last executing test programs: 5.94367401s ago: executing program 2 (id=5): unshare(0x24010000) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80080) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001e0021032bbd7000000000000a0000000500000000000000160001"], 0x34}}, 0x0) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x25, &(0x7f0000000200)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x880) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r3, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000a00)={{&(0x7f000038f000/0x2000)=nil, 0x2000}}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x7c, 0x0, 0xe8e0cd814822780d, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x8840) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) bind$bt_sco(r1, 0x0, 0x0) fallocate(r0, 0x6, 0x97, 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@nfs_export_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0xd}}, {@obj_role={'obj_role', 0x3d, 'nfs_export=off'}}, {@seclabel}]}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x30, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 5.91223122s ago: executing program 0 (id=1): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)='all', 0x200, 0x0, 0x1000, 0x0, 0x0}) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x31) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000100)={0xf, 0x4, 0xb, 0x0, 0x81, 0x5, 0x0, &(0x7f0000000040)=[{0x5, 0x1ff, 0x1}, {0x12, 0x101, 0x5}, {0xd, 0x1ff, 0x6}, {0x12, 0x1ff, 0x6}, {0x9, 0x0, 0x1}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x75) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) (async) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e11c71166b01e84d0109025000010000000009041f0000ff0100000508240805040004960d2406"], 0x0) 5.856492492s ago: executing program 3 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="594b41a7ce73", 0x6, 0xffffffffffffffff) keyctl$revoke(0x3, r3) (async) keyctl$read(0xb, r3, &(0x7f0000002a80)=""/110, 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x30]}}]}) (rerun: 64) r4 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x1c, 0x0, &(0x7f00000001c0)=[@decrefs, @request_death={0x400c630e, 0x3}, @exit_looper], 0x0, 0x0, 0x0}) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7f, 0x240000) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x5}) 5.751997985s ago: executing program 3 (id=6): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000880)=@svm={0x4, 0x1, 0x1080, {0x1}, {"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"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x43, 0x0, &(0x7f0000002740)) sync_file_range(r0, 0xf1ad, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000880)=@svm={0x4, 0x1, 0x1080, {0x1}, {"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"}}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_int(r4, 0x29, 0x43, 0x0, &(0x7f0000002740)) (async) sync_file_range(r0, 0xf1ad, 0x2, 0x0) (async) 5.546925252s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008ef17a460000000000001090224000100009027090400fe01030002000921c100fe0122280009058103000426b301"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10b, 0x0, 0xfffffffffffffff7}]}) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x28, {0x28, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') landlock_create_ruleset(&(0x7f0000000200)={0x8000, 0x0, 0x1, 0x18834, 0x4, 0x2}, 0x30, 0x2) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000240)={0x101, 0x1, 0x0, 0xe000000, 0x4}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x82, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x10200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r5, 0xf6690000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="fc30dbe99679dd0987d9b79d2816807e5ae56a882530ffe1ae10045ba28c5dd5d248346be2a47ba7ee4ad5737e6f7ee5972f54c5c05986ceaefcd934112e67e808e7197431b1ccde1f3f6c5fc18a493805bc62c575cbdf0d821e4d78766945408115744f77f5fd65bbdc64876a8a4cc6c9ac20ba24e72a582ac25cf4c4abc66e220276c80ddfadfb0d2dbd81ac158689bb3ee37cd6030474f0b67ab077d71a4af43f2ad4865aebe10863d1fbc13d4b6fa0cf2ac1622bf3c908302f7e49debf566d5390f5cc4dca4aefa4823d39cb7dd4f4b9ccaa3deca2483f38c68a6dd882630c645b3731764f609c43fdf70d1426eb074aaf64f950877536287cbb548ae806ec459b787cbca0bbc12a0044111c8b688d9d2c1400cbd43c21fee0085f3a88a87d0acc4328488cf64db57a3ac6ca7ba0effedb266c9c8c2eb03d42aa488241af22018d2f94b6e657a54801b656a8806f1f6b009a6e9f37d02caa6795ca7bd3cac3507f37a462e1ac4439246310bfef901b7664009228e5db784966aa690a2a06414cb47c02440fb402a214f204030d28d13f1267dddfab49dc95ab673ec2a243ded076600e33fdca0495a0807d4a3057b703770316b6afd5dcd1ebe22e7922e67c8378c09623c068e49f788048bd2390e8d48301490e26b950018a18b196d038d9786f268a202b76acdeb0e879e291b0585aecc2b12b692e4ebde3703a7036408accf2a7ce0155b54bbd79aebb61e2f881ee21b5dc3b1971194f66e741442683da9d9015f3535458b69b1a231ddba9dedc1c3008bdf45b6b5d8d55f70d016836a1ffcf797c8e87451a3aea994e9a8bf28339910570d2c5fd5cf258e13649667da0fb5597144ba9beaae4488fab4bf92db02dd8a567a3448fbd4994c7ef6e94c1d94fe246a50dd0d4254dbde51ae8f0c135961175d68913beb0dbd725206beb1510ebb44319a9bdcb8949f46cf187faa8ff4095ec2ced4080e9510e16eac28ab16d2b52eef8131b6bb14059566c7b40ec939c3d9da8c07cea2a41943d2b0f2c46935e9d91e0f60933e70e83362e381f8c77bcf5462a8e951b2d268e27c0942c85ef832e731d9c0c72911fb8a5ad85e0d710b48d54d2c1ca5de57b3cc28c7ab7504c11e3ed03a68509159b8ca0b2be181a3ca748cd02969b94907c2687fca03fb6423854627f0c54f8af5b84630c34ec70815063c8ca0303bd6d97f53e2437a177381eb10ec1108d87285d3669fec1b2f31acc0f5663e888cabc8aeda7ca34f377377c7100edf49a914538835a916a0f84bfb5754fe3313c801168f806675b9813c3c3c5a52cbde1b907b2922ecda1db0a81108622e3517aea76f0debee7c452bef87f78394e0d9a85b90db51fd5d953a528d12ce517deef93b518ebc26197818238481940e1b8747f8d3e3398403837fe86a5c67a708c40e6c89275c1f9d07cfd5cee1d0379275899b1cda60b71f1ebe48867864529cd72e8437c01e71fd06c5c5b88752378932aaefc5dfb8580b00ba024cf132cfc2960d50aa0b33e3683f7f193accdd3ee2d0c47724165a0698d5098112ffa058ee93aa3b692ccbfd34274763c74f831c91fb84f7be645b0a00630226659d48e49da81a6d78f4478ad25458d91aae203a9b7413e65d7ae0b837312d09368852ef44960f71e9a2f915cfaa1b0848f2ef1dd6a7656bbfb0247a1f34e1b4d55c83578f2ba3eab5f94c878341e7c05d6a79a6e8c1024cebe808a09e1f202ecd024dfdd939d57ce4ed5a48d6a9b2df40b18d1f2e8b214e172fd05aa5159b71849bef0c9f576255a646453042c4d47e93ae8e0242e58c92fbdfe6748f4787c3ef1da49f0baa841ebbfe490cefca35910db567e59453824299cd26e625fbcfff898261de4f57e54ef909b2694adf79efec260f423055d48e38ed6e177550f6eae88f2f8618348396d006826349612401b40a318a29b5bcbc26e387944b31a852bc9c9cbf3947c9ecab7a9d22b57567c344947d734cfe39742632ff637c63f8134da78e499454cd2bb8c5faaabc32a5508e8cb053b49420f53a2fd3bc5496a2300e758f8f5e128e3edb039267e426b863aff638a460579e29be2c9938a2a273949152d0a83f757cdafbc664abefd59297f5dd112d47724e28f52a9660f9def5be26a5afc022e69c37dda79656042651c7bddefeaadabae7dd8ed9232f5e037cf586f5dcc319e18ceb90e7ce62b9ab270fbb62b29578b40614fa0dfba6a22a1cc2a3cc06e5c48d9ed3c145f3306e4e2f44812d908d558740b932229db5fccab7d43c53cd18063ec26da594fd0b2f4536b5dcb8b6c1fba1cf907140cda17207a9ba8a185cce514849f48c455574ab110750da0ec415e1e4279fbc63c298336f87b4b4776430195a4ee37f6a265792eb8d32e02ad6611a68cbe13202cc937fc5b3b8503ed59ee75ecf8a11f62d17e3ac0a797f9192217ae30a3ca3361d92cae64d1e00e8dad64c7ac5071df5a77b8cfb7b9e32b19d6c2c435bda45ec7e9bdd1cded92048bc65b346f427dbfe30561b14d73ea105c3866798524be7f211a58ae5db271441368dc68e95add6cb60b66135d3da6000acb5941c3e78c399886c71d9d9e401f9608bcf4e20fb024456d24054f96d7430eb3560e5dba6039190a855f9cfa3e0602a3fd4b7ecf70f7762e07ad1495b82ca660ffd82d1be4d9c098c42a70915d37157c27c7fc07b9eba5dad6bb798b76fe20df121d38ad3c1a33b8b707b1080e34bdd137dd73320a96ecd1d77ad5f73dac3b9a495fdd887c0ed81abb889d665b20fa0eea5ae0fabf7c4660604a3d767b281b8ff54a41af67da99a68598bfeb7060c40db6944cfb5a73058d31832b981b28e5c27c485feeb4a0d5913df851eb935c10b21c0e97f149040972ace826d5d55e09c70f9e43c3e57bfaa84ecbd44e5a4309511a8e5c73d4f7a5a05cc33598b1d5ce596d564b843ca60040358e4ca652d30b8dc3b00e73a3f284578321471cfc12316a80e1d77261598b540a14613100323f11e2bfd1db94d99e7a4cea7c18d82ef0b04eacc956bc032a6c0f3e7c6c0415f9d7ff18a7e72a60c0ec33779b6c4789616c0767294ca898a50ffc7887a4c7376c7d28eb0b74c29b4e399d99fcf91be83c922aabe8065533724c9d82f819bc7a7ebcfe3586b8e2ccde8a0e0ef4fa32e78d1ac90654e70fcb565e81dbe5e51801f501a379e98a74bd31e358950ecd8b5da2232bf90d48c1979d88c429ff77df926be757213796e457064fbff5cb7fee41c32159a9cdaa1176cd406f0823abd8c2b8f83dfb96e5e2474d79e30f726c47746520ff4b3227a636d1d24fc19515a63e8333211aa6bc63961eb810ec4830d16baacd52f96eb3d16adc4128500eda2188d88d9ef0235531455eed0657874b425d6ba68a67e3905ab6f4f729aa9ced5ceb96cd183806a6c3720e907f6c7b226c0fe15219c2ff3320c2e6880ad016dc8bdd911d60ea77d971ed05ca154b0e5ee7d6ebc28b86a66baedca6d39939943bff1d8b39dea87a59fecc6279f9b117b04562db7e952b516a91a364a3b57f9f51324764b4e2c50e0dd2b4a62d19fa665be338e0071edc2725a4a775e9eb0a9e1d01482ed9009e2b17deae69740399203d231b2cb54635aab4a5bc71c1d75d5c27a0e850ad7c39a38c2658d72e8bac7e9fd4f351ad427faafebf7beed212a2fae3cc0c811cb54c468d9aacc303567a5ab03d8c00007c80085b5d39285bb161d8db8de11ec6dce9eab7b7dadd892a4f25e3382a4fe72ce2b309d02ceeadb8