last executing test programs: 4m52.452121425s ago: executing program 1 (id=2): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r2}, &(0x7f0000000200)=0x8) (fail_nth: 1) 4m50.867976551s ago: executing program 1 (id=16): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000250000/0x8000)=nil, 0x8000, 0x2000000, 0x100010, r0, 0x80000000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000010180c200"], 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000080)) (async) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @local}, 0xffffffffffffff3a) (async) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) r5 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = dup(r1) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x42) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) 4m50.638446576s ago: executing program 1 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000e00)={0xc48, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@local, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x10, 0x8, 0x500, 0x1, 0xc, r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x677}}, './file0\x00'}) mkdirat(r6, &(0x7f0000000500)='./file0\x00', 0xc2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) 4m35.46969124s ago: executing program 32 (id=18): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000e00)={0xc48, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@local, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x10, 0x8, 0x500, 0x1, 0xc, r3}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x677}}, './file0\x00'}) mkdirat(r6, &(0x7f0000000500)='./file0\x00', 0xc2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r7, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) 3m2.948074154s ago: executing program 5 (id=284): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x149102) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="000e41c74afdaad19487f11b6bdaddb06a3610c2609876169aedb5ca7b8d18d85e756e35b52413c8a8c783d20ac41571a5838df12b91aced8e2979c01a122994750bcf3338fbc3d2b64c596af4742866dcd375c4100d5177749486c6ce1758d85a", 0x61}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x800}) fcntl$lock(r4, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r2}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 3m1.165908132s ago: executing program 5 (id=288): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0xce20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000000140)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x7, '\x00\x00@\x00'}, @global=@item_4={0x3, 0x1, 0x5, "05a08000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000000c0)={0x1, 0xffffffff, 0x10000, 0x9, 0x8, 0xfff}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r1, 0x0) 2m57.948663271s ago: executing program 5 (id=297): socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x149102) writev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) 2m54.904793665s ago: executing program 5 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 2m54.64404057s ago: executing program 5 (id=305): sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x50) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000600"/84], 0x210) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000000605000000000000000000070000000c00078008000840000000d6050001000600000005000500020000000900020073797a3100000000050005000a00000000"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20044000) ioctl$FIOCLEX(r2, 0x5451) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x1018}, '\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f0700000000007f0d000089f40000000000403030"], 0x0, 0x35, 0x0, 0x9}, 0x28) 2m53.667977926s ago: executing program 5 (id=308): msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001114010300bd7000fedbdf2508004b0028"], 0x20}, 0x1, 0x0, 0x0, 0x24008855}, 0x40000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000940)={0x1, 0x0, &(0x7f0000000900)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x10000000, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)) socket$inet6(0xa, 0x1, 0x0) 2m52.858096089s ago: executing program 33 (id=308): msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001114010300bd7000fedbdf2508004b0028"], 0x20}, 0x1, 0x0, 0x0, 0x24008855}, 0x40000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x3, 0x0, 0x3, 0x13}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000940)={0x1, 0x0, &(0x7f0000000900)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x10000000, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)) socket$inet6(0xa, 0x1, 0x0) 2m41.73598935s ago: executing program 3 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff206000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) creat(&(0x7f0000000100)='./file1\x00', 0xca782f05a4b1af27) syz_io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x226c, 0x13500, 0x2, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f0000000040), 0x5005) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 2m40.429918354s ago: executing program 3 (id=338): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0xce20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000000140)) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x7, '\x00\x00@\x00'}, @global=@item_4={0x3, 0x1, 0x5, "05a08000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000000c0)={0x1, 0xffffffff, 0x10000, 0x9, 0x8, 0xfff}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x3) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) listen(r1, 0x0) 2m37.711501161s ago: executing program 3 (id=345): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020) 2m37.42604785s ago: executing program 3 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x6, 0xf9, 0x2, 0x79, 0xff, 0xa, 0x8, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000140)=0x8, 0x4) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x10000, 0x0, 0x0) r4 = socket$inet(0x2, 0xa, 0x1) write(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000000000/0x14000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f000000a000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f000000d000/0x3000)=nil, &(0x7f0000013000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000000040)="a632a3a6b3442bf7f1b8eacfa0475ddb25b32a7e03effb6c9fd161c5b079bad1c48b98990f8e9724cfe0b3a7971bfc8599ce309ccd49070b867413f45f2eb139b4611ce7b65a33e4a813425a2207801374324751e66f0529d89f51789bf50116ec0b7efab1a5a4563e018b3f22ad923c04c74080515ca4114cb8e6816fe4c3955596e9a82653971a140465b0d0bf006c211f776647c58e504ab331cf", 0x9c, r0}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2m35.826972328s ago: executing program 3 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) unshare(0x22020600) umount2(&(0x7f0000000300)='./file0/file0\x00', 0x1) (fail_nth: 1) 2m35.408412618s ago: executing program 3 (id=351): sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x50) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000600"/85], 0x210) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000000605000000000000000000070000000c00078008000840000000d6050001000600000005000500020000000900020073797a3100000000050005000a00000000"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20044000) ioctl$FIOCLEX(r2, 0x5451) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x1018}, '\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f0700000000007f0d000089f40000000000403030"], 0x0, 0x35, 0x0, 0x9}, 0x28) 2m19.441133551s ago: executing program 34 (id=351): sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x50) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000600"/85], 0x210) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000000605000000000000000000070000000c00078008000840000000d6050001000600000005000500020000000900020073797a3100000000050005000a00000000"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20044000) ioctl$FIOCLEX(r2, 0x5451) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r4], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x1018}, '\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f0700000000007f0d000089f40000000000403030"], 0x0, 0x35, 0x0, 0x9}, 0x28) 13.655330211s ago: executing program 6 (id=815): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120410007f02000001"], 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f0000004a00)="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", 0x2000, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x10, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x100000000, 0x1, 0x0, {0xffffffffffffffff, 0x3, 0x3ff, 0x80000001, 0x0, 0x8001ffffffffffe, 0x9e9, 0x0, 0x3, 0x7ffe, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000080)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) 9.927972784s ago: executing program 0 (id=818): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) init_module(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0xc4c03d12, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000000)={0xfffffffffffffee8, &(0x7f0000000100)={0x1f, 0x16, 0x1, ','}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_io_uring_complete(0x0) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) 9.736036673s ago: executing program 6 (id=819): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee2, 0x20, 0x82, 0x13b}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x4, 0x7fff0000}]}) getuid() remap_file_pages(&(0x7f0000148000/0x2000)=nil, 0x2000, 0xa, 0x2a72, 0x2000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$MSR(&(0x7f0000000040), 0x4, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x5d, 0x20000000, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0) 8.279818295s ago: executing program 4 (id=822): ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) 8.131127135s ago: executing program 4 (id=824): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff800, 0x7}}, './file0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000003140)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x62a1}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}, @IFLA_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, 0xee00, 0x0) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r6, r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000100)=0x1fe, 0x4) recvmmsg(r6, &(0x7f0000001ec0)=[{{0x0, 0x0, 0xfffffffffffffffc}, 0x4a41}], 0x1, 0x7d0a144016eb969, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x10, @empty, 0x62}, r8}}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000500)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), r8, 0x6}}, 0x18) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000900)=0x15) r10 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x218888, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e23, 0xc5c4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}, r8}}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x38, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x1, &(0x7f0000000380)=@raw=[@ldst={0xbc15d40cfb7303f1, 0x0, 0x6, 0x0, 0x0, 0x4, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x986, 0xb0, &(0x7f0000000580)=""/176, 0x40f00, 0x6, '\x00', r3, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x6, 0x7, 0xffffff9d}, 0x10, r13, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000008c0)=[{0x3, 0x2, 0x3, 0xb}, {0x2, 0x5, 0x0, 0x2}, {0x3, 0x2, 0x6, 0x1}], 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYBLOB="fc1b50e5f6d6164ad2a11fc79f3529456a54cdb3928d5597dcadd0f058e9064ed4a56f2d649a69e76afe91b5e9d2e500349a39533a3c753a3bcf61e38bbc21b4c03dfb68a76fb36e5b968bcb63cc60", @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES16=r12, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64], 0x68}}, 0x0) 8.061741062s ago: executing program 6 (id=825): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r3, 0x0, &(0x7f0000400000/0xc00000)=nil, 0xc00000}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x1, 0x0, &(0x7f00000011c0)=[{0x200006, 0x800002}]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x3001}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3, 0x10000}]}}}}}}}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0xa040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r7, 0x0, &(0x7f00000001c0)="10", 0x1}) 7.930053082s ago: executing program 4 (id=826): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) io_uring_setup(0x7ba, &(0x7f0000000080)={0x0, 0x581a, 0x40, 0x0, 0x3d5}) unshare(0x2a020480) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 7.928409272s ago: executing program 6 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000200)=0x860, 0x45) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[r8], &(0x7f0000000040)}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a31a33"], 0x0) 7.645305937s ago: executing program 4 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b45, [{{0x9, 0x2, 0x16}}]}}, 0x0) capset(0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f59f44393a1336a8ef8cd5e5c97e422934fb48b94ca6b0a45bdb9305de5dd61f9ee28afe62", 0x48}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 6.208103588s ago: executing program 0 (id=833): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8001, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x800) 6.127207479s ago: executing program 0 (id=835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) 5.803535236s ago: executing program 7 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x6, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e63, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x68}, 0x1, 0x7}, 0x0) 5.25682847s ago: executing program 7 (id=839): msgctl$IPC_SET(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001114010300bd7000fedbdf2508004b0028"], 0x20}, 0x1, 0x0, 0x0, 0x24008855}, 0x40000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000940)={0x1, 0x0, &(0x7f0000000900)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x10000000, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) socket$inet6(0xa, 0x1, 0x0) 4.800833188s ago: executing program 6 (id=840): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0xce20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x7, '\x00\x00@\x00'}, @global=@item_4={0x3, 0x1, 0x5, "05a08000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f00000000c0)={0x1, 0xffffffff, 0x10000, 0x9, 0x8, 0xfff}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000000c0)=0x3) listen(r1, 0x0) 4.265006278s ago: executing program 7 (id=841): socket$inet6_udp(0xa, 0x2, 0x0) fdatasync(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 3.039578879s ago: executing program 4 (id=842): r0 = syz_io_uring_setup(0x2380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.634365661s ago: executing program 7 (id=844): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x10023, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x12000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r4}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x67}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000180)={0x5, "64e48c314a4e33b93ab309f959e9884cb69abcea33d931d5da6003ad752a98d9", 0x2, 0x1}) 2.54190262s ago: executing program 0 (id=845): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8001, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x800) 1.595383477s ago: executing program 2 (id=846): ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) 1.594427485s ago: executing program 0 (id=847): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)=""/13, 0x35, 0xd, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000340000000108c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005500)=ANY=[@ANYBLOB="1c00000043000701feffffff07dbdf25017c00000400458004000180"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.491885782s ago: executing program 7 (id=848): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="2d544357ed4dfc32a9827a7c49ea9fb18e68be4131dd89821b2f0732a1ee74bb9f20c9fefe2105f4fa9b415212d4d179f13c522d61724d3aae414f27353a0c0f05ead2bcb8d77393edd05b854e95b3e67c472e054e55f5192b7b1dc09f73713a605bbf7f94b392f7d89ad250b9f9f93ff0ff6f837881cbabab18fb6f0a9626d03a8142839bb017b634029982fa31a6633bac5d26af28006ec8c317c20e7a1a1e0af1cf88a0a8a47b3b911bfd0cb280b6bed2c7c6e0a0159255ea25130d1f54d67369b7bbabd1e86acc8a74dbb56b66750ee5bea872b111d2c173dfe97caf5c572586cb9293f8ad83c2a167fc3f96a7f8bc2ff0daad91bd395616818650d24d9e4c17451b31cddd859b9f6a8dba0466cab7f6f7d797af7067920283efd585b38bcac4bad0077faaf0dcbb53ba7d5e339e2b05acb86dd7c056b816e0a307e61b0a92d41694da807ef729007cbe987a605e7e28c72b929a408339a9f296142aa472444f9aebe545a4961e3df6b7c12a305846f36f05a963bca674edbcb62592201e93846cf88d656ecb546a2627e4a0536c0aa3815546533427810453c441b2ae1cfa56c0816b834dbee7235e2b8ce81b67551045736b5b6f15af6c18a3df2aa31207fb27875d3bebca34406d2612e4647fec228c856478abdd9ccae237e0a6199d14fc3b5088df36e0a6219ccc6a5a396c6d6fc91ad7c0d2deaad2fdaaf40d1ab6d08054cdc0c7c3c732b59ecd2ceb3ab3c09104b00542aa61d0ef5dcaf7d63095bbebc874b5bc01305871d0b012b25c19245ae0bdf40fda548df61eacf8877eb9df8e4c0f96eafd9483179edc41999c92c8dc535b2b21190d0023ea416ae8598eb2c280b4798ecce906b3253c80b4dc33db0391cbc96fc8c0c6266f97a535e6cf780ff26d26af57b742b53fcf8bf70c115ae6b1ce6bda9f1d0ca4925c61f0af5857dd5f392cb9e621f8dc89a259f5992a64295c0fd6609d793905e4fe9efd227bc3158fda26fd5248af82bcd19dd86a9311767f9f0929e697e230b078bc39b59f002ea627367b2fdfe0354ddc688609554a7222eb78894dffa4bee3ab468578435d3cf86ac37b3b0e6fc6d00a5c74c3d9889847346dd65918b158c9acec81c1ae1c784cb082eeac76eb45cb13365d4b3e7a7a933a25c68ec3a4375b4c5f6e09819fefec73b5a2939cf5f5f25e429f7f3be8d069f9a0532353aa049defaf8f37e8aa0df8852909a7b4ac6ab0a446d1b31185aa991764eaf55feb89a2fac2333fa7f795d3994b7360a57c19e0ecf6d9d411d524c86045e70610cd225846b5a7019ee6717a8c4ee9d2c81d89622ad6c24f2e801e09f1d46c3d20cbeb729eccfe67de7afe1441557bf6bbb72fbca528ce55696f321a393de3a4c6356b39e164bdf7fe187e6e0c0478f53b02095795180fa6bf428184ec7b6aa3b0e434f98e8f16a304ac0bf48d6ec647352303e96f9361edcd54a2b063c53290eb7a8869b0350086cad5b020a47059a08e591f7edc905100add1a9feb0292ecc4841ce7cacba50fb603ab6ca1b195ca735e44003c6a698da76f1690ac43388813d6ff39fe76b5d5550bb3d9d2ac1641b550949d2cadae942f879afbefdc7d36a77a40a35a87a76676efc4d1f4fd4661b4ed0bc3ab5ad1e4d6301d853c8a825c8ed9b9bc6d8747492b3a021345e4a437b89276bfe9ae05239ca7b39cda6ad67f7d2ec07cbcd132f5002f001d28280a05643d3f127f352a93143e10ccadeb11e3cbce226c761da0f9ece7862a041e8959ae67c743bc4d870cf52e4ca4cdae7a39501df9465b985c768fe9ca2bab1a6618c9b8d6dd653832941072d081acbee0c40813b0701886db6ddb0e3e37dd761177a3f6d365a0788a0949840544f29cd57f183be09973a1545f101dc78d0342b580eac7d8eabe532c3a645d25da143a5675c4cf3c7eb4a4b1fdc38b3e9d3cd3f6f96", 0x567}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fcntl$getown(r2, 0x9) prlimit64(r3, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 1.491587925s ago: executing program 2 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x6, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e63, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x68}, 0x1, 0x7}, 0x0) 1.440140221s ago: executing program 4 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000200)=0x860, 0x45) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[r8], &(0x7f0000000040)}) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a31a33"], 0x0) 1.279868456s ago: executing program 0 (id=851): openat$nullb(0xffffffffffffff9c, 0x0, 0xb49f4614dcb44a86, 0x0) set_mempolicy(0x1, 0x0, 0xe) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1001, 0x1, 0x97, 0x10, 0x0, 0x3, 0x4, 0x1, 0x5163], 0x0, 0x60802}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 797.958067ms ago: executing program 6 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b45, [{{0x9, 0x2, 0x16}}]}}, 0x0) capset(0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f59f44393a1336a8ef8cd5e5c97e422934fb48b94ca6b0a45bdb9305de5dd61f9ee28afe62", 0x48}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 470.17842ms ago: executing program 2 (id=853): r0 = socket$kcm(0x10, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x103) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 252.482171ms ago: executing program 7 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b45, [{{0x9, 0x2, 0x16}}]}}, 0x0) capset(0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f59f44393a1336a8ef8cd5e5c97e422934fb48b94ca6b0a45bdb9305de5dd61f9ee28afe62", 0x48}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x24, 0x0, 0x0) 198.634952ms ago: executing program 2 (id=855): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 r'], 0x9) 115.814435ms ago: executing program 2 (id=856): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) (fail_nth: 1) 0s ago: executing program 2 (id=857): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r0, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42000}, 0x4000054) (async) syz_usb_connect(0x0, 0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800010000000009040000037105590009054782"], 0x0) kernel console output (not intermixed with test programs): speed_str(low-speed) [ 529.124912][ T7952] vhci_hcd vhci_hcd.0: Device attached [ 529.184263][ T7953] vhci_hcd: connection closed [ 529.214452][ T7206] vhci_hcd vhci_hcd.7: stop threads [ 529.214479][ T7206] vhci_hcd vhci_hcd.7: release socket [ 529.214516][ T7206] vhci_hcd vhci_hcd.7: disconnect device [ 529.512013][ T7960] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 531.989154][ T5842] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 532.219581][ T5842] usb 1-1: USB disconnect, device number 24 [ 533.536692][ T7973] autofs4:pid:7973:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 533.567408][ T7966] fido_id[7966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 534.645845][ T7985] syz.0.506 (7985) used greatest stack depth: 17200 bytes left [ 534.719496][ T5842] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 534.829505][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 534.880619][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 534.883183][ T5842] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1023 [ 534.883214][ T5842] usb 3-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 534.883241][ T5842] usb 3-1: config 1 interface 0 has no altsetting 0 [ 534.886978][ T5842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.887008][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.887029][ T5842] usb 3-1: Product: 䔭껵ࢪ装汷å™ä¦¢Ùžä°¼çƒ£çŽç°‘佘㚦Ⲝ葜孌¨ᒌ췞ⲤꙘéªâ¹ší—„勛㫔蜟㷥蒼㧘餾ḻ罰䗰嗟ì–æ©©ëšë—⡛ႂæ·ê«†ë®¥ê¬±æ§»è¡î¿î¨î„²â¢ƒã‘¯äµ•å¦Ÿä¿©æ‰·ï—¸í”硦ﴺ棆䳋Ⳣ濚릢â²ì½Žéš§ï‰ªç‰¦ä»‘鷗㙨텉﵇踫컂íœà«ç€‚⻇ì¬ïŠ¥è´¨ãž½á©­í¶ï¸–黢ꭊᨬ空䮬㠊î¸ë±¶ç±¢Ê…é»ä‚­Í£êŠŠè©¶å«¿ä‰°è˜¬âƒ¿ç”¼æ­•æ±‡æº§ï©› [ 534.887063][ T5842] usb 3-1: Manufacturer: Ð [ 534.887079][ T5842] usb 3-1: SerialNumber: syz [ 535.112367][ T7986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.112713][ T7986] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 535.245459][ T8010] autofs4:pid:8010:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 535.938808][ T5955] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 535.959394][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 535.961688][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 535.962830][ T10] usb 5-1: config 4 has an invalid interface number: 96 but max is 0 [ 535.962855][ T10] usb 5-1: config 4 has no interface number 0 [ 535.962886][ T10] usb 5-1: config 4 interface 96 has no altsetting 0 [ 535.965103][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=4b.37 [ 535.965219][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.965241][ T10] usb 5-1: Product: syz [ 535.965256][ T10] usb 5-1: Manufacturer: syz [ 535.965271][ T10] usb 5-1: SerialNumber: syz [ 536.115852][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.115886][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.115960][ T5955] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 536.116004][ T5955] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 536.116027][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.170813][ T5955] usb 7-1: config 0 descriptor?? [ 536.201642][ T5842] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 536.265417][ T5842] usb 3-1: USB disconnect, device number 21 [ 536.310989][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.96/input/input9 [ 536.339768][ T5148] bcm5974 5-1:4.96: could not read from device [ 536.420962][ T5148] bcm5974 5-1:4.96: could not read from device [ 536.451452][ T10] usb 5-1: USB disconnect, device number 18 [ 537.005174][ T5955] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 537.182561][ T6092] usb 7-1: USB disconnect, device number 7 [ 537.221291][ T8021] fido_id[8021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 537.453293][ T8033] FAULT_INJECTION: forcing a failure. [ 537.453293][ T8033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.453330][ T8033] CPU: 1 UID: 0 PID: 8033 Comm: syz.2.526 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 537.453357][ T8033] Tainted: [L]=SOFTLOCKUP [ 537.453365][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.453377][ T8033] Call Trace: [ 537.453385][ T8033] [ 537.453394][ T8033] dump_stack_lvl+0xe8/0x150 [ 537.453427][ T8033] should_fail_ex+0x46b/0x600 [ 537.453457][ T8033] _copy_from_user+0x2d/0xb0 [ 537.453486][ T8033] __sys_bpf+0x229/0x950 [ 537.453513][ T8033] ? __pfx___sys_bpf+0x10/0x10 [ 537.453533][ T8033] ? rt_mutex_slowunlock+0x1cb/0x300 [ 537.453582][ T8033] ? ksys_write+0x248/0x270 [ 537.453615][ T8033] ? __pfx_ksys_write+0x10/0x10 [ 537.453649][ T8033] __x64_sys_bpf+0x7c/0x90 [ 537.453672][ T8033] do_syscall_64+0x14d/0xf80 [ 537.453699][ T8033] ? trace_irq_disable+0x3b/0x150 [ 537.453721][ T8033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.453741][ T8033] ? clear_bhb_loop+0x40/0x90 [ 537.453765][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.453785][ T8033] RIP: 0033:0x7f7ab6acc799 [ 537.453803][ T8033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.453820][ T8033] RSP: 002b:00007f7ab4d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.453842][ T8033] RAX: ffffffffffffffda RBX: 00007f7ab6d45fa0 RCX: 00007f7ab6acc799 [ 537.453857][ T8033] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 537.453869][ T8033] RBP: 00007f7ab4d26090 R08: 0000000000000000 R09: 0000000000000000 [ 537.453882][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.453894][ T8033] R13: 00007f7ab6d46038 R14: 00007f7ab6d45fa0 R15: 00007ffe95e4bb98 [ 537.453925][ T8033] [ 537.735402][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.7.525'. [ 537.776061][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.7.525'. [ 538.779475][ T31] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 538.801937][ T8058] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 538.991624][ T31] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 538.991653][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.998419][ T31] usb 8-1: config 0 descriptor?? [ 539.034572][ T31] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 539.209474][ T5842] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 539.359557][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 539.376435][ T5842] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 539.376460][ T5842] usb 7-1: config 0 has no interface number 0 [ 539.376557][ T5842] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.376585][ T5842] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.376624][ T5842] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 539.376647][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.395118][ T8063] syz.2.538 (8063) used greatest stack depth: 16760 bytes left [ 539.456557][ T5842] usb 7-1: config 0 descriptor?? [ 539.499513][ T5847] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 539.500495][ T8071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.540'. [ 539.703397][ T31] gp8psk: usb out operation failed. [ 539.703736][ T31] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 539.703803][ T31] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 540.648350][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.648384][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.648408][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.648478][ T5847] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.648502][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.711733][ T5847] usb 5-1: config 0 descriptor?? [ 540.714351][ T31] usb 8-1: USB disconnect, device number 3 [ 540.769288][ T5842] usb 7-1: USB disconnect, device number 8 [ 541.013600][ T8082] FAULT_INJECTION: forcing a failure. [ 541.013600][ T8082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.013644][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.7.544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 541.013671][ T8082] Tainted: [L]=SOFTLOCKUP [ 541.013678][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.013690][ T8082] Call Trace: [ 541.013699][ T8082] [ 541.013708][ T8082] dump_stack_lvl+0xe8/0x150 [ 541.013742][ T8082] should_fail_ex+0x46b/0x600 [ 541.013771][ T8082] _copy_from_user+0x2d/0xb0 [ 541.013800][ T8082] __sys_bpf+0x229/0x950 [ 541.013827][ T8082] ? __pfx___sys_bpf+0x10/0x10 [ 541.013848][ T8082] ? rt_mutex_slowunlock+0x1cb/0x300 [ 541.013888][ T8082] ? ksys_write+0x248/0x270 [ 541.013919][ T8082] ? __pfx_ksys_write+0x10/0x10 [ 541.013955][ T8082] __x64_sys_bpf+0x7c/0x90 [ 541.013977][ T8082] do_syscall_64+0x14d/0xf80 [ 541.014005][ T8082] ? trace_irq_disable+0x3b/0x150 [ 541.014027][ T8082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.014048][ T8082] ? clear_bhb_loop+0x40/0x90 [ 541.014071][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.014091][ T8082] RIP: 0033:0x7f1a0af2c799 [ 541.014110][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.014126][ T8082] RSP: 002b:00007f1a09186028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 541.014146][ T8082] RAX: ffffffffffffffda RBX: 00007f1a0b1a5fa0 RCX: 00007f1a0af2c799 [ 541.014161][ T8082] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 541.014174][ T8082] RBP: 00007f1a09186090 R08: 0000000000000000 R09: 0000000000000000 [ 541.014186][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.014198][ T8082] R13: 00007f1a0b1a6038 R14: 00007f1a0b1a5fa0 R15: 00007ffe2ccb9c08 [ 541.014229][ T8082] [ 541.725054][ T5847] usbhid 5-1:0.0: can't add hid device: -71 [ 541.727107][ T5847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 541.740300][ T5847] usb 5-1: USB disconnect, device number 19 [ 541.826167][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 541.826218][ T8097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 542.042597][ T8100] FAULT_INJECTION: forcing a failure. [ 542.042597][ T8100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.042631][ T8100] CPU: 0 UID: 0 PID: 8100 Comm: syz.6.550 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 542.042656][ T8100] Tainted: [L]=SOFTLOCKUP [ 542.042664][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.042675][ T8100] Call Trace: [ 542.042683][ T8100] [ 542.042691][ T8100] dump_stack_lvl+0xe8/0x150 [ 542.042724][ T8100] should_fail_ex+0x46b/0x600 [ 542.042754][ T8100] _copy_from_user+0x2d/0xb0 [ 542.042793][ T8100] __sys_bpf+0x229/0x950 [ 542.042818][ T8100] ? __pfx___sys_bpf+0x10/0x10 [ 542.042839][ T8100] ? rt_mutex_slowunlock+0x1cb/0x300 [ 542.042878][ T8100] ? ksys_write+0x248/0x270 [ 542.042907][ T8100] ? __pfx_ksys_write+0x10/0x10 [ 542.042941][ T8100] __x64_sys_bpf+0x7c/0x90 [ 542.042963][ T8100] do_syscall_64+0x14d/0xf80 [ 542.042989][ T8100] ? trace_irq_disable+0x3b/0x150 [ 542.043010][ T8100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.043030][ T8100] ? clear_bhb_loop+0x40/0x90 [ 542.043053][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.043072][ T8100] RIP: 0033:0x7f9ae654c799 [ 542.043089][ T8100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.043106][ T8100] RSP: 002b:00007f9ae47a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.043126][ T8100] RAX: ffffffffffffffda RBX: 00007f9ae67c5fa0 RCX: 00007f9ae654c799 [ 542.043141][ T8100] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 000000000000000a [ 542.043154][ T8100] RBP: 00007f9ae47a6090 R08: 0000000000000000 R09: 0000000000000000 [ 542.043166][ T8100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.043178][ T8100] R13: 00007f9ae67c6038 R14: 00007f9ae67c5fa0 R15: 00007fffa95b74e8 [ 542.043207][ T8100] [ 542.333420][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.551'. [ 542.549479][ T5842] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 542.649484][ T5847] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 542.700386][ T5842] usb 7-1: Using ep0 maxpacket: 16 [ 542.705399][ T5842] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.705423][ T5842] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.730189][ T5842] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.730215][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.730236][ T5842] usb 7-1: Product: syz [ 542.730250][ T5842] usb 7-1: Manufacturer: syz [ 542.730265][ T5842] usb 7-1: SerialNumber: syz [ 542.799459][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 542.801208][ T5847] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 542.801230][ T5847] usb 5-1: config 0 has no interface number 0 [ 542.801264][ T5847] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.801279][ T5847] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.801334][ T5847] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 542.801347][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.807014][ T5847] usb 5-1: config 0 descriptor?? [ 542.819441][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 542.879394][ T5925] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 542.968296][ T5842] usb 7-1: 0:2 : does not exist [ 542.979048][ T31] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 542.979065][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.979076][ T31] usb 8-1: Product: syz [ 542.979083][ T31] usb 8-1: Manufacturer: syz [ 542.979269][ T31] usb 8-1: SerialNumber: syz [ 542.991320][ T5842] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 