last executing test programs: 4.347216438s ago: executing program 2 (id=3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000200)='./file0\x00', 0x200) clock_gettime(0x0, &(0x7f0000003e00)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/62, 0x3e}, {&(0x7f0000000480)=""/24, 0x18}], 0x2, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000000780)=""/225, 0xe1}, {&(0x7f0000000880)=""/183, 0xb7}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/175, 0xaf}], 0x5}}, {{&(0x7f0000002a80), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002b00)=""/57, 0x39}, {&(0x7f0000002b40)=""/240, 0xf0}, {&(0x7f0000002c40)=""/251, 0xfb}, {&(0x7f0000002d40)=""/22, 0x16}], 0x4}}, {{&(0x7f0000002dc0)=@abs, 0x6e, &(0x7f0000002e40), 0x0, &(0x7f0000002e80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000002fc0)=@abs, 0x6e, &(0x7f0000003140)=[{&(0x7f0000003040)=""/77, 0x4d}, {&(0x7f00000030c0)=""/88, 0x58}], 0x2, &(0x7f0000003180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000003280), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003300)=""/96, 0x60}, {&(0x7f0000003380)=""/137, 0x89}, {&(0x7f0000003440)=""/32, 0x20}, {&(0x7f0000003480)=""/54, 0x36}], 0x4, &(0x7f0000003500)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003580), 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003600)=""/174, 0xae}], 0x1}}, {{&(0x7f0000003700)=@abs, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003780)=""/60, 0x3c}, {&(0x7f00000037c0)=""/241, 0xf1}, {&(0x7f00000038c0)=""/131, 0x83}, {&(0x7f0000003980)=""/217, 0xd9}, {&(0x7f0000003a80)=""/189, 0xbd}], 0x5, &(0x7f0000003bc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x40002001, &(0x7f0000003e40)={r1, r2+60000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r3, &(0x7f0000000240)='100', 0x3) write$P9_RUNLINKAT(r0, &(0x7f0000000340)={0x7, 0x4d, 0x2}, 0x7) waitid(0x1, 0xffffffffffffffff, &(0x7f0000000100), 0x20000000, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = request_key(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, r4) mkdir(&(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000700)='./bus\x00', &(0x7f0000000740), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 4.33169544s ago: executing program 0 (id=1): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x2) r1 = signalfd(r0, &(0x7f0000000040)={[0x180000]}, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000280)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f00000002c0)={0x6, 'rose0\x00', {0xffffffff}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x440000, 0x0) accept4$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x800) mknodat$null(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2000, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002740)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x97175860e16c6929, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000027c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000048c0)='./file0\x00', 0x101001, 0x0) ioctl$TCSETS(r1, 0x40806685, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101040, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000004940)={&(0x7f0000004980)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004a40)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000380)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f00000003c0)={0x1}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000400)={[{0x5, 0x0, 0xd1, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x20000000, 0x10000000, 0x1, 0x0, 0x0, 0x2004cb, 0x3, 0xfffffffffffffc, 0xffffeffffffffff8, 0x0, 0xfffffffffffff2ab, 0x7, 0x4], 0x2, 0x200306}) 4.264801266s ago: executing program 2 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r1, r0, &(0x7f00000004c0)=0xd, 0x8) mkdirat(r1, &(0x7f0000000000)='./dev\x00', 0xd7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/ram0\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x0, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/serial8250\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f00000003c0)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='serial8250', 0xa) pwrite64(r2, &(0x7f0000000180)="fc", 0xfffffdd8, 0x7) 4.174765085s ago: executing program 2 (id=10): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/stat\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="1201000000145f405e04bd84b689010223010902240001000000000904ed0002ff5d010009050303000000050009058a03"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001a80)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x17c6, 0x3401) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001b80)=0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/4096, 0x9ec}, {&(0x7f0000001600)=""/161, 0xa1}, {&(0x7f00000016c0)=""/134, 0x3a}, {&(0x7f0000001780)=""/146, 0x92}, {&(0x7f0000001840)=""/128, 0x37}, {&(0x7f00000018c0)=""/260, 0x111}, {&(0x7f0000001a00)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f0000000140)={0x4b5a9da54893e123, 0x3, 0x18, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) 4.168657016s ago: executing program 3 (id=11): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x41f4, &(0x7f0000001b40)={0x0, 0xf46f, 0x0, 0x3, 0x3c3}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000400)) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, 0x0, 0x0, &(0x7f0000001d40)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r8, &(0x7f0000000280)='6', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r9) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x42042, 0x180) sendfile(r10, r10, 0x0, 0x1200000000000) r11 = dup(r5) syz_ublk_setup_queues(r11, r4, &(0x7f0000003280)={0x0, 0xfffffffe, 0x800, 0xfffffffe, 0x2f6, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40, 0x3, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0) 3.918163771s ago: executing program 3 (id=12): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x4403, 0x15, 0x1, 0x4, 0x7, 0x1, 0x7}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x300, 0x2f93) sendmsg$nl_xfrm(r1, &(0x7f000001a280)={0x0, 0x0, &(0x7f000001a2c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff01000000000000000000000000000101040000000000009201000000000000203ad4f58f818735ffff0000000000001c250800000000000200000000000000fbffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002800000000000000480003"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x8000}) 3.891101494s ago: executing program 3 (id=13): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000400)) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000380)={0x81, 0x0, 0x3}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000209000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090f4b90b08000031d231c00f3048cf"}}], 0x6e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xeeee0000, 0x5, 0x46, 0x7fff, 0x0, [{0x80, 0xff, 0x5, '\x00', 0x7}, {0xa, 0x2, 0xf9, '\x00', 0x6}, {0xa0, 0xa, 0x9, '\x00', 0x1}, {0x4, 0x0, 0x6, '\x00', 0xe6}, {0x4, 0x4, 0x6, '\x00', 0x4}, {0x3, 0xc, 0x4, '\x00', 0xff}, {0x16, 0x80}, {0x2, 0xb, 0xcd, '\x00', 0xe4}, {0x0, 0x8, 0x8, '\x00', 0xc9}, {0x9, 0x62, 0x9, '\x00', 0x7d}, {0x8, 0x40, 0xe6, '\x00', 0xd}, {0x7, 0xc, 0x80, '\x00', 0x33}, {0x0, 0x9, 0x10, '\x00', 0x7}, {0x1, 0x1a, 0x6}, {0xa, 0x0, 0x3, '\x00', 0xfb}, {0x7, 0x4, 0x7f, '\x00', 0x40}, {0xc3, 