daa6e28f4baf8535e7dbb888005651bb5f434ec32b45042363bc424dc3b3441fcc12cef6779ca4032835a225a4196aa952ed12eebd4712fe385dd933fc4110de767d0f9127e7cd815d613a454c56f3be15526c6af0cddae6a7ff375d283871b8761e1cc63f3ada963c127bcb528f971b50ebe6da93b36c1c0b11b7a677c3a2a5a09f2e9350b509f22a51e9c1f3e11383e703b9053ddb5884e9a5804b51fa06f7fbb2ddb8a2d72bebcced8d80834780cfcc578e0e2d0219b4d120b3587db65809709197a0c9f5f5262b091fbbf15f4767206f85406e2fad15c29407243834872d55f13a42a9745822b317edb26488e8517de1c61d5003776faa94fb2d851b4c914dfafea5f0228ce3c2c795511ea5d1bc2b47ee56f56cafd0670e81ee59d2a6125075e98d475f671eca2020d96b7cc33167fde43aa045ef9d71db070d02e642bab72d0e9ac64be602228d8e1e91e9486765c2bf6cfccd723564edbbf13a44809d5a03ae5800bde612ec4dc2a96cb9b8de34998b2ba891549d956f333eb2da9a67312d77c46cb1135694e582a4ac41d9eeb4ff87047e12418f9896ffc567c67a4d172203d79077b901ff42a34dadcbf4b80eacf84093206c563d377f30e427fcff6e1e8ad572e2e4dfc3def367feaacf526fcc75cf81d013d24d51adc630db4a51053e70ce6f482f4c41d973b68dac37214e9315556e5fba8dcd68bcaa24256045ada481af6dfd80b01336ba5405b3a6f810eccff2f79e640b8ec1871140f0b773b70f13fad81121fb16f4a92db25d29206c00b3768e47dbe827257e5901c62e2509438ac6596722d9882893e2ea8b1191e09a6638eaae77c8b52c5eba0c3fa2230e48510a1b810259101d75bc488bffdfe1a9c6da9e05e149ce2e9b865db0d884f1028f03c84d947cd33895d8581c83ec55431b340b7fb04cb36d187fe6bc204f6bc390aeec4c949ff0d3db4c1c5b85909f838cf3a56b5d610036a0cc851f836ad72b73377b6eb6a869b802d1c07c424dea55f91e88defff0f07a856a2ba15070f19d5fc5858ac33e233713a1a8445e3255bf43aea9c7cc18f1c225c4b194a333d42c4bb72c994a877b5ae840f1a4f52c9d3bb3afb187b251d1c68f380a5dbd1689a78d98e7edc49014ad7c79708758d8e23c5082298627e38f1e19e1623a8b7e12a6435deae6698f0015d8e2e1e918ab06d060dacad0d6cc6d835619fe361d5e8cde40565b76913a904b7e7c60ddfcce6afc9e4676ca526a68920bcf8fee9d5055ca360d390524ac6aee07060220e13f82d53d3048b7eb0657db4597bf9ad73b1963dee280f181d3d9428baa692e2486112a308c7c5e81f98dacc516909df9df934edc8db18b7d49afc2e00c863dfeb70362571bc9cf0c4c179df7b4ab5ae4737a611966cf9c3593d6731e31ac048f046f78a2ded8c71a5bd422fc7b68239175555896d42563c8cc5b950fd28fa54db2e0cc6cded799f087befa8acd68eea3644b2711259296667530c42e8ee3dab02ce2fe770e68fbbf12e1c274ad54bbd95d16530abfca59d268bd02d5a78d9a5bd91127fcb2bca57436f7bcbffc08422ec54f887fcdd84a81ea0228d75bcca42f2d4b5bd138f5c0821ffb185cbe6c1750b3de7ef6775898c6695e11bfbe2db80e0a500841c45514ee4bd2e84809cd3046eb820c9c96976a90732eebbd3023d02cb7d67f9cc891f8ba370037fd97ea0c5132ce63354c0e7fb7921602680da18f7dda895a287a9393d5", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) 5.078952757s ago: executing program 2 (id=10): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x4001, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2a, 0x4, 0x0, {0xfffffffffffffffd, 0xffffffffffff8293, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="3df974a52f545d667dfab50813087f4e5a87aa92ad82dfd62ed1b7a13725fea22328aa6b73c48d2a4479f182c0b862d25d942d0516516fe079dcccaa1ff72329a7f69982fee7293e8fe49262c449c335352361a5ca8135852ea93a295ef200000412f5a52d9e99a524021011e31c8c0da2bafd74dbda9a4e032bce983d725780f677a3e3fa1e6a849e88843c04daa04e231c8887ef7e3e01953e782acf5e8d845e8836565c8e9203a54d2dcb1c8ce4", 0xaf}, {&(0x7f0000000640)="ce40149fb6b24a46b4f1b918749bbb0db824c476e390ed0ab217ae4c467a3e7e28742a66362e8c9f855190b8e356fdcf37a5952ec716a4c86b4d2fba20b365903c3be18eed104e2d2a6e95e745dd38af6c29170afed88b43237a07651d56e66538cd8b1f65d7ca6eb6834800d73e74da7510c650e962284f44d2cf16ada5cd8dc2889dbd9d6d870cf375b7c8b62e6ef58f496b74b603026bad1b881c789cdc41c0b07605f5e0d8871cf125624cfeb3555eeeffd11f283072c3283f4ce7d46ee486806974", 0xc4}, {&(0x7f00000007c0)="499eb64becaae2409982eb13dd1dd812323d1e2cdb6cd69a634dabc2790e03dfc46e81ca6fbd0e5c3ff3945444d3a122f14e1d87744f36b1339aa05bb0295df19c31288ad08226788ed006b0abb87ac437abcc8819e765053af27329aef5035f850dbbd200a2631a375bc657f14db42e182953d9ebe89e2a6498a04198fee64d8e2a76cc8bfac595e9265ac96424493e52e1cb245ab7de2b481a", 0x9a}], 0x3}}], 0x1, 0x24040014) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xf, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) setxattr(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001140)=@known='trusted.overlay.origin\x00', &(0x7f0000001180)='%,-/\'$\x00', 0x7, 0x1) timer_create(0x7, &(0x7f0000002200)={0x0, 0x3b, 0x2, @thr={&(0x7f00000011c0)="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", &(0x7f00000021c0)="278f823870ae0999a0f7e6919db9a3e2454c67f55631fc26f83a7d03c3b16d43f9b12b448483868e4eb25c34713e17d1c479490ed550b719"}}, &(0x7f0000002240)) 3.899485195s ago: executing program 3 (id=14): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x35}], 0x1}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002f80)={{0x12, 0x1, 0x250, 0x74, 0x24, 0x88, 0x20, 0x1a0a, 0x102, 0x376a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xe4, 0x0, 0x3, "", [{{0x9, 0x4, 0x83, 0x0, 0x0, 0x75, 0x41, 0x2e, 0x1}}]}}]}}, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0x4, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000) getsockopt$inet6_int(r2, 0x29, 0x50, 0x0, &(0x7f0000000200)) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0x7fffffffc0000103, r4, &(0x7f0000000540)='./file0\x00') ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x92da9000) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xfe\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\x8fY\xc3\xcf\x9e\x95s\x14\xd9\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\x8b\xc5\x06\xee\xf8\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2') ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r5, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.766142819s ago: executing program 1 (id=15): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2d0000001300034700bb65e1c3e4ffff010000000100000056080000250000001900040004ff000007fd17e5ffff08000400000000000000002e4d660976dab1f6f7ad49e7cfd240f070ba3f8a3da180fcd2d86585fd05ab9229f31210fd017bae4808927f2631fda9185dc86824bc97ad5ced2e0b04da66a588ddb87f4b3ba6f34d1b41535239ce994311091b4823af09f5070201cf494a06fc80318902fc20197a4cbdc69dd920606db3c238ff320f6f133cb2edc14746b1525e68bcd82c1a9ac042e0d9249afa362330d20e676457d54320b4737498eb212fe1213cc9fe114a7a796dc59d", 0xe6}, {&(0x7f0000000000)="e78d049c306f385e3a1f3b7987cb85f7ea05f5553923", 0x16}], 0x2) preadv(r1, &(0x7f00000003c0), 0x0, 0x7, 0xb319) 3.765262409s ago: executing program 1 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a3) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) lseek(r1, 0x80000, 0x4) (rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff) (async) r2 = socket(0x2, 0x3, 0xff) close(0x3) socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004040)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x1, 0x240000d1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x0, 0x1}, 0x0) (async) setresuid(0xee01, 0x0, 0x0) setreuid(0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x7f, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async, rerun: 64) getsockopt$bt_hci(r3, 0x11a, 0x3, 0x0, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0xa794a91ff1d9f28b}, 0x4014) (async) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, r4, &(0x7f00000000c0)='\f\v', 0x2, 0x0, 0x0, 0x4}]) 3.73713416s ago: executing program 1 (id=17): connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xff}}}}}]}}]}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close(r1) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x37, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x3001}}, {0xfffffffffffffc76, &(0x7f00000000c0)=ANY=[]}]}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0xff}}}}}]}}]}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) close(r1) (async) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x20, 0x37, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x3001}}, {0xfffffffffffffc76, &(0x7f00000000c0)=ANY=[]}]}) (async) 3.655372433s ago: executing program 2 (id=18): r0 = epoll_create1(0x80000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x3) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ftruncate(r2, 0x400000000000000) fcntl$addseals(r2, 0x409, 0x3) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x5, 0x0, 0x2000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001200)={0x20002015}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000000)={0x1, 0x80}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x7]}, &(0x7f0000000140), 0x8) epoll_create1(0x80000) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x3) (async) epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ftruncate(r2, 0x400000000000000) (async) fcntl$addseals(r2, 0x409, 0x3) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x5, 0x0, 0x2000}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000001200)={0x20002015}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000000)={0x1, 0x80}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x7]}, &(0x7f0000000140), 0x8) (async) 3.534591187s ago: executing program 2 (id=19): r0 = socket$netlink(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_open_dev$hiddev(&(0x7f0000000300), 0x4, 