543.022513][ T31] usb 8-1: config 0 descriptor?? [ 543.045796][ T31] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 543.054436][ T5925] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 543.054464][ T5925] usb 3-1: config 0 has no interface number 0 [ 543.054508][ T5925] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 543.054534][ T5925] usb 3-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 543.054557][ T5925] usb 3-1: config 0 interface 96 has no altsetting 0 [ 543.060499][ T5925] usb 3-1: New USB device found, idVendor=0b57, idProduct=058d, bcdDevice=33.74 [ 543.060526][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.060547][ T5925] usb 3-1: Product: syz [ 543.060562][ T5925] usb 3-1: Manufacturer: syz [ 543.060576][ T5925] usb 3-1: SerialNumber: syz [ 543.139567][ T5925] usb 3-1: config 0 descriptor?? [ 543.254815][ T5842] usb 7-1: USB disconnect, device number 9 [ 543.413551][ T5925] usb 3-1: USB disconnect, device number 22 [ 543.434861][ T31] gspca_sunplus: reg_w_riv err -71 [ 543.435006][ T31] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 543.459171][ T31] usb 8-1: USB disconnect, device number 4 [ 543.536469][ T5847] usb 5-1: USB disconnect, device number 20 [ 543.754119][ T8122] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 543.784132][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.663299][ T8136] fuse: Unknown parameter 'user_i00000000000000000000' [ 544.839821][ T5842] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 545.503212][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.503247][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.503271][ T5842] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.503314][ T5842] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.503337][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.519569][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 545.544550][ T8141] netlink: 476 bytes leftover after parsing attributes in process `syz.6.566'. [ 545.685349][ T5842] usb 8-1: config 0 descriptor?? [ 546.354889][ T5842] usbhid 8-1:0.0: can't add hid device: -71 [ 546.355009][ T5842] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 546.389290][ T5842] usb 8-1: USB disconnect, device number 5 [ 546.431680][ T5920] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 546.579553][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 546.584190][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.584215][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.586978][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.587012][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.587028][ T5920] usb 5-1: Product: syz [ 546.587036][ T5920] usb 5-1: Manufacturer: syz [ 546.587044][ T5920] usb 5-1: SerialNumber: syz [ 546.851881][ T5920] usb 5-1: 0:2 : does not exist [ 546.855741][ T5920] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 546.970645][ T5920] usb 5-1: USB disconnect, device number 21 [ 547.165043][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.394571][ T8162] FAULT_INJECTION: forcing a failure. [ 547.394571][ T8162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.394606][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.0.573 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 547.394631][ T8162] Tainted: [L]=SOFTLOCKUP [ 547.394639][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 547.394650][ T8162] Call Trace: [ 547.394658][ T8162] [ 547.394666][ T8162] dump_stack_lvl+0xe8/0x150 [ 547.394699][ T8162] should_fail_ex+0x46b/0x600 [ 547.394730][ T8162] _copy_from_user+0x2d/0xb0 [ 547.394758][ T8162] __sys_bpf+0x229/0x950 [ 547.394787][ T8162] ? __pfx___sys_bpf+0x10/0x10 [ 547.394808][ T8162] ? rt_mutex_slowunlock+0x1cb/0x300 [ 547.394848][ T8162] ? ksys_write+0x248/0x270 [ 547.394877][ T8162] ? __pfx_ksys_write+0x10/0x10 [ 547.394910][ T8162] __x64_sys_bpf+0x7c/0x90 [ 547.394932][ T8162] do_syscall_64+0x14d/0xf80 [ 547.394967][ T8162] ? trace_irq_disable+0x3b/0x150 [ 547.394989][ T8162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.395007][ T8162] ? clear_bhb_loop+0x40/0x90 [ 547.395032][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.395051][ T8162] RIP: 0033:0x7f6301bac799 [ 547.395069][ T8162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.395085][ T8162] RSP: 002b:00007f62ffe06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.395112][ T8162] RAX: ffffffffffffffda RBX: 00007f6301e25fa0 RCX: 00007f6301bac799 [ 547.395126][ T8162] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 547.395137][ T8162] RBP: 00007f62ffe06090 R08: 0000000000000000 R09: 0000000000000000 [ 547.395150][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.395161][ T8162] R13: 00007f6301e26038 R14: 00007f6301e25fa0 R15: 00007ffd5f0bee08 [ 547.395189][ T8162] [ 547.579482][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 547.580272][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 547.988247][ T8173] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 550.321629][ T8178] FAULT_INJECTION: forcing a failure. [ 550.321629][ T8178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.321665][ T8178] CPU: 1 UID: 0 PID: 8178 Comm: syz.2.578 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 550.321698][ T8178] Tainted: [L]=SOFTLOCKUP [ 550.321705][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.321717][ T8178] Call Trace: [ 550.321725][ T8178] [ 550.321733][ T8178] dump_stack_lvl+0xe8/0x150 [ 550.321766][ T8178] should_fail_ex+0x46b/0x600 [ 550.321796][ T8178] _copy_to_user+0x31/0xb0 [ 550.321840][ T8178] simple_read_from_buffer+0xe1/0x170 [ 550.321869][ T8178] proc_fail_nth_read+0x1be/0x230 [ 550.321896][ T8178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.321922][ T8178] ? rw_verify_area+0x2ac/0x4e0 [ 550.321950][ T8178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.321975][ T8178] vfs_read+0x212/0xa80 [ 550.322010][ T8178] ? __pfx_vfs_read+0x10/0x10 [ 550.322039][ T8178] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 550.322068][ T8178] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.322134][ T8178] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 550.322163][ T8178] ? mutex_lock_nested+0x152/0x1d0 [ 550.322185][ T8178] ? fdget_pos+0x252/0x320 [ 550.322218][ T8178] ksys_read+0x156/0x270 [ 550.322249][ T8178] ? __pfx_ksys_read+0x10/0x10 [ 550.322287][ T8178] do_syscall_64+0x14d/0xf80 [ 550.322316][ T8178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.322337][ T8178] ? clear_bhb_loop+0x40/0x90 [ 550.322361][ T8178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.322381][ T8178] RIP: 0033:0x7f7ab6a8cfce [ 550.322400][ T8178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 550.322418][ T8178] RSP: 002b:00007f7ab4d25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.322440][ T8178] RAX: ffffffffffffffda RBX: 00007f7ab4d266c0 RCX: 00007f7ab6a8cfce [ 550.322455][ T8178] RDX: 000000000000000f RSI: 00007f7ab4d260a0 RDI: 0000000000000003 [ 550.322468][ T8178] RBP: 00007f7ab4d26090 R08: 0000000000000000 R09: 0000000000000000 [ 550.322481][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.322493][ T8178] R13: 00007f7ab6d46038 R14: 00007f7ab6d45fa0 R15: 00007ffe95e4bb98 [ 550.322526][ T8178] [ 550.344229][ T8182] fuse: Unknown parameter 'user_i00000000000000000000' [ 550.602665][ T8185] sctp: [Deprecated]: syz.0.579 (pid 8185) Use of int in max_burst socket option deprecated. [ 550.602665][ T8185] Use struct sctp_assoc_value instead [ 551.083776][ T8190] FAULT_INJECTION: forcing a failure. [ 551.083776][ T8190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.083811][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.2.581 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.083838][ T8190] Tainted: [L]=SOFTLOCKUP [ 551.083845][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 551.083856][ T8190] Call Trace: [ 551.083864][ T8190] [ 551.083873][ T8190] dump_stack_lvl+0xe8/0x150 [ 551.083907][ T8190] should_fail_ex+0x46b/0x600 [ 551.083936][ T8190] _copy_from_user+0x2d/0xb0 [ 551.083963][ T8190] __sys_bpf+0x229/0x950 [ 551.083989][ T8190] ? __pfx___sys_bpf+0x10/0x10 [ 551.084010][ T8190] ? rt_mutex_slowunlock+0x1cb/0x300 [ 551.084048][ T8190] ? ksys_write+0x248/0x270 [ 551.084079][ T8190] ? __pfx_ksys_write+0x10/0x10 [ 551.084112][ T8190] __x64_sys_bpf+0x7c/0x90 [ 551.084134][ T8190] do_syscall_64+0x14d/0xf80 [ 551.084161][ T8190] ? trace_irq_disable+0x3b/0x150 [ 551.084184][ T8190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.084203][ T8190] ? clear_bhb_loop+0x40/0x90 [ 551.084226][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.084245][ T8190] RIP: 0033:0x7f7ab6acc799 [ 551.084264][ T8190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.084281][ T8190] RSP: 002b:00007f7ab4d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.084302][ T8190] RAX: ffffffffffffffda RBX: 00007f7ab6d45fa0 RCX: 00007f7ab6acc799 [ 551.084317][ T8190] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 551.084330][ T8190] RBP: 00007f7ab4d26090 R08: 0000000000000000 R09: 0000000000000000 [ 551.084341][ T8190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.084352][ T8190] R13: 00007f7ab6d46038 R14: 00007f7ab6d45fa0 R15: 00007ffe95e4bb98 [ 551.084379][ T8190] [ 551.364012][ T5842] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 551.543457][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.543491][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.543513][ T5842] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.543555][ T5842] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.543578][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.551309][ T5842] usb 8-1: config 0 descriptor?? [ 551.709540][ T5847] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 551.746343][ C1] sd 0:0:1:0: [sda] tag#1744 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.746457][ C1] sd 0:0:1:0: [sda] tag#1744 CDB: Read(6) 08 00 00 00 00 00 [ 551.749063][ C1] sd 0:0:1:0: [sda] tag#1745 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.749098][ C1] sd 0:0:1:0: [sda] tag#1745 CDB: Read(6) 08 00 00 00 00 00 [ 551.785161][ C1] sd 0:0:1:0: [sda] tag#1746 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.785212][ C1] sd 0:0:1:0: [sda] tag#1746 CDB: Read(6) 08 00 00 00 00 00 [ 551.786304][ C1] sd 0:0:1:0: [sda] tag#1747 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.786368][ C1] sd 0:0:1:0: [sda] tag#1747 CDB: Read(6) 08 00 00 00 00 00 [ 551.787788][ C1] sd 0:0:1:0: [sda] tag#1748 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.787841][ C1] sd 0:0:1:0: [sda] tag#1748 CDB: Read(6) 08 00 00 00 00 00 [ 551.788248][ C1] sd 0:0:1:0: [sda] tag#1749 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.788283][ C1] sd 0:0:1:0: [sda] tag#1749 CDB: Read(6) 08 00 00 00 00 00 [ 551.788812][ C1] sd 0:0:1:0: [sda] tag#1750 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.788858][ C1] sd 0:0:1:0: [sda] tag#1750 CDB: Read(6) 08 00 00 00 00 00 [ 551.794885][ C1] sd 0:0:1:0: [sda] tag#1751 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.794933][ C1] sd 0:0:1:0: [sda] tag#1751 CDB: Read(6) 08 00 00 00 00 00 [ 551.822368][ C1] sd 0:0:1:0: [sda] tag#1752 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.822418][ C1] sd 0:0:1:0: [sda] tag#1752 CDB: Read(6) 08 00 00 00 00 00 [ 551.881457][ C1] sd 0:0:1:0: [sda] tag#1753 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 551.881507][ C1] sd 0:0:1:0: [sda] tag#1753 CDB: Read(6) 08 00 00 00 00 00 [ 551.989994][ T5842] usbhid 8-1:0.0: can't add hid device: -71 [ 551.990172][ T5842] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 552.014239][ T5842] usb 8-1: USB disconnect, device number 6 [ 552.121052][ T8201] overlayfs: conflicting lowerdir path [ 552.202756][ T8198] overlay: Unknown parameter '/' [ 552.336145][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.589'. [ 552.495607][ T8212] fuse: Unknown parameter 'user_i00000000000000000000' [ 552.689128][ T8215] FAULT_INJECTION: forcing a failure. [ 552.689128][ T8215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.689151][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.0.592 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.689166][ T8215] Tainted: [L]=SOFTLOCKUP [ 552.689171][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.689177][ T8215] Call Trace: [ 552.689182][ T8215] [ 552.689187][ T8215] dump_stack_lvl+0xe8/0x150 [ 552.689207][ T8215] should_fail_ex+0x46b/0x600 [ 552.689224][ T8215] _copy_from_user+0x2d/0xb0 [ 552.689240][ T8215] ___sys_sendmsg+0x1c6/0x360 [ 552.689254][ T8215] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.689282][ T8215] ? __fget_files+0x2a/0x420 [ 552.689296][ T8215] ? __fget_files+0x3a6/0x420 [ 552.689328][ T8215] __x64_sys_sendmsg+0x1c3/0x2a0 [ 552.689349][ T8215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.689375][ T8215] ? __pfx_ksys_write+0x10/0x10 [ 552.689411][ T8215] do_syscall_64+0x14d/0xf80 [ 552.689438][ T8215] ? trace_irq_disable+0x3b/0x150 [ 552.689461][ T8215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.689479][ T8215] ? clear_bhb_loop+0x40/0x90 [ 552.689501][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.689520][ T8215] RIP: 0033:0x7f6301bac799 [ 552.689537][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.689554][ T8215] RSP: 002b:00007f62ffe06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.689574][ T8215] RAX: ffffffffffffffda RBX: 00007f6301e25fa0 RCX: 00007f6301bac799 [ 552.689589][ T8215] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 552.689603][ T8215] RBP: 00007f62ffe06090 R08: 0000000000000000 R09: 0000000000000000 [ 552.689615][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.689628][ T8215] R13: 00007f6301e26038 R14: 00007f6301e25fa0 R15: 00007ffd5f0bee08 [ 552.689659][ T8215] [ 552.827446][ T8219] FAULT_INJECTION: forcing a failure. [ 552.827446][ T8219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.827480][ T8219] CPU: 1 UID: 0 PID: 8219 Comm: syz.4.595 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.827507][ T8219] Tainted: [L]=SOFTLOCKUP [ 552.827514][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.827526][ T8219] Call Trace: [ 552.827534][ T8219] [ 552.827543][ T8219] dump_stack_lvl+0xe8/0x150 [ 552.827575][ T8219] should_fail_ex+0x46b/0x600 [ 552.827605][ T8219] _copy_from_user+0x2d/0xb0 [ 552.827633][ T8219] __sys_sendto+0x2bc/0x710 [ 552.827665][ T8219] ? __pfx___sys_sendto+0x10/0x10 [ 552.827714][ T8219] ? ksys_write+0x248/0x270 [ 552.827743][ T8219] ? __pfx_ksys_write+0x10/0x10 [ 552.827772][ T8219] __x64_sys_sendto+0xde/0x100 [ 552.827810][ T8219] do_syscall_64+0x14d/0xf80 [ 552.827837][ T8219] ? trace_irq_disable+0x3b/0x150 [ 552.827861][ T8219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.827880][ T8219] ? clear_bhb_loop+0x40/0x90 [ 552.827904][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.827923][ T8219] RIP: 0033:0x7f9a7c48c799 [ 552.827941][ T8219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.827958][ T8219] RSP: 002b:00007f9a7a6de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 552.827979][ T8219] RAX: ffffffffffffffda RBX: 00007f9a7c705fa0 RCX: 00007f9a7c48c799 [ 552.827993][ T8219] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000006 [ 552.828006][ T8219] RBP: 00007f9a7a6de090 R08: 0000200000000140 R09: 0000000000000014 [ 552.828019][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.828031][ T8219] R13: 00007f9a7c706038 R14: 00007f9a7c705fa0 R15: 00007ffec6743b88 [ 552.828062][ T8219] [ 553.467592][ T8227] sctp: [Deprecated]: syz.7.596 (pid 8227) Use of int in max_burst socket option deprecated. [ 553.467592][ T8227] Use struct sctp_assoc_value instead [ 554.508219][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.602'. [ 554.511814][ T8245] bridge0: port 3(team0) entered blocking state [ 554.512126][ T8245] bridge0: port 3(team0) entered disabled state [ 554.512695][ T8245] team0: entered allmulticast mode [ 554.512713][ T8245] team_slave_0: entered allmulticast mode [ 554.512776][ T8245] team_slave_1: entered allmulticast mode [ 554.516553][ T8245] team0: entered promiscuous mode [ 554.516572][ T8245] team_slave_0: entered promiscuous mode [ 554.516752][ T8245] team_slave_1: entered promiscuous mode [ 554.518150][ T8245] bridge0: port 3(team0) entered blocking state [ 554.518286][ T8245] bridge0: port 3(team0) entered forwarding state [ 554.555720][ T8239] netlink: 156 bytes leftover after parsing attributes in process `syz.0.601'. [ 554.742789][ T8250] fuse: Unknown parameter 'user_id00000000000000000000' [ 555.451595][ T8257] FAULT_INJECTION: forcing a failure. [ 555.451595][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.451630][ T8257] CPU: 1 UID: 0 PID: 8257 Comm: syz.6.607 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 555.451657][ T8257] Tainted: [L]=SOFTLOCKUP [ 555.451664][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.451676][ T8257] Call Trace: [ 555.451683][ T8257] [ 555.451692][ T8257] dump_stack_lvl+0xe8/0x150 [ 555.451725][ T8257] should_fail_ex+0x46b/0x600 [ 555.451755][ T8257] _copy_from_user+0x2d/0xb0 [ 555.451784][ T8257] do_sock_getsockopt+0x165/0x3f0 [ 555.451816][ T8257] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 555.451846][ T8257] ? __fget_files+0x3a6/0x420 [ 555.451871][ T8257] ? __fget_files+0x2a/0x420 [ 555.451901][ T8257] __x64_sys_getsockopt+0x1aa/0x250 [ 555.451929][ T8257] do_syscall_64+0x14d/0xf80 [ 555.451958][ T8257] ? trace_irq_disable+0x3b/0x150 [ 555.451981][ T8257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.452001][ T8257] ? clear_bhb_loop+0x40/0x90 [ 555.452024][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.452044][ T8257] RIP: 0033:0x7f9ae654c799 [ 555.452063][ T8257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.452080][ T8257] RSP: 002b:00007f9ae47a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 555.452101][ T8257] RAX: ffffffffffffffda RBX: 00007f9ae67c5fa0 RCX: 00007f9ae654c799 [ 555.452115][ T8257] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000003 [ 555.452128][ T8257] RBP: 00007f9ae47a6090 R08: 00002000000010c0 R09: 0000000000000000 [ 555.452141][ T8257] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 555.452153][ T8257] R13: 00007f9ae67c6038 R14: 00007f9ae67c5fa0 R15: 00007fffa95b74e8 [ 555.452184][ T8257] [ 555.469533][ T5847] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 555.658666][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.658697][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.658719][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.658759][ T5847] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.658781][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.716398][ T5847] usb 5-1: config 0 descriptor?? [ 556.396754][ T8273] sctp: [Deprecated]: syz.2.610 (pid 8273) Use of int in max_burst socket option deprecated. [ 556.396754][ T8273] Use struct sctp_assoc_value instead [ 557.028552][ T5847] usbhid 5-1:0.0: can't add hid device: -71 [ 557.028672][ T5847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 557.225882][ T5847] usb 5-1: USB disconnect, device number 22 [ 557.274744][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 557.278290][ C1] scsi_io_completion_action: 3 callbacks suppressed [ 557.278377][ C1] sd 0:0:1:0: [sda] tag#1771 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 557.278428][ C1] sd 0:0:1:0: [sda] tag#1771 CDB: Read(6) 08 00 00 00 00 00 [ 557.451828][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 557.451855][ T10] usb 7-1: config 0 has no interface number 0 [ 557.455143][ T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 557.455172][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.455194][ T10] usb 7-1: Product: syz [ 557.455210][ T10] usb 7-1: Manufacturer: syz [ 557.455225][ T10] usb 7-1: SerialNumber: syz [ 557.466414][ T10] usb 7-1: config 0 descriptor?? [ 557.701904][ T10] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 557.733070][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 557.733576][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 557.733684][ T10] usb 7-1: media controller created [ 557.800883][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.921920][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.922719][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.949767][ T10] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 558.057874][ T8290] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.619'. [ 558.057902][ T8290] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 558.126342][ T10] usb 7-1: USB disconnect, device number 11 [ 558.170646][ T8291] fuse: Unknown parameter 'user_id00000000000000000000' [ 559.460676][ T8310] sctp: [Deprecated]: syz.6.625 (pid 8310) Use of int in max_burst socket option deprecated. [ 559.460676][ T8310] Use struct sctp_assoc_value instead [ 560.289659][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 560.909424][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 561.072565][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.072598][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.072622][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.072664][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.072686][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.121721][ T10] usb 8-1: config 0 descriptor?? [ 561.125981][ T8332] fuse: Unknown parameter 'user_id00000000000000000000' [ 561.706260][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 561.706387][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 561.781748][ T10] usb 8-1: USB disconnect, device number 7 [ 562.300159][ T5996] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 562.546388][ T8348] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 564.093379][ T8354] FAULT_INJECTION: forcing a failure. [ 564.093379][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.093449][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.7.639 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.093477][ T8354] Tainted: [L]=SOFTLOCKUP [ 564.093484][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.093496][ T8354] Call Trace: [ 564.093505][ T8354] [ 564.093514][ T8354] dump_stack_lvl+0xe8/0x150 [ 564.093547][ T8354] should_fail_ex+0x46b/0x600 [ 564.093578][ T8354] _copy_from_user+0x2d/0xb0 [ 564.093605][ T8354] ___sys_sendmsg+0x1c6/0x360 [ 564.093631][ T8354] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.093684][ T8354] ? __fget_files+0x2a/0x420 [ 564.093708][ T8354] ? __fget_files+0x3a6/0x420 [ 564.093741][ T8354] __x64_sys_sendmsg+0x1c3/0x2a0 [ 564.093764][ T8354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.093793][ T8354] ? __pfx_ksys_write+0x10/0x10 [ 564.093830][ T8354] do_syscall_64+0x14d/0xf80 [ 564.093857][ T8354] ? trace_irq_disable+0x3b/0x150 [ 564.093878][ T8354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.093898][ T8354] ? clear_bhb_loop+0x40/0x90 [ 564.093925][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.093945][ T8354] RIP: 0033:0x7f1a0af2c799 [ 564.093963][ T8354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.093988][ T8354] RSP: 002b:00007f1a09165028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.094009][ T8354] RAX: ffffffffffffffda RBX: 00007f1a0b1a6090 RCX: 00007f1a0af2c799 [ 564.094023][ T8354] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000004 [ 564.094035][ T8354] RBP: 00007f1a09165090 R08: 0000000000000000 R09: 0000000000000000 [ 564.094047][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.094059][ T8354] R13: 00007f1a0b1a6128 R14: 00007f1a0b1a6090 R15: 00007ffe2ccb9c08 [ 564.094089][ T8354] [ 564.263062][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.263208][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.828979][ T8359] sctp: [Deprecated]: syz.6.638 (pid 8359) Use of int in max_burst socket option deprecated. [ 564.828979][ T8359] Use struct sctp_assoc_value instead [ 565.647516][ T8363] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 565.680009][ T8362] IPVS: stopping backup sync thread 8363 ... [ 565.835196][ C1] sd 0:0:1:0: [sda] tag#1739 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 565.835251][ C1] sd 0:0:1:0: [sda] tag#1739 CDB: Read(6) 08 00 00 00 00 00 [ 565.955872][ T8374] FAULT_INJECTION: forcing a failure. [ 565.955872][ T8374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.955905][ T8374] CPU: 1 UID: 0 PID: 8374 Comm: syz.4.643 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.955921][ T8374] Tainted: [L]=SOFTLOCKUP [ 565.955925][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.955932][ T8374] Call Trace: [ 565.955937][ T8374] [ 565.955942][ T8374] dump_stack_lvl+0xe8/0x150 [ 565.955963][ T8374] should_fail_ex+0x46b/0x600 [ 565.955980][ T8374] _copy_to_user+0x31/0xb0 [ 565.955997][ T8374] simple_read_from_buffer+0xe1/0x170 [ 565.956013][ T8374] proc_fail_nth_read+0x1be/0x230 [ 565.956029][ T8374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.956043][ T8374] ? rw_verify_area+0x2ac/0x4e0 [ 565.956057][ T8374] ? tun_chr_write_iter+0xe6/0x200 [ 565.956072][ T8374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.956085][ T8374] vfs_read+0x212/0xa80 [ 565.956104][ T8374] ? __pfx_vfs_read+0x10/0x10 [ 565.956120][ T8374] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 565.956137][ T8374] ? lockdep_hardirqs_on+0x7a/0x110 [ 565.956153][ T8374] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 565.956169][ T8374] ? mutex_lock_nested+0x152/0x1d0 [ 565.956181][ T8374] ? fdget_pos+0x252/0x320 [ 565.956199][ T8374] ksys_read+0x156/0x270 [ 565.956215][ T8374] ? __pfx_ksys_read+0x10/0x10 [ 565.956235][ T8374] do_syscall_64+0x14d/0xf80 [ 565.956251][ T8374] ? trace_irq_disable+0x3b/0x150 [ 565.956263][ T8374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.956274][ T8374] ? clear_bhb_loop+0x40/0x90 [ 565.956287][ T8374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.956297][ T8374] RIP: 0033:0x7f9a7c44cfce [ 565.956308][ T8374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.956317][ T8374] RSP: 002b:00007f9a7a69bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.956330][ T8374] RAX: ffffffffffffffda RBX: 00007f9a7a69c6c0 RCX: 00007f9a7c44cfce [ 565.956338][ T8374] RDX: 000000000000000f RSI: 00007f9a7a69c0a0 RDI: 0000000000000006 [ 565.956345][ T8374] RBP: 00007f9a7a69c090 R08: 0000000000000000 R09: 0000000000000000 [ 565.956351][ T8374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.956358][ T8374] R13: 00007f9a7c706218 R14: 00007f9a7c706180 R15: 00007ffec6743b88 [ 565.956381][ T8374] [ 566.018415][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'. [ 566.076326][ T8378] fuse: Bad value for 'fd' [ 566.598923][ T8388] binder_alloc: 8387: binder_alloc_buf, no vma [ 566.660473][ T5816] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 566.710775][ T8391] autofs4:pid:8391:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 567.028686][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.028817][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.028887][ T5816] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 567.029086][ T5816] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 567.029161][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.518052][ T5816] usb 8-1: config 0 descriptor?? [ 567.854046][ T8398] FAULT_INJECTION: forcing a failure. [ 567.854046][ T8398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.854089][ T8398] CPU: 1 UID: 0 PID: 8398 Comm: syz.2.653 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 567.854117][ T8398] Tainted: [L]=SOFTLOCKUP [ 567.854127][ T8398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 567.854139][ T8398] Call Trace: [ 567.854148][ T8398] [ 567.854156][ T8398] dump_stack_lvl+0xe8/0x150 [ 567.854190][ T8398] should_fail_ex+0x46b/0x600 [ 567.854220][ T8398] _copy_from_user+0x2d/0xb0 [ 567.854248][ T8398] __sys_bpf+0x229/0x950 [ 567.854275][ T8398] ? __pfx___sys_bpf+0x10/0x10 [ 567.854296][ T8398] ? rt_mutex_slowunlock+0x1cb/0x300 [ 567.854337][ T8398] ? ksys_write+0x248/0x270 [ 567.854367][ T8398] ? __pfx_ksys_write+0x10/0x10 [ 567.854402][ T8398] __x64_sys_bpf+0x7c/0x90 [ 567.854424][ T8398] do_syscall_64+0x14d/0xf80 [ 567.854452][ T8398] ? trace_irq_disable+0x3b/0x150 [ 567.854475][ T8398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.854495][ T8398] ? clear_bhb_loop+0x40/0x90 [ 567.854519][ T8398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.854539][ T8398] RIP: 0033:0x7f7ab6acc799 [ 567.854557][ T8398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.854574][ T8398] RSP: 002b:00007f7ab4d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.854596][ T8398] RAX: ffffffffffffffda RBX: 00007f7ab6d45fa0 RCX: 00007f7ab6acc799 [ 567.854611][ T8398] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 567.854624][ T8398] RBP: 00007f7ab4d26090 R08: 0000000000000000 R09: 0000000000000000 [ 567.854636][ T8398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.854648][ T8398] R13: 00007f7ab6d46038 R14: 00007f7ab6d45fa0 R15: 00007ffe95e4bb98 [ 567.854679][ T8398] [ 567.969122][ T8400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.971574][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'. [ 567.971594][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 568.163469][ T5816] usbhid 8-1:0.0: can't add hid device: -71 [ 568.163597][ T5816] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 568.192691][ T5816] usb 8-1: USB disconnect, device number 8 [ 568.655410][ C1] sd 0:0:1:0: [sda] tag#1744 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 568.655471][ C1] sd 0:0:1:0: [sda] tag#1744 CDB: Read(6) 08 00 00 00 00 00 [ 568.907990][ T8414] fuse: Bad value for 'fd' [ 569.313988][ T8429] autofs4:pid:8429:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 569.669343][ C1] hrtimer: interrupt took 35364 ns [ 570.105771][ T8436] lo speed is unknown, defaulting to 1000 [ 570.182804][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 570.605057][ T8441] FAULT_INJECTION: forcing a failure. [ 570.605057][ T8441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.605118][ T8441] CPU: 1 UID: 0 PID: 8441 Comm: syz.4.667 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 570.605146][ T8441] Tainted: [L]=SOFTLOCKUP [ 570.605154][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 570.605165][ T8441] Call Trace: [ 570.605174][ T8441] [ 570.605182][ T8441] dump_stack_lvl+0xe8/0x150 [ 570.605217][ T8441] should_fail_ex+0x46b/0x600 [ 570.605246][ T8441] _copy_from_user+0x2d/0xb0 [ 570.605276][ T8441] ___sys_sendmsg+0x1c6/0x360 [ 570.605303][ T8441] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.605358][ T8441] ? __fget_files+0x2a/0x420 [ 570.605381][ T8441] ? __fget_files+0x3a6/0x420 [ 570.605414][ T8441] __x64_sys_sendmsg+0x1c3/0x2a0 [ 570.605437][ T8441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.605466][ T8441] ? __pfx_ksys_write+0x10/0x10 [ 570.605504][ T8441] do_syscall_64+0x14d/0xf80 [ 570.605532][ T8441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.605553][ T8441] ? clear_bhb_loop+0x40/0x90 [ 570.605577][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.605597][ T8441] RIP: 0033:0x7f9a7c48c799 [ 570.605616][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.605633][ T8441] RSP: 002b:00007f9a7a6de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.605657][ T8441] RAX: ffffffffffffffda RBX: 00007f9a7c705fa0 RCX: 00007f9a7c48c799 [ 570.605671][ T8441] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 570.605685][ T8441] RBP: 00007f9a7a6de090 R08: 0000000000000000 R09: 0000000000000000 [ 570.605703][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.605715][ T8441] R13: 00007f9a7c706038 R14: 00007f9a7c705fa0 R15: 00007ffec6743b88 [ 570.605755][ T8441] [ 570.997536][ T31] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 571.002794][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.002858][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.010221][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.010269][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.011342][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.011389][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.012430][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.012478][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.013528][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.013575][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.014613][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.014660][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.029489][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.029541][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.035118][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 571.035172][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.089444][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 571.089474][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.089492][ T31] usb 3-1: Product: syz [ 571.089506][ T31] usb 3-1: Manufacturer: syz [ 571.089521][ T31] usb 3-1: SerialNumber: syz [ 571.446668][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.669'. [ 571.461686][ C1] sd 0:0:1:0: [sda] tag#1750 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 571.461740][ C1] sd 0:0:1:0: [sda] tag#1750 CDB: Read(6) 08 00 00 00 00 00 [ 571.462513][ C1] sd 0:0:1:0: [sda] tag#1751 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 571.462560][ C1] sd 0:0:1:0: [sda] tag#1751 CDB: Read(6) 08 00 00 00 00 00 [ 571.464062][ C1] sd 0:0:1:0: [sda] tag#1752 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 571.464100][ C1] sd 0:0:1:0: [sda] tag#1752 CDB: Read(6) 08 00 00 00 00 00 [ 571.466820][ C1] sd 0:0:1:0: [sda] tag#1753 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 571.466868][ C1] sd 0:0:1:0: [sda] tag#1753 CDB: Read(6) 08 00 00 00 00 00 [ 571.467559][ C1] sd 0:0:1:0: [sda] tag#1754 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 571.467604][ C1] sd 0:0:1:0: [sda] tag#1754 CDB: Read(6) 08 00 00 00 00 00 [ 572.005805][ T8457] fuse: Bad value for 'fd' [ 