0x37, 0x5, '\x00', 0x7e}, {0x1, 0x4, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x6, '\x00', 0x9}, {0x8, 0x7, 0x16, '\x00', 0x5}, {0x7, 0x5, 0x1, '\x00', 0x1}, {0x9, 0x5, 0x6, '\x00', 0x7f}, {0x4, 0x0, 0x16, '\x00', 0x6}, {0x10, 0x28, 0x34, '\x00', 0x95}]}}) 3.700456704s ago: executing program 3 (id=14): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) clock_settime(0xa, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0x0, 0x2}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000100)) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="200173"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.877897879s ago: executing program 3 (id=20): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000001280)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0xb, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000180)={0x2, 0x6e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000001c0), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'bridge_slave_1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x18, r4, 0x1, 0x3}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000001600)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001640)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001680)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f00000016c0)="4a8f2d53aa", 0x5, 0x240250d4, &(0x7f0000001700)={0x11, 0x8100, r7, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001740)={@loopback, @rand_addr, 0x0}, &(0x7f0000001780)=0xc) r9 = socket(0xa, 0x3, 0x87) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000017c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f00000003c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x15, r11}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001840)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r11}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001cc0)={'syztnl1\x00', &(0x7f0000001c40)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x7, 0x5, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x7, 0x4, 0x8}}) sendmmsg$inet(r0, &(0x7f00000041c0)=[{{&(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000280)="77b9313d2000cd989aa6894194412a34b5bd85357baf540c1faad696d547daaffb6a7e40594ce33ad9dfa0051d1814a220a4033a91d41f7a37b91977950dcd365d183f48b2bbd23b73137127f1c5a773192a9a56537f5990af67971e6955805bc4b08f871c096b96bcf7a362b88ecf3d7601bf", 0x73}, {&(0x7f0000000300)="2aa92194e129ece6b56656da7530f01c5aaadf9b039f05a74d52635d2acc6bc17c9701deae7f2268d1546c8d6b7ed9c4d6bd58", 0x33}, {&(0x7f0000000340)="6fdd9953725ea861ebbaa734ddd159e4569f2ed63e2be38483c0127ff8ea5d66db3542050607848f3d464393b7b8d475fcbdd8abff39e259b79977f69be968e65506bab90dc4fc71b3316c12d41db6383773661b2d1f351fde091107983a7ff1b7491a2b7649987b2124fd51a6050320d26a899e3e3ea96ca0cbf72341b3", 0x7e}, {&(0x7f0000000480)="b4c68076b92b7c9f3030b0875bf0ead83cdf1a48bb370f5168893ff1bb71c3ac1e346db3e935407abf5987ca1aafdfc9e8b6bebc433f3c1216186a1028c00bd050cfa84d3c7844081abedc4758ceedc2a33729964b5e20eb57d28b8b880b093fbff151b967d8f5c25b45e92f35b09e4d7f7a90b11844943fbf70bf9b9d03701d2cb1488f3c93244264743afe386385a49155f225231186680a50bdbb551e9f7f19bdd97da76ec3ea2e5762026abecda0c66ef85edbd5dc488553a8302afa3a14c787197baeb0fc", 0xc7}, {&(0x7f0000000580)="eb64fa1d564e52d3882b810952818d64dc51bc6d77a9b711d5e140b26b72adeda7c793d5277547cee6bf1f9970278b41fd85e6cac1f9cee6ba92ed7a6bf2e41331c4fc49f215063325bea256d815160cc94e993c30fe839e40abd261f1dd16771c4e46e06e659591ac27e42755404858f42d545b4421f41c6c7c4179baec66223814e7bf9552ab00cb13cb7dd190eb5497bbe75deb06d64657cd9986f0f50bd10944a5ffa0170df64f6af8b08bb09496b9fca05da164f4f294ba4c6f98139950202733bc6cc69e8875f91ec4b02daefb3131a29a1b14", 0xd6}, {&(0x7f0000000680)="f3e4690cb993b471529c7e0b86357f14b3f2d85edf44d837fd050ac374ee18d25689a8419dc41c5487dea91ca2e61cf4a7e62c8ac0ee8e2e2339798d34e7a545e6d3e3f50c28c241adaba0c416d88d5001c5c5352b842ce69124fab15db84dd4ed43aed7b66a1ef8b5595bc77ed179e6f4754631046adaae1b2ce29ef9cfbf41e9ba1309098129e0e705d274a4659ecb60e0f140fbee1d1056cd3897b780c008f5bf5f48793e9afef931752dafaa925baa25ae1985e38a64eb0a05864a192c77843f481d02c19cdcf3abd236", 0xcc}, {&(0x7f0000000780)="8f1205a8d8597e4ac3c5b568acbe4b7ba9399f382b4a0a1c61d3ac80268a1ab3afd7f98981ae2c046049e73e8dbd9647d5b27163cccaec8a4289ff8f5dbe4b9d6517520554648c1e3ffa5ea5becb7786387c8ce89aba252e076caea45743ef7ecaeb9b1de7010e83b8f28a4fc749542fab313a0b6fee34288d6786bf1d1f8ad9ca69f75a4c005de67d97cc4b20ddd4b20bf86f88b06382e62f504ff29a77ccb1abb0c31ff75c0a134e22b093708e06ebf594a4715e03db553fa9398330f0cc58ebc2f30d94966e5e7a9c547c7c2cb53a800c124c63ede895e4a42cf5addf86667f278f2f87d3ba3c1fe5c4f36efc956525", 0xf1}, {&(0x7f0000000880)="a0fe98154e6134fd1a8c7d3eea19db175d340e8aea7530dbd0b9c5269c6174f686eed09a990aa523ce4150f7a28d60f47973a2fe49b62ff0a11ba78730f050b376e8d1641947097c9038bd625aa13043f3b81e834529e7eb953305a36aff9e42fa5f369562e5fafebccbc1c7f0312c18982f50df2aa7c94f084c358339175a333180512eaaebaff61665d2ca28caf5ea38", 0x91}, {&(0x7f0000000940)="5a2f02a2d391ee56cdafd20413dfb4cf381915d8d1555ce865fed0ce67f53cbae4355a136788909e08355804bdbb795f9a2dcccc3656abfa92dcc02e314c910a797922c6b71896123ebfa6e81abd58b00b263c199355b9063c45d24877e71ace27099edd5266", 0x66}, {&(0x7f00000009c0)="c3d666e6f1f1b3f278418b7240757b599a8f55950ad947307b43d3f6ea4cbf28a52ce421df5dee71ef48a47f355891867d53b4f1740ce1f167423cdb4f0159ed61eda86eb80ea1f87b2b5d9f4cad0231559e6a39", 0x54}], 0xa, &(0x7f0000004300)=ANY=[@ANYBLOB="110000000000000000000000010000002d000000000000001100000000000000000000000100000000000000000000001c00000000000000000000000800000065c78399b77390c0a711c53036132a8f77bc47a17dba45991c82005a8f90e32030", @ANYRES32=0x0, @ANYBLOB="ffffffffac1e0001000000001c000000000000000000000007000000830b4664010101e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, {{&(0x7f0000000c80)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000cc0)="84e3cb05a19568e2c7c90b81aa30d5abe716c3b3c29efa810eba74710f0749adde217bd4a8ed56d745549266c298520d62af869e3561d9c4957c9f6510ccc6910a7f99d96d4eebf1e2e1fe8cd94071e3d784c156fae91d001b92f9e854ae2121", 0x60}, {&(0x7f0000000d40)="07cccf4e73a10bd0d398bf0f4e3b2dd19d47ddf05db144b354516dc3cf793677e8b4b37e798a62c2e5bd200d641ba0893d50a06da26f4308c673be47d02c3c3aea7bd9911330b68c5ad581f7", 0x4c}, {&(0x7f0000000dc0)="7fd44049ffc8e0001a8a3cac1f70e1419ebca931fa23fcaf5648bd0a4457e378666ddce6a6c749e0dbcfb10a6cdaab7c4a4219a03cda581752690311f47aa6d225df43b12fb94b4d02306a283e49df58a2714d05aa453c176cea67ed4ae608f29bd9a6991094406715b983dc867416207035e912c14710d564d8a5f6a032fa24d6cfcf1ede52f458d0b7fa7908fa83fe2830979079286b5385e5d0115c30e86d22e58b202514e1bc05ff70347412bfb9e34609727b473ccf3fa590d1494fe46d44f434bb290dd2032bfe2706df", 0xcd}, {&(0x7f0000000ec0)="cdd0911174b031558e8fe9b65faa3a02c39b2cdc46582be0b9c94046c361a4216cc86fa2c5ea3585cd8f1d9f8c2e004aa3b00aecd9ca5315f77eba51b8101aed4523aa88217125d768224f3a58edf28d3b6d05c8a8f65d51cd6e21c9222725a7696caeb288b3796359073ac10878c804edaa5a0a0a3a4f1ddb95a1852da73b226363b8ce789b7e1c82720a08c207ff8232ac63d22407355879226ce86adb5b841b8f06", 0xa3}, {&(0x7f0000000f80)="2f999dc78bcf316cb47ff1e0f68097e2af2d194d27f3b851797c79160f40c5ab1ecc317279f0a46f28e96a3c739b90b545546185ceca71e013b472c37af403eddded3eaf2f46e05b29826da5e403f38a01b1404eacd97e27705f41ece18a926f626569ee9779134173fa4203326bd50a2cd0ba9f5cb047692ad3db30ea18", 