0x6000) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000062c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0xfffffffffffffff5, 0x3, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xc2, 0x13, 0x89, 0x40, 0x5e3, 0x502, 0x6b02, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x5d, 0x6, 0x0, 0x85, 0x3c, 0xf4, 0x87}}]}}]}}, 0x0) r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0x101000, 0x2) r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) read$FUSE(r5, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000a340)="20fab01aa3991b81f44f9fd0d6003c2d69eb95c2f3c62c23ecdd621563d5dcbc723ce3480d466ad707d95cad18cd02fae595b071ee8503e3ae8b6a42861a3886e241e95af6b53646f435588107bc0a93bfa5de56ecb85d266b9bfe5b6260748d4ca213493d5e8669d3a5a70d244ed9fb355a3080abbc7348bce352a695734cb745e6e71b94f4de5288d5bc657475b4ce36ce4097e54cb1aeac3dea868cbda80fb4575576a263d10ced66f5db7b9927448b1eb8959e7afeeec7e7a6d477d267b0714cd017d1a52c26de03791f9a8f9314ea693bf5ae8ba444f3ad113045b4802bd2ce63f14df3ae7869cdc89efd51a9be8aef24046956ae26ce34f6cc4576f8978fcf04810447e8cc5be3054fb431b75c4a9cab01f0b13b44fb167d6b727484ec2d2add714396249cc27de40292734f62ab9463fed72b91b471e989182f0c5b291654fc0e296876a745cae273fefd99414445c96648cb7790d1cacf5de2418d9618e39f9eca8592dd40e5ccac76672e8abf4319b7bc7771c8ba5391f5e6b91bc5e10132c7930db8edd0a36ddd1027be737a01c5aed7b2ad1a1d94f8a9f7c67c44d586384df9a6cb37f5f201fb73cd95decf435bd0126296d343d94693dfed66ef49f1ee7088306ad049e2d723772c41ddff83984bf11afe520e537c3a376347b042c6d41c3c3db6160d0d9a37234342807d7b0653ac3d345cc6afed858ad439f08be2521a64b52a6d3d32db5a95e5791ccbc3d6ef1f43bc0b8b5a14f20dcf8a74a7e1322bf6860222dd83e7f244e531e0f2c2c737ea9b8ef6b6548f8e139c1a7aa9c5646431aa657b4268ec96f4eb13a3573af1430c9d32438be007f055f1f1b93cf5606dff644c6bdf719ba65d1e6ff782aea69265f7a87fbaa3fb2f825323a1c7a28c27fe264e79a21601a9c3e9b3015b9273214c97f067783ae6f3f748aea0b4645bbc640ef9a1507516ff65015a3ceab3dd240657cd36d3f34d635be75ae180e38c992e99cb6a78ebe76ae2b8e99c497972992dfc7927b39c896c97c4e386c4e79f2d40cf6d8627cbb9f1afeb327e7f825eb969edec6253f79327f4cb52f7d8d3f1a9b67d4a22c3bb8a691fb119c50e4378f19463a4f154e406522dfc95ea689bdaa8954b6a9b0f0579af82a1e374dde2d7e0b69bcaf6d0efb42da7c41004af55b4142a9813f8c37ef38de0bc5ba469cecacebbdfd033b03934310ced83a2735bbbf58af46a8e27912fbc210c4e3b55e7f6501e3aa948825ddd0e1be20a9c225f20e92989946bfc9fa68da3d1b5ce362aa1635290dbbf622b2e30b51e12c95657a09c89c33e35325bade4f09089f2e67ecaa388dc9ecb6c20d3f841f39772208952a8aa98340e1c9fa0c3cb8a7119259a9b4910a06285bd0ae0ce24fe7eca9e7c4105a6e6e949ca2079999455385e87899576e0edea8a1b2074b1b72c2f0705b7d058603425e15555f206f48aaa223a34a3040b4d518dfb094f6a5686a163b6fdb30021fe34eed42c077e7e6eda956d01e7ccc3949d78ef8b3fb112c952253bb1ff131e6db1d7036a27d770e9458e7fb6a960515ff5d9a7b1047d621aade687bce82e84e64d0d658c94c91785094e66494bdb384700f6e83c843d8bab80f51d8812edd6205d86cb6a5021f34dc2fd5fe9960b84b87f4bbf8c2dba29be4c5f949b8fd20db80c1d274ec1231cc9c26903479bac3abc07ca15394b02d6e14ac6e846ecca07d5477e3c08c63116b0ea1a21c61cb79f5318efb117cf2217ee2c38bcb2c1996f5e1a049cbeb3a3b7d7ffda5c119e8e9d974d6283b01471e142f6edc2e246fa84d98f3a00311fdab212691abbe3dcd6af2e6af8d5a2b94eed4f6b2a05c6cdd29dd7b7c979e37431233f22ebdd2897e0fd9a25e88a5e999e4261f59e7c0d2e279c301ac543a87cef9c4548d1a8996b68010acf04cf96921ba3c3e01e61715f60de9c81b995321a242e7bdfbb29ffad7c9128d7a1f26cdec1c6ad6f71e941f2e126a2e30ffb62eb06df6f205ed8f468c988a1172d767f97f7e60451725313fdc1a497b043c9b21a0e768462b62d5e694bb2deebbc565c80cd109f6c35c5bf3d26a1a54a2e5b45f56d0f241d9fadde970a05b01dcadb1a16e213214c0c7942af464033be148e58a572f4ccbd62635e1614294a1d7c30cbef69c2c9a15532fdae2851dbcd7fbe319404016b35dc6b8d86cfd623a5fb5ad42a60cd4a8489a30d8b866fe43c8798756684d95f6991c5a00fdd72ff5c75d35ab1982fa20ac1671e2e3ec7e6e4f00904f72df37ac07d2812830f1587bb36e5b859341ccc4d4e8879f2cc9c26ec245ac19c87a54de51a5205756bae2f297dc3e49d71aacfde95b9dd00cf7bc516accef9ea5d30a042dd72d10eb575c41bd29a3b13fed031955b0fd707873639791a979d5708e12c92d028fc744f209a7158f4ce2f7c28246bea72168cee3100ec5149ea26975219edd27f109b766ea19b336be08381198f1a3a27bfcc6e2b6237e9352b3b092fd61eacf5104d34febf7e7da1bc12cf31402c51fef33023cc356745cbf2ee0b328432a59dcdaae8e458a5e3b909336be64b311d2358588ea41ea1e10321054011b864a650bfc42ad987d4ee9f67987d7306982543863a7f3b8c04f93387fe68702f7c67d206adcbd5144967a01d75d970e96782606f0c08e9a5c2bc6805920c4685e60931644fa1fa071fc1c713108ad71177ebe11fd7124266f9a3613716c1b0ccbabbbd50befd6aa1ada10a67972cbf253fbeeaa1f9aae6908a5f7b172ab04418023df57a400892053e48b02ab9facbc14af441875d52eba253068a0ef25ef707df94e920921e1709a1debd27abec44c28bd71371f2c21951b0979656e662f039edf22f9089540f428fad69cc23210e814871bff3d2f1ccae024830bbca895494f759b0673ee302b8f2bea24cbfffab9eb9f865daf34b8e2e870129af76428f04ebdffcba625d3fc2e87cfb1a0418625dc5dee80006055e979c634644da8c4a3169fb84599b64ca590935c423f0c0321285ae65802effa6a394079835217645a6c6d310e63ee22b8ea11d9092666056cb0f8916bceabe85368fb8372e97eaea40a33d8cf1fc4a129edbccfd12d04663bb8d22daec8e85e44e91b6a502958ba67fa367d06eb10e32a1c67017d54b467c91668bb6e747dc2f7f2a980a4db25f47b1dc9cfab7f20b81152016eb287f9d2ed69c9971eaf00ee32eb570d7a784dc8d87a0fda82227678634234bd2a955b6938695fdca3618bf8d885c274ac0d4044da152716e3443f38b3e06f7175f38f2adbf7e6a703c5570e3ee093ba8c8e4121999703808005062ed2a62f2e1ac3090d2a93f139fc8288ebf76ab1ea8372434ee800abbee353404c5dd153d1f59140bcd768367efb57d6799319fd527b32f224465b7227c0f6912584c874e10cca008c277c4e92b6875e200cc70a43e95d27718bb725f49dbe7c4465a242e1fcfac0af08266e6c3c67038d617970f54fb7b4175e022602988b764992db632d41adc05740e0103d6dd769ab4f45d2e75aae192cc639a98ef068941e44e40f2ab1ad78970bf9cbdbbd1ca35717ab8814e01e93069e8925ae92fe75ab091cfc0d76fd34302cc458b9fa1cd0df711939f62fd5a99cf96c48b780a3faac4ccd10d5103bba0c5989593f8cc862e95df4591060abe2ffa8d54688a035b6d7985cdc66354b529d5a57184aafbc269b39dc1f849c80e21c9c09c6ea3281d38d14f2415eacb5932b537f2c9aec02701b2c82545f9eae2689fc5d033cf2e9880208cf04122e7b3dac0fd5d1cfd705bf741df4eb0fd870f300cad56c0a48ec5b4a4e9496cbf43ae35d5de995b604fe1465be2bd6b73fa5cf73c597eea405e2a3a91e04c5c3244bbad53fa8f88e157875e082e344e68f69121ac3be112ea15bfa1295511eec0dc0a385edbedb154dac50f77730678204305c1c914fc28aeb81cdcd34d47b6941f474decf70b6d4678b4cca8424875c36cfa7ac3a53416fa50b0ffafbe81ab74ae43d72b36217b72bfe76e29ef65db5a04620251a2348f4bebd70844b6f530b985a7ec069626c5527a113f9b2ff5a46ee83042b076a319a6d162499ed7e994a29f7fa2a75fbe66a5bbe7abc12e766ed6bfcfa7d307a861fef1b4b23fb9bf3da531dd90271e2f4070259e7c6e2ac7980906facc743136661d4ed24821a3d2305c2e17e2da4bc0f589cc1d852a5007f1a3e3779db6df9988909454a6237120dcc487062a6dbfc16d9fbec6c46c30b673106267ff130a1d0c974a6adfab8f7c451b09fe549870240d7a5ff7bf6e99fa5084935423f4d03b378d3c9f0b699ca22648cd4ef54330fbc0ef1ff0f3f46b5c9bb11060bd2e0f5834f5fedc4ef95e751c8f9f726e89c4a80bf371eb65f30decf75555400f3ac5ce1181fb00ccbd6ae211f6328dd3c2ed60f06115214983fd374432a3b611d499f110f53ad5c2d06af0cd13422c320ff60242bb73df5a5a31764b91fc384f396bea3670e466ac77923bc872915f953f689ba12d84204991844ac5476361d71d7b86b943cb9218023cf12bedbf30d071e5b6e161dfb886e6e39c1bf86b4fe1a276ba641da604eed44e66f2bdfd152dd5a8a94849b896076e49b61ac7a7efa6ef3ef2909b383ee7505c72d85ac33d28fd70271b7cf242abbff93f7acd2a390b02ef31c89b40139ca9b706b99333c829028d2b9b876e82fbee26081521a4c48a4fc21b3b1f195a82d340c88fe06dbeb3b8be97398c7d5ce57d2daddd1221c11eaa6ad79220b31314ba04fbadd4608e9eeb277723ec470b783fc4e20254fbf357e7bf160ea87df2f496cbb3cc637af1a208e0063888aa067e0419dfb3390dbcefd7440dfc926c738f19dcddeaf9d5d364855be65cf558538f9bdc6e96ccd494b13873f8e68d058d650087b5044bee4f686e4441d934550a2d48f8e05f131d02e04614ff5db2c428565dcf783ebb780ef74061dc5f200451c61d4bbd3cb18da4e8347e0aa739fd6ad6c02d865b4ca43817c41e7f62b53ab4ad1118f57cde558fb15934d644694f3a644f91299ca8e50c1357c3e4ba95b8c63dedb0a9aa9c0bd07e099b16bc30db14a56c0f03cc9c28cf3249102fbaf9e5dec7b389b4d8f1476dd1bed6ca2e84f65d0874fa73c8e611755a8ece7751f1187381aeb45480412884826f265e045f8b537415e1eb2ad0a3f13788e27f052e9971e660f36665dcc3371fb16115fc3665f9ffdd79356f52ac7c46b4804f016e7dd1669c05d433403ae50d2a546d6858f62411fa7ded64c85aa8579e98645afbae4f106238cbe7a801ff24015f5437130917db9838c5f4a13f5012d74957bbd1921f8388d41a0a3af3c748632b974d4486b0c95859132fcd1123e351cf1f372c5a47fc5a0bf2cdbead7c56934bd8c32e4752b7e90243e23b0e2501961015382421d52148ebad2207f8c6af8a112701619aa79a8c53a267a7b138a627b2e35f74c6e282ee222aca748ccebf713ca0cbf238cc2f2425610f9b2e706a41e6f14620c6a21c01b47440f3201c7749bf97139205b41c39b46de8b3095287109ac2e572e187419a1df60ccf942d40faa31e9e1f881b4427298247d29a77f0dd489aa17a934a762d8a57489013ca26b08b1370b481928c6b98b3a994cfd9d135a17759af636e63d5dd804260bcb19016b5a70cd8eea3e6db16042e6199a408040898dde11a871cf477ebfe025e2e2856e446e9274421386065bf14e00d584da34a888da597164ca5c6efdf0462c25b574ab6ad3db9bf478310103ebc0d16ea9ad5250d1938749aafca6157003def6b16956dc8fc4d7833f0c02a689a16ef071067704806b360c4e6498f54f54b9a6d24315a1d5cdf9da3b0747d766eaca393ddf09f5505a7e5de4819a140642bdfc99f182a5a965b2bf1ad2a501d25ff34733a2d7a2dcb5842a2cde35e0af484885b222657f2c18786f3519dea93349ec67750295d1884fe50cecedb01748f3f6b35c6a7761e97d79bbf71a1533d59066e59f528dc058827024040c018f4d1195148f793a