ 459.120355][ T978] dvb-usb: error while querying for an remote control event. [ 459.128897][ T5917] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 459.243846][ T978] m920x_read = error: -19 [ 459.251007][ T978] dvb-usb: error while querying for an remote control event. [ 459.284012][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 459.291212][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 459.300379][ T5917] usb 5-1: config 4 interface 0 has no altsetting 0 [ 459.309843][ T5917] usb 5-1: string descriptor 0 read error: -22 [ 459.316277][ T5917] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 459.325439][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.349426][ T5917] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 459.361786][ T5917] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 459.379378][ T978] m920x_read = error: -19 [ 459.384490][ T5917] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 459.391675][ T5917] usb 5-1: media controller created [ 459.397043][ T978] dvb-usb: error while querying for an remote control event. [ 459.414073][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.514033][ T5893] m920x_read = error: -19 [ 459.518486][ T5893] dvb-usb: error while querying for an remote control event. [ 459.554784][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.564831][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.575746][ T5917] zl10353_read_register: readreg error (reg=127, ret==0) [ 459.616278][ T5917] usb 5-1: USB disconnect, device number 73 [ 459.634405][ T5893] m920x_read = error: -19 [ 459.638830][ T5893] dvb-usb: error while querying for an remote control event. [ 459.753900][ T5893] m920x_read = error: -19 [ 459.758441][ T5893] dvb-usb: error while querying for an remote control event. [ 459.873856][ T5917] m920x_read = error: -19 [ 459.878267][ T5917] dvb-usb: error while querying for an remote control event. [ 459.994055][ T5917] m920x_read = error: -19 [ 459.998475][ T5917] dvb-usb: error while querying for an remote control event. [ 460.116635][ T5917] m920x_read = error: -19 [ 460.121410][ T5917] dvb-usb: error while querying for an remote control event. [ 460.139611][T11834] syzkaller1: entered promiscuous mode [ 460.146032][T11834] syzkaller1: entered allmulticast mode [ 460.243814][ T5893] m920x_read = error: -19 [ 460.248212][ T5893] dvb-usb: error while querying for an remote control event. [ 460.364199][ T5893] m920x_read = error: -19 [ 460.368638][ T5893] dvb-usb: error while querying for an remote control event. [ 460.490122][ T5893] m920x_read = error: -19 [ 460.494689][ T5893] dvb-usb: error while querying for an remote control event. [ 460.604781][ T5893] m920x_read = error: -19 [ 460.609203][ T5893] dvb-usb: error while querying for an remote control event. [ 460.723966][ T5893] m920x_read = error: -19 [ 460.728402][ T5893] dvb-usb: error while querying for an remote control event. [ 460.843893][ T5893] m920x_read = error: -19 [ 460.849414][ T5893] dvb-usb: error while querying for an remote control event. [ 460.964101][ T5893] m920x_read = error: -19 [ 460.968518][ T5893] dvb-usb: error while querying for an remote control event. [ 461.084037][ T5893] m920x_read = error: -19 [ 461.089471][ T5893] dvb-usb: error while querying for an remote control event. [ 461.113783][ T10] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 461.203981][ T5893] m920x_read = error: -19 [ 461.210514][ T5893] dvb-usb: error while querying for an remote control event. [ 461.285918][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 461.297472][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 461.310466][ T10] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 461.319769][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.331801][ T10] usb 5-1: config 0 descriptor?? [ 461.334321][ T5893] m920x_read = error: -19 [ 461.337903][T11840] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 461.348411][ T5893] dvb-usb: error while querying for an remote control event. [ 461.463957][ T5893] m920x_read = error: -19 [ 461.468449][ T5893] dvb-usb: error while querying for an remote control event. [ 461.573994][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.585186][ T5893] m920x_read = error: -19 [ 461.586828][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.593020][ T5893] dvb-usb: error while querying for an remote control event. [ 461.628181][ T5921] usb 4-1: USB disconnect, device number 6 [ 461.714438][ T5893] m920x_read = error: -19 [ 461.719798][ T5893] dvb-usb: error while querying for an remote control event. [ 461.758263][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 461.771786][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 461.788769][ T10] usb 5-1: USB disconnect, device number 74 [ 461.856100][ T978] m920x_read = error: -19 [ 461.864075][ T978] dvb-usb: error while querying for an remote control event. [ 461.983785][ T978] m920x_read = error: -19 [ 461.988277][ T978] dvb-usb: error while querying for an remote control event. [ 462.133996][ T978] m920x_read = error: -19 [ 462.150955][ T978] dvb-usb: error while querying for an remote control event. [ 462.283797][ T978] m920x_read = error: -19 [ 462.288247][ T978] dvb-usb: error while querying for an remote control event. [ 462.407746][T11868] syzkaller1: entered promiscuous mode [ 462.419265][T11868] syzkaller1: entered allmulticast mode [ 462.444206][ T978] m920x_read = error: -19 [ 462.473727][ T978] dvb-usb: error while querying for an remote control event. [ 462.604288][ T978] m920x_read = error: -19 [ 462.609032][ T978] dvb-usb: error while querying for an remote control event. [ 462.733826][ T978] m920x_read = error: -19 [ 462.745590][ T978] dvb-usb: error while querying for an remote control event. [ 