0x7e}, {&(0x7f0000001000)="2a6c920ab22a9ae6657867b28ca3e07d2e6e223d3ec1444e4d526f7f58607bd523e8903eca9ff33eec8a8c009ae5d3b5d92bb98f130ad2236a76", 0x3a}, {&(0x7f0000001040)="4132591f378a8f2e2d3ec7aee4ba0c1c54f7f6822accc6819235b502ef6884ec1d3af1dc77b01798ad3175baf6a3acb797589b99a6be1f2978a3489e3edbdd5df620b68ca1362db0404e53c2f1f776adf49f5f0a684ed2f8a9dde9fec10b80335bf0fa02971d5f1c6d5f249f5cbcc73efa10f820fd9c9bb73984c8cb5bb8421ee0cdccb1", 0x84}, {&(0x7f0000001100)="18b17ad3af8d195d8a894355f3a7c28cb5baf67b99b857b8a64a045f668ae6454d0c794c462f100bc0dc87c8331d6467a074973f9c2bd993ab93415db1b68bb0b9e030d64cb96751102caee63f29ddc77ec4e954c9ab81d92ed3e0b0bdd4fff4878da6b19241862aa966327e01220f961d8e", 0x72}, {&(0x7f0000001180)="bc1c9d754b17284368156f", 0xb}], 0x9, &(0x7f0000001380)=[@ip_ttl={{0x14, 0x0, 0x2, 0xac}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff7fff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xeb}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x23, [@loopback, @remote, @broadcast, @loopback]}, @timestamp={0x44, 0x20, 0x48, 0x0, 0x8, [0x9, 0x5, 0x8, 0x3fe, 0x800, 0x4f96, 0x9]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x66}}], 0x120}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000014c0)="213424dcbcd48b1336fe141449d7d679656267019de83239ba58e1b3271cf8394f521c49eeafa7395b180fd20dafcc08c2f85509b47ff69f9bef03f2a3980c4889216cb13971f1307364b908cacce981420c32d7c9d90755d37a78f0d86cdde63f74ef0450bc1c115eb58691814eae84efb4d97d5228b7e788b65ff3e4ba9d816e2f7d11a106d08b2f1d60d21a9e2fe91121e56f0ee23f5f11ae6f501dba539ccd0f1739861e333794a0a71109bf561a1aab9d66485a240579bcf9e29bffd5cf13e8178bb46b", 0xc6}], 0x1, &(0x7f0000001880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast2, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001940)="fa25d16c8c3805f425a1398387f6c501109be937e18702a044cd3f94ad1446f079b091f8", 0x24}, {&(0x7f0000001980)="756f3b6b6152917f5a11cbb54723e432fbe5c6d172202266bc582ef6b21bb2aa653080d23be1940e5ff686ce1cc9e0dc692c226cecd228af00d2c30112d3e1ed092f05c36c85fb911932fa3f6538af841f2b650d1fd48d52bd93737aa0c8da3f69ed0865460b68e58efdde0ce80a7889686cd80bd8a1f1acd1d811068e52ba9fdeba0b751ba0ff13829cf83cad5a5c46a04fc5183970c29761d7c0725493aa1433f7db354a39c63b43d35c7bc281a6e750f5737eeeb11f1c9a58b766329896b0985d1424465ae6206c3d3f4cbb80392f3016f06db1b9f59a889e6179012a157db8aa61089ea0cdd691551940c5a1abdfa9cba2", 0xf3}, {&(0x7f0000001a80)="07b0edd51a3e603ef46a752568df088d3e3761d4b86680b0953f8bd5bc76b28250a1457da47a03d8a555d519fa369ce9f2db0cf395ebbb341d56aeb14318184f84bf738af0", 0x45}, {&(0x7f0000001b00)="6f153cec430dc5763885ebfced935fdc52436aa4f3c991", 0x17}, {&(0x7f0000001b40)="a70e282a64433b20550ef8c8ae51b75fa9629a342e6235d7e635ee6ee465e36f9fb5742434bf5447aef4f00385049a0ad6e6394ae592365072e8912d9ce53845ca35b69b86c62214bec49205171099163388449580383026c1963c40b369a6", 0x5f}], 0x5, &(0x7f0000001d00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0xb0}}, {{&(0x7f0000001dc0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004140)=[{&(0x7f0000001e00)="c7a00f1485d00f732848fc1a105a092bd8badabc28fe9c8de67e90d0c8b3a510541b22e20d7173c36f4e487637061bdf6ae8d1b873b8d7594c50e00c9b086608294f79734366268491ed159bbd73d061dcd5aeb49bdd9ae84c1dc67f407f78abfeb398765277c4741bd3354a423f23d1b1daa56357aaa703e55d5a789913c9fc834c1c4e355d6d7088ced084fa18502a65883f52b0501c1fcb69bc852dfd6ff40000ec937acfad2d58ac492e1f3ed72741ea765ad7df56c21d587fd10268efe0397312d3d104fb0d485cec7d5e3bb8d1fb78c1c183228dbc6b3fda55c7824e84b3442fcf5a3ee430b7dacc", 0xeb}, {&(0x7f0000001f00)="953bc7f5bfe27304d81d19758ca64c12bbb41af4e0e67e6bee728aa223d2e3dc1e46f40da7c0025bea4dd4663d669036c3e93365f9121efdb7020e9613cf5c9e70", 0x41}, {&(0x7f0000001f80)="6cc4288a15eec747f49e4b5000527c54daacc4664dc314806d37ba4d4b7f2079d439e7cd568df9a85d2bd7a9b7de27530d33a097ca2e4728700ae9e473413d6166f81e60a0efd95e0e56a05038eb800391040cba44dc314793325ece0238e1e8308ceeebd292a547231832ef0853b06a224a28978a67055da00df7158e9c91e639315daf8548b31fcf5dece4d0dd3f51848d8d5f24ec425689a59299a43094a21a726235a3c06644ee98f57dc89f1fa15739cc9c60a4bf518e1cb94668ae70333b62844be9361d9f5abaa017490fef8a6ac778c3cd9df1d644fdb9f701f500b282118510f2c9b721b06a1735e9e5e899f6729758959191799562a1f0a3ad31e354f9b602f811956d6e3e752ab3abe60ac2d23ccca25f65efdb5bf7f7cc54658b41f182f62c4e3b07ba7eb30a39131f308d5a09f6417ed6f6c36d85e1d58f99011036323c25b0acd7f938be8ff4c85c6044736992240f3d22d5465dbc30a3d452bb05bde413912c11542f3ac5d62c875b5c73f21570637fbae2e18c0351e5295e1ebd27c37fd684ccdce08d6fc18d4f295d8ba92124a11ce969119d0fb682b7e4b4dc38356209499dce23b95c95277db1f150d0cfa62b8f37c9e9b045a82d275ff3088ae9bc2b0e7cd6bb1a283b69af5cc6b632327842e267cd79f8783e8afa66e441a7cf86ebf670a74766a9d83a6912855316811e3b25a39e0ea6d007e55ea95a7a94251500d06bcf5de4f07457f161b3af379b33afec61fb76800a667ba0a5ed35d714e9bcd4f295276db2ace7494672bf5d7168b7f15fda9d5bd2512e21c7f18fb5f44415e4135d53a348ca09f592132e33e93f3447bfa755d62eaab89fc9246dfe7e80eb5731c020965e0eacf7afff7f6c0aa727129a480e7c8644f7a55b94444049a36a0cdde5ba8b43e178393692bf55f1f1c7fff5d7c6c501b1feefb5217cec4910fd002a400a62d6fb378549e9c0967c119350ddd02cf2bc947710ad3ee03ca2614c73b34ffcd8b999599749a91c9f1450c189ae89ced1a8c4cd4fe88e2366b77b2c61b1c5ba5dc9557ddb7ff472a1ccbbc9417f1639e10bd96ddd8484e789b941847f133b948c6e702686b5e22716f5cad4515e8888a44d9fe48b2dc438fb21d1504f461c9c8dc91956050b6d65f8a4b2db9219f04f1f6fa7ac99cb57f7cf4f3a1fd8a1c9f2d345b839c7173988e74a85d58e7a75ff4347f5fcec4a8cca302bfad4a1b5fd1d808ada91c2629b6139a1dee6db338db71863b2743839a082759859e32fcc19fc19b69a642833b59d3a82c77960cf4a6a9b61d37a7a496cc4fc7aa29d9ff82d9555bac90e5e34298b0e10584e1fd5719ec69279cf89414fa6a4aa0e3ea5a40c0af2c9e91cd26c2030f5ac05e1065594dcff2a9ec2b8b607d0df1febd58d668f173e933614f6ac7337458a589716cbc362c9144b0d62905b2ca703d504670fa2d0967733571eced455b730e5d1bc49fcecd9359c978679bd6d10d320d850281aa2b1dfb64e4152e4f66a7463b4b71dc01415cc5413bde94c15347f90a84c396156f9f8a910bf1e1f6d79ed8b5fc376b070c3da2a16e22291ceadfd4b55415ed75aefb79fe75da0f9c46663dbe7369d2c7e27e6067b37af977375235db3d8715afb69c54afcbaaaf8fdf3de4f4a430a6a74cf6ae4bb2b19c26b927f97ac8cbe23eeb3666ac80d8d78a0ad3baee95d474e04c3007269d783a128098ffcb07fdff507fcd53e717e89c1bbb04cd220d8eeb3899137c18e7766b0617a981712beec0f1f1fe1a2d8f84a755cc2d0e7ebca642c5418ef9125ca18285f80558758c257d52538c54bd1574b50f2a9b99726e2373c948d2aee43045dae11f7197c59840c45d5a5728e34e130955d816194a986daf6eb4b76ad0536cf764aaee5a0c4667dd71edd6b4a3092b15beee1f048d22762734262d36686944406a927bb720b72ff0b3cde3301b0ccc549a8c377d19db4cae77ba88f9c2b1522d8f4e538b42b2d523aba48403d0b86a415901828feefcdc8c07a6a1172e3c711a2c84d2dfd27ec0dfc3eb988a3abd265a2aab61755262702bd6636a86357139958a9cca810509f5a64ce8f9d9134cb73e5dbc9e875d7e30d970e6baf4977aa1e0b37530a3001edf1eacd3f2b9be9c12d04ebe3421177e10957ab80f25c1d21650e71d6646e86e4f8fa820ee2fef059f3a33770d9a3a72d33f59cb7b294d413a6f2f59cb7f73ccbee412f5e7646c1b0248ea4befdfa82ae18e845ff433546eae901747d6c37220f16f1357e818aa3b2aa07bbd4067cb78f29dfa1322978acc0eedd03f1b7f5afe2ca3309b9952a85556999bdd90d8c2e546febe4717acb882989325a7ce45021c6ce6c985b5edddd7df918426848ec6c48ed674f869c54faf5d3ba490fa8d04a282e1fba7314223102e77f1bb6d88cc19e9d7dc019e39e86ce64344fa7026d9685fe5dad1ed690c1f70c5dbe0da78f46edcbd98bb49518c8e463e65afe269b4d493e0901d4b5ab0322a31