572.101456][ T5889] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 572.262092][ T5889] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 572.262122][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.268995][ T5889] usb 5-1: config 0 descriptor?? [ 572.477616][ T5889] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 572.477643][ T5889] hackrf 5-1:0.0: Could not detect board [ 572.477699][ T5889] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 572.482224][ T5889] usb 5-1: USB disconnect, device number 23 [ 572.827146][ T8469] netlink: 'syz.7.676': attribute type 10 has an invalid length. [ 572.997710][ T5925] usb 3-1: USB disconnect, device number 24 [ 573.097112][ T8469] team0: Port device netdevsim0 added [ 573.366558][ T8473] autofs4:pid:8473:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 574.439205][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.681'. [ 574.639709][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.679'. [ 575.705710][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.679'. [ 575.706220][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 575.934311][ T8499] fuse: Unknown parameter '0x0000000000000003' [ 576.014280][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f5a1000: rx timeout, send abort [ 576.018762][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f5a1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 577.007168][ T8508] netlink: 'syz.6.688': attribute type 10 has an invalid length. [ 577.149469][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 577.207649][ T8510] binder: BINDER_SET_CONTEXT_MGR already set [ 577.207665][ T8510] binder: 8509:8510 ioctl 4018620d 200000000040 returned -16 [ 577.300651][ T31] usb 3-1: too many configurations: 69, using maximum allowed: 8 [ 577.301678][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.301729][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.303657][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.303706][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.304749][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.304814][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.305871][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.305918][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.306942][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.306997][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.308325][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.308382][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.316087][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.316136][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.494533][ T31] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 577.494586][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.497875][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 577.497901][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.497921][ T31] usb 3-1: Product: syz [ 577.497937][ T31] usb 3-1: Manufacturer: syz [ 577.497952][ T31] usb 3-1: SerialNumber: syz [ 577.559739][ T8516] FAULT_INJECTION: forcing a failure. [ 577.559739][ T8516] name failslab, interval 1, probability 0, space 0, times 0 [ 577.559763][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.7.691 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 577.559778][ T8516] Tainted: [L]=SOFTLOCKUP [ 577.559783][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.559789][ T8516] Call Trace: [ 577.559794][ T8516] [ 577.559799][ T8516] dump_stack_lvl+0xe8/0x150 [ 577.559821][ T8516] should_fail_ex+0x46b/0x600 [ 577.559839][ T8516] should_failslab+0xa8/0x100 [ 577.559851][ T8516] __kmalloc_noprof+0xdf/0x7b0 [ 577.559867][ T8516] ? kernfs_fop_write_iter+0x159/0x540 [ 577.559886][ T8516] kernfs_fop_write_iter+0x159/0x540 [ 577.559905][ T8516] vfs_write+0x629/0xba0 [ 577.559925][ T8516] ? __pfx_vfs_write+0x10/0x10 [ 577.559948][ T8516] ? mutex_lock_nested+0x168/0x1d0 [ 577.559961][ T8516] ? __fget_files+0x2a/0x420 [ 577.559979][ T8516] ksys_write+0x156/0x270 [ 577.559995][ T8516] ? __pfx_ksys_write+0x10/0x10 [ 577.560016][ T8516] do_syscall_64+0x14d/0xf80 [ 577.560032][ T8516] ? trace_irq_disable+0x3b/0x150 [ 577.560045][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.560056][ T8516] ? clear_bhb_loop+0x40/0x90 [ 577.560069][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.560080][ T8516] RIP: 0033:0x7f1a0af2c799 [ 577.560091][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.560101][ T8516] RSP: 002b:00007f1a09165028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 577.560113][ T8516] RAX: ffffffffffffffda RBX: 00007f1a0b1a6090 RCX: 00007f1a0af2c799 [ 577.560121][ T8516] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000005 [ 577.560128][ T8516] RBP: 00007f1a09165090 R08: 0000000000000000 R09: 0000000000000000 [ 577.560134][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.560140][ T8516] R13: 00007f1a0b1a6128 R14: 00007f1a0b1a6090 R15: 00007ffe2ccb9c08 [ 577.560157][ T8516] [ 578.022317][ T8508] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 578.022408][ T8508] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 578.023326][ T8508] team0: Port device netdevsim0 added [ 578.106003][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.108896][ T8512] team0: Port device bond0 added [ 578.122747][ T8515] bridge0: port 3(team0) entered blocking state [ 578.126848][ T8515] bridge0: port 3(team0) entered disabled state [ 578.128057][ T8515] team0: entered allmulticast mode [ 578.128075][ T8515] team_slave_0: entered allmulticast mode [ 578.128095][ T8515] team_slave_1: entered allmulticast mode [ 578.128112][ T8515] bond0: entered allmulticast mode [ 578.128125][ T8515] bond_slave_0: entered allmulticast mode [ 578.128142][ T8515] bond_slave_1: entered allmulticast mode [ 578.137025][ T8515] team0: left allmulticast mode [ 578.137045][ T8515] team_slave_0: left allmulticast mode [ 578.137066][ T8515] team_slave_1: left allmulticast mode [ 578.137083][ T8515] bond0: left allmulticast mode [ 578.137096][ T8515] bond_slave_0: left allmulticast mode [ 578.142277][ T8522] FAULT_INJECTION: forcing a failure. [ 578.142277][ T8522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.142310][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.6.693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.142338][ T8522] Tainted: [L]=SOFTLOCKUP [ 578.142345][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.142358][ T8522] Call Trace: [ 578.142365][ T8522] [ 578.142374][ T8522] dump_stack_lvl+0xe8/0x150 [ 578.142408][ T8522] should_fail_ex+0x46b/0x600 [ 578.142437][ T8522] _copy_from_user+0x2d/0xb0 [ 578.142466][ T8522] __sys_connect+0x156/0x450 [ 578.142497][ T8522] ? __pfx___sys_connect+0x10/0x10 [ 578.142541][ T8522] ? __pfx_ksys_write+0x10/0x10 [ 578.142576][ T8522] __x64_sys_connect+0x7a/0x90 [ 578.142603][ T8522] do_syscall_64+0x14d/0xf80 [ 578.142632][ T8522] ? trace_irq_disable+0x3b/0x150 [ 578.142655][ T8522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.142674][ T8522] ? clear_bhb_loop+0x40/0x90 [ 578.142698][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.142717][ T8522] RIP: 0033:0x7f9ae654c799 [ 578.142737][ T8522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.142754][ T8522] RSP: 002b:00007f9ae47a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 578.142775][ T8522] RAX: ffffffffffffffda RBX: 00007f9ae67c5fa0 RCX: 00007f9ae654c799 [ 578.142789][ T8522] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 578.142802][ T8522] RBP: 00007f9ae47a6090 R08: 0000000000000000 R09: 0000000000000000 [ 578.142814][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.142826][ T8522] R13: 00007f9ae67c6038 R14: 00007f9ae67c5fa0 R15: 00007fffa95b74e8 [ 578.142860][ T8522] [ 578.156808][ T8515] bond_slave_1: left allmulticast mode [ 578.292866][ T31] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 578.703791][ T8532] Invalid source name [ 578.703809][ T8532] UBIFS error (pid: 8532): cannot open "/dev/rnullb0", error -22 [ 578.943759][ T31] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 578.943797][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.943817][ T31] usb 8-1: Product: syz [ 578.943831][ T31] usb 8-1: Manufacturer: syz [ 578.943845][ T31] usb 8-1: SerialNumber: syz [ 578.965589][ T31] usb 8-1: config 0 descriptor?? [ 578.990275][ T31] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 579.074597][ T8535] netlink: 116 bytes leftover after parsing attributes in process `syz.4.698'. [ 579.818473][ T8537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'. [ 580.030039][ T10] usb 3-1: USB disconnect, device number 25 [ 580.126038][ T31] gspca_sunplus: reg_w_riv err -71 [ 580.127452][ T31] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 580.182616][ T31] usb 8-1: USB disconnect, device number 9 [ 581.154361][ T37] kauditd_printk_skb: 111 callbacks suppressed [ 581.154380][ T37] audit: type=1326 audit(1774176960.448:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8543 comm="syz.4.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c48c799 code=0x0 [ 581.377167][ T8551] netlink: 'syz.0.703': attribute type 10 has an invalid length. [ 581.396672][ T8552] FAULT_INJECTION: forcing a failure. [ 581.396672][ T8552] name failslab, interval 1, probability 0, space 0, times 0 [ 581.396706][ T8552] CPU: 1 UID: 0 PID: 8552 Comm: syz.7.702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 581.396734][ T8552] Tainted: [L]=SOFTLOCKUP [ 581.396741][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.396753][ T8552] Call Trace: [ 581.396760][ T8552] [ 581.396769][ T8552] dump_stack_lvl+0xe8/0x150 [ 581.396803][ T8552] should_fail_ex+0x46b/0x600 [ 581.396833][ T8552] should_failslab+0xa8/0x100 [ 581.396855][ T8552] __kmalloc_noprof+0xdf/0x7b0 [ 581.396881][ T8552] ? kfree+0x4d/0x6c0 [ 581.396904][ T8552] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 581.396933][ T8552] tomoyo_realpath_from_path+0xe3/0x5d0 [ 581.396966][ T8552] ? tomoyo_path_number_perm+0x219/0x630 [ 581.397004][ T8552] tomoyo_path_number_perm+0x246/0x630 [ 581.397037][ T8552] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.397067][ T8552] ? __lock_acquire+0x6b5/0x2cf0 [ 581.397116][ T8552] ? __fget_files+0x2a/0x420 [ 581.397142][ T8552] ? __fget_files+0x2a/0x420 [ 581.397162][ T8552] ? __fget_files+0x3a6/0x420 [ 581.397183][ T8552] ? __fget_files+0x2a/0x420 [ 581.397210][ T8552] security_file_ioctl+0xc3/0x2a0 [ 581.397231][ T8552] __se_sys_ioctl+0x47/0x170 [ 581.397262][ T8552] do_syscall_64+0x14d/0xf80 [ 581.397289][ T8552] ? trace_irq_disable+0x3b/0x150 [ 581.397311][ T8552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.397332][ T8552] ? clear_bhb_loop+0x40/0x90 [ 581.397355][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.397373][ T8552] RIP: 0033:0x7f1a0af2c799 [ 581.397391][ T8552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.397406][ T8552] RSP: 002b:00007f1a09165028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.397426][ T8552] RAX: ffffffffffffffda RBX: 00007f1a0b1a6090 RCX: 00007f1a0af2c799 [ 581.397440][ T8552] RDX: 0000200000000140 RSI: 0000000000005609 RDI: 0000000000000005 [ 581.397453][ T8552] RBP: 00007f1a09165090 R08: 0000000000000000 R09: 0000000000000000 [ 581.397465][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.397485][ T8552] R13: 00007f1a0b1a6128 R14: 00007f1a0b1a6090 R15: 00007ffe2ccb9c08 [ 581.397515][ T8552] [ 581.397524][ T8552] ERROR: Out of memory at tomoyo_realpath_from_path. [ 581.451193][ T8551] team0: Port device netdevsim0 added [ 581.479461][ T31] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 581.529587][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 581.645211][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 581.645261][ T31] usb 7-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 581.645285][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.677811][ T31] usb 7-1: config 0 descriptor?? [ 581.684354][ T8534] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 581.782706][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.782734][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.806885][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 581.806915][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.806936][ T10] usb 3-1: SerialNumber: syz [ 582.088760][ T8562] FAULT_INJECTION: forcing a failure. [ 582.088760][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 582.088796][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.4.706 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.088823][ T8562] Tainted: [L]=SOFTLOCKUP [ 582.088830][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.088841][ T8562] Call Trace: [ 582.088854][ T8562] [ 582.088867][ T8562] dump_stack_lvl+0xe8/0x150 [ 582.088910][ T8562] should_fail_ex+0x46b/0x600 [ 582.088939][ T8562] should_failslab+0xa8/0x100 [ 582.088960][ T8562] kmem_cache_alloc_noprof+0x87/0x680 [ 582.088985][ T8562] ? lockdep_hardirqs_on+0x7a/0x110 [ 582.089011][ T8562] ? do_getname+0x2e/0x250 [ 582.089035][ T8562] do_getname+0x2e/0x250 [ 582.089058][ T8562] ? getname_flags+0x11/0x20 [ 582.089081][ T8562] do_sys_openat2+0xca/0x200 [ 582.089106][ T8562] ? __pfx_do_sys_openat2+0x10/0x10 [ 582.089130][ T8562] ? ksys_write+0x248/0x270 [ 582.089158][ T8562] ? __pfx_ksys_write+0x10/0x10 [ 582.089188][ T8562] __x64_sys_openat+0x138/0x170 [ 582.089216][ T8562] do_syscall_64+0x14d/0xf80 [ 582.089242][ T8562] ? trace_irq_disable+0x3b/0x150 [ 582.089263][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.089295][ T8562] ? clear_bhb_loop+0x40/0x90 [ 582.089319][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.089337][ T8562] RIP: 0033:0x7f9a7c48c799 [ 582.089355][ T8562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.089371][ T8562] RSP: 002b:00007f9a7a6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 582.089390][ T8562] RAX: ffffffffffffffda RBX: 00007f9a7c705fa0 RCX: 00007f9a7c48c799 [ 582.089403][ T8562] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 582.089413][ T8562] RBP: 00007f9a7a6de090 R08: 0000000000000000 R09: 0000000000000000 [ 582.089424][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.089435][ T8562] R13: 00007f9a7c706038 R14: 00007f9a7c705fa0 R15: 00007ffec6743b88 [ 582.089464][ T8562] [ 582.143829][ T10] usb 3-1: 0:2 : does not exist [ 582.143928][ T10] usb 3-1: unit 5: unexpected type 0x0a [ 582.394810][ T10] usb 3-1: USB disconnect, device number 26 [ 582.471595][ T8534] "syz.6.696" (8534) uses obsolete ecb(arc4) skcipher [ 582.488497][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 582.488617][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 582.506151][ T31] usb 7-1: USB disconnect, device number 13 [ 582.581170][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.854429][ T8575] FAULT_INJECTION: forcing a failure. [ 582.854429][ T8575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.854465][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: syz.7.708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 582.854492][ T8575] Tainted: [L]=SOFTLOCKUP [ 582.854499][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 582.854511][ T8575] Call Trace: [ 582.854519][ T8575] [ 582.854528][ T8575] dump_stack_lvl+0xe8/0x150 [ 582.854562][ T8575] should_fail_ex+0x46b/0x600 [ 582.854591][ T8575] _copy_from_user+0x2d/0xb0 [ 582.854619][ T8575] ___sys_sendmsg+0x1c6/0x360 [ 582.854645][ T8575] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.854699][ T8575] ? __fget_files+0x2a/0x420 [ 582.854723][ T8575] ? __fget_files+0x3a6/0x420 [ 582.854756][ T8575] __x64_sys_sendmsg+0x1c3/0x2a0 [ 582.854779][ T8575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.854817][ T8575] ? __pfx_ksys_write+0x10/0x10 [ 582.854856][ T8575] do_syscall_64+0x14d/0xf80 [ 582.854887][ T8575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.854908][ T8575] ? clear_bhb_loop+0x40/0x90 [ 582.854933][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.854953][ T8575] RIP: 0033:0x7f1a0af2c799 [ 582.854972][ T8575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.854989][ T8575] RSP: 002b:00007f1a09186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.855011][ T8575] RAX: ffffffffffffffda RBX: 00007f1a0b1a5fa0 RCX: 00007f1a0af2c799 [ 582.855026][ T8575] RDX: 0000000000008894 RSI: 0000200000000400 RDI: 0000000000000004 [ 582.855040][ T8575] RBP: 00007f1a09186090 R08: 0000000000000000 R09: 0000000000000000 [ 582.855052][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.855065][ T8575] R13: 00007f1a0b1a6038 R14: 00007f1a0b1a5fa0 R15: 00007ffe2ccb9c08 [ 582.855096][ T8575] [ 583.120522][ T8578] Invalid source name [ 583.120539][ T8578] UBIFS error (pid: 8578): cannot open "/dev/rnullb0", error -22 [ 583.613336][ T8581] netlink: 116 bytes leftover after parsing attributes in process `syz.0.710'. [ 585.371434][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.713'. [ 585.837182][ T8587] netlink: 788 bytes leftover after parsing attributes in process `syz.6.713'. [ 586.201608][ T5816] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 586.390887][ T5816] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 586.390925][ T5816] usb 8-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 586.390937][ T5816] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.442894][ T5816] usb 8-1: config 0 descriptor?? [ 586.446115][ T8588] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 586.447143][ T8602] netlink: 'syz.4.715': attribute type 10 has an invalid length. [ 586.501935][ T8603] FAULT_INJECTION: forcing a failure. [ 586.501935][ T8603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.501974][ T8603] CPU: 1 UID: 0 PID: 8603 Comm: syz.0.716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.502002][ T8603] Tainted: [L]=SOFTLOCKUP [ 586.502009][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.502021][ T8603] Call Trace: [ 586.502029][ T8603] [ 586.502038][ T8603] dump_stack_lvl+0xe8/0x150 [ 586.502072][ T8603] should_fail_ex+0x46b/0x600 [ 586.502101][ T8603] _copy_from_user+0x2d/0xb0 [ 586.502130][ T8603] __sys_bpf+0x229/0x950 [ 586.502155][ T8603] ? __pfx___sys_bpf+0x10/0x10 [ 586.502177][ T8603] ? rt_mutex_slowunlock+0x1cb/0x300 [ 586.502219][ T8603] ? ksys_write+0x248/0x270 [ 586.502248][ T8603] ? __pfx_ksys_write+0x10/0x10 [ 586.502283][ T8603] __x64_sys_bpf+0x7c/0x90 [ 586.502305][ T8603] do_syscall_64+0x14d/0xf80 [ 586.502333][ T8603] ? trace_irq_disable+0x3b/0x150 [ 586.502355][ T8603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.502375][ T8603] ? clear_bhb_loop+0x40/0x90 [ 586.502408][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.502428][ T8603] RIP: 0033:0x7f6301bac799 [ 586.502447][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.502464][ T8603] RSP: 002b:00007f62ffe06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.502485][ T8603] RAX: ffffffffffffffda RBX: 00007f6301e25fa0 RCX: 00007f6301bac799 [ 586.502500][ T8603] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 586.502512][ T8603] RBP: 00007f62ffe06090 R08: 0000000000000000 R09: 0000000000000000 [ 586.502525][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.502537][ T8603] R13: 00007f6301e26038 R14: 00007f6301e25fa0 R15: 00007ffd5f0bee08 [ 586.502569][ T8603] [ 586.797546][ T8588] "syz.7.711" (8588) uses obsolete ecb(arc4) skcipher [ 587.104242][ T8602] team0: Port device netdevsim0 added [ 587.176057][ T8607] FAULT_INJECTION: forcing a failure. [ 587.176057][ T8607] name failslab, interval 1, probability 0, space 0, times 0 [ 587.176082][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.0.718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 587.176098][ T8607] Tainted: [L]=SOFTLOCKUP [ 587.176102][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.176109][ T8607] Call Trace: [ 587.176114][ T8607] [ 587.176119][ T8607] dump_stack_lvl+0xe8/0x150 [ 587.176141][ T8607] should_fail_ex+0x46b/0x600 [ 587.176159][ T8607] should_failslab+0xa8/0x100 [ 587.176171][ T8607] kmem_cache_alloc_noprof+0x87/0x680 [ 587.176186][ T8607] ? lockdep_hardirqs_on+0x7a/0x110 [ 587.176202][ T8607] ? do_getname+0x2e/0x250 [ 587.176215][ T8607] do_getname+0x2e/0x250 [ 587.176225][ T8607] ? getname_flags+0x11/0x20 [ 587.176238][ T8607] do_sys_openat2+0xca/0x200 [ 587.176252][ T8607] ? __pfx_do_sys_openat2+0x10/0x10 [ 587.176265][ T8607] ? ksys_write+0x248/0x270 [ 587.176281][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 587.176298][ T8607] __x64_sys_openat+0x138/0x170 [ 587.176316][ T8607] do_syscall_64+0x14d/0xf80 [ 587.176332][ T8607] ? trace_irq_disable+0x3b/0x150 [ 587.176345][ T8607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.176356][ T8607] ? clear_bhb_loop+0x40/0x90 [ 587.176369][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.176380][ T8607] RIP: 0033:0x7f6301b6cfce [ 587.176391][ T8607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 587.176400][ T8607] RSP: 002b:00007f62ffde4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 587.176412][ T8607] RAX: ffffffffffffffda RBX: 00007f62ffde56c0 RCX: 00007f6301b6cfce [ 587.176420][ T8607] RDX: 0000000000000002 RSI: 00007f62ffde4f90 RDI: ffffffffffffff9c [ 587.176427][ T8607] RBP: 00007f62ffde5090 R08: 0000000000000000 R09: 0000000000000000 [ 587.176434][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.176440][ T8607] R13: 00007f6301e26128 R14: 00007f6301e26090 R15: 00007ffd5f0bee08 [ 587.176456][ T8607] [ 588.438563][ T8625] binder: BINDER_SET_CONTEXT_MGR already set [ 588.438578][ T8625] binder: 8624:8625 ioctl 4018620d 200000000040 returned -16 [ 588.638486][ T8627] Invalid source name [ 588.638505][ T8627] UBIFS error (pid: 8627): cannot open "/dev/rnullb0", error -22 [ 590.155761][ T8637] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 590.463350][ T5852] Bluetooth: hci1: command 0x0406 tx timeout [ 592.176823][ T5816] usbhid 8-1:0.0: can't add hid device: -32 [ 592.176945][ T5816] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 593.016527][ T5816] usb 8-1: USB disconnect, device number 10 [ 593.259040][ T8652] loop2: detected capacity change from 0 to 7 [ 593.272959][ T8653] netlink: 'syz.0.730': attribute type 10 has an invalid length. [ 593.276490][ T8652] Dev loop2: unable to read RDB block 7 [ 593.276538][ T8652] loop2: unable to read partition table [ 593.276749][ T8652] loop2: partition table beyond EOD, truncated [ 593.278369][ T8652] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 593.608284][ T8663] Invalid source name [ 593.608303][ T8663] UBIFS error (pid: 8663): cannot open "/dev/rnullb0", error -22 [ 594.875235][ T37] audit: type=1326 audit(1774176974.168:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8667 comm="syz.4.738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a7c48c799 code=0x0 [ 596.961523][ T8686] FAULT_INJECTION: forcing a failure. [ 596.961523][ T8686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.961558][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: syz.0.743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.961584][ T8686] Tainted: [L]=SOFTLOCKUP [ 596.961592][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.961603][ T8686] Call Trace: [ 596.961610][ T8686] [ 596.961619][ T8686] dump_stack_lvl+0xe8/0x150 [ 596.961652][ T8686] should_fail_ex+0x46b/0x600 [ 596.961682][ T8686] _copy_from_user+0x2d/0xb0 [ 596.961711][ T8686] do_sock_getsockopt+0x165/0x3f0 [ 596.961752][ T8686] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 596.961781][ T8686] ? __fget_files+0x3a6/0x420 [ 596.961805][ T8686] ? __fget_files+0x2a/0x420 [ 596.961835][ T8686] __x64_sys_getsockopt+0x1aa/0x250 [ 596.961863][ T8686] do_syscall_64+0x14d/0xf80 [ 596.961892][ T8686] ? trace_irq_disable+0x3b/0x150 [ 596.961914][ T8686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.961934][ T8686] ? clear_bhb_loop+0x40/0x90 [ 596.961957][ T8686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.961976][ T8686] RIP: 0033:0x7f6301bac799 [ 596.961995][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.962011][ T8686] RSP: 002b:00007f62ffe06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 596.962032][ T8686] RAX: ffffffffffffffda RBX: 00007f6301e25fa0 RCX: 00007f6301bac799 [ 596.962047][ T8686] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000004 [ 596.962059][ T8686] RBP: 00007f62ffe06090 R08: 0000200000000480 R09: 0000000000000000 [ 596.962073][ T8686] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 596.962085][ T8686] R13: 00007f6301e26038 R14: 00007f6301e25fa0 R15: 00007ffd5f0bee08 [ 596.962116][ T8686] [ 597.229643][ T8689] fuse: Unknown parameter '' [ 597.230854][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.262869][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.262898][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.296891][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.296918][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.376564][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.376584][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.407212][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.527393][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.527425][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 597.732409][ T8697] FAULT_INJECTION: forcing a failure. [ 597.732409][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 597.732432][ T8697] CPU: 0 UID: 0 PID: 8697 Comm: syz.6.746 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.732448][ T8697] Tainted: [L]=SOFTLOCKUP [ 597.732452][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.732459][ T8697] Call Trace: [ 597.732464][ T8697] [ 597.732469][ T8697] dump_stack_lvl+0xe8/0x150 [ 597.732489][ T8697] should_fail_ex+0x46b/0x600 [ 597.732506][ T8697] should_failslab+0xa8/0x100 [ 597.732518][ T8697] kmem_cache_alloc_noprof+0x87/0x680 [ 597.732534][ T8697] ? do_getname+0x2e/0x250 [ 597.732547][ T8697] do_getname+0x2e/0x250 [ 597.732557][ T8697] ? getname_uflags+0x11/0x30 [ 597.732570][ T8697] do_fchownat+0xe3/0x250 [ 597.732583][ T8697] ? __pfx_do_fchownat+0x10/0x10 [ 597.732595][ T8697] ? __pfx_ksys_write+0x10/0x10 [ 597.732613][ T8697] __x64_sys_fchownat+0xb5/0xd0 [ 597.732625][ T8697] do_syscall_64+0x14d/0xf80 [ 597.732642][ T8697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.732652][ T8697] ? clear_bhb_loop+0x40/0x90 [ 597.732665][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.732676][ T8697] RIP: 0033:0x7f9ae654c799 [ 597.732687][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.732696][ T8697] RSP: 002b:00007f9ae47a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 597.732708][ T8697] RAX: ffffffffffffffda RBX: 00007f9ae67c5fa0 RCX: 00007f9ae654c799 [ 597.732715][ T8697] RDX: 000000000000ee01 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 597.732723][ T8697] RBP: 00007f9ae47a6090 R08: 0000000000001000 R09: 0000000000000000 [ 597.732729][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.732746][ T8697] R13: 00007f9ae67c6038 R14: 00007f9ae67c5fa0 R15: 00007fffa95b74e8 [ 597.732762][ T8697] [ 597.749416][ T5925] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 597.994994][ T5925] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 597.995024][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.995046][ T5925] usb 8-1: Product: syz [ 597.995061][ T5925] usb 8-1: Manufacturer: syz [ 597.995076][ T5925] usb 8-1: SerialNumber: syz [ 598.058495][ T5925] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 598.108801][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.126794][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.275092][ T5955] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 598.676638][ T8711] netlink: 'syz.0.749': attribute type 10 has an invalid length. [ 598.770251][ T31] usb 8-1: USB disconnect, device number 11 [ 599.013129][ T8715] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 599.013161][ T8715] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 599.013172][ T8715] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 599.013209][ T8715] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 599.250704][ T992] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 599.350388][ T5955] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 599.350934][ T5955] ath9k_htc: Failed to initialize the device [ 599.449451][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 599.519862][ T31] usb 8-1: ath9k_htc: USB layer deinitialized [ 600.257178][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.267709][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.373991][ T992] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 600.374026][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 600.377087][ T992] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 600.377116][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.377137][ T992] usb 5-1: Product: syz [ 600.377240][ T992] usb 5-1: Manufacturer: syz [ 600.377256][ T992] usb 5-1: SerialNumber: syz [ 600.456975][ T992] usb 5-1: config 0 descriptor?? [ 600.471592][ T992] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 600.471650][ T992] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 601.158550][ T992] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 601.166048][ T992] em28xx 5-1:0.0: Config register raw data: 0xa1 [ 601.166069][ T992] em28xx 5-1:0.0: I2S Audio (1 sample rate(s)) [ 601.166086][ T992] em28xx 5-1:0.0: No AC97 audio processor [ 601.340409][ T8694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.691310][ T8737] sctp: [Deprecated]: syz.7.755 (pid 8737) Use of int in max_burst socket option deprecated. [ 601.691310][ T8737] Use struct sctp_assoc_value instead [ 602.405282][ T992] usb 5-1: USB disconnect, device number 24 [ 602.640671][ T7214] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.646506][ T7214] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.647008][ T7214] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.647093][ T7214] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.950369][ T8753] __nla_validate_parse: 148 callbacks suppressed [ 602.950405][ T8753] netlink: 80 bytes leftover after parsing attributes in process `syz.2.760'. [ 604.449447][ T992] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 604.550001][ T8767] netlink: 'syz.6.766': attribute type 10 has an invalid length. [ 604.656471][ T992] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 604.656508][ T992] usb 3-1: config 0 interface 0 has no altsetting 0 [ 604.656542][ T992] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 604.656566][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.685996][ T992] usb 3-1: config 0 descriptor?? [ 604.686714][ T8756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 605.259968][ T992] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0014/input/input11 [ 605.484717][ T992] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0014/input/input12 [ 605.609082][ T992] kye 0003:0458:5012.0014: input,hiddev0,hidraw0: USB HID v80.01 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 605.760694][ T992] usb 3-1: USB disconnect, device number 27 [ 606.050279][ T8787] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 606.050317][ T8787] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.050765][ T8787] vhci_hcd vhci_hcd.0: Device attached [ 606.559683][ T6007] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 606.733189][ T8788] vhci_hcd: connection reset by peer [ 606.755360][ T68] vhci_hcd vhci_hcd.6: stop threads [ 606.755384][ T68] vhci_hcd vhci_hcd.6: release socket [ 606.755457][ T68] vhci_hcd vhci_hcd.6: disconnect device [ 607.499257][ T8794] FAULT_INJECTION: forcing a failure. [ 607.499257][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.499292][ T8794] CPU: 0 UID: 0 PID: 8794 Comm: syz.6.775 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.499320][ T8794] Tainted: [L]=SOFTLOCKUP [ 607.499327][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.499338][ T8794] Call Trace: [ 607.499346][ T8794] [ 607.499355][ T8794] dump_stack_lvl+0xe8/0x150 [ 607.499388][ T8794] should_fail_ex+0x46b/0x600 [ 607.499417][ T8794] _copy_from_user+0x2d/0xb0 [ 607.499444][ T8794] ___sys_sendmsg+0x1c6/0x360 [ 607.499469][ T8794] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.499517][ T8794] ? __fget_files+0x2a/0x420 [ 607.499541][ T8794] ? __fget_files+0x3a6/0x420 [ 607.499572][ T8794] __x64_sys_sendmsg+0x1c3/0x2a0 [ 607.499595][ T8794] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.499625][ T8794] ? __pfx_ksys_write+0x10/0x10 [ 607.499663][ T8794] do_syscall_64+0x14d/0xf80 [ 607.499690][ T8794] ? trace_irq_disable+0x3b/0x150 [ 607.499713][ T8794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.499738][ T8794] ? clear_bhb_loop+0x40/0x90 [ 607.499762][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.499782][ T8794] RIP: 0033:0x7f9ae654c799 [ 607.499800][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.499816][ T8794] RSP: 002b:00007f9ae47a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.499838][ T8794] RAX: ffffffffffffffda RBX: 00007f9ae67c5fa0 RCX: 00007f9ae654c799 [ 607.499852][ T8794] RDX: 00000000000400d4 RSI: 0000200000000240 RDI: 0000000000000003 [ 607.499865][ T8794] RBP: 00007f9ae47a6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.499877][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.499890][ T8794] R13: 00007f9ae67c6038 R14: 00007f9ae67c5fa0 R15: 00007fffa95b74e8 [ 607.499921][ T8794] [ 609.281399][ T8818] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 609.627457][ T8824] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 609.627499][ T8824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 609.627917][ T8824] vhci_hcd vhci_hcd.0: Device attached [ 609.683175][ T6024] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 609.771548][ T8829] FAULT_INJECTION: forcing a failure. [ 609.771548][ T8829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.772685][ T8829] CPU: 0 UID: 0 PID: 8829 Comm: syz.6.785 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 609.772715][ T8829] Tainted: [L]=SOFTLOCKUP [ 609.772730][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.772743][ T8829] Call Trace: [ 609.772751][ T8829] [ 609.772761][ T8829] dump_stack_lvl+0xe8/0x150 [ 609.772795][ T8829] should_fail_ex+0x46b/0x600 [ 609.772825][ T8829] _copy_to_user+0x31/0xb0 [ 609.772856][ T8829] simple_read_from_buffer+0xe1/0x170 [ 609.772884][ T8829] proc_fail_nth_read+0x1be/0x230 [ 609.772911][ T8829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.772938][ T8829] ? rw_verify_area+0x2ac/0x4e0 [ 609.772964][ T8829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.772988][ T8829] vfs_read+0x212/0xa80 [ 609.773024][ T8829] ? __pfx_vfs_read+0x10/0x10 [ 609.773053][ T8829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 609.773082][ T8829] ? lockdep_hardirqs_on+0x7a/0x110 [ 609.773111][ T8829] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 609.773139][ T8829] ? mutex_lock_nested+0x152/0x1d0 [ 609.773162][ T8829] ? fdget_pos+0x252/0x320 [ 609.773195][ T8829] ksys_read+0x156/0x270 [ 609.773220][ T8829] ? __pfx_filldir64+0x10/0x10 [ 609.773260][ T8829] ? __pfx_ksys_read+0x10/0x10 [ 609.773298][ T8829] do_syscall_64+0x14d/0xf80 [ 609.773327][ T8829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.773348][ T8829] ? clear_bhb_loop+0x40/0x90 [ 609.773372][ T8829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.773393][ T8829] RIP: 0033:0x7f9ae650cfce [ 609.773426][ T8829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 609.773443][ T8829] RSP: 002b:00007f9ae4784fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.773464][ T8829] RAX: ffffffffffffffda RBX: 00007f9ae47856c0 RCX: 00007f9ae650cfce [ 609.773478][ T8829] RDX: 000000000000000f RSI: 00007f9ae47850a0 RDI: 0000000000000004 [ 609.773491][ T8829] RBP: 00007f9ae4785090 R08: 0000000000000000 R09: 0000000000000000 [ 609.773503][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.773515][ T8829] R13: 00007f9ae67c6128 R14: 00007f9ae67c6090 R15: 00007fffa95b74e8 [ 609.773547][ T8829] [ 610.066570][ T6024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 610.066664][ T6024] usb 8-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 610.066770][ T6024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.265972][ T8826] vhci_hcd: connection closed [ 610.294959][ T5937] vhci_hcd vhci_hcd.2: stop threads [ 610.295027][ T5937] vhci_hcd vhci_hcd.2: release socket [ 610.324711][ T6024] usb 8-1: config 0 descriptor?? [ 610.336842][ T5955] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 610.386645][ T8816] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 610.429211][ T5937] vhci_hcd vhci_hcd.2: disconnect device [ 610.802194][ T8809] "syz.7.781" (8809) uses obsolete ecb(arc4) skcipher [ 610.837866][ T6024] usbhid 8-1:0.0: can't add hid device: -71 [ 610.837937][ T6024] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 610.866409][ T6024] usb 8-1: USB disconnect, device number 12 [ 612.400264][ T8833] autofs4:pid:8833:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 612.459684][ T6007] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 612.674951][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 613.562689][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.792'. [ 614.642148][ T8871] FAULT_INJECTION: forcing a failure. [ 614.642148][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 614.642219][ T8871] CPU: 0 UID: 0 PID: 8871 Comm: syz.7.796 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 614.642247][ T8871] Tainted: [L]=SOFTLOCKUP [ 614.642255][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 614.642266][ T8871] Call Trace: [ 614.642275][ T8871] [ 614.642284][ T8871] dump_stack_lvl+0xe8/0x150 [ 614.642318][ T8871] should_fail_ex+0x46b/0x600 [ 614.642347][ T8871] should_failslab+0xa8/0x100 [ 614.642370][ T8871] __kmalloc_noprof+0xdf/0x7b0 [ 614.642397][ T8871] ? kfree+0x4d/0x6c0 [ 614.642420][ T8871] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 614.642450][ T8871] tomoyo_realpath_from_path+0xe3/0x5d0 [ 614.642482][ T8871] ? tomoyo_path_number_perm+0x219/0x630 [ 614.642513][ T8871] tomoyo_path_number_perm+0x246/0x630 [ 614.642544][ T8871] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 614.642575][ T8871] ? __lock_acquire+0x6b5/0x2cf0 [ 614.642628][ T8871] ? __fget_files+0x2a/0x420 [ 614.642655][ T8871] ? __fget_files+0x2a/0x420 [ 614.642686][ T8871] ? __fget_files+0x3a6/0x420 [ 614.642708][ T8871] ? __fget_files+0x2a/0x420 [ 614.642735][ T8871] security_file_ioctl+0xc3/0x2a0 [ 614.642758][ T8871] __se_sys_ioctl+0x47/0x170 [ 614.642790][ T8871] do_syscall_64+0x14d/0xf80 [ 614.642818][ T8871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.642838][ T8871] ? clear_bhb_loop+0x40/0x90 [ 614.642862][ T8871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.642882][ T8871] RIP: 0033:0x7f1a0af2c799 [ 614.642900][ T8871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.642917][ T8871] RSP: 002b:00007f1a09165028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.642938][ T8871] RAX: ffffffffffffffda RBX: 00007f1a0b1a6090 RCX: 00007f1a0af2c799 [ 614.642952][ T8871] RDX: 00002000000001c0 RSI: 00000000c0405602 RDI: 0000000000000007 [ 614.642965][ T8871] RBP: 00007f1a09165090 R08: 0000000000000000 R09: 0000000000000000 [ 614.642977][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.642989][ T8871] R13: 00007f1a0b1a6128 R14: 00007f1a0b1a6090 R15: 00007ffe2ccb9c08 [ 614.643020][ T8871] [ 614.643064][ T8871] ERROR: Out of memory at tomoyo_realpath_from_path. [ 615.492314][ T5955] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 616.428223][ T8876] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 616.428252][ T8876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 616.428641][ T8876] vhci_hcd vhci_hcd.0: Device attached [ 616.794454][ T8877] vhci_hcd: connection closed [ 616.867537][ T5955] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 616.922245][ T8878] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 616.939784][ T6629] vhci_hcd vhci_hcd.2: stop threads [ 616.939807][ T6629] vhci_hcd vhci_hcd.2: release socket [ 616.981173][ T6629] vhci_hcd vhci_hcd.2: disconnect device [ 618.832014][ T8889] FAULT_INJECTION: forcing a failure. [ 618.832014][ T8889] name failslab, interval 1, probability 0, space 0, times 0 [ 618.832047][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.6.803 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 618.832074][ T8889] Tainted: [L]=SOFTLOCKUP [ 618.832082][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.832093][ T8889] Call Trace: [ 618.832101][ T8889] [ 618.832110][ T8889] dump_stack_lvl+0xe8/0x150 [ 618.832144][ T8889] should_fail_ex+0x46b/0x600 [ 618.832174][ T8889] should_failslab+0xa8/0x100 [ 618.832197][ T8889] __kmalloc_noprof+0xdf/0x7b0 [ 618.832224][ T8889] ? kfree+0x4d/0x6c0 [ 618.832248][ T8889] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 618.832278][ T8889] tomoyo_realpath_from_path+0xe3/0x5d0 [ 618.832311][ T8889] ? tomoyo_path_number_perm+0x219/0x630 [ 618.832341][ T8889] tomoyo_path_number_perm+0x246/0x630 [ 618.832371][ T8889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 618.832399][ T8889] ? __lock_acquire+0x6b5/0x2cf0 [ 618.832423][ T8889] ? look_up_lock_class+0x57/0x110 [ 618.832460][ T8889] ? __lock_acquire+0x6b5/0x2cf0 [ 618.832502][ T8889] ? __pfx_from_kuid+0x10/0x10 [ 618.832537][ T8889] tomoyo_path_chown+0x46/0xc0 [ 618.832564][ T8889] security_path_chown+0x139/0x340 [ 618.832594][ T8889] chown_common+0x40c/0x6c0 [ 618.832626][ T8889] ? __pfx_chown_common+0x10/0x10 [ 618.832660][ T8889] ? mnt_get_write_access+0x262/0x2d0 [ 618.832693][ T8889] ? mnt_want_write_file+0x17e/0x210 [ 618.832724][ T8889] ksys_fchown+0xe9/0x160 [ 618.832749][ T8889] __x64_sys_fchown+0x7a/0x90 [ 618.832774][ T8889] do_syscall_64+0x14d/0xf80 [ 618.832801][ T8889] ? trace_irq_disable+0x3b/0x150 [ 618.832823][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.832844][ T8889] ? clear_bhb_loop+0x40/0x90 [ 618.832875][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.832895][ T8889] RIP: 0033:0x7f9ae654c799 [ 618.832914][ T8889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.832954][ T8889] RSP: 002b:00007f9ae47a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 618.832976][ T8889] RAX: ffffffffffffffda RBX: 00007f9ae67c5fa0 RCX: 00007f9ae654c799 [ 618.832991][ T8889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 618.833003][ T8889] RBP: 00007f9ae47a6090 R08: 0000000000000000 R09: 0000000000000000 [ 618.833029][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.833041][ T8889] R13: 00007f9ae67c6038 R14: 00007f9ae67c5fa0 R15: 00007fffa95b74e8 [ 618.833074][ T8889] [ 618.833083][ T8889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 619.109444][ T8702] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 619.271038][ T8702] usb 8-1: Using ep0 maxpacket: 16 [ 619.631938][ T8702] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.632011][ T8702] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.136470][ T8702] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.136500][ T8702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.136521][ T8702] usb 8-1: Product: syz [ 620.136535][ T8702] usb 8-1: Manufacturer: syz [ 620.136550][ T8702] usb 8-1: SerialNumber: syz [ 621.279647][ T8702] usb 8-1: 0:2 : does not exist [ 621.449256][ T8702] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 622.113063][ T8702] usb 8-1: USB disconnect, device number 13 [ 622.301296][ T5955] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 622.466715][ T8904] netlink: 'syz.7.806': attribute type 12 has an invalid length. [ 622.466740][ T8904] netlink: 'syz.7.806': attribute type 29 has an invalid length. [ 622.466757][ T8904] netlink: 148 bytes leftover after parsing attributes in process `syz.7.806'. [ 622.466798][ T8904] netlink: 'syz.7.806': attribute type 2 has an invalid length. [ 622.864118][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 623.354205][ T8911] FAULT_INJECTION: forcing a failure. [ 623.354205][ T8911] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 623.354241][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.2.808 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 623.354268][ T8911] Tainted: [L]=SOFTLOCKUP [ 623.354276][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.354287][ T8911] Call Trace: [ 623.354295][ T8911] [ 623.354304][ T8911] dump_stack_lvl+0xe8/0x150 [ 623.354336][ T8911] should_fail_ex+0x46b/0x600 [ 623.354367][ T8911] prepare_alloc_pages+0x22a/0x6b0 [ 623.354396][ T8911] __alloc_frozen_pages_noprof+0x12f/0x380 [ 623.354423][ T8911] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 623.354448][ T8911] ? __pfx_policy_nodemask+0x10/0x10 [ 623.354468][ T8911] ? __lock_acquire+0x6b5/0x2cf0 [ 623.354493][ T8911] ? __lock_acquire+0x6b5/0x2cf0 [ 623.354515][ T8911] alloc_pages_mpol+0xd1/0x380 [ 623.354539][ T8911] vma_alloc_folio_noprof+0xea/0x290 [ 623.354563][ T8911] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 623.354594][ T8911] do_pte_missing+0x7f9/0x29e0 [ 623.354630][ T8911] handle_mm_fault+0xd0a/0x13c0 [ 623.354671][ T8911] ? handle_mm_fault+0xe7/0x13c0 [ 623.354701][ T8911] ? __pfx_handle_mm_fault+0x10/0x10 [ 623.354726][ T8911] ? lock_vma_under_rcu+0x45a/0x500 [ 623.354771][ T8911] do_user_addr_fault+0xa73/0x1340 [ 623.354805][ T8911] ? rcu_is_watching+0x15/0xb0 [ 623.354826][ T8911] ? trace_page_fault_user+0x84/0x210 [ 623.354856][ T8911] exc_page_fault+0x6a/0xc0 [ 623.354885][ T8911] asm_exc_page_fault+0x26/0x30 [ 623.354904][ T8911] RIP: 0033:0x7f7ab698df4b [ 623.354922][ T8911] Code: 00 00 00 48 8d 3d 3d a7 1a 00 48 89 c1 31 c0 e8 9b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 a7 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 623.354938][ T8911] RSP: 002b:00007f7ab4d03fa0 EFLAGS: 00010206 [ 623.354956][ T8911] RAX: 0000000000000000 RBX: 00007f7ab6d46090 RCX: 0000000000000000 [ 623.354969][ T8911] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 623.354981][ T8911] RBP: 00007f7ab4d05090 R08: 0000000000000000 R09: 0000000000000000 [ 623.354993][ T8911] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000001 [ 623.355005][ T8911] R13: 00007f7ab6d46128 R14: 00007f7ab6d46090 R15: 00007ffe95e4bb98 [ 623.355037][ T8911] [ 623.355432][ T8911] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 623.380635][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.429623][ T7918] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 623.597314][ T7918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 623.597362][ T7918] usb 7-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 623.597386][ T7918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.614556][ T7918] usb 7-1: config 0 descriptor?? [ 623.617763][ T8897] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 623.848779][ T8897] "syz.6.805" (8897) uses obsolete ecb(arc4) skcipher [ 623.887271][ T7918] usbhid 7-1:0.0: can't add hid device: -71 [ 623.887343][ T7918] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 623.908837][ T7918] usb 7-1: USB disconnect, device number 14 [ 623.969520][ T5955] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 624.146087][ T5955] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 624.146118][ T5955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.146140][ T5955] usb 8-1: Product: syz [ 624.146156][ T5955] usb 8-1: Manufacturer: syz [ 624.146170][ T5955] usb 8-1: SerialNumber: syz [ 624.151824][ T5955] usb 8-1: config 0 descriptor?? [ 624.157757][ T5955] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 624.255617][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.255685][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.574383][ T8929] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 624.574441][ T8929] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 624.574524][ T8929] vhci_hcd vhci_hcd.0: Device attached [ 624.619120][ T5955] gspca_sunplus: reg_w_riv err -71 [ 624.619210][ T5955] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 625.070652][ T5955] usb 8-1: USB disconnect, device number 14 [ 625.105966][ T8930] vhci_hcd: connection closed [ 625.108236][ T5996] vhci_hcd vhci_hcd.2: stop threads [ 625.108261][ T5996] vhci_hcd vhci_hcd.2: release socket [ 625.108298][ T5996] vhci_hcd vhci_hcd.2: disconnect device [ 625.702829][ T5113] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 625.703024][ T5113] CPU: 0 UID: 0 PID: 5113 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 625.703057][ T5113] Tainted: [L]=SOFTLOCKUP [ 625.703065][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.703081][ T5113] Workqueue: hci1 hci_rx_work [ 625.703117][ T5113] Call Trace: [ 625.703125][ T5113] [ 625.703135][ T5113] dump_stack_lvl+0xe8/0x150 [ 625.703170][ T5113] sysfs_create_dir_ns+0x271/0x2a0 [ 625.703196][ T5113] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 625.703226][ T5113] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 625.703256][ T5113] ? rt_spin_unlock+0x160/0x200 [ 625.703285][ T5113] kobject_add_internal+0x631/0xd10 [ 625.703318][ T5113] kobject_add+0x163/0x240 [ 625.703346][ T5113] ? __pfx_kobject_add+0x10/0x10 [ 625.703377][ T5113] ? get_device_parent+0x370/0x3a0 [ 625.703407][ T5113] device_add+0x408/0xb80 [ 625.703435][ T5113] hci_conn_add_sysfs+0xd5/0x210 [ 625.703467][ T5113] le_conn_complete_evt+0xf1d/0x1430 [ 625.703502][ T5113] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 625.703526][ T5113] ? irqentry_exit+0x59e/0x620 [ 625.703556][ T5113] ? rcu_is_watching+0x15/0xb0 [ 625.703593][ T5113] hci_le_conn_complete_evt+0x187/0x470 [ 625.703624][ T5113] hci_event_packet+0x7af/0x12c0 [ 625.703660][ T5113] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 625.703683][ T5113] ? __pfx_hci_event_packet+0x10/0x10 [ 625.703712][ T5113] ? rt_spin_unlock+0x14f/0x200 [ 625.703747][ T5113] ? hci_send_to_monitor+0xe2/0x590 [ 625.703776][ T5113] hci_rx_work+0x3ee/0x1030 [ 625.703815][ T5113] ? process_scheduled_works+0xa8d/0x18c0 [ 625.703847][ T5113] process_scheduled_works+0xb6e/0x18c0 [ 625.703916][ T5113] ? __pfx_process_scheduled_works+0x10/0x10 [ 625.703956][ T5113] ? assign_work+0x3d5/0x5e0 [ 625.703991][ T5113] worker_thread+0xa53/0xfc0 [ 625.704049][ T5113] kthread+0x388/0x470 [ 625.704073][ T5113] ? __pfx_worker_thread+0x10/0x10 [ 625.704101][ T5113] ? __pfx_kthread+0x10/0x10 [ 625.704125][ T5113] ret_from_fork+0x51e/0xb90 [ 625.704160][ T5113] ? __pfx_ret_from_fork+0x10/0x10 [ 625.704188][ T5113] ? __switch_to+0xc7d/0x1450 [ 625.704218][ T5113] ? __pfx_kthread+0x10/0x10 [ 625.704243][ T5113] ret_from_fork_asm+0x1a/0x30 [ 625.704281][ T5113] [ 625.704412][ T5113] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 625.704526][ T5113] Bluetooth: hci1: failed to register connection device [ 626.316026][ T5113] Bluetooth: hci5: command 0x0406 tx timeout [ 629.920192][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 631.083662][ T8702] kernel read not supported for file /543/attr (pid: 8702 comm: kworker/1:9) [ 631.920143][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.831'. [ 