6d6e502d88345c00751e551f4397295bbd5a649d404d9427be1f299b856691904ce42db1a65952ae73daa7fa4e2a9a6e5b467f9aabe3e3599004fc51b82a110b2e183c9a811ca932bb839acb961f3bca4b25b8cc9227f4ff7b83fbb31174aef0c391730140cd274be0396514fc6b56d503e5b1bd100080bcb645c615e5233a7b4b4ceb67cb91df9795d66182fec3d43698778a4dcf8aea3413c24ea0237dfb6b4cd9d585fcee08cfcdd4f892d76dab5504f7c6c7c73dd5a4d5815ecafbe85622fdbc773f3cff56f4b06bb2c2aaf0e0685cbb9a30a74157b675e1f035d37b3f1f45050502d74f430ea9da3ffaaad1bb7ee97e539f39d73e6e1465e767db7198d3b6f0a3c443cf5aea8ccfe23a062e3ba7918b86c4472a03ccdd7e51392eedc9033da5ec18efb2d5c894d7c6989969e03ba7f628d5248efed72775175a6556dbc169935fa851556f1de2dcf28965023196a6245f22d7eee4bd58c75eb3ccf169ac97da0ff72a538847e5952e4c4361fe2ccee539f4d0884be73c162c479a6abfb5778827c533166c720ab72b4ae019dbb355a4ce503227f0dd97dc028748736f3f1a74038eb5f08bfe1fe493ad59d0c04c4cd0611f30e9842e3fd1a3ff5430b477e4c9cf49f6d3407c2e76e05f4bf25f5aa358e2837d91985c44052569a4ee16824e2ab5646bbe993f2d60bc2973b285346faf8362e758e96714fc883c949c5461285f3102ba1c8c304064692eab8e593ba07c84ddf111f54b89d50867fc2883aac3aa03e5f96108acf0276ac8ae3183aa9b7d8ae905cd72ed0198ce79e503e15225256fd4cc3e9432acc7dbfce9b7d4ac19ec1383bc6d56fe6b04621718ee4c9f04f641d75733ef59cbbdd6925af64d1706fc674034be7b36570f20a3a2d4f24b10fc96e04e3326bfb1e4107a7224c90b0bf712d3a9167ffc86f718e3650124f9cb824f5f6cdb5abc5132a79896844dba54d330a5a6bafff7721b97b511f8c183ddbfe1a1ec6825746794e6a06aab15c86da686df5a879ff6c1e48cc582767daaa79ec0be155d392e32a588242d7924bf09d87874ef55e2bcf16c10df977f2dc20e35357040f018a73c0d8f5f9a3ff15958ff16f8409fc151b19f3f5506f1a156f827abb1cd4806a5a74ca7a368dc90e0666deabb3751278e9ee06d4e33ed40d8af9080622858dc2cb74183694ba082cad078b4a9bbfaaca898943fb77e829b9b9cbdb057430747e3be4d3e68354495ee2a8bca99016af0bcd82ce7058014098accf31557031a87100e1da7ca1d8310aa4139c1bb6f4d0a5e34d94e75c14df622ae6b9f7439183452d979808de5a697cb2e1aa5273e4188b373afe6749a0030d59464ca6af92f02e58ca067eb171025906917a4b23a384f619a83ec810b1a608d40956bc9f5c7099aadfd3f7cef5e29c35f75fef2d6163ac10a352cd0979ca83f230d573e756b44029195097ab067bb6aa27f546659d52e4888d00cd3905eb7e62328491ddb811bffc8a1fe7b47665c44afeaab295355a45aaacca64c818f6eef1b1bc25669d09044ef4b19d0f0c911b07832f377bb01bfe1194f7e2805a001ab1a018b7eb6383aed1d01b2db35d7be3c18118ba1694842c1b8b6b52a90b8ef59983e71c3fa0a17f0e432e5853703ce950857dc1b2485f788b8dc979ccdfee545cfa11e9de9f37fb72610d6283da5fa000ec1ef4bd180069f573b90997c32459cc17fe20c5b2dab54615a42417ae72737c20bb50f29746569f4bd540ac0196b368cfff7e2f550e80145ab0e6ea5d4257c74636914d065c38081b6d0947e0457e5559ec55bce20c28bf3a1ddc354e5570d0263b2fdf96562c62e395a2b7381eb992a941140ce8f5985ed6f80678ea617158caa0793956b77ddd4456770e1c500f3e36098c0868c73d6f032e0d3b5b64e68b78380b1bc4c8d81a1002ab1402e9b2fe5ada34477d3b8ebfea8af085806f96aaa3109cc0e8789fc7c4c56b9dcd72eb663c3d358f97ffdea1e506a1e0721a945c782e9a9251188a6e14171297277dc6e3588ba0463f0a2beca3c45e33d40c9b5ce845aca9886ac184b55d854bac94196cdbf1922532973c4dc9593c5de022070288c08f3675bea7371485fc2557461e42ad752b819a09473879c77619dd0c3ac705eab572fffbf2cea9420cfbcabf6c3d813d7923d14c89d0a0244c64b15cf760ffac603ad56e4363bea2667d385baeb71cccebc1cfc4aff668614614b991254a0cf564b791df0e419d9f08b71ff2357aaf8640d5aaef625db13c256df1b886069d2536ed6b14d7e1c2d0388606de561660ec1f62d005f1f26ba7adb290b994d9f4a140d19962c31cbfb7c3f670fed1c92e34ed54d1a77429e7ac7ae20292bce910efd26ae9dca98b6b49cfb9d6610b45189d94379b55677f20b1271e2942854a12900751623e1cc0e48644b834efbe3c749f310f2d363b919fe310e2c690559b85960827a95fb2c7b81c0348ecd6bb8ae9a5002fd8f5cceb656dd86d614196a3c06f2773e11394d401f2945507326935d8efc955aafa6d53db0cc5e75a6ac0595b76fb92233a42fc89aabb10890b290e5f207113158ab45908e2b914efacd7ce726dbf82082563fbcba80d48ab6dfaf54a8b24bac511f468f1838966fa76ba7cb141d44731e2f87ecabb8405b2700edff3f3e219fa94d412fe9e0686db76af7d528fcbb5b8fc67d4870d5ee6d04a4b3d1b08ad29c631c09a14c630ad57e2569c69a76e430c4f85b9805fba963212d0f3f29df73b32274badb978842a1ebcec847e24b8590073707881ccc62a08db41e02546d7848cf0fe064ad50bc528cb9a614c10601988ccfe00560b80de54b1f692d8ba259f26880098cd5afc7563813233b9843752486263e002770400eb2824ef2f61b5677e0d00389860266961a38e527b859852bf6b7e23b06157727b73d69c4aee9b2e2960880b56c6079b32900db1ceee56e7d1bdc1c8de0508115a0def84439dee598c4f5dddc242c1eb55e53400e000fe23b5b8df9daafe7e532567b43cba2b64a593bab399a2171f3562a9d00e8c542db7873df893b5641b3fe18a2dcc4a3d519a7a68f3cf36ce221877f694583280bf3e08d5725d391d7e50a08d5d0622aa7d18336eac36f6a5ccac4fb8196d19298a62500a090e7ef2ff8b0874d34c709d86895ef166db202f7e57e39cb53581651870e6500dbebe0ecb7cc3fa94c895396532c0fdf5e6add0ed8371119b0781ab250f7cd0136be29c14d3d76ec64bd14dbbd2a8b0e184922a962d437072377f36b218a69acde4bedd195b581fdf02f2ac95c589fbfc1d06c1431d02d10f5c325316458ddc274128590ef371ed1bf656cf1e2fdc9da82736b7726a52f1b1b0f36b11cf6d21235fd05797c91dbe1b0defa955a81d230cbba970e5d8bee5c010b2b5be88e0d5b73c435d27a8418bb8302efd6743423c9700766e790aebb858a03909c059bfde63bf774316cd8572ebdfe4563a8550fd3e64e1c38378c75b090f47f6f1affa2bec77f17aaa7e1c5d980d60fc4384f6241c07ac8578db01b8f225dc3b533e85c6c6ede97e154fa12fd9d13e2e8fdfa1a7ea2184eebc225f1a96fe70037d718145b775456766209541058ea478e65736c87ecde467c73290c3f3446f8aa7bb461828635059549e098450977e56bb3e08a4a018b9caa24126f2812c1352c51d9187fc532886a098cff963e81657f23cce8d75f59b24cf7174a321d47a8d2166913f7eab9f3ab85e9277e1e011a9d390dc6d59bcbff6c0f96dab10969287fc15139b46bc1c00e2614c95810bff4ee3e8e868e10d024af859394e3d871e85e43801040475057e80d418db3d9c3e27634ca91dbb2601392f6bb3b972ccdfe279f03d2f9ae9625f17a9df7b97c43aab9c846aadc58e8e11b00d28ec6b24618eb4cbc2eeb8d26cc8c45a652f843d632ed6cda77995fdbb0b968d4536880b51fe6d98b51405243f023e5cb0bc20b8a8ed1bb0df2e7bad1b1113b6d9aeaf1fb72fdb37613fd6fcbfe3f2d0a7631064e2f51306adacf44893ceb1383bbfbad1fd96c7a18f15625e268447663cbbbb16657884861b876ea924160911aa6b00e4933b666f0ce2f95792b0f8a6e03beef222365fc91773c311d63568fbce05ae6016c3c1792aaa52189ad95119194dae0342284c851110b94c7e5f1ee5325bf1b45e159471c510a90a66113e6a47544593563cb4c0d6aa2b3a2d78e9d3c6c98b31084ff7d06dcc7c8c7d99034c2acec76175348b971449eb43594737d58e9f8b4a7af9347c5a21ea08ecb5b9f198e01c9922c8d2f60759ef2e40e5d3b013becfbd46238895ac0a390d40d2d91c0031166d628c83bd95f378e6e7c27a06b7b9cb68af9a9d16dccca66d27c58f301372bb101bfbb4d15b7e47838238bef3889a89eca0353499cc7499dec7a91d53681491f9008c7669497937e74de2a7a680d2ba2b1ae3e906cbd2fdb3118a369f53aff9a55c7a939d378bafddbe59e38869d4805e7cc9f2a5e140d7146b2ad472801f9d2cb7d102ca1dcbc20be33d1a780c9a79c1550846de0d0e63e2d31ef8eede9544080c515262fe3a06452f3583b30e6828c02177a346005555cb75e5d67c4aa7a99cdadbe0d43ec7893c823d9370f83b655ae8724a9f335a0607443ca8846b10aa8b985de11ce43c2fed53e40ff240d6673b1e0701d3fb0bcff5adc1baeb8b505a0de5aa6f31b368303b476f3e8cd672fdf550dc7cc1ed2fdcda45fe6b5a814f7e06144b1f08c4a15b347ed8d3b81c7f971d9fcfc676c01450b44b469324230cd7ec1b7603db13617155e95e376389f020e2f76e242b7d4e9d76ea8c3f5763a18b63193693c935477f18c425410f4d02ceb0d437b1f5dd0d876fc1b0298aec7a38625390cfa052d6896be21c630f323af19bc37f7391e0802ae9902aa35733c7b1df39da8e61667bb788f8dd2fa259df7ad74472c05f44f79198f627dc64effd5b4bf78141babac4662c01dee1a581f808c05f9c540a7f90e02415d457adbda63ea78235f75bafeca785676221dae05dc508a02ccfa62d8e4696fe924f56478669bd78d3c8d87d2746fd6d969480b51682635ddd7addfe2ff4aed54abc685a9dd4732adb73910bd87336227dd4faf90d99f8ff48c7792aaea947ea38ca6c983918b9e571c6cdd0b042919a1ff6a6e2f3c91e0fa30cafe54c6fb228c37b37959f5d836e7a2bb91ff63485396492f7112f093afdb64c6f95dbb5a7de545554820913eaac89090d7424900aa880a4b2247667d99887299c15ecb45114006fcb24c334f1273ae8bd0b186777cc37d12429edf2ccc222e15a33632ec9122f7c83525284d652d710f8eaf4d44ff2d9af45386f5bd815ea2722fb91d8d257d55161c41f25bf92616771d6429bc361304d6348376794b0c814046a13ce7ba35f51ff702465d15af28ecde033d475cb82455dbf70478b351b19c82dd3f2bce24412de275eb25c3e3db1b8a5876c77eb68bbb4a4c0f7bde5747aa6eb12e0b772ca01400ba4983156e165acb6599cfd2cf92a0a42ff7537c1", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x400000009, {0x200000000000008, 0x0, 0x0, {0x4, 0x400, 0x0, 0x8, 0x10004, 0x80000000009, 0x100009, 0xd67, 0x886, 0xa000, 0x80000002, r6, r3, 0x1, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mincore(&(0x7f0000662000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/188) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 2.856970329s ago: executing program 0 (id=20): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="f4bbfb550fce2a91887b42116cf068d930f92209bbfe347928d3a8e2e2a2e2377039d423badd11476ae0d1cc54f898de18b69fadbfe329839ab3397d6f011e341b484c597059d3d1e7b7a9d802324dffd41c4f21105e258f4bb76babc32459f1999d18cb9385c5714d141608a921e3981ae410537897221d3e66291aabac40a66ca27dd0f58bfa715bc1f6330b1d5839dbdce35abd7c2315e853d258c7806c2fc61f280030ad304e7a506a4cf43ce5881b9b70fc6b116777282ae1b678ee67d8", 0xc0}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg$unix(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x40002120, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000040c00725114000010203010902240001010ed00709040004040301020109210000500122880709058103260006e908"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 2.585539707s ago: executing program 1 (id=21): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0xfb}], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r2, &(0x7f0000001180)=""/109, 0x6d, 0x0, &(0x7f0000001100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x4, 0x800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000900)={0x1, 0x0, 0x2, r5, 0x9}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x47, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) unshare(0x8040600) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x2c, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000300)}, 0x4000895) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x6, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xf79, &(0x7f00000000c0)=[{0x4, 0x7ff, 0x19fa}], 0x1, 0x7f, 0x10, 0x4, 0x60, 0x8}) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000501, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r10, &(0x7f0000000040)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x40, @empty, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x4040) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') 1.86669854s ago: executing program 1 (id=22): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ffe20518975244a7fa510554f36fe607314f74fe5d874aa611a111d0e18c9adb2f4b476892e35ff5b9efd1fd58914f30abee43c253f46c40a1f330c0ed99caed81956ae8413ad9f1d6be7dd36b3027ee", 0x7a}], 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x800000, 0x7, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0xc3, 0x0, 0x0, 0x15, 0x4, 0x4], 0x25000, 0x205344}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x100, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x30, 0x2) landlock_restrict_self(r5, 0x0) getpgid(r4) (async) ptrace(0x10, r4) (async) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xd1, 0x0, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r7) (async) syz_open_pts(r7, 0x400800) 1.86568062s ago: executing program 1 (id=23): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000011000100000100dffddbdf25d0e6cb2a16"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_io_uring_setup(0x105a, &(0x7f0000000480)={0x0, 0x94fb, 0x80, 0x3, 0x201}, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r4, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x7, 0x1, 0x6, 0x3, 0x3, 0xfffffff7, 0x1000000001d8, 0x40, 0x5d, 0x8, 0xff, 0x38, 0x1, 0x74, 0x0, 0x104}, [{0x7, 0xf, 0x10000, 0x5, 0x7fff, 0x1, 0xf}]}, 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x2}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x0, 0x7}, @generic={0x3}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="70000000ffffffffffffbbbbbbbbbbbb08004680002400004000002f907800000000e0000001070305003a006558000c907881c5000061f9f4a37fa79485a184a818d0dc555a8eb1b98713b6519513fcf1b8f030ce0ad99b425dc8586c64b6c999c17793c82be82f4faabb7f0e911ad3b5348f9ccd6b2544274b2eab96451a5da40c74f20b675bd6d29cd74aed658d074bd2ece83d86b2065a8b8c9380327580d4c0f6cbd2c8c2efcbaa3071bcdd1ca9dc5ec32da570f881c7af93dbc905c73347a103a3126a2da7764ddb63ec2b6e40316b7e835bd135100634e61f643ec0172cc99c31d83c50a575e7c99552f770038790f03975b7a62acd9a3460a327b714447eb95e0b41d0887ce92f964ad9f3d924171346d970"], 0x36) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x10b, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x8b, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb8, 0x2, 0xfe}}}}}]}}]}}, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000100)) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000b00)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="40242800000029231ba57fb04dcf1e07d695f268e872933816c7852798b2974b1fc634f26cda14d95e6688adb139941a89f711e1bb625bbf30af4f8c434b8e6fde62"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xf8) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) fcntl$addseals(r8, 0x409, 0x4) 1.56153316s ago: executing program 0 (id=24): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0) syz_usb_connect$midi(0x1, 0xc7, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x1, 0xc9, 0x20, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x4d, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x2, 0x1, [{0x4, 0x1}], 0x81}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x10, 0x3, [{0xd, 0x1}, {0x1, 0x7f}, {0x5, 0x7}], 0x1}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x80, 0x3, [{0x80, 0x6}, {0x3, 0xdc}, {0x7, 0x9}], 0x5}], [{{0x9, 0x5, 0xe, 0x2, 0x3ff, 0xb, 0x0, 0x3, {0x13, 0x25, 0x1, 0xf, "2928af76354089f8f9f62917a06221"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0x6a, 0x8, {0xc, 0x25, 0x1, 0x8, "eced4c8959eee187"}}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x7c, 0x0, 0x4, {0x5, 0x25, 0x1, 0x1, "ce"}}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x5, 0x8b, 0xb, {0xa, 0x25, 0x1, 0x6, "2491d448a8b4"}}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x6, 0x7, 0x0, {0x12, 0x25, 0x1, 0xe, "46683ac0eef2f2272650dfbeeb9b"}}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x0, 0x3, 0x3, {0xa, 0x25, 0x1, 0x6, "3c49834f3d09"}}}]}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x7, 0x7e, 0xc, 0x8, 0x5}, 0x20, &(0x7f0000000380)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a95b0add149326efd7aed5ea115e3d0f"}]}, 0x8, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x844}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2409}}, {0xc8, &(0x7f0000000440)=@string={0xc8, 0x3, "4788f8fa11570585b46b44815332ccc2c65d69172818c42084ae642b6cea82ce8af2c92a2fb502a3e302db68a83a13b6706f65a4fb765617cda4d1f932f99411b2929e870a737ac1c26242635427e7dfcd44e3f219107ebe9b3c90b167730f81a71402e0abbc27d075db49f59eec84bd839b602f5649e6135ae5d361c5b5a2dd07fd27aecb575efb4a22ca5f1ad2c726f055369e391ab077aea5dc7334fa4878fcf6b4f877d2bb6d1bc9c8b2687158d42b44d97c08463a80d2ff645575ff16a2b24753e6e410"}}, {0x83, &(0x7f0000000540)=@string={0x83, 0x3, "c7375d303e727174bdd5ea81ac1b7e5e7812d50cab356bbef62563f1361e883426de6010de2c923a49f22fffbdbc421b657c022e085adf89633fb759486ed5d6e27b74e7371946a896b1e8d287610ab63b05002df249b398436e237df68f41d88cdae21fc35883ebbf54475665c4ed190edbf73e18e3e33afb4aab12f80990b100"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41b}}, {0x8c, &(0x7f0000000680)=@string={0x8c, 0x3, "42096ed51a29645395b28e9a9a79280c7384ef6bfaac87f4097672af0d269317d9ec53d74187c3fa627263af35aa7239afb4322bbedfdc46fa4e8d96df4c021608c06591d5bc5b2f0d63582c594ecacd6c721d3ed822dcca0bf24f1167ad1fffd33f928acf1f56c37081fb6ec5f18b7cc5dfd48e4d2ff1a2b22656374371c2e20bac2a202f71af1952fe"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_connect$uac2(0x2, 0xd1, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x4, 0x10, 0xf0, {0x8, 0xb, 0x1, 0x0, 0x1, 0xff, 0x20, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x40, 0x7, 0x1b, 0x76}, [@multiply_unit={0x7, 0x24, 0xc, 0x6d, 0x0, 0x0, 0x6}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x7, "8ba08346e318"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xe08, 0xb, 0x8, "aa9e4b"}, @as_header={0x10, 0x24, 0x1, 0x8, 0x9, 0x2, 0x1001, 0x80, 0xd432, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x210, 0x9, 0x4, 0x69, {0x8, 0x25, 0x1, 0x3, 0x30, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2ac, 0x80, 0x96}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0xdafe, 0x2, "e5"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0xd, 0x2, "4678f1673bdb89"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x1, 0x6e, {0x8, 0x25, 0x1, 0xc2, 0x3, 0x5, 0x1}}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1, 0x3, 0xa8, 0x20, 0xf6}, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0xc, 0xf00, 0x2, [0xc030, 0xc000]}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x81d}}]}) 861.421402ms ago: executing program 3 (id=25): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) getresuid(&(0x7f0000000100)=0x0, 0x0, 0x0) setuid(r1) syz_usb_connect$uac1(0x3, 0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902840003010910080904000000010100000a240106000a00020102090401000001020000090401010101020000072401080901100b24020140040901b04f4209050109000405f70d0725010c0940000904020000010109"], 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x292182d, &(0x7f0000000080)={[{@pids_localevents}, {@memory_recursiveprot}, {@pids_localevents}], [{@euid_lt={'euid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 498.651204ms ago: executing program 2 (id=26): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xd8, &(0x7f0000000440)={{0x12, 0x1, 0x211, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x9, 0x40, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3f}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x10, "4ab5c5ac28"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x9, "6d2673add9de"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x6, 0x3, '*'}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x5, 0x2, [0x2, 0x9], 0x42}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x6, 0x3, [0x5, 0x9, 0x1], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x9, "faa4", "fa28"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x0, 0x8, {0x7, 0x25, 0x1, 0xc, 0x3, 