cfe15a254730c5766ba3723e6c7038499966a7bee9e3604f80a11ebbb69aa9a05bcad854ecbce32fdbe83804bd574fb1cadc66d8a2387233af171f624135ed461a2416ed7cf2a7f77d3661f05be276085083cd50fb96fbe380726a21c2d916045c345645801873c6a092510a754bcda0988115c5f3e0f644e18667dfad0f811e086bc89ddd7e61e5fc034a8d82ee2047b90d75566103a9945905700aeadb8bee7b4bc108ed7fbbdbab80e096414adf443c628090d52e91f0b44bad1cce7ac51c19b39587bf8ad9c71818dda9ab6750890a7d629e3ffc0a9da5cf31b936b4b170df8c7799f21616c7a053cba01a5e3cf0142f6c1d3bc99278521ccf2a19f6df9f3fe82fc1668160ab9741246997315c46c6a2c13ca418009951f42dbcfb92ca52f4faebfa115a1f36b2eb37442ce020343d165bed5ed2632008c5c15b5174859d6e5953b446d311e32a5a0ba6dce32690bb5ad7170c5c1154cb7fe0108c6ec2c4c694a4e4df1c2c669b9fa82bf3d939fd21c28b3eb3cfa82bf78ec2301014860117a62b5038d71040006cbfa520d76ea067d3db3c5a9c5284dbd377b69895370a8398ed1d8152822de44d48c469996b9336420f3339eededf2393a98ad16beb4b018cda5c19c7cc9c03d6e337e8cd68954b3522e085dc3e0a52b17b75ff0200fc669b46357376fab8e4cd7bfa3bdf57e7289dc179a66f0cd04d6641a987f9efb12698be32e1baa00770cbd21ec9672274303a653463f9736c42d8834789b5a94e02342b8d468defdc9af03e1619d1e61f5d6511b562614fea18905433539db60c25079f405c3b9ffbeb52175de9a7a2fb4d50c31898eac3a1f065b4cbe90724e68215701e57c1c27cf84dae4c80b4b85c3b6e439ed83f6bad17ba4b6eb6ad8985c7fa1777fb96ef74042f938f876fd640ed7e7ecd88ab1acf672fcef0eb0e2d88d47eb1583f0293dfbb4dc3c3a91e9d878e50e9e8b47d3612a05e7f0bad7f9db7d78c879f4bbdb57f71749e1ed69f1c83cc1742de4d001cae227ba6903769db60f113c3006ef7c22a1dad3f0e541f49ba09dbf1b7392d1b43be54c866c5c7bdc322e9a6bee9623aa8613dfc82e4574e2c23a739836183bb54531dd8a0999e834c37d5b214bf3db08b7510723ebeea4eb3cb74c26b89411b85abdca974cadb52c59bc4ff13cb7938f04de4306e81909dca3b8124cb19eeb3f218ba7c3144b936e2d37d1229aa09865ae324df4bfd354dfb8943421436586b2471260aa9ef5b17ad57176854f8f7762e984f0e784ee6d1b6ac13e7765a5ec6e839c57af4f41cfd44aa3132c5a0aa9e452972d6abe4019ee8d3ab95cda450675f4fab5e50326be3641c3335c904d0e3d1b2587a72e4d77cbf8a62cb4b5ee3d9ad0e33a4be335ca02429f7677ba55d502d0ae220c777a61a4334dc402dacb17cae0d8553d7939b19cd42e6f97319cb5b0f91072931f0216af405322ce09db8415e3c0ac8cdeecfa24fa8fe03435b2e2fcf2b3655b16df223de716ac637f0ed48133cf0966130bfd6b55f11aa45e283f9f04317c6d54412b27b636d4ea572d85986668f8db8687141b462e9c40685b9e624bdeac94598773d771d48a186131d65c933667c59019683502fb4d088a22634f614bf3c147bc56a651268dcdac648e19ebeec72621604e306be3b6433a1ea5ab23a5113649ca7084a956d59cba0744c9ebade3ebfa318e820fe53c9ed9f76dd6facfde7ef14eab82ec26fc21e08608dfb9c0db731106e6d44b9a1eac6e23e67dddca1b33c1e09ad8da2a8b4f026b02cc75cd9d30bd5953eeec1f6348f20309137ebc158fcf63112a81e3cdfadf04fde0b5e1002c6a19de942709cc178ae4337b2d2da199f6cfb436e66ebcc405367cc423ad1c69d2b495324e2347b252fb31765b07bfefa807a79d08140c8e362fdc7b8551b7e8cad01d5d5651a1c3817ad70bab45312721fa69d656b9c7d258a311e3942968b62d42bb3754ccf6d60c3d398eae9a5a52b33505a4ed4e22059d9cdbbd0c2ce33f6ffce9af63a118c98440f392f72ff5af3f2a3cf2e87d3068e1255dc636ca682581dd389ebb7b796f3d536df3fb38a2a2bf4f104716440780045faab5e85a797d73a2c981f463ab4bb057e8f264a9a760617f215096891183525a91691a34796b7591b4e47cee56e659ab505563a2375c70d648e029a57b3e8ef979fe0d33a218b68d9953edb53f5d48ee4218053c882e7ae2e5d63b54bd8106c77e035e687885cec0d2f7d55ce6771adb394d7345ba93e33358c9801325217e6ac5114fb14438285aa47bcc78ac3d2aecdfd68bf7e4d6eae0805eb1791faa9e0690bbcb57d20f141b1f646636eefc843b9f0496f9857f954f7fa24d003075e5e1be6d5db8006d5eb1a05a9508f2802ddc3cdfee889a38819a249fe5378c6ff60ad859fbf00b7c375345832185be98c47f88a9a5e35fc2acf5b4aa724693dba013af002a62fe33bc28851243634d91a268ae0b00db1cc13aca491aa7813058af3e70d4e12bcfc8c0b0af8d344ccc4ca2f705b50f2b6ac336e6155d3b518a11ed9e743b02468e328dff5957c666445535fbcf73ceecb2936762108579ead720e451cefbd8e1b0993560b6307059002ba4ec455bcd7a9b3a656898ad2161ace8e31ca7ae1a107577ed372245e9e35c1824877e44ce6440139b3a84265f9a728c4228cc95b78c244fefc975a7677d90a98fd281bee96df0c9dfc85205d322faf43301ffc2b1b36257342b82cdc694b2837117571a741ca7a875054fa86ea29629b00a58c131a67164099ff87bf087fa0deace15839f2c172c77a12a9c3ce957173cd5631cd30e998c04682d0977691da018daa15e9a84b4b268c1cd72616569ea2d7d26bb38e31b8bbe237aacbbbf4bb598a3d16703d7db0ff2fda3980b64b5ae7200be3c7f7851eca16f84d1d8b4c1c8645a917074a5e94e819e476f9ccde649b4dfb0b7ce476a253631e304e925358777cd4332a48041121957b04dba82dc528636565f9047e611cb1a4d149b7847069433710a50526de64e35174cea6421ea119e868c77717df7a1348d72db9ff7bb7a8441d2d23fba9e31d49fb0fc25fe96710dd5e02662f3bf89b1c02862b99914cf6d4f73086c47468b8df402e0ebb630ee3629a6cbb854cf021a811c201be0c11590e1e3b9157c5b4589fda9f40f3199147b8ae1da723c2b47970591d32be5dc52dbd9fa15588d2fdc830a7a09a7de0281d747ff169bf21364081b627a53e697c6695d1543d21b9c26e2c260", 0x1000}, {&(0x7f0000002f80)="42bf70fdcc570e5312623880c41dc9fc792efaa96320de3afde25619f7176c9062db145abbd272d8a57606b18ad2e9", 0x2f}, {&(0x7f0000002fc0)="63ebb193eb09a4ef7f4b8a85197ee5c6e8a1255d744802c3c8e4e49987ce7e4a8ceb658afb0b1cf7e0788866268935a4086e7451df84fbe5a78ddeb22fba57e5e11254792904e559b1ba075cb2bfdb0c497f1ab382d9f0fee8051009fc51a382b669a35bc29c5828225ee2890ea27c31761b6a837de3347dadd2dee53c04dbb86d7bf70a0cccf0098740e1b693a722eae225996fde646c25ba30652784b9c06b9539734fcb3b1bf49a9cd8b3ce1f19de52", 0xb1}, {&(0x7f0000003080)="78afc25a5e51d10fbc2b501ad8f2bb1cbe446718b3b18a05117d96a21f2b8ebbb436243c1f5eb2e7de551a10d5f49df96f3bcbb38dd5bdad75e1394e91167c72ba6b3f660f5f9060350ca93c7d72f53f87254067437812f03bd38c05d71e2394af76c7c76a2b074ad0ce17889750a5fc39833bff6661ef494f35407e08c86bdedbe8ad8b7cb2513d27eeee8f3678e21a3a2d05992c1629ab98786e379699e09be34f3a163cb5a32c913a37a850", 0xad}, {&(0x7f0000003140)="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", 0x1000}], 0x7}}], 0x5, 0x20008000) bind$inet(r3, &(0x7f0000000200)={0x2, 0x6e24, @empty}, 0x10) recvmmsg$unix(r1, &(0x7f0000000100)=[{{0x0, 0x52, &(0x7f0000000140), 0x1}}], 0x1, 0x2, 0x0) request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0) 1.800274006s ago: executing program 3 (id=21): ioprio_set$uid(0x3, 0x0, 0x64) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$midi(0x5, 0x105, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1978, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf3, 0x1, 0x1, 0x2, 0xa0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0x13, 0x24, 0x3, 0x0, 0xc, 0x6, [{0x7f, 0x5}, {0xf9, 0x2}, {0x4, 0xa7}, {0x5, 0x9}, {0xa, 0xd}, {0x7, 0xb7}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0xeec, 0x7}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0x8, 0xc0, {0x14, 0x25, 0x1, 0x10, "5ad25a23431c53c1bc2eda0bf94a8e15"}}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x9, 0x6, 0x0, {0xc, 0x25, 0x1, 0x8, "8a135fc68b24f9ea"}}}, {{0x9, 0x5, 0x2, 0xc, 0x17dbf54b7187650b, 0x9a, 0xb3, 0x4, {0xb, 0x25, 0x1, 0x7, "bf8e2eb8e093b0"}}}, {{0x9, 0x5, 0xa, 0x5, 0x20, 0x8, 0xcc, 0x10, {0x11, 0x25, 0x1, 0xd, "b1572bf8a7526f47be77a03cd4"}}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0x3, 0x41, {0x13, 0x25, 0x1, 0xf, "503c3fcbdd9e5443ddec9f7ba28565"}}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x99, 0xfa, 0xd5, {0xd, 0x25, 0x1, 0x9, "e46ae31b77faa02133"}}}, {{0x9, 0x5, 0x80, 0x10, 0x53d66c65905d840a, 0xea, 0x2, 0x1, {0x14, 0x25, 0x1, 0x10, "72d3a111019fa95c8825088278fb7859"}}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x8, 0x9, 0x1, {0xf, 0x25, 0x1, 