462.767574][T11879] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1752'. [ 462.893789][ T978] m920x_read = error: -19 [ 462.915882][ T978] dvb-usb: error while querying for an remote control event. [ 463.155188][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 463.166565][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.175504][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.183834][ T24] m920x_read = error: -19 [ 463.188335][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.196255][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.217410][ T24] dvb-usb: error while querying for an remote control event. [ 463.318382][T11886] lo speed is unknown, defaulting to 1000 [ 463.321283][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a57400: rx timeout, send abort [ 463.346528][ T978] m920x_read = error: -19 [ 463.350939][ T978] dvb-usb: error while querying for an remote control event. [ 463.381995][ T5900] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 463.483887][ T24] m920x_read = error: -19 [ 463.488322][ T24] dvb-usb: error while querying for an remote control event. [ 463.564086][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 463.580353][ T5900] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 463.613834][ T24] m920x_read = error: -19 [ 463.616337][ T5900] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 463.632081][ T5900] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 463.632481][ T24] dvb-usb: error while querying for an remote control event. [ 463.645755][ T5900] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 463.664062][ T5900] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 463.689107][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.729772][ T5900] usbtmc 5-1:16.0: bulk endpoints not found [ 463.745748][ T3954] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.789453][T11898] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1756'. [ 463.803866][ T24] m920x_read = error: -19 [ 463.808285][ T24] dvb-usb: error while querying for an remote control event. [ 463.833411][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057a57400: abort rx timeout. Force session deactivation [ 463.877888][ T3954] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.918906][T11886] chnl_net:caif_netlink_parms(): no params data found [ 463.957136][ T24] m920x_read = error: -19 [ 463.967020][ T24] dvb-usb: error while querying for an remote control event. [ 464.000733][ T3954] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.092691][ T3954] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.106503][ T24] m920x_read = error: -19 [ 464.110976][ T24] dvb-usb: error while querying for an remote control event. [ 464.243847][ T24] m920x_read = error: -19 [ 464.248273][ T24] dvb-usb: error while querying for an remote control event. [ 464.304248][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.311690][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.321720][T11886] bridge_slave_0: entered allmulticast mode [ 464.330709][T11886] bridge_slave_0: entered promiscuous mode [ 464.340360][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.349081][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.359001][T11886] bridge_slave_1: entered allmulticast mode [ 464.365149][ T5893] m920x_read = error: -19 [ 464.370264][ T5893] dvb-usb: error while querying for an remote control event. [ 464.380825][T11886] bridge_slave_1: entered promiscuous mode [ 464.485173][ T24] m920x_read = error: -19 [ 464.489612][ T24] dvb-usb: error while querying for an remote control event. [ 464.511491][T11886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.588775][T11886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.633842][ T24] m920x_read = error: -19 [ 464.638375][ T24] dvb-usb: error while querying for an remote control event. [ 464.667312][ T3954] bridge_slave_1: left allmulticast mode [ 464.673017][ T3954] bridge_slave_1: left promiscuous mode [ 464.693953][ T3954] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.708553][ T3954] bridge_slave_0: left allmulticast mode [ 464.720980][ T3954] bridge_slave_0: left promiscuous mode [ 464.729339][ T3954] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.753900][ T5893] m920x_read = error: -19 [ 464.764059][ T5893] dvb-usb: error while querying for an remote control event. [ 464.873968][ T5893] m920x_read = error: -19 [ 464.878560][ T5893] dvb-usb: error while querying for an remote control event. [ 464.959090][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 464.993784][ T5893] m920x_read = error: -19 [ 464.998203][ T5893] dvb-usb: error while querying for an remote control event. [ 465.129252][ T5893] m920x_read = error: -19 [ 465.136058][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.137440][ T5893] dvb-usb: error while querying for an remote control event. [ 465.147466][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.165063][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 465.176560][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.193780][ T10] usb 4-1: config 0 descriptor?? [ 465.267941][ T5834] Bluetooth: hci3: command tx timeout [ 465.268208][ T5893] m920x_read = error: -19 [ 465.280590][ T5893] dvb-usb: error while querying for an remote control event. [ 465.399623][ T5893] m920x_read = error: -19 [ 465.415715][ T3954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.425890][ T5893] dvb-usb: error while querying for an remote control event. [ 465.438153][ T3954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.451568][ T3954] bond0 (unregistering): Released all slaves [ 465.540279][T11886] team0: Port device team_slave_0 added [ 465.564439][ T5893] m920x_read = error: -19 [ 465.572164][ T5893] dvb-usb: error while querying for an remote control event. [ 465.578349][T11886] team0: Port device team_slave_1 added [ 465.700420][ T5893] m920x_read = error: -19 [ 465.705529][ T5893] dvb-usb: error while querying for an remote control event. [ 465.779207][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 465.791832][T11886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.796161][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 465.801544][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.841412][ T5893] m920x_read = error: -19 [ 465.841644][ T10] usb 4-1: USB disconnect, device number 7 [ 465.851629][ T5893] dvb-usb: error while querying for an remote control event. [ 465.886681][T11886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.919091][T11886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.939533][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.965849][T11886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.976557][ T5893] m920x_read = error: -19 [ 465.980962][ T5893] dvb-usb: error while querying for an remote control event. [ 466.104242][ T5893] m920x_read = error: -19 [ 466.108666][ T5893] dvb-usb: error while querying for an remote control event. [ 466.131607][ T3954] hsr_slave_0: left promiscuous mode [ 466.145387][ T3954] hsr_slave_1: left promiscuous mode [ 466.156260][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.173784][ T5893] usb 5-1: USB disconnect, device number 75 [ 466.179921][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.211864][ T3954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.224174][ T3954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.243961][ T24] m920x_read = error: -19 [ 466.248422][ T24] dvb-usb: error while querying for an remote control event. [ 466.256148][T11946] FAULT_INJECTION: forcing a failure. [ 466.256148][T11946] name failslab, interval 1, probability 0, space 0, times 0 [ 466.269342][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.4.1760 Not tainted syzkaller #0 PREEMPT(full) [ 466.269372][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.269386][T11946] Call Trace: [ 466.269395][T11946] [ 466.269405][T11946] dump_stack_lvl+0x189/0x250 [ 466.269432][T11946] ? __pfx____ratelimit+0x10/0x10 [ 466.269462][T11946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.269482][T11946] ? __pfx__printk+0x10/0x10 [ 466.269519][T11946] ? __pfx___might_resched+0x10/0x10 [ 466.269549][T11946] ? fs_reclaim_acquire+0x7d/0x100 [ 466.269586][T11946] should_fail_ex+0x414/0x560 [ 466.269617][T11946] should_failslab+0xa8/0x100 [ 466.269653][T11946] __kmalloc_noprof+0xdf/0x800 [ 466.269681][T11946] ? tomoyo_encode+0x28b/0x550 [ 466.269715][T11946] tomoyo_encode+0x28b/0x550 [ 466.269749][T11946] tomoyo_realpath_from_path+0x58d/0x5d0 [ 466.269789][T11946] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 466.269812][T11946] tomoyo_path_number_perm+0x1e8/0x5a0 [ 466.269840][T11946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 466.269881][T11946] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 466.269932][T11946] ? __fget_files+0x2a/0x420 [ 466.269959][T11946] ? __fget_files+0x3a0/0x420 [ 466.269979][T11946] ? __fget_files+0x2a/0x420 [ 466.270006][T11946] security_file_ioctl+0xcb/0x2d0 [ 466.270031][T11946] __se_sys_ioctl+0x47/0x170 [ 466.270062][T11946] do_syscall_64+0xfa/0xf80 [ 466.270094][T11946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.270116][T11946] ? clear_bhb_loop+0x60/0xb0 [ 466.270144][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.270165][T11946] RIP: 0033:0x7f5b8c98f749 [ 466.270186][T11946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.270205][T11946] RSP: 002b:00007f5b8abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.270229][T11946] RAX: ffffffffffffffda RBX: 00007f5b8cbe5fa0 RCX: 00007f5b8c98f749 [ 466.270244][T11946] RDX: 0000200000000000 RSI: 000000008008af83 RDI: 0000000000000003 [ 466.270259][T11946] RBP: 00007f5b8abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.270273][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.270286][T11946] R13: 00007f5b8cbe6038 R14: 00007f5b8cbe5fa0 R15: 00007ffe4f304a28 [ 466.270321][T11946] [ 466.270347][T11946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 466.283787][ T3954] veth1_macvtap: left promiscuous mode [ 466.518621][ T24] m920x_read = error: -19 [ 466.523042][ T24] dvb-usb: error while querying for an remote control event. [ 466.531046][ T3954] veth0_macvtap: left promiscuous mode [ 466.537339][ T3954] veth1_vlan: left promiscuous mode [ 466.542754][ T3954] veth0_vlan: left promiscuous mode [ 466.643808][ T5893] m920x_read = error: -19 [ 466.654367][ T5893] dvb-usb: error while querying for an remote control event. [ 466.684099][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 466.777288][ T7564] m920x_read = error: -19 [ 466.782959][ T7564] dvb-usb: error while querying for an remote control event. [ 466.844060][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 466.851642][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.862065][ T5893] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 466.871736][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.885004][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 466.894936][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 466.905141][ T7564] m920x_read = error: -19 [ 466.909537][ T7564] dvb-usb: error while querying for an remote control event. [ 466.919017][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.935079][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 466.945070][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 466.953139][ T24] usb 4-1: Manufacturer: syz [ 466.966943][ T24] usb 4-1: config 0 descriptor?? [ 467.033863][ T7564] m920x_read = error: -19 [ 467.038280][ T7564] dvb-usb: error while querying for an remote control event. [ 467.061532][ T5893] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 467.070194][ T5893] usb 5-1: config 0 has no interface number 0 [ 467.076647][ T5893] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 467.089174][ T5893] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.102032][ T5893] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 467.112391][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 467.121802][ T5893] usb 5-1: Product: syz [ 467.126245][ T5893] usb 5-1: SerialNumber: syz [ 467.137592][ T5893] usb 5-1: config 0 descriptor?? [ 467.148126][ T5893] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 467.159981][ T5893] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input42 [ 467.170940][ T7564] m920x_read = error: -19 [ 467.175592][ T7564] dvb-usb: error while querying for an remote control event. [ 467.191043][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.205422][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.296318][ T5893] m920x_read = error: -19 [ 467.310004][ T5893] dvb-usb: error while querying for an remote control event. [ 467.320866][ T24] rc_core: IR keymap rc-hauppauge not found [ 467.328976][ T24] Registered IR keymap rc-empty [ 467.334471][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.356209][ T5834] Bluetooth: hci3: command tx timeout [ 467.367626][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.374949][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.382152][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.389383][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.396590][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.404291][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.412642][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.421177][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.428564][ T5893] usb 5-1: USB disconnect, device number 76 [ 467.435263][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 467.435296][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 467.453117][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 467.464982][ T7564] m920x_read = error: -19 [ 467.469370][ T7564] dvb-usb: error while querying for an remote control event. [ 467.479326][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 467.496210][ T5893] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 467.525269][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.553861][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.574391][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.593874][ T7564] m920x_read = error: -19 [ 467.598517][ T7564] dvb-usb: error while querying for an remote control event. [ 467.606611][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.634321][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.654109][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.673957][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.694465][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.702583][ T3954] team0 (unregistering): Port device team_slave_1 removed [ 467.730388][ T5893] m920x_read = error: -19 [ 467.736301][ T5893] dvb-usb: error while querying for an remote control event. [ 467.744405][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.765315][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.773364][ T3954] team0 (unregistering): Port device team_slave_0 removed [ 467.793806][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.818416][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 467.827973][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 467.843119][ T24] usb 4-1: USB disconnect, device number 8 [ 467.854949][ T5893] m920x_read = error: -19 [ 467.859853][ T5893] dvb-usb: error while querying for an remote control event. [ 467.991560][ T5893] m920x_read = error: -19 [ 467.997258][ T5893] dvb-usb: error while querying for an remote control event. [ 468.072477][T11965] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 468.080662][T11965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.092822][T11965] binder: 11964:11965 ioctl c0306201 2000000001c0 returned -14 [ 468.122170][ T24] m920x_read = error: -19 [ 468.128145][ T24] dvb-usb: error while querying for an remote control event. [ 468.253889][ T24] m920x_read = error: -19 [ 468.258482][ T24] dvb-usb: error while querying for an remote control event. [ 468.375875][ T24] m920x_read = error: -19 [ 468.384577][ T24] dvb-usb: error while querying for an remote control event. [ 468.471776][ T10] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 468.520220][ T24] m920x_read = error: -19 [ 468.525076][ T24] dvb-usb: error while querying for an remote control event. [ 468.619590][T11958] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1763'. [ 468.640305][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.648269][T11973] syzkaller1: entered promiscuous mode [ 468.656747][ T24] m920x_read = error: -19 [ 468.657595][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.661131][ T24] dvb-usb: error while querying for an remote control event. [ 468.673830][T11973] syzkaller1: entered allmulticast mode [ 468.715465][T11886] hsr_slave_0: entered promiscuous mode [ 468.725158][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.735438][T11886] hsr_slave_1: entered promiscuous mode [ 468.735975][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.767921][ T5893] m920x_read = error: -19 [ 468.772340][ T5893] dvb-usb: error while querying for an remote control event. [ 468.903919][ T24] m920x_read = error: -19 [ 468.908352][ T24] dvb-usb: error while querying for an remote control event. [ 468.975557][ T10] usb 5-1: usb_control_msg returned -32 [ 468.985338][ T10] usbtmc 5-1:16.0: can't read capabilities [ 469.004963][ T5893] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 469.024318][T11422] m920x_read = error: -19 [ 469.029882][T11422] dvb-usb: error while querying for an remote control event. [ 469.154692][T11422] m920x_read = error: -19 [ 469.159130][T11422] dvb-usb: error while querying for an remote control event. [ 469.183800][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 469.202306][ T5893] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 469.222228][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.257302][ T5893] usb 9-1: config 0 descriptor?? [ 469.276286][ T5893] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 469.303957][ T24] m920x_read = error: -19 [ 469.311918][ T24] dvb-usb: error while querying for an remote control event. [ 469.341493][T11987] netlink: 'syz.4.1765': attribute type 1 has an invalid length. [ 469.411893][T11886] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 469.424560][ T5834] Bluetooth: hci3: command tx timeout [ 469.433991][T11422] m920x_read = error: -19 [ 469.438457][T11422] dvb-usb: error while querying for an remote control event. [ 469.457776][T11886] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 469.488457][T11992] FAULT_INJECTION: forcing a failure. [ 469.488457][T11992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.489836][T11886] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 469.508685][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.3.1771 Not tainted syzkaller #0 PREEMPT(full) [ 469.508715][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.508728][T11992] Call Trace: [ 469.508737][T11992] [ 469.508746][T11992] dump_stack_lvl+0x189/0x250 [ 469.508773][T11992] ? __pfx____ratelimit+0x10/0x10 [ 469.508802][T11992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.508822][T11992] ? __pfx__printk+0x10/0x10 [ 469.508854][T11992] ? __might_fault+0xb0/0x130 [ 469.508891][T11992] should_fail_ex+0x414/0x560 [ 469.508921][T11992] _copy_from_user+0x2d/0xb0 [ 469.508955][T11992] vhost_net_ioctl+0x2e4/0x1640 [ 469.508986][T11992] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 469.509021][T11992] ? __fget_files+0x3a0/0x420 [ 469.509042][T11992] ? __fget_files+0x2a/0x420 [ 469.509067][T11992] ? bpf_lsm_file_ioctl+0x9/0x20 [ 469.509103][T11992] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 469.509125][T11992] __se_sys_ioctl+0xfc/0x170 [ 469.509156][T11992] do_syscall_64+0xfa/0xf80 [ 469.509189][T11992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.509210][T11992] ? clear_bhb_loop+0x60/0xb0 [ 469.509238][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.509260][T11992] RIP: 0033:0x7f680198f749 [ 469.509280][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.509301][T11992] RSP: 002b:00007f680280b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.509334][T11992] RAX: ffffffffffffffda RBX: 00007f6801be5fa0 RCX: 00007f680198f749 [ 469.509350][T11992] RDX: 0000200000000000 RSI: 000000008008af83 RDI: 0000000000000003 [ 469.509365][T11992] RBP: 00007f680280b090 R08: 0000000000000000 R09: 0000000000000000 [ 469.509380][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.509393][T11992] R13: 00007f6801be6038 R14: 00007f6801be5fa0 R15: 00007fff14038368 [ 469.509426][T11992] [ 469.553904][T11422] m920x_read = error: -19 [ 469.648068][T11994] netlink: 'syz.3.1772': attribute type 1 has an invalid length. [ 469.690794][T11886] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 469.735431][T11422] dvb-usb: error while querying for an remote control event. [ 469.843918][ T24] m920x_read = error: -19 [ 469.848452][ T24] dvb-usb: error while querying for an remote control event. [ 469.939558][T11886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.963809][ T24] m920x_read = error: -19 [ 469.968234][ T24] dvb-usb: error while querying for an remote control event. [ 469.999316][T11886] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.017090][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.024343][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.058417][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.065737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.093982][ T7564] m920x_read = error: -19 [ 470.099440][ T7564] dvb-usb: error while querying for an remote control event. [ 470.107121][ T5893] gspca_sonixj: reg_r err -32 [ 470.111936][ T5893] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 470.234067][ T5893] m920x_read = error: -19 [ 470.238512][ T5893] dvb-usb: error while querying for an remote control event. [ 470.273789][ T7564] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 470.374218][ T5893] m920x_read = error: -19 [ 470.379198][ T5893] dvb-usb: error while querying for an remote control event. [ 470.433879][ T7564] usb 4-1: Using ep0 maxpacket: 16 [ 470.448176][ T7564] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 470.467147][ T7564] usb 4-1: config 0 has no interface number 0 [ 470.478769][T11886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.480549][ T7564] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 470.499768][ T5893] m920x_read = error: -19 [ 470.510975][ T5893] dvb-usb: error while querying for an remote control event. [ 470.528384][ T7564] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 470.547601][ T7564] usb 4-1: config 0 interface 41 has no altsetting 0 [ 470.559516][ T7564] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 470.571201][ T7564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.580231][ T7564] usb 4-1: Product: syz [ 470.585004][ T7564] usb 4-1: Manufacturer: syz [ 470.589803][ T7564] usb 4-1: SerialNumber: syz [ 470.600387][ T7564] usb 4-1: config 0 descriptor?? [ 470.613173][T12010] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 470.622050][T12010] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 470.635842][ T5893] m920x_read = error: -19 [ 470.640451][ T5893] dvb-usb: error