0xfb6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0xfd, "", "3320d9"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0x6, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x965, 0x7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x85, 0x4, {0x7, 0x25, 0x1, 0x0, 0x9, 0xff9e}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0xb1, 0x5, 0x9, 0x8, 0x3a}, 0x4f, &(0x7f0000000580)={0x5, 0xf, 0x4f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "56237c27a94910c530d4935369f3271c"}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x3, 0x870f, 0x7c1, [0xff0000, 0xff3f0f, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x40, 0x20, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "45b41387a9c1b9caea263df1c42d4c3f"}]}, 0x3, [{0x98, &(0x7f0000000600)=@string={0x98, 0x3, "545295f0552fda1cdb61bd27cc4b04dd341680373731e897e1cd2cdeffd19f885f773c4a8f15111e5ab3febcd3c809b63aaa5b2c49faf953db76df84deece0cb1d60d649794d0a8b63f78dd8a0efd1aeefebb1414c699d7a8661e2199bc4a255ff7522f3ae4848659cd7ff7a7369b4ac99a15540da9fde8d9dbd7ad130971c0156590917bb3e64409becc9e6796a6b4a1f890ac4ceab"}}, {0x35, &(0x7f00000006c0)=@string={0x35, 0x3, "3542af8b15bf501d20ce61d37883b23dde207c38b4592546d4667e455024bb85ed4335f2581fe16fae8cd99320fda750bd6a4f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41d}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdir(&(0x7f0000000300)='./bus\x00', 0xde) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) stat(&(0x7f00000072c0)='./file0/file2\x00', 0x0) 0s ago: executing program 2 (id=27): syz_usb_connect$midi(0x5, 0x24, &(0x7f0000003f80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xdba, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x66, 0x18, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x33}}}}}]}}, 0x0) (async) r0 = memfd_create(&(0x7f0000000040)='\x13\x00', 0x3) fcntl$setlease(r0, 0x400, 0x1) fsetxattr$system_posix_acl(r0, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 21.281498][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.281516][ T36] audit: type=1400 audit(1782133641.290:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.286533][ T36] audit: type=1400 audit(1782133641.290:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.291036][ T36] audit: type=1400 audit(1782133641.300:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[2559]" dev="pipefs" ino=2559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.294525][ T36] audit: type=1400 audit(1782133641.300:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.297850][ T36] audit: type=1400 audit(1782133641.300:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 29.726730][ T36] audit: type=1400 audit(1782133649.740:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.730829][ T286] cgroup: Unknown subsys name 'net' [ 29.749430][ T36] audit: type=1400 audit(1782133649.740:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.777303][ T36] audit: type=1400 audit(1782133649.770:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.777788][ T286] cgroup: Unknown subsys name 'devices' [ 29.897802][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.903474][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.019586][ T36] audit: type=1400 audit(1782133650.030:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.042811][ T36] audit: type=1400 audit(1782133650.030:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.067590][ T36] audit: type=1400 audit(1782133650.030:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.098575][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.107480][ T36] audit: type=1400 audit(1782133650.120:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.132919][ T36] audit: type=1400 audit(1782133650.120:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.186064][ T36] audit: type=1400 audit(1782133650.200:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.187414][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.211731][ T36] audit: type=1400 audit(1782133650.200:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.087016][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.094114][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.101454][ T293] bridge_slave_0: entered allmulticast mode [ 31.108085][ T293] bridge_slave_0: entered promiscuous mode [ 31.114389][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.121708][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.128911][ T294] bridge_slave_0: entered allmulticast mode [ 31.135208][ T294] bridge_slave_0: entered promiscuous mode [ 31.142930][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.150051][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.157237][ T294] bridge_slave_1: entered allmulticast mode [ 31.163535][ T294] bridge_slave_1: entered promiscuous mode [ 31.177506][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.184598][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.191882][ T293] bridge_slave_1: entered allmulticast mode [ 31.198346][ T293] bridge_slave_1: entered promiscuous mode [ 31.256622][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.263718][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.271019][ T296] bridge_slave_0: entered allmulticast mode [ 31.277386][ T296] bridge_slave_0: entered promiscuous mode [ 31.283928][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.291234][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.298443][ T296] bridge_slave_1: entered allmulticast mode [ 31.304741][ T296] bridge_slave_1: entered promiscuous mode [ 31.329583][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336722][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.343816][ T295] bridge_slave_0: entered allmulticast mode [ 31.350297][ T295] bridge_slave_0: entered promiscuous mode [ 31.359561][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.366723][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.373846][ T295] bridge_slave_1: entered allmulticast mode [ 31.380229][ T295] bridge_slave_1: entered promiscuous mode [ 31.508955][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.516182][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.523532][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.530682][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.555917][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.563022][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.570362][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.577474][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.586280][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.593621][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.600976][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.608061][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.642542][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.649677][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.657001][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.664054][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.677105][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.684523][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.692306][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.699934][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.707914][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.715107][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.722520][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.730006][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.745761][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.752852][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.760788][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.767850][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.795382][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.802556][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.814201][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.821310][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.858008][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.865170][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.873779][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.880883][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.893637][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.900741][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.912073][ T295] veth0_vlan: entered promiscuous mode [ 31.929942][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.937060][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.948372][ T295] veth1_macvtap: entered promiscuous mode [ 31.988423][ T294] veth0_vlan: entered promiscuous mode [ 31.996669][ T293] veth0_vlan: entered promiscuous mode [ 32.019468][ T293] veth1_macvtap: entered promiscuous mode [ 32.031451][ T296] veth0_vlan: entered promiscuous mode [ 32.038779][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.062088][ T294] veth1_macvtap: entered promiscuous mode [ 32.084246][ T312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.123492][ T296] veth1_macvtap: entered