0xb, "2a74d50cd2caabc51a485d"}}}]}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0x0, 0x7, 0xa, 0xff, 0x9}, 0x27, &(0x7f0000000840)={0x5, 0xf, 0x27, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x5b, 0xf000, 0x8, [0x0, 0xfff0]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xa, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0x9, 0x5}]}, 0x8, [{0x49, &(0x7f0000000880)=@string={0x49, 0x3, "d9beca7fa4580929e574e37fa0804ef77539cd7613e9f550ab2fd90c463df8f60682a4ac1a3a3df75ebb6290ad1709938bdd73fd6296bbc76ec9d3f67c8efe08ed167e5046ad29"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x402}}, {0xd9, &(0x7f00000009c0)=@string={0xd9, 0x3, "9c33bd30de2dedefe16d0a1abeafff01f0122e91a90cd7925e54e7713a0e6507953dc4d2ed85421369101c09eafbd8dd17c01d20e39e70319be98b54621a743ad5471965338eba664f2c906875491a5c5dae5845f726fd02dc102129e27e1aad6d609ba853bd14dfcc053a2bc06ffd8e60283d0891056db26ea41bcfc365244c39820b409150352496c6a1eb194a54e1c7202e715c6be9d1839262c47566065427d609ab22bd1241ae30b832c4c74536816a1c254fbe78d5a9572323969fcd3376db8f1edbfefe6425341c88cd2d50232a9771a9080a1c"}}, {0x30, &(0x7f0000000ac0)=@string={0x30, 0x3, "344d827959695f1970e964b53ea24d10311ce8f70417cf76793885115d6dd5e879d663fe14c38de12c94cb5e4e43"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x41f}}]}) r1 = syz_usb_connect$cdc_ncm(0x4, 0xaa, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x9, 0x1b0, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "defa9b776769"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x1000, 0x70}, {0x6, 0x24, 0x1a, 0x1, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x7f, 0x8f, 0x6, 0xf1c7, 0xaf}, @mdlm={0x15, 0x24, 0x12, 0xfc00}, @mdlm={0x15, 0x24, 0x12, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0xa, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0xe, 0x11}}}}}}}]}}, 0x0) syz_usb_connect$uac2(0x3, 0x102, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x3061, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x3, 0x1, 0x0, 0x20, 0x0, {0x8, 0xb, 0x0, 0x0, 0x1, 0x6, 0x20, 0xdb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x37c, 0xff, 0x4e, 0xa}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x4, [0x0, 0x0, 0x2, 0x0, 0x3, 0x2]}, @source_unit={0x8, 0x24, 0xa, 0x81, 0x0, 0x5, 0xf2, 0x3}, @effect_unit={0x11, 0x24, 0x7, 0x5, 0x2, 0x6, [0x2, 0x2, 0x3, 0x2, 0x0]}, @extension_unit={0x7, 0x24, 0x9, 0x6, 0x800, 0x10}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x4, [0x5, 0x8, 0x2, 0x9]}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0x2, 0x9, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x0, 0x6, '\n'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xff, 0x3, 0xc, {0x8, 0x25, 0x1, 0x2, 0x30, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x20, 0x1, 0x2, 0x51, "", 'f'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x40, 0xf9, 0x22, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x1, 0x39db, 0x0, "c71853"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0xa, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x400, 0x1, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5e, 0xf, 0xc, {0x8, 0x25, 0x1, 0x0, 0x3, 0x65, 0x7}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x5e, 0x60, 0x0, 0x4}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x5, [{0x56, &(0x7f0000000400)=@string={0x56, 0x3, "f27e151e000762595879a4b85d728b43206f2f6b1b7f2c10b8f35d50392527790970acb0b8a18528a17012accd7a2deede5ea06f43b48114628ad716f0c8200e808b535bded4f0a85287068cade340d9f35117c2"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1401}}, {0x6e, &(0x7f00000004c0)=@string={0x6e, 0x3, "2d6619a79219b2c07c718fec6346e7ff7b9befee9b7c7267fb50122c4ff4fbd002a1edd8456c13b07d4fe6ebf002eeb27a9b08f20c2820e9220a1783da0cdd747da6f15d8886a1f7ab4d01aac422fea914737f2aaaead569cbf3f1b10eb263e6ccd0333d1f58870c22411347"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x813}}, {0xad, &(0x7f0000000580)=@string={0xad, 0x3, "7cc6e5efc9ea471256ce0015cd7988100d0bf91781c0419c0750cfc6fb0f9ab0f5b07c329461151815a2cec7e79a413e35ba0f22a7895ff3b331e04fc0414024142917b22fd69158806aa7b6c55cb496fae079dca91eac57a8a5c82f3712974c3986b0c15077a998bf20139424aa0d7e08c39163206c981c48f274f55ebf29cba070adeb42b8419f340338e078fac9833e2c2fc8887a904e9d4c495e7e3da75f1d1d1c0c121982add49e78"}}]}) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x20, 0xc, 0xde, {0xde, 0xe, "72978d271a9eaeaa54ec2fdf53d4afadbc665c7eef9e7411e6d9249d897655adbf694aa6d2ef3b1230a9391e1b55c1656523a3d7fc9ab297ba38d998d474e84f9febb08445d96f7e28813857e79a0f4246dcce977b7c7a7ee99c8eca975d3fb05b99889df229445fcc019d69e32c89c09ac35fce618965fcad952afe4f5a0210547116ffc1d9924721d73db3348e2aad0dde15345bc3f0919e33cc3ffe5f579e10dcffe123e83b47147beedd132f69350b524cf729579cddd59af61d908e3b43e1b8681957b1f589fd5a57407dc1aef973eb40c5dd83b089c6dbca26"}}, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000d80)={0x40, 0x17, 0x89, "3a75ee15f06ea7346eee4284899df02326cee6f7729f5970626d9a296fc246ca1e7f45b6d16cdb331a1dce3541b9c77a165c7fe0b1a2a390e5fb2fe7ca3c1ef977afae672c00e41e2e7c318565dd6e4f1e7bb4145ad0b79dd74aca6f5d74a4020524be1a2088e35c0ff3bd37c6a0aabc25e8f4d82ad3c4e0c38bcc736d60d93d18a24a5f89df0820be"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000ec0)={0x20, 0x80, 0x1c, {0x9, 0x6, 0x1, 0x8, 0x6d, 0x7, 0x7f, 0xfffffffd, 0x8, 0x5, 0x7, 0x7fff}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000f40)={0x20, 0x83, 0x2}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000fc0)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_ep_write(r1, 0x5, 0x9c, &(0x7f0000001080)="69fa89cdfbbb008185042dcce96d81f7c56aa939c7fa0989e8a4e4ca0984d14c9a773a176fcbcf19a70d93e5c3e5c88018598e972ff8e11e8db38964412a2684a9056ed76de1589af2a8abb4a741cf0b312920c26dc57574133b63c76de48206073a158768ea11ace87e4c0121202dc924e3ea928671b988423fda070a1697e68e322ff70f586cdbded86f0c9a0d9d08909d1b14bb7a841fc0090f0d") 1.783202538s ago: executing program 1 (id=22): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="08001efbd17f586ee33180ae04f36c18a29756f785fb4f373370940bcb02d78f546dc1122728901874e368dbd3cbef02e29adbcaffe0e046e308d9653b8143f6642277a586649668d2dce6d6108a4b75b3e83a5f1955aa11490ce8fa473cd8bb1d6894f23d5f9c1cfe408bef44b944cf5d4e4b5573816dedbc751e34e35b0393a4d9f4417ba88b640309a543772dfd7fab643ea8533a5c9738a0b75f85b3dbc9464345bcdb47e7d9a40b1ccf679820e05d7631334ab6632f070a7f6a4db17ab0d114069ab2f97d01358f669dc336bc44c9a5e9417c314301c2904612aca5c0a0105f3c84376528e59eb52b0e148f311f5a", 0x8}, {0x0, 0xfd98}], 0x2}, 0x2000c804) mkdir(&(0x7f0000000000)='./file0\x00', 0x88) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x10}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000340)=0xe9, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x8000}, 0x4) sendmsg$netlink(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400a8dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x10008882}, 0x44840) unshare(0x22020600) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) 1.291423758s ago: executing program 2 (id=23): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x3, 0xff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x8) fallocate(r3, 0x66, 0x3, 0x6) (async) shutdown(r2, 0x1) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x9, 0x0, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="7480612e99d9310fa445597a4e67014f000000000eac945db22045ba4df7f0fcb97b055b065bf0ba", 