while querying for an remote control event. [ 470.765854][ T5893] m920x_read = error: -19 [ 470.770664][ T5893] dvb-usb: error while querying for an remote control event. [ 470.833277][T12005] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 470.854810][T12005] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 470.903830][ T5893] m920x_read = error: -19 [ 470.912851][ T5893] dvb-usb: error while querying for an remote control event. [ 471.004729][T11886] veth0_vlan: entered promiscuous mode [ 471.024184][T11886] veth1_vlan: entered promiscuous mode [ 471.044091][ T5893] m920x_read = error: -19 [ 471.056356][ T5893] dvb-usb: error while querying for an remote control event. [ 471.092973][T11886] veth0_macvtap: entered promiscuous mode [ 471.133995][T11886] veth1_macvtap: entered promiscuous mode [ 471.174613][ T5893] m920x_read = error: -19 [ 471.185222][T11886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.188793][ T5893] dvb-usb: error while querying for an remote control event. [ 471.200714][T11886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.242042][ T5893] usb 5-1: USB disconnect, device number 77 [ 471.253445][ T60] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.281640][ T60] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.291025][ T7564] Error reading MAC address [ 471.306879][ T60] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.326705][T12005] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 471.336477][ T60] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.343956][ T24] m920x_read = error: -19 [ 471.353689][T12005] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 471.369982][ T24] dvb-usb: error while querying for an remote control event. [ 471.495380][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 471.504237][ T5834] Bluetooth: hci3: command tx timeout [ 471.505155][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.512755][ T5893] m920x_read = error: -19 [ 471.530969][ T5893] dvb-usb: error while querying for an remote control event. [ 471.531647][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.643966][ T5893] m920x_read = error: -19 [ 471.649581][ T5893] dvb-usb: error while querying for an remote control event. [ 471.695741][T12011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.706297][T12011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.764074][ T5893] m920x_read = error: -19 [ 471.773999][ T5893] dvb-usb: error while querying for an remote control event. [ 471.797143][ T5835] usb 9-1: USB disconnect, device number 4 [ 471.914526][ T5893] m920x_read = error: -19 [ 471.936799][ T5893] dvb-usb: error while querying for an remote control event. [ 471.954061][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 472.067990][ T5893] m920x_read = error: -19 [ 472.072451][ T5893] dvb-usb: error while querying for an remote control event. [ 472.130679][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.149045][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.159651][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 472.173110][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 472.182662][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.183938][ T5893] m920x_read = error: -19 [ 472.194896][ T10] usb 5-1: config 0 descriptor?? [ 472.206777][ T10] hub 5-1:0.0: USB hub found [ 472.215366][ T5893] dvb-usb: error while querying for an remote control event. [ 472.327434][ T5893] m920x_read = error: -19 [ 472.331891][ T5893] dvb-usb: error while querying for an remote control event. [ 472.413415][ T10] hub 5-1:0.0: 14 ports detected [ 472.420389][ T10] hub 5-1:0.0: insufficient power available to use all downstream ports [ 472.458186][ T5893] m920x_read = error: -19 [ 472.462663][ T5893] dvb-usb: error while querying for an remote control event. [ 472.592802][T12068] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1777'. [ 472.602270][T12068] 0·: renamed from hsr_slave_1 (while UP) [ 472.612420][ T5893] m920x_read = error: -19 [ 472.620221][T12068] 0·: entered allmulticast mode [ 472.625329][ T5893] dvb-usb: error while querying for an remote control event. [ 472.633925][T12068] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 472.738765][ T5893] m920x_read = error: -19 [ 472.755363][ T5893] dvb-usb: error while querying for an remote control event. [ 472.822793][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.847008][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.871548][T12071] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1775'. [ 472.881011][ T5893] m920x_read = error: -19 [ 472.907563][ T5893] dvb-usb: error while querying for an remote control event. [ 473.015176][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 473.042580][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 473.057529][ T5893] m920x_read = error: -19 [ 473.067642][ T5893] dvb-usb: error while querying for an remote control event. [ 473.109107][ T10] usb 5-1: USB disconnect, device number 78 [ 473.188181][ T7564] sr9700 4-1:0.41 eth25: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, 68:bc:62:06:1e:f1 [ 473.200998][ T5893] m920x_read = error: -19 [ 473.205583][ T5893] dvb-usb: error while querying for an remote control event. [ 473.220299][ T7564] usb 4-1: USB disconnect, device number 9 [ 473.239551][ T7564] sr9700 4-1:0.41 eth25: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 473.293922][ T5835] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 473.323902][ T5828] m920x_read = error: -19 [ 473.328326][ T5828] dvb-usb: error while querying for an remote control event. [ 473.363789][ T6969] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 473.441790][T12084] ================================================================== [ 473.449940][T12084] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x2e/0x40 [ 473.457540][T12084] Read of size 1 at addr ffff8881446f2898 by task syz.3.1780/12084 [ 473.465472][T12084] [ 473.467839][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.3.1780 Not tainted syzkaller #0 PREEMPT(full) [ 473.467866][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.467881][T12084] Call Trace: [ 473.467891][T12084] [ 473.467900][T12084] dump_stack_lvl+0x189/0x250 [ 473.467925][T12084] ? __virt_addr_valid+0x1c8/0x5c0 [ 473.467948][T12084] ? rcu_is_watching+0x15/0xb0 [ 473.467974][T12084] ? __kasan_check_byte+0x12/0x40 [ 473.468007][T12084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.468025][T12084] ? rcu_is_watching+0x15/0xb0 [ 473.468046][T12084] ? lock_release+0x4b/0x3b0 [ 473.468075][T12084] ? __virt_addr_valid+0x1c8/0x5c0 [ 473.468097][T12084] ? __virt_addr_valid+0x4a5/0x5c0 [ 473.468121][T12084] print_report+0xca/0x240 [ 473.468144][T12084] ? _raw_spin_lock+0x2e/0x40 [ 473.468169][T12084] kasan_report+0x118/0x150 [ 473.468190][T12084] ? _raw_spin_lock+0x2e/0x40 [ 473.468219][T12084] ? mqueue_flush_file+0x49/0x270 [ 473.468240][T12084] __kasan_check_byte+0x2a/0x40 [ 473.468272][T12084] lock_acquire+0x84/0x340 [ 473.468305][T12084] ? __pfx_mqueue_flush_file+0x10/0x10 [ 473.468325][T12084] _raw_spin_lock+0x2e/0x40 [ 473.468352][T12084] ? mqueue_flush_file+0x49/0x270 [ 473.468372][T12084] mqueue_flush_file+0x49/0x270 [ 473.468392][T12084] ? filp_flush+0xae/0x190 [ 473.468417][T12084] ? __pfx_mqueue_flush_file+0x10/0x10 [ 473.468438][T12084] filp_flush+0xbd/0x190 [ 473.468462][T12084] filp_close+0x1d/0x40 [ 473.468486][T12084] put_files_struct+0x1ba/0x350 [ 473.468511][T12084] do_exit+0x67f/0x2310 [ 473.468537][T12084] ? do_raw_spin_lock+0x121/0x290 [ 473.468563][T12084] ? __pfx_do_exit+0x10/0x10 [ 473.468594][T12084] do_group_exit+0x21c/0x2d0 [ 473.468618][T12084] ? lockdep_hardirqs_on+0x98/0x140 [ 473.468650][T12084] get_signal+0x1285/0x1340 [ 473.468690][T12084] arch_do_signal_or_restart+0x9a/0x7a0 [ 473.468715][T12084] ? iput+0xcc6/0x1030 [ 473.468738][T12084] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 473.468771][T12084] ? exit_to_user_mode_loop+0x55/0x4f0 [ 473.468802][T12084] exit_to_user_mode_loop+0x87/0x4f0 [ 473.468831][T12084] ? rcu_is_watching+0x15/0xb0 [ 473.468853][T12084] do_syscall_64+0x2e3/0xf80 [ 473.468884][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.468906][T12084] ? clear_bhb_loop+0x60/0xb0 [ 473.468928][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.468948][T12084] RIP: 0033:0x7f680198f749 [ 473.468994][T12084] Code: Unable to access opcode bytes at 0x7f680198f71f. [ 473.469007][T12084] RSP: 002b:00007f680280b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 473.469030][T12084] RAX: ffffffffffffffa2 RBX: 00007f6801be5fa0 RCX: 00007f680198f749 [ 473.469047][T12084] RDX: 0000000000000009 RSI: 0000000000080000 RDI: 000000000000000a [ 473.469062][T12084] RBP: 00007f6801a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 473.469076][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.469090][T12084] R13: 00007f6801be6038 R14: 00007f6801be5fa0 R15: 00007fff14038368 [ 473.469115][T12084] [ 473.469124][T12084] [ 473.474219][ T5828] m920x_read = error: -19 [ 473.478610][T12084] Allocated by task 12084: [ 473.769871][T12084] kasan_save_track+0x3e/0x80 [ 473.774591][T12084] __kasan_slab_alloc+0x6c/0x80 [ 473.779468][T12084] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 473.785308][T12084] mqueue_alloc_inode+0x28/0x40 [ 473.790177][T12084] alloc_inode+0x6a/0x1b0 [ 473.794517][T12084] new_inode+0x22/0x170 [ 473.798690][T12084] mqueue_get_inode+0x27/0xb50 [ 473.803473][T12084] mqueue_create_attr+0x1ac/0x2e0 [ 473.808506][T12084] vfs_mkobj+0xcf/0x290 [ 473.812679][T12084] do_mq_open+0x60d/0x7c0 [ 473.817021][T12084] __x64_sys_mq_open+0x16a/0x1c0 [ 473.821976][T12084] do_syscall_64+0xfa/0xf80 [ 473.826502][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.832409][T12084] [ 473.834749][T12084] Freed by task 23: [ 473.838565][T12084] kasan_save_track+0x3e/0x80 [ 473.843266][T12084] kasan_save_free_info+0x46/0x50 [ 473.848312][T12084] __kasan_slab_free+0x5c/0x80 [ 473.853101][T12084] kmem_cache_free+0x197/0x620 [ 473.857925][T12084] rcu_core+0xd70/0x1870 [ 473.862198][T12084] handle_softirqs+0x27d/0x850 [ 473.866987][T12084] run_ksoftirqd+0x9b/0x100 [ 473.871631][T12084] smpboot_thread_fn+0x542/0xa60 [ 473.876596][T12084] kthread+0x711/0x8a0 [ 473.880774][T12084] ret_from_fork+0x599/0xb30 [ 473.885392][T12084] ret_from_fork_asm+0x1a/0x30 [ 473.890175][T12084] [ 473.892513][T12084] Last potentially related work creation: [ 473.898242][T12084] kasan_save_stack+0x3e/0x60 [ 473.902949][T12084] kasan_record_aux_stack+0xbd/0xd0 [ 473.908162][T12084] call_rcu+0x157/0x9c0 [ 473.912334][T12084] evict+0x931/0xae0 [ 473.916256][T12084] __dentry_kill+0x209/0x660 [ 473.920875][T12084] finish_dput+0xc9/0x480 [ 473.925228][T12084] __fput+0x68e/0xa70 [ 473.929256][T12084] fput_close_sync+0x113/0x220 [ 473.934038][T12084] __x64_sys_close+0x7f/0x110 [ 473.938733][T12084] do_syscall_64+0xfa/0xf80 [ 473.943263][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.949257][T12084] [ 473.951595][T12084] The buggy address belongs to the object at ffff8881446f2880 [ 473.951595][T12084] which belongs to the cache mqueue_inode_cache of size 1576 [ 473.966354][T12084] The buggy address is located 24 bytes inside of [ 473.966354][T12084] freed 1576-byte region [ffff8881446f2880, ffff8881446f2ea8) [ 473.980161][T12084] [ 473.982506][T12084] The buggy address belongs to the physical page: [ 473.988951][T12084] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881446f06c0 pfn:0x1446f0 [ 473.999117][T12084] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 474.007633][T12084] memcg:ffff8881476ef201 [ 