promiscuous mode [ 32.155512][ T315] TCP: TCP_TX_DELAY enabled [ 32.182851][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.314416][ T315] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 32.455642][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.586197][ T46] usb 1-1: device descriptor read/64, error -71 [ 32.785628][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.835675][ T46] usb 1-1: device descriptor read/64, error -71 [ 32.935760][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 32.940937][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.949914][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 32.961237][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.967961][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 32.977396][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.986841][ T10] usb 4-1: config 0 descriptor?? [ 33.075646][ T46] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.096776][ T65] usb 2-1: config 1 has an invalid interface number: 192 but max is 2 [ 33.105127][ T65] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 33.114149][ T65] usb 2-1: config 1 has no interface number 3 [ 33.125707][ T65] usb 2-1: too many endpoints for config 1 interface 192 altsetting 140: 51, using maximum allowed: 30 [ 33.142997][ T65] usb 2-1: config 1 interface 192 altsetting 140 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 33.154347][ T65] usb 2-1: config 1 interface 192 altsetting 140 has 1 endpoint descriptor, different from the interface descriptor's value: 51 [ 33.168825][ T65] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 33.183362][ T65] usb 2-1: config 1 interface 192 has no altsetting 0 [ 33.191856][ T65] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 33.201082][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.209808][ T65] usb 2-1: Product: syz [ 33.214030][ T65] usb 2-1: Manufacturer: syz [ 33.215807][ T46] usb 1-1: device descriptor read/64, error -71 [ 33.218736][ T65] usb 2-1: SerialNumber: syz [ 33.265659][ T346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.413033][ T10] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x2 [ 33.420422][ T346] usb 3-1: Using ep0 maxpacket: 16 [ 33.425768][ T10] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x6 [ 33.432820][ T10] lenovo 0003:17EF:60A4.0001: ignoring exceeding usage max [ 33.443697][ T346] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 33.455722][ T46] usb 1-1: device descriptor read/64, error -71 [ 33.457589][ T65] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.471218][ T10] lenovo 0003:17EF:60A4.0001: hidraw0: USB HID v0.c1 Device [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 33.482547][ T346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.491601][ T346] usb 3-1: config 0 descriptor?? [ 33.504892][ T65] usb 2-1: USB disconnect, device number 2 [ 33.532466][ T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.566265][ T46] usb usb1-port1: attempt power cycle [ 33.667146][ T10] usb 4-1: USB disconnect, device number 2 [ 33.905598][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.905903][ T346] usbhid 3-1:0.0: can't add hid device: -71 [ 33.919900][ T346] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.927249][ T46] usb 1-1: device descriptor read/8, error -71 [ 33.930807][ T346] usb 3-1: USB disconnect, device number 2 [ 34.066723][ T46] usb 1-1: device descriptor read/8, error -71 [ 34.305611][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.326701][ T46] usb 1-1: device descriptor read/8, error -71 [ 34.425599][ T346] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.456704][ T46] usb 1-1: device descriptor read/8, error -71 [ 34.565829][ T46] usb usb1-port1: unable to enumerate USB device [ 34.575657][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.583407][ T346] usb 4-1: Using ep0 maxpacket: 32 [ 34.590014][ T346] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.598429][ T346] usb 4-1: config 8 has an invalid interface number: 131 but max is 0 [ 34.606909][ T346] usb 4-1: config 8 has no interface number 0 [ 34.614575][ T346] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 34.623827][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.632062][ T346] usb 4-1: Product: syz [ 34.636293][ T346] usb 4-1: Manufacturer: syz [ 34.640914][ T346] usb 4-1: SerialNumber: syz [ 34.735613][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 34.741972][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.752936][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.766304][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.772982][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 34.782083][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.790963][ T10] usb 2-1: config 0 descriptor?? [ 34.805676][ T372] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.956899][ T372] usb 3-1: config 1 has an invalid interface number: 93 but max is 0 [ 34.965095][ T372] usb 3-1: config 1 has no interface number 0 [ 34.971286][ T372] usb 3-1: config 1 interface 93 has no altsetting 0 [ 34.978196][ T372] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 34.987330][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 34.987348][ T36] audit: type=1400 audit(1782133654.990:150): avc: denied { read } for pid=365 comm="syz.3.14" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.016619][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.030823][ T36] audit: type=1400 audit(1782133654.990:151): avc: denied { open } for pid=365 comm="syz.3.14" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.054392][ T36] audit: type=1400 audit(1782133655.000:152): avc: denied { map } for pid=365 comm="syz.3.14" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 35.227528][ T10] uclogic 0003:28BD:0042.0002: interface is invalid, ignoring [ 35.292897][ T36] audit: type=1400 audit(1782133655.300:153): avc: denied { read } for pid=396 comm="syz.2.19" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.315391][ T36] audit: type=1400 audit(1782133655.300:154): avc: denied { open } for pid=396 comm="syz.2.19" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.340915][ T398] netlink: 9 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.350333][ T398] gretap0: entered promiscuous mode [ 35.435834][ T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.445060][ T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.453555][ T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.463529][ T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.479448][ T10] usb 2-1: USB disconnect, device number 3 [ 35.497114][ T36] audit: type=1400 audit(1782133655.510:155): avc: denied { read } for pid=408 comm="syz.1.21" dev="nsfs" ino=4026532306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.518250][ T36] audit: type=1400 audit(1782133655.510:156): avc: denied { open } for pid=408 comm="syz.1.21" path="net:[4026532306]" dev="nsfs" ino=4026532306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.541566][ T36] audit: type=1400 audit(1782133655.510:157): avc: denied { append } for pid=408 comm="syz.1.21" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.564367][ T36] audit: type=1400 audit(1782133655.540:158): avc: denied { write } for pid=408 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.585617][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.737101][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.745771][ T9] usb 1-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 35.758748][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 35.766984][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 35.776178][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.784257][ T9] usb 1-1: Product: syz [ 35.788800][ T9] usb 1-1: Manufacturer: syz [ 35.793486][ T9] usb 1-1: SerialNumber: syz [ 36.003843][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 36.009963][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 36.020780][ T9] usb 1-1: USB disconnect, device number 6 [ 36.211615][ T417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 36.221814][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.231282][ T417] bridge_slave_0 (unregistering): left allmulticast mode [ 36.238583][ T417] bridge_slave_0 (unregistering): left promiscuous mode [ 36.245621][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.317797][ T36] audit: type=1400 audit(1782133656.330:159): avc: denied { execute } for pid=416 comm="syz.1.23" name="file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.317855][ T417] process 'syz.1.23' launched './file0' with NULL argv: empty string added [ 36.585593][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 36.737336][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.747596][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.755746][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.756587][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.779398][ T9] usb 2-1: string descriptor 0 read error: -22 [ 