0x28}], 0x1}, 0x30008bcc) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000480)=0x10, 0x4) (async) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r4, 0x80000000) r5 = syz_create_resource$futex(&(0x7f00000004c0)=0x1) futex(r5, 0xc, 0x1, 0x0, 0xfffffffffffffffc, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0xfffffffc, @empty, 0x4}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000100000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x7, 0x9) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c}}], 0x20, 0x4008800}, 0x40800) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) (async) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r10 = landlock_create_ruleset(&(0x7f0000000500)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) (async) r11 = dup(r9) bind$unix(r11, &(0x7f0000000540)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403010002100708240201000400", @ANYBLOB="03a9fe"], 0x0) 936.123684ms ago: executing program 0 (id=24): r0 = socket(0x10, 0x803, 0x0) sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000040)=@ll={0x11, 0x2, 0x0, 0x1, 0xe8, 0x6, @local}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000000c0)="c5feeacb817cb69ab674878589efbe262a508ae4d2f462b111784926096c3ab480e47f84b1db453303b0a5c5d5ef47776b9f8741cef85242066bb9f436b9313c670d81b98555f933a7d89a77234f8f836c8b1684cd6cb23b5e59f3aa622b6383e48f058de9aede7e41eefcbae8fe3f09a7938e4fd6c07d089629007b14ff3160f59608af3c7308e6d07053ae63b45131c28c4c82ecd5251022100691a7c22d2fd91c8da0c2292c883ffe9ceab4a606858b0d0621d06f8d26fd95440d1a2f5fc305f8569f53834d22e451", 0xca}, {&(0x7f00000001c0)="33c54a153ddf0267872053614f14243a217493e13cea75023e2ae6f6bbb9bd87ca9aeff3ba9ebebb40979e58476e21a104242101e1c9fd42b428bb9d36cf3a8ef005a64944edca888c2814d29c0e4db171a37080d54ef3a5b74f3600a1228363c4ff59af73ffa128e008c61745846dd499cb", 0x72}, {&(0x7f0000000500)="6f9154df00dca19d03912723a318b2efd973d1207a34a5f7a8f184cc7598129cbdfd75a149c19143e526de164ce95db87ae4436038688d90f55f5bc9f64b37aff74b4671be1f0d7ea31f3011e9e0dbf2b05b3222ef1f13688d455601c884901bea57e373e8a47b21b60d56eb1bd19e2e", 0x70}, {&(0x7f0000001c00)="33cf1221bbb4d74a9fd31a9bc358369f1de86dc3ec64b6338260cffb978628bda95ad8043462f5d69956db093f403ecc38f424f2be24f083ff8cb0f833639e74145ce5509c35482ae28da3f65fc767a86ca3d96c6f624a1edcef5cc7734fd8d49f46f49b9e8e56f5ee71abda8f5c7d06cb7f782b9e862daecc484262d6f78f28e38b2d44a7386b75fbdcabe4662437fa8ebbfa24eefb5ff09fa723b425096c9b5db3e2b3b40844b257ed69179cbb5bef87bb31a92c7d32e043f29fe89c8090f1d8525a39", 0xc4}], 0x4}}, {{&(0x7f0000001d40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x1, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001dc0)}, {&(0x7f0000001e00)="756ca3b110001d759cd68aa97bae2a132ef61d267f96c46779b664e356650346c39cc58f2a4958e2c6a927ca196855c22d14f2481735f84fccb3b02f66cc85d325c7a09d9ce3ed87e9ee316819b1fd8197d73593a16fb17d7d7a7d9ff4551d13a35c21c22b46dc850089bb3987e9ba91c405271fe1c73fc3c04e2360297e4d4bface52c981e9fd65c0350feacf658325df78922d134292109d6414c0a9047d224c20c319501882ee9734b8fe37ae056644e8189b8dceb77a2ea384", 0xbb}, {&(0x7f0000001ec0)="36902647410e52fc5c5eccb392717a40cd7e650bc74fab809da02a651a26e6d35a5044a5447555618d589afd7d7b0141c7d07e562b60fb8d9f9f657c097d97d1cda415590d56418ae395a92f84a3ccb8db87fed6a40b3fa1f67dd066ccd5e02aa575599fb43c33fd39e3988ba045be49155e79e58b", 0x75}, {&(0x7f0000001f40)="d79d39c772ab5b3453ada5a1fc96c338eb06a5b7cf82cd955943985996b2be5798c4d289c24b04dc093420b5bfa2568dd368b000da4c9b8cdc46d04cb6fac65fa8d15c9ae09742c729f95efcfa4b11a0ec3047c0dbd4585de2ebc00f2a381a1e1e458fa3c3b3e12f2deace4b1c6b9a83a4dd2f7a5371881d5456f7eb67b7b4eea7d8e485a663d8c60a836c0f6890c72c54e4", 0x92}, {&(0x7f0000002000)="c616496dc6b809d26e52fa34c7d4c88f3d56e1640478f4c7c2739a7cfc91c90c3eda0cddc6eba2582628096ad20bf2eae6929dfc22c005115c09280ad280a86fa96634525d96edab67901cf4d128c1fa5271a9f50747876adf2471f7c1cc74a72fc09f1b6bb9f25378c7fa7013bdfbd9f2321cf54b0fa53b21dc517387321f4da7bb03d40b713b5043943204043e5f26cfe37050cfaf3b0ba7b3dbcd349a5c323df92ef0382a3edb3e391bf54c1f15e331b19fd29fe296dce1431f426e7b8365f9ff9889570d514412800aefb8e3f8ef42a1de3008b360acc61c07a50734c10bdc64dfb0c5c203debdda4b01", 0xec}], 0x5, &(0x7f0000002180)=[{0xa8, 0x109, 0xb, "74a862a0bf2e4c9258cf88932f4a5807f015334d5b1645639467940bd354574f5ff5fde3b35ea3d907437c0a21db0406aa1960a58ab642582f29e7afbba83fabf80107c3f021959804400ad8a19f2ac1a23975055ce21f9cc478a5d8fbfe63ec7bc185ba3375923e285b130fd61560c1122227e69a8e021af06010fe68a8da55520b103a76db33faec74a23a0637af7cf0"}, {0xb8, 0x0, 0x3, "ea647e9192ce78c8ae33c302f387bff84fa553464a48a9589d9b673213689fa349d7df7a0e3b72ff8ed7bf5aa27ac7fd4c856e7b7f731abc7b36ed2fc12e52462ff80ae8084a6c10956fb27bbdd7fa21c8614a136a1eb4cc7790f70c10b96d13d07a81a6354aadb4b12233f9b5d4a2ec0143691374f2a663d042423701f5768cb6cb82df40ea443737d50f21b473284e5476bf43ee727594ef98c097948dd0c4d58f9876bb5ea9e4"}, {0x28, 0x111, 0x7, "4f677097e784dc87ae27c9e89f1b7150726869cc7f"}], 0x188}}, {{&(0x7f0000002340)=@ieee802154, 0x80, &(0x7f00000024c0)=[{&(0x7f00000023c0)="b34f8914f88957f643a14fdad14aafdcbda3ec3325749adfe1dc02692591b144285efdfb2009782f1cad79b4971060b94e718074e50219cae53fd70fe622aec24af06f2d15749d7dc63fd70f336abc406b24114297f3b2840a5d3c2b584209ac85bc89b1b18cbe70130df1c08f58d0e7a2ee9a8394ebc4035eb76a494d7d3b4f714ef596815f2e28c9d1036cf1c645ebe966d3c335063ea9", 0x98}, {&(0x7f0000002480)="56bfdf5040fad3c60664ab54a742", 0xe}], 0x2}}, {{&(0x7f0000002500)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002580)="081094604bd9fd1b30c551c292a43001b522855ff6177dc9b0a49cfb743d9686d96e5550075fcb3c87adfdddb8048e613fc3e165010c8fe67d46dc745c406fa3047fbcc170bc94d9198f7811d6c0f3f88756cc9e9c578db0333c739c635e3ac0ac71b5d5515af61e4976ea67ccc909c88bbe12643ca9452f21ee1db5a17d7027851b54c1d102f3c476dd56049fde438a17d30e4a0e2a83cfab", 0x99}, {&(0x7f0000002640)="b3c6d9da4fae25932bce62920bacd09a0ea2e41b5ba4d432975cb796f6ff8ce587abe4b647f8f83ed4c1bfa72a37680c736dedc236fcdb1bf503fda511f88a091e26786f254ab73a709e8984ce06d69da5e2f27d1e8964fb524fced29321a8df7352f3c73d139fbe7150b04bcb84696a8ae0aec6a3f019dfcd5b6f6ccdab8229bcb46c924cc98da413c28e0ec0bcb45568870e110780a3a0febb11ee6f8063d27fa505d2cb5338", 0xa7}], 0x2, &(0x7f0000002740)=[{0xf8, 0x118, 0x7fff, "c0a606a7f46ae83a43ec3925156ab7cb443e1431472671cad1016d2734c959222c147f36348ad25f89bdfe7bf01e17f32eaa4cc086cddd48b70555bceec09aee84204077cf272642508191035bc6025d2106e2c2790de4a32dfa9ef66728b420f9d470e9724ec630206b79ef7ee78480358676bfbab49117080514a3585e6ade0858f82332401b103a82d759acc5d21c1f8ade3ff36dd3276c2786e5664f7e58b5737adcc39bc665f98921b0402ea976cb6ea7d70c578345ad6750865fe588cd6c6fa5133f4bcf606f2e6de8981910f16d542f3eaa64034f0bb151868570ff3d90d38ffc"}, {0x30, 0x0, 0x3, "67c75ff4e1f88ed8f4d42bb779c1759df216aacc082143307a64ece350"}, {0xd8, 0x84, 0x3, "242f3afdd6906927ca8c3d2a3a5591faf7ca0dc6453f03ae0d37ae7233744b72bb38d03c41c18ddd30e2f95930b6dca70413b9bd1445c560f24057aff5dcd550e8b69f53264184fbe31ccefcbe5e7072ad49573f9058d8b6139a6af64a2f6707bbc5b098ed3483b80aa597e57230bcefdba3aecda98385cbde7abea0d95bebe7a81d7115da601be4c398e0662db4610f9f1076cf1fee60c0b5fda4ece142dd6fcf4797ff082c06cb9cd37da963ca5f6d0257102a3513353ca6de800c403065bb6a83"}, {0xe0, 0xfb, 