632.093959][ T8728] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 633.020756][ T8728] usb 5-1: too many configurations: 69, using maximum allowed: 8 [ 633.022037][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.022104][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.023447][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.024390][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.025379][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.025445][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.026963][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.027009][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.028423][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.028469][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.159010][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.159063][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.183957][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.184008][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.185205][ T8728] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 633.185245][ T8728] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.187662][ T8728] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 633.187689][ T8728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.187709][ T8728] usb 5-1: Product: syz [ 633.187724][ T8728] usb 5-1: Manufacturer: syz [ 633.187738][ T8728] usb 5-1: SerialNumber: syz [ 633.886828][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.839'. [ 633.886854][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.839'. [ 634.209082][ T9015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 634.603038][ T6007] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 634.762313][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.762348][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.762371][ T6007] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 634.762415][ T6007] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 634.762439][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.799787][ T6007] usb 7-1: config 0 descriptor?? [ 636.041325][ T6024] usb 5-1: USB disconnect, device number 25 [ 636.131045][ T6007] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 636.769413][ T9038] sctp: [Deprecated]: syz.2.843 (pid 9038) Use of int in max_burst socket option deprecated. [ 636.769413][ T9038] Use struct sctp_assoc_value instead [ 637.382124][ T9037] 9p: Bad value for 'rfdno' [ 638.363126][ T8728] usb 7-1: USB disconnect, device number 15 [ 638.845570][ T9060] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 638.845611][ T9060] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 638.858587][ T9060] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 638.858744][ T9060] team0: Failed to send options change via netlink (err -105) [ 638.858760][ T9060] team0: Port device netdevsim0 added [ 639.027099][ T9068] FAULT_INJECTION: forcing a failure. [ 639.027099][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 639.027121][ T9068] CPU: 1 UID: 0 PID: 9068 Comm: syz.2.856 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 639.027137][ T9068] Tainted: [L]=SOFTLOCKUP [ 639.027141][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 639.027148][ T9068] Call Trace: [ 639.027153][ T9068] [ 639.027158][ T9068] dump_stack_lvl+0xe8/0x150 [ 639.027178][ T9068] should_fail_ex+0x46b/0x600 [ 639.027195][ T9068] should_failslab+0xa8/0x100 [ 639.027207][ T9068] __kmalloc_noprof+0xdf/0x7b0 [ 639.027222][ T9068] ? kfree+0x4d/0x6c0 [ 639.027235][ T9068] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 639.027252][ T9068] tomoyo_realpath_from_path+0xe3/0x5d0 [ 639.027269][ T9068] ? tomoyo_path_number_perm+0x219/0x630 [ 639.027286][ T9068] tomoyo_path_number_perm+0x246/0x630 [ 639.027303][ T9068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 639.027320][ T9068] ? __lock_acquire+0x6b5/0x2cf0 [ 639.027355][ T9068] ? __fget_files+0x2a/0x420 [ 639.027377][ T9068] ? __fget_files+0x2a/0x420 [ 639.027389][ T9068] ? __fget_files+0x3a6/0x420 [ 639.027401][ T9068] ? __fget_files+0x2a/0x420 [ 639.027420][ T9068] security_file_ioctl+0xc3/0x2a0 [ 639.027433][ T9068] __se_sys_ioctl+0x47/0x170 [ 639.027450][ T9068] do_syscall_64+0x14d/0xf80 [ 639.027474][ T9068] ? trace_irq_disable+0x3b/0x150 [ 639.027494][ T9068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.027514][ T9068] ? clear_bhb_loop+0x40/0x90 [ 639.027537][ T9068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.027554][ T9068] RIP: 0033:0x7f7ab6acc799 [ 639.027565][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.027575][ T9068] RSP: 002b:00007f7ab4d26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 639.027587][ T9068] RAX: ffffffffffffffda RBX: 00007f7ab6d45fa0 RCX: 00007f7ab6acc799 [ 639.027595][ T9068] RDX: 0000200000000040 RSI: 0000000080045505 RDI: 0000000000000003 [ 639.027603][ T9068] RBP: 00007f7ab4d26090 R08: 0000000000000000 R09: 0000000000000000 [ 639.027610][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.027616][ T9068] R13: 00007f7ab6d46038 R14: 00007f7ab6d45fa0 R15: 00007ffe95e4bb98 [ 639.027633][ T9068] [ 639.027638][ T9068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 639.129515][ T6024] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 639.179479][ T8728] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 639.300187][ T6024] usb 8-1: too many configurations: 69, using maximum allowed: 8 [ 639.301997][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.302050][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.303134][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.303236][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.304265][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.304316][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.305338][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.305384][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.306682][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.306730][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.307787][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.307833][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.308892][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.308938][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.327286][ T6024] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.327321][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.330684][ T8728] usb 7-1: too many configurations: 69, using maximum allowed: 8 [ 639.332488][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.332546][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.336076][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.336126][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.337816][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.337886][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.340123][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.340172][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.341131][ T8702] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 639.343998][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.344046][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.346732][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.346779][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.348221][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.348268][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.382816][ T8728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 639.382868][ T8728] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.391861][ T6024] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 639.391890][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.391911][ T6024] usb 8-1: Product: syz [ 639.391921][ T6024] usb 8-1: Manufacturer: syz [ 639.391930][ T6024] usb 8-1: SerialNumber: syz [ 639.499640][ T8702] usb 3-1: Using ep0 maxpacket: 16 [ 639.505695][ T8702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.505745][ T8702] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 639.505818][ T8702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 639.505840][ T8702] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 639.505863][ T8702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 639.508424][ T8702] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.508450][ T8702] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.508831][ T8702] usb 3-1: Manufacturer: syz [ 639.561673][ T8728] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 639.561704][ T8728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.561725][ T8728] usb 7-1: Product: syz [ 639.561739][ T8728] usb 7-1: Manufacturer: syz [ 639.561754][ T8728] usb 7-1: SerialNumber: syz [ 639.721356][ T8702] usb 3-1: config 0 descriptor?? [ 639.932068][ T8728] usb 3-1: USB disconnect, device number 28 [ 640.101892][ T6024] usb 7-1: USB disconnect, device number 16 [ 640.249771][ T38] INFO: task syz-executor:5840 blocked for more than 143 seconds. [ 640.249796][ T38] Tainted: G L syzkaller #0 [ 640.249808][ T38] Blocked by coredump. [ 640.249815][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.249824][ T38] task:syz-executor state:D stack:21896 pid:5840 tgid:5840 ppid:1 task_flags:0x40014c flags:0x00080001 [ 640.249919][ T38] Call Trace: [ 640.249927][ T38] [ 640.249940][ T38] __schedule+0x1553/0x5240 [ 640.249980][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 640.250022][ T38] ? __pfx___schedule+0x10/0x10 [ 640.250058][ T38] ? schedule+0x90/0x360 [ 640.250087][ T38] schedule+0x164/0x360 [ 640.250117][ T38] schedule_timeout+0xc3/0x2c0 [ 640.250147][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 640.250175][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.250217][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.250245][ T38] ? wait_for_completion+0x274/0x5e0 [ 640.250277][ T38] wait_for_completion+0x2cc/0x5e0 [ 640.250318][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 640.250353][ T38] ? __flush_work+0x104/0xda0 [ 640.250376][ T38] __flush_work+0x9e0/0xda0 [ 640.250394][ T38] ? __flush_work+0x104/0xda0 [ 640.250417][ T38] ? __pfx___flush_work+0x10/0x10 [ 640.250437][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 640.250488][ T38] ? __cancel_work_sync+0x5c/0x110 [ 640.250511][ T38] __cancel_work_sync+0xbe/0x110 [ 640.250533][ T38] hci_cmd_sync_clear+0x30/0x230 [ 640.250567][ T38] hci_unregister_dev+0x194/0x5a0 [ 640.250599][ T38] vhci_release+0x155/0x1b0 [ 640.250628][ T38] ? __pfx_vhci_release+0x10/0x10 [ 640.250655][ T38] __fput+0x461/0xa90 [ 640.250692][ T38] task_work_run+0x1d9/0x270 [ 640.250716][ T38] ? __pfx_task_work_run+0x10/0x10 [ 640.250740][ T38] ? kmem_cache_free+0x185/0x6b0 [ 640.250759][ T38] ? put_net+0x191/0x260 [ 640.250791][ T38] do_exit+0x70f/0x23c0 [ 640.250812][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 640.250848][ T38] ? rt_spin_lock+0x1e0/0x400 [ 640.250929][ T38] ? __pfx_do_exit+0x10/0x10 [ 640.250951][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 640.250985][ T38] ? rt_spin_unlock+0x160/0x200 [ 640.251016][ T38] do_group_exit+0x21b/0x2d0 [ 640.251043][ T38] __x64_sys_exit_group+0x3f/0x40 [ 640.251065][ T38] x64_sys_call+0x221a/0x2240 [ 640.251084][ T38] do_syscall_64+0x14d/0xf80 [ 640.251111][ T38] ? trace_irq_disable+0x3b/0x150 [ 640.251135][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.251155][ T38] ? clear_bhb_loop+0x40/0x90 [ 640.251179][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.251199][ T38] RIP: 0033:0x7f52d8a2c799 [ 640.251224][ T38] RSP: 002b:00007fff97ed1d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 640.251245][ T38] RAX: ffffffffffffffda RBX: 00007f52d8ac20c2 RCX: 00007f52d8a2c799 [ 640.251259][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 640.251272][ T38] RBP: 0000000000000016 R08: 0000000000000000 R09: 00007f52d8ac2050 [ 640.251286][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff97ed3050 [ 640.251299][ T38] R13: 00007f52d8ac2050 R14: 00005555866664e8 R15: 00007fff97ed5210 [ 640.251331][ T38] [ 640.251421][ T38] [ 640.251421][ T38] Showing all locks held in the system: [ 640.251433][ T38] 1 lock held by khungtaskd/38: [ 640.251458][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 640.251531][ T38] 2 locks held by getty/5556: [ 640.251542][ T38] #0: ffff8880376bf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 640.251592][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 640.251639][ T38] 3 locks held by kworker/u9:3/5848: [ 640.251650][ T38] #0: ffff888040529938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 640.251701][ T38] #1: ffffc90004967c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 640.251751][ T38] #2: ffff88803d248f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 640.251807][ T38] 7 locks held by kworker/u8:8/5996: [ 640.251818][ T38] 5 locks held by kworker/0:7/6024: [ 640.251830][ T38] #0: ffff88801d6fa538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 640.251880][ T38] #1: ffffc900053b7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 640.252552][ T38] #2: ffff888029d89188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 640.252602][ T38] #3: ffff888024b7c188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x970 [ 640.252653][ T38] #4: ffff888019c4f238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 640.252715][ T38] 5 locks held by kworker/u8:19/7209: [ 640.252728][ T38] 2 locks held by kworker/u8:23/7213: [ 640.252743][ T38] 5 locks held by kworker/1:15/8728: [ 640.252757][ T38] [ 640.252762][ T38] ============================================= [ 640.252762][ T38] [ 640.252779][ T38] NMI backtrace for cpu 1 [ 640.252795][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 640.252820][ T38] Tainted: [L]=SOFTLOCKUP [ 640.252825][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.252834][ T38] Call Trace: [ 640.252842][ T38] [ 640.252849][ T38] dump_stack_lvl+0xe8/0x150 [ 640.252877][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 640.252900][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 640.252929][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 640.252955][ T38] sys_info+0x135/0x170 [ 640.252977][ T38] watchdog+0xfd9/0x1030 [ 640.253011][ T38] ? watchdog+0x21a/0x1030 [ 640.253036][ T38] kthread+0x388/0x470 [ 640.253058][ T38] ? __pfx_watchdog+0x10/0x10 [ 640.253078][ T38] ? __pfx_kthread+0x10/0x10 [ 640.253099][ T38] ret_from_fork+0x51e/0xb90 [ 640.253128][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 640.253150][ T38] ? __switch_to+0xc7d/0x1450 [ 640.253178][ T38] ? __pfx_kthread+0x10/0x10 [ 640.253204][ T38] ret_from_fork_asm+0x1a/0x30 [ 640.253244][ T38] [ 640.253269][ T38] Sending NMI from CPU 1 to CPUs 0: [ 640.253293][ C0] NMI backtrace for cpu 0 [ 640.253310][ C0] CPU: 0 UID: 0 PID: 9061 Comm: syz.7.854 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 640.253333][ C0] Tainted: [L]=SOFTLOCKUP [ 640.253340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.253350][ C0] RIP: 0033:0x7f1a0ade0788 [ 640.253366][ C0] Code: 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 92 18 3b 00 89 f0 4c 8d 05 89 f8 3a 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 <48> 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 [ 640.253381][ C0] RSP: 002b:00007ffe2ccb9c48 EFLAGS: 00000206 [ 640.253396][ C0] RAX: 00000000821764ce RBX: ffffffff821764ce RCX: ffffffff823004ce [ 640.253408][ C0] RDX: 00000000000004ce RSI: ffffffff821764ce RDI: 000000000000000d [ 640.253420][ C0] RBP: 0000000000000000 R08: 00007f1a0b190000 R09: 00007f1a0b192000 [ 640.253432][ C0] R10: 00000000821764d2 R11: 000000000000000d R12: 00007f1a0b1a6038 [ 640.253442][ C0] R13: 0000000000053643 R14: ffffffff82176137 R15: 00007f1a0bcd5720 [ 640.253454][ C0] FS: 00005555815b9500 GS: 0000000000000000 [ 640.256880][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 640.256900][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 640.256928][ T38] Tainted: [L]=SOFTLOCKUP [ 640.256935][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.256952][ T38] Call Trace: [ 640.256959][ T38] [ 640.256967][ T38] vpanic+0x56c/0xa60 [ 640.256997][ T38] ? __pfx___schedule+0x10/0x10 [ 640.257022][ T38] ? __pfx_vpanic+0x10/0x10 [ 640.257055][ T38] panic+0xc5/0xd0 [ 640.257081][ T38] ? __pfx_panic+0x10/0x10 [ 640.257109][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 640.257136][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 640.257165][ T38] watchdog+0x1023/0x1030 [ 640.257192][ T38] ? watchdog+0x21a/0x1030 [ 640.257230][ T38] kthread+0x388/0x470 [ 640.257252][ T38] ? __pfx_watchdog+0x10/0x10 [ 640.257272][ T38] ? __pfx_kthread+0x10/0x10 [ 640.257295][ T38] ret_from_fork+0x51e/0xb90 [ 640.257324][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 640.257350][ T38] ? __switch_to+0xc7d/0x1450 [ 640.257377][ T38] ? __pfx_kthread+0x10/0x10 [ 640.257398][ T38] ret_from_fork_asm+0x1a/0x30 [ 640.257433][ T38] [ 640.257577][ T38] Kernel Offset: disabled