474.011888][T12084] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 474.019535][T12084] page_type: f5(slab) [ 474.023536][T12084] raw: 057ff00000000040 ffff8881456b1280 dead000000000122 0000000000000000 [ 474.032135][T12084] raw: ffff8881446f06c0 000000008012000e 00000000f5000000 ffff8881476ef201 [ 474.040738][T12084] head: 057ff00000000040 ffff8881456b1280 dead000000000122 0000000000000000 [ 474.049427][T12084] head: ffff8881446f06c0 000000008012000e 00000000f5000000 ffff8881476ef201 [ 474.058112][T12084] head: 057ff00000000003 ffffea000511bc01 00000000ffffffff 00000000ffffffff [ 474.066887][T12084] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 474.075579][T12084] page dumped because: kasan: bad access detected [ 474.082010][T12084] page_owner tracks the page as allocated [ 474.087740][T12084] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9171142563, free_ts 0 [ 474.107400][T12084] post_alloc_hook+0x234/0x290 [ 474.112190][T12084] get_page_from_freelist+0x2365/0x2440 [ 474.117761][T12084] __alloc_frozen_pages_noprof+0x181/0x370 [ 474.123599][T12084] alloc_pages_mpol+0x232/0x4a0 [ 474.128468][T12084] allocate_slab+0x86/0x3b0 [ 474.132988][T12084] ___slab_alloc+0xf2b/0x1960 [ 474.137700][T12084] __slab_alloc+0x65/0x100 [ 474.142145][T12084] kmem_cache_alloc_lru_noprof+0x3fe/0x6e0 [ 474.147969][T12084] mqueue_alloc_inode+0x28/0x40 [ 474.152835][T12084] alloc_inode+0x6a/0x1b0 [ 474.157178][T12084] new_inode+0x22/0x170 [ 474.161346][T12084] mqueue_fill_super+0xdc/0x380 [ 474.166211][T12084] get_tree_nodev+0xbb/0x150 [ 474.170813][T12084] vfs_get_tree+0x92/0x2a0 [ 474.175247][T12084] fc_mount_longterm+0x1c/0x100 [ 474.180142][T12084] mq_init_ns+0x275/0x360 [ 474.184490][T12084] page_owner free stack trace missing [ 474.189862][T12084] [ 474.192194][T12084] Memory state around the buggy address: [ 474.197830][T12084] ffff8881446f2780: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 474.205905][T12084] ffff8881446f2800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 474.213978][T12084] >ffff8881446f2880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 474.222270][T12084] ^ [ 474.227158][T12084] ffff8881446f2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 474.235245][T12084] ffff8881446f2980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 474.243317][T12084] ================================================================== [ 474.254533][T12084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 474.261805][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.3.1780 Not tainted syzkaller #0 PREEMPT(full) [ 474.271223][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.281321][T12084] Call Trace: [ 474.284652][T12084] [ 474.287624][T12084] dump_stack_lvl+0x99/0x250 [ 474.292261][T12084] ? __asan_memcpy+0x40/0x70 [ 474.296882][T12084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.302104][T12084] ? __pfx__printk+0x10/0x10 [ 474.306727][T12084] vpanic+0x237/0x6d0 [ 474.310731][T12084] ? __pfx_vpanic+0x10/0x10 [ 474.315255][T12084] ? irqentry_exit+0x5dd/0x660 [ 474.320048][T12084] ? trace_irq_disable+0x37/0x100 [ 474.325193][T12084] panic+0xb9/0xc0 [ 474.328940][T12084] ? __pfx_panic+0x10/0x10 [ 474.333557][T12084] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 474.339478][T12084] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.345833][T12084] ? _raw_spin_lock+0x2e/0x40 [ 474.350628][T12084] check_panic_on_warn+0x89/0xb0 [ 474.355613][T12084] ? _raw_spin_lock+0x2e/0x40 [ 474.360327][T12084] end_report+0x6f/0x140 [ 474.364593][T12084] kasan_report+0x129/0x150 [ 474.369113][T12084] ? _raw_spin_lock+0x2e/0x40 [ 474.373817][T12084] ? mqueue_flush_file+0x49/0x270 [ 474.378857][T12084] __kasan_check_byte+0x2a/0x40 [ 474.383739][T12084] lock_acquire+0x84/0x340 [ 474.388193][T12084] ? __pfx_mqueue_flush_file+0x10/0x10 [ 474.393677][T12084] _raw_spin_lock+0x2e/0x40 [ 474.398222][T12084] ? mqueue_flush_file+0x49/0x270 [ 474.403271][T12084] mqueue_flush_file+0x49/0x270 [ 474.408138][T12084] ? filp_flush+0xae/0x190 [ 474.412575][T12084] ? __pfx_mqueue_flush_file+0x10/0x10 [ 474.418084][T12084] filp_flush+0xbd/0x190 [ 474.422367][T12084] filp_close+0x1d/0x40 [ 474.426557][T12084] put_files_struct+0x1ba/0x350 [ 474.431431][T12084] do_exit+0x67f/0x2310 [ 474.435617][T12084] ? do_raw_spin_lock+0x121/0x290 [ 474.440664][T12084] ? __pfx_do_exit+0x10/0x10 [ 474.445286][T12084] do_group_exit+0x21c/0x2d0 [ 474.449907][T12084] ? lockdep_hardirqs_on+0x98/0x140 [ 474.455227][T12084] get_signal+0x1285/0x1340 [ 474.459772][T12084] arch_do_signal_or_restart+0x9a/0x7a0 [ 474.465348][T12084] ? iput+0xcc6/0x1030 [ 474.469445][T12084] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 474.475631][T12084] ? exit_to_user_mode_loop+0x55/0x4f0 [ 474.481134][T12084] exit_to_user_mode_loop+0x87/0x4f0 [ 474.486458][T12084] ? rcu_is_watching+0x15/0xb0 [ 474.491249][T12084] do_syscall_64+0x2e3/0xf80 [ 474.495879][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.501978][T12084] ? clear_bhb_loop+0x60/0xb0 [ 474.506682][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.512679][T12084] RIP: 0033:0x7f680198f749 [ 474.517115][T12084] Code: Unable to access opcode bytes at 0x7f680198f71f. [ 474.524145][T12084] RSP: 002b:00007f680280b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 474.532580][T12084] RAX: ffffffffffffffa2 RBX: 00007f6801be5fa0 RCX: 00007f680198f749 [ 474.540572][T12084] RDX: 0000000000000009 RSI: 0000000000080000 RDI: 000000000000000a [ 474.548660][T12084] RBP: 00007f6801a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.556654][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.564642][T12084] R13: 00007f6801be6038 R14: 00007f6801be5fa0 R15: 00007fff14038368 [ 474.573515][T12084] [ 474.576870][T12084] Kernel Offset: disabled [ 474.581215][T12084] Rebooting in 86400 seconds..