0x7, "f5aabbb67801711881f769a89369d6f18be4a7ccc3b244afca22f99db39f096d89b3b191d41b1db96c0fb4e4cf77c4ff7f25ef649a1166ef7090cfb263b98afdfc739419e13efce49fbab47f632fcd4d14b68ddb4f70ee8539e23c9ba2bce7c65fa8831acd659593aecfb95c8ba7fc3c0086d700feb59cd03f3923fa8c8d4b57eeb3ae600c10efa596e3781b59acb88ca10f35c67e758063f2da1b4e6e976825a2d0fed4413232b689cd245ab42366714565ccffdfe1512a130eea6ef3a6debce1e621b9e649ef2e6f"}, {0xe8, 0x116, 0x1, "f6785ccab52c3600670279f7abed501d080320238413ff1960163fd86b94a784e6d9056462a5d67abdb9443c47207dea3576eaa24b99b6e3c8b6e00f3f187402712af2dd35b3475c6331b5191620345b733a6a8950074e67a7040425685211811e017a2f5c043b6f24123d5f5c1890165cb9c950115474e0da63b5400f6efbb024ec713b254671b07772623d936b7b7eedcf30697d5d2eb768531c7e5c6451be2de6d686d9c42934a63fdb607e3b4b401b0c7eb85ff56f7320d01df772217bf0d99b62a2ea9d61f13e6098b0679ad9bea8faf2c0f31f"}, {0xe0, 0xff, 0x7, "5705f70edaba9d87e16ff9e8c66486bc7bf4bbb6a113c9ae3e94352ad99ffdb51d7745b962dcb94b82cec945cd6823dfcc41a7c4d270f1e6985437fcb0b692e7027a33dc1360b7aee70a99c4a4490e6624c034f04b0bc3488f981a5f200ab85d51622b4cb2eaaa2cb2e8a440d0f41618ee526cd04d04fade5c6b5ebbe5b2f3b205d604c9f7525e5f91dc1739620f30918d5e32dfeac78773dc07ad980a2b2e7c23bf11f534cdb0023a043c7e36b92ab128255e89bc1db01943e04854c9781247419f13e0349f56cb6b"}, {0x18, 0x113, 0x9, "8ff2e879"}], 0x4c0}}], 0x4, 0x4008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xee00, 0x0) setpriority(0x2, 0x0, 0xd2f4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2504000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) pwritev2(r4, &(0x7f0000002e80)=[{&(0x7f0000002ec0)='3>', 0x2}], 0x1, 0x1, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/217, 0xd9}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/161, 0xa1}, {&(0x7f0000001840)=""/144, 0x90}, {&(0x7f0000001900)=""/142, 0x8e}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/276, 0x114}, {&(0x7f0000001b80)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xfffffff6}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xffffffde}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 928.302495ms ago: executing program 0 (id=25): setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000000)="0118269db93bda7b297893dbeb", 0xd) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000040)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95', 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000200"], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 64) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x6c, 0x22, 0x2, "cfa7"}, 0x22, 0x0) (rerun: 64) 906.903077ms ago: executing program 0 (id=26): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180)={0x1ff, 0xd21f, 0x7, 0x76, 0x8, 0x80, 0x9}, 0xc) socket(0x18, 0x4, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket(0x1, 0x4, 0x5) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt(r2, 0x107, 0xf, &(0x7f0000000a40)="00008634", 0x4) prctl$PR_GET_SPECULATION_CTRL(0x53564d41, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYBLOB="af65c45c17a6e968a7b8a4c3c475ff1c79ccecacef9d59ffe2095f831d501f44dfafa2677b7b50efa0389d587c079efd0ebe3a19a551e8ae25079464e7dc69cdefdf6465006df848767384e1119802db9269e9ff584a8b01db769ee537d751a30b677715a328d3dcdd4043c3dcfe45407664452431157c2de465d53dc8015eff5a02a5bf0cb5da8edef67cf46570057d163b2efe0d768661f5b39d20d70060d170bbb4931e44d8ad0de0932a13d4693236db261042dbb6"], 0x30}}, 0x408d0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x24004000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setns(0xc9, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10f) socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x242058d771de0104}) write$tun(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050010010b", @ANYBLOB="f94092c8"], 0xa) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'veth1_to_bridge\x00'}) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 820.384286ms ago: executing program 0 (id=27): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000001e80)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000001fc0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f0000002140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_RENAME(r1, 0xc138fd05, &(0x7f0000002440)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x40000, 0x0, 0x0, @by_dev={r2}, @name={'syz', 0x0, '0\x00'}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0xf, 0x1c, {0x1c, 0x1, "8ff7a3d70d8e87107ffe1a9c7e5f36e4d00c6efd0d5606a3f350"}}, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4110, 0x100e}, {&(0x7f0000001340)=""/85, 0x55}, {&(0x7f00000013c0)=""/206, 0xce}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x2202, 0x0) r4 = syz_usb_connect$midi(0x0, 0xe0, &(0x7f0000001580)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x1, 0x1, 0xfb, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x7, [@midi_out_jack={0x1b, 0x24, 0x3, 0x2, 0xb, 0xa, [{0x3, 0xcd}, {0x10, 0x7}, {0x9, 0x2}, {0x31, 0x6}, {0x6, 0x4}, {0xf9, 0x1}, {0x6, 0x4f}, {0x2, 0x2}, {0xf8, 0x4}, {0x6, 0x2}]}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xf3, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x8, 0xd}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0xfe}], [{{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x93, 0x9, {0xe, 0x25, 0x1, 0xa, "1ffb2992063513dd5f6f"}}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6a, 0x6, 0x5, {0x10, 0x25, 0x1, 0xc, "40bf54f8722ba656d7afe4a4"}}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x6, 0xff, 0x7f, {0x9, 0x25, 0x1, 0x5, "1d7ada3a4e"}}}, {{0x9, 0x5, 0x9, 0x3, 0x10, 0x6, 0x1, 0x1, {0xc, 0x25, 0x1, 0x8, "6de5a9be034be149"}}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x4, 0x7, 0xdd, {0x13, 0x25, 0x1, 0xf, "9117e7558631fd95ee0313a459a8a6"}}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0xc, 0x9, {0x13, 0x25, 0x1, 0xf, "e80f4ec935f46d2bacdc1626e2b2f8"}}}]}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x310, 0x1, 0x3, 0x6, 0x20, 0x4c}, 0xed, &(0x7f00000016c0)={0x5, 0xf, 0xed, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x2, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xa8, 0x0, 0x6}, @generic={0xd1, 0x10, 0x2, "7c5c023185266800a28cc6024da19a1ef2b1ca7c53e7d6869bb62243ffe3d340cbb878afea11897a803ef4caa088039a0e61350e68b0f97ede885cf957e14c84b0465d216ca952d4318e42dce12705be85aef27ef67d2fecb533afe23b2cb01acfda76af97ef4d8c56aef0f9e5febfa0c23a82ef60a75f0baca3aac0cc29eb4348c42f2b9fedd2fc6ac90327ae8d5d538584253e36830c1bbe698ed636a5252c46b997ba925b6578ab3d46068f0623f208aa21fb1fa1c376ce482df1844884ddd54e62e4af286f1c51e1f4bdbf2f"}]}, 0x5, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x77, &(0x7f0000001840)=@string={0x77, 0x3, "2c2e038f43cefc5ef053ec909113e2ae04595a088abae0705c1cf0561837b02b18b60276d05bf1e4498e87cf9ca5f7be322459c9a6bdfc1574530be7d6b594894c023bdc380f7cb7094054c1f5c4cf771aec56d47d72034b02ffb0bbb1cf2e0454ba8d5267e81fd7dba61c455ca89874b1cda14fab"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x40b}}, {0xfc, &(0x7f0000001d80)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x418}}]}) syz_usb_control_io$lan78xx(r4, &(0x7f0000001ac0)={0x14, &(0x7f0000001a00)={0x40, 0xf, 0x44, {0x44, 0x23, "ec74b284e32cb64dab30b5b080b3b37716a6f6486b7f854fab73af064b51855dc945467307efadf8bfca4d0920a199eefcf1a76a510eaf45222e5bb83dd37f1eb573"}}, &(0x7f0000001a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}}, &(0x7f0000001d40)={0x34, &(0x7f0000001b00)={0x20, 