36.785689][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.794892][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.806164][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 36.813034][ T9] cdc_ncm 2-1:1.0: bind() failure [ 36.895612][ T310] usb 1-1: device descriptor read/64, error -71 [ 37.007804][ T417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.016497][ T417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.135595][ T310] usb 1-1: device descriptor read/64, error -71 [ 37.203725][ T346] usb_ehset_test 4-1:8.131: probe with driver usb_ehset_test failed with error -32 [ 37.216290][ T346] usb 4-1: USB disconnect, device number 3 [ 37.395658][ T310] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 37.511933][ T372] usb 3-1: string descriptor 0 read error: -71 [ 37.517054][ T346] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.519151][ T372] gl620a 3-1:1.93: probe with driver gl620a failed with error -22 [ 37.534860][ T372] usb 3-1: USB disconnect, device number 3 [ 37.544942][ T310] usb 1-1: device descriptor read/64, error -71 [ 37.687048][ T346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.698816][ T346] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.707998][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.716150][ T346] usb 4-1: Product: syz [ 37.720397][ T346] usb 4-1: Manufacturer: syz [ 37.724997][ T346] usb 4-1: SerialNumber: syz [ 37.785630][ T310] usb 1-1: device descriptor read/64, error -71 [ 37.895738][ T310] usb usb1-port1: attempt power cycle [ 37.935026][ T346] usb 4-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 37.945400][ T346] usb 4-1: unknown interface protocol 0x9, assuming v1 [ 37.952349][ T346] usb 4-1: cannot find UAC_HEADER [ 37.959037][ T346] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 37.969519][ T346] usb 4-1: USB disconnect, device number 4 [ 37.983461][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.069031][ T295] ------------[ cut here ]------------ [ 38.074790][ T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 38.084222][ T295] Modules linked in: [ 38.088479][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 38.100243][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.110396][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 38.116116][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 3e 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 66 8b 3e ff <0f> 0b e9 3e ff ff ff e8 5a 8b 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 38.135926][ T295] RSP: 0018:ffffc9000b64fb48 EFLAGS: 00010293 [ 38.142021][ T295] RAX: ffffffff8249364a RBX: 0000000000000000 RCX: ffff88812590df00 [ 38.150306][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.158377][ T295] RBP: ffffc9000b64fb70 R08: ffff8881220a967f R09: 1ffff110244152cf [ 38.166433][ T295] R10: dffffc0000000000 R11: ffffed10244152d0 R12: 0000000000000000 [ 38.174461][ T295] R13: dffffc0000000000 R14: ffff8881220a95e0 R15: ffff888110707330 [ 38.182498][ T295] FS: 0000555584844500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.191525][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.198275][ T295] CR2: 000055558485f918 CR3: 0000000122d4e000 CR4: 00000000003526b0 [ 38.206447][ T295] Call Trace: [ 38.209748][ T295] [ 38.212693][ T295] ovl_do_remove+0x81b/0xda0 [ 38.217408][ T295] ? ovl_set_redirect+0x780/0x780 [ 38.222534][ T295] ? down_write+0xee/0x2b0 [ 38.227045][ T295] ? __cfi_down_write+0x10/0x10 [ 38.231941][ T295] ovl_rmdir+0x1e/0x30 [ 38.236122][ T295] vfs_rmdir+0x3e3/0x560 [ 38.240414][ T295] incfs_kill_sb+0x109/0x230 [ 38.245022][ T295] deactivate_locked_super+0xd5/0x2a0 [ 38.250496][ T295] deactivate_super+0xb8/0xe0 [ 38.255234][ T295] cleanup_mnt+0x406/0x4a0 [ 38.255711][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 38.259773][ T295] __cleanup_mnt+0x1d/0x40 [ 38.271748][ T295] task_work_run+0x1e5/0x260 [ 38.276438][ T295] ? __cfi_task_work_run+0x10/0x10 [ 38.281625][ T295] ? __x64_sys_umount+0x12e/0x180 [ 38.286848][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 38.292273][ T295] ? __kasan_check_read+0x15/0x20 [ 38.297436][ T295] resume_user_mode_work+0x35/0x50 [ 38.298252][ T310] usb 1-1: device descriptor read/8, error -71 [ 38.302620][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 38.302656][ T295] do_syscall_64+0x63/0xf0 [ 38.318839][ T295] ? clear_bhb_loop+0x50/0xa0 [ 38.323574][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.329549][ T295] RIP: 0033:0x7ff9d659e097 [ 38.334042][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 38.353743][ T295] RSP: 002b:00007ffc32674ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.362229][ T295] RAX: 0000000000000000 RBX: 00007ff9d66322ca RCX: 00007ff9d659e097 [ 38.370295][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc32674f80 [ 38.378456][ T295] RBP: 00007ffc32674f80 R08: 00007ffc32675f80 R09: 00000000ffffffff [ 38.386522][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc32676010 [ 38.394540][ T295] R13: 00007ff9d66322ca R14: 0000000000009371 R15: 00007ffc32676050 [ 38.402576][ T295] [ 38.405669][ T295] ---[ end trace 0000000000000000 ]--- [ 38.411611][ T295] ------------[ cut here ]------------ [ 38.417187][ T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 38.426556][ T295] Modules linked in: [ 38.430497][ T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 38.443712][ T295] Tainted: [W]=WARN [ 38.447611][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.457997][ T295] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 38.463777][ T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 de 3e 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 66 8b 3e ff <0f> 0b e9 3e ff ff ff e8 5a 8b 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 38.483558][ T295] RSP: 0018:ffffc9000b64fb48 EFLAGS: 00010293 [ 38.489939][ T295] RAX: ffffffff8249364a RBX: 0000000000000000 RCX: ffff88812590df00 [ 38.497983][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.506025][ T295] RBP: ffffc9000b64fb70 R08: ffff8881220a967f R09: 1ffff110244152cf [ 38.514251][ T295] R10: dffffc0000000000 R11: ffffed10244152d0 R12: 0000000000000000 [ 38.522306][ T295] R13: dffffc0000000000 R14: ffff8881220a95e0 R15: ffff888110707330 [ 38.530601][ T295] FS: 0000555584844500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 38.539596][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.546261][ T295] CR2: 000000110c354403 CR3: 0000000122d4e000 CR4: 00000000003526b0 [ 38.554277][ T295] Call Trace: [ 38.557650][ T295] [ 38.560609][ T295] ovl_do_remove+0x81b/0xda0 [ 38.565231][ T295] ? ovl_set_redirect+0x780/0x780 [ 38.570461][ T295] ? down_write+0xee/0x2b0 [ 38.574920][ T295] ? __cfi_down_write+0x10/0x10 [ 38.579850][ T295] ovl_rmdir+0x1e/0x30 [ 38.583986][ T295] vfs_rmdir+0x3e3/0x560 [ 38.588315][ T295] incfs_kill_sb+0x1a0/0x230 [ 38.592941][ T295] deactivate_locked_super+0xd5/0x2a0 [ 38.598387][ T295] deactivate_super+0xb8/0xe0 [ 38.603105][ T295] cleanup_mnt+0x406/0x4a0 [ 38.607586][ T295] __cleanup_mnt+0x1d/0x40 [ 38.612073][ T295] task_work_run+0x1e5/0x260 [ 38.616749][ T295] ? __cfi_task_work_run+0x10/0x10 [ 38.621917][ T295] ? __x64_sys_umount+0x12e/0x180 [ 38.627009][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 38.632417][ T295] ? __kasan_check_read+0x15/0x20 [ 38.637506][ T295] resume_user_mode_work+0x35/0x50 [ 38.642660][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 38.648182][ T295] do_syscall_64+0x63/0xf0 [ 38.652684][ T295] ? clear_bhb_loop+0x50/0xa0 [ 38.657462][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.663402][ T295] RIP: 0033:0x7ff9d659e097 [ 38.667899][ T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 38.687684][ T295] RSP: 002b:00007ffc32674ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.696296][ T295] RAX: 0000000000000000 RBX: 00007ff9d66322ca RCX: 00007ff9d659e097 [ 38.704299][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc32674f80 [ 38.712363][ T295] RBP: 00007ffc32674f80 R08: 00007ffc32675f80 R09: 00000000ffffffff [ 38.720407][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc32676010 [ 38.728538][ T295] R13: 00007ff9d66322ca R14: 0000000000009371 R15: 00007ffc32676050 [ 38.736567][ T295] [ 38.739607][ T295] ---[ end trace 0000000000000000 ]--- [ 38.756671][ T310] usb 1-1: device descriptor read/8, error -71 [ 38.995600][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 38.995600][ T346] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.016648][ T310] usb 1-1: device descriptor read/8, error -71 [ 39.146884][ T310] usb 1-1: device descriptor read/8, error -71 [ 39.155721][ T346] usb 3-1: Using ep0 maxpacket: 8 [ 39.163502][ T346] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 39.172821][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.181059][ T346] usb 3-1: Product: syz [ 39.185267][ T346] usb 3-1: Manufacturer: syz [ 39.189935][ T346] usb 3-1: SerialNumber: syz [ 39.223198][ T372] usb 2-1: USB disconnect, device number 4 [ 39.255673][ T310] usb usb1-port1: unable to enumerate USB device [ 39.399737][ T346] usb 3-1: Invalid firmware size=18. [ 39.406553][ T346] usb 3-1: USB disconnect, device number 4