0x0, 0xd8, "c0b81266a0d1dc82bf5f5aa3222c2c3af0ba2ac74ef166039ac9afaece70528078e803e1494ca5a5c64c6bd40d96cbb9d3ee6467a62ad0e477300370624c37542724714f0f501ed36eb0acb45f5caec848fdb675f91e8c375d663d4182511250d1feacb7b819909de9dc6d6dca6d86f4073495e03c7c9203ab904e41bf54e57c30abb2bd534e1efec1ffb90ee65c1f6ca8173e6a7d0e267ced201a218b36c097457622c7b9c544f2e03058490215f270d7724404360a47de59cf56c2b72c2b34cd3d3fc82b6faa7a203bb71124072b57d4307ece8afc0cff"}, &(0x7f0000001c00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001c80)={0xc0, 0xa1, 0x4, 0x77}, &(0x7f0000001cc0)={0x40, 0xa0, 0x4, 0x200}, &(0x7f0000001d00)={0xc0, 0xa2, 0x2f, "d8610a9b79ff2f38844e6c2b44f533cc8e2a8f87d53de0deb525fc560168181d12437c9d4fe94b9eebe75b57dadd8d"}}) sendmsg$netlink(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2044080) clock_gettime(0xfffffffffffffff9, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xfffffffffffffdc8, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_012={0x0, 0x1, 0x3, 'h'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 384.20269ms ago: executing program 1 (id=28): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) userfaultfd(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) (async) userfaultfd(0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 210.998598ms ago: executing program 1 (id=29): r0 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r0, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000200)={0x68, 0x0, 0x30, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000300)={0x3, 0x0, 0x98, &(0x7f0000000240)={0x9, 0x8000, 0xb}}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1a}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000100)) r4 = syz_open_pts(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x200) openat$incfs(r5, &(0x7f0000000400)='.log\x00', 0x80200, 0x100) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0xff7e, 0xd, 0x8, 0xe8, 0x17, "0000c000"}) r6 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="080029004101"], 0x28}, {&(0x7f0000000540)={0x330, 0x1e, 0x10, 0x70bd26, 0x25dfdbfd, "", [@typed={0x9, 0xda, 0x0, 0x0, @str='.log\x00'}, @typed={0x4, 0x21}, @nested={0x17, 0x42, 0x0, 0x1, [@nested={0x4, 0x58}, @nested={0x4, 0xa}, @generic="c1d6d5", @typed={0x4, 0xac}, @nested={0x4, 0x137}]}, @nested={0xdf, 0x154, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0xc, 0x51, 0x0, 0x0, @u64=0x7}, @generic="27273e3a526874c2f689681e56ff6e90e6036adf5d54b328012dfdfbfbd0a7fe7a90b1e9c4a9a11e4e2e62c73d5b41516396b32aa12a1fd4cf22304d854c667cb89442690138dffb5c159ada5d34ce22be3cf18383d1763e4383eaeac0c188981a38f2f5d87f95e12d4a36b321ecf15c6ce143f216c228be319ec0096a912bdf1b2c9c21d50869f8eb4ed8f9a04c0c7a70c5497f3f701b27f5eb574a20c2cc9a86135a865aec53795e258cbfb5ac1b4447b7e8ec73174a4364ca67ba7a4821de426306e913bcf0f45eddf3"]}, @nested={0x116, 0x17, 0x0, 0x1, [@typed={0xc, 0x100, 0x0, 0x0, @u64=0x100000001}, @typed={0x6, 0x119, 0x0, 0x0, @str='*\x00'}, @generic="f52f8679408edd33b5d6cc86d23c31f4976a90984276c41d46979489fafc568cbdd7801241ecdc87d2f2277cd92db29c0d3a95a5dfd5d90cc11c0b3f1aff69ac0d6fec2a3c02dd736aca330f1004ae9de881376f4ae3c9d8ef54b39dea2f400f5a2d6f47e2dc363a750b54d571dc07a619571c408b6a90b224c20f07d2de41d14a0a9074cc8b2d7327cc459e9411ffb9e2dd037149ac593999f93ffd23c10ba9e92701b482441444f562f01576a629c838443951503b095de9e7a7737c0762282838815a167aeeb8d4f6aee2b6dd66a5568bfd6d6aec4b5b2cc6f3d53cc6a9f65a6c53ed5d5c3a500b6a3251621961d54e0c1d3932031af33284c9d975e3"]}, @generic="88081b8ecd18d55f3c56c20a955edd15c064eb20c343e462a7a41189d5092e04f686ef2dc6ccf23a55b9e2912ced5522c711ff7da50722375528949fe68fb5ae5837c52d037d263a5ad4178416a47c24e499cbf9e74548ee03c4cfd6c426bc8ad8bfa6bf625772099d59bf2712c50dcd9c96053768720650a518da8237ca40e0e92c88dfe0868a4c63142fa467fe34319fec5ffd965719cbebfa8db84e244605a929a8b64f34d39c32f1e4c9e5dbaa8486f88358c8e04cb1d7ff3f44002a3912d1e61d37a71f9ac9606e64cf096c2b981c3f381f5794001873e1bc81d2f2add276d4e437aa05bf9422484019bca3eb935d7883303b63b453132fb3e8e9a893"]}, 0x330}], 0x2}, 0x0) sendmmsg(r6, &(0x7f0000000540), 0x4000000000001f2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0xd) 128.292236ms ago: executing program 1 (id=30): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x1011}) write(r1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0xe0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xa26}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0xffff}}], 0x60}) dup(r8) syz_ublk_setup_queues(r6, r7, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x1, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x1011}) (async) write(r1, 0x0, 0x0) (async) pipe(&(0x7f00000000c0)) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0xe0) (async) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xa26}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0xffff}}], 0x60}) (async) dup(r8) (async) syz_ublk_setup_queues(r6, r7, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x1, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) 97.31637ms ago: executing program 1 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000280)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @empty, 0x5}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = getpgrp(0x0) rt_tgsigqueueinfo(r4, 0xffffffffffffffff, 0x1b, &(0x7f0000000500)={0x2, 0x8, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="f466baf80cb8eabfa886ef66bafc0cb000eef33e7407c4c249912cc93e3e360f01c4c4e16bd08f400000000f8f0080000066b89c008ec00f01c266ba430066b8000066ef", 0x44}], 0x1, 0x2, &(0x7f0000000200)=[@cstype0={0x4, 0x6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0xb34, 0x100000, 0x2000, 0x1}, 0x10) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=32): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@code={0xa, 0x47, {"6436f30fc7f9b90b0300000f3236642e490fc71c7a26f3460f1efac4c27918c8b9140200000f32c48151f3230f01f8400f07450f781a"}}], 0x47}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.127' (ED25519) to the list of known hosts. [ 29.284898][ T36] audit: type=1400 audit(1794102729.160:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.308001][ T36] audit: type=1400 audit(1794102729.190:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.310675][ T287] cgroup: Unknown subsys name 'net' [ 29.336006][ T36] audit: type=1400 audit(1794102729.220:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.336436][ T287] cgroup: Unknown subsys name 'devices' [ 29.458146][ T287] cgroup: Unknown subsys name 'hugetlb' [ 29.463781][ T287] cgroup: Unknown subsys name 'rlimit' [ 29.619500][ T36] audit: type=1400 audit(1794102729.500:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.642758][ T36] audit: type=1400 audit(1794102729.500:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.667593][ T36] audit: type=1400 audit(1794102729.500:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.691711][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.700621][ T36] audit: type=1400 audit(1794102729.580:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.726226][ T36] audit: type=1400 audit(1794102729.580:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.759559][ T36] audit: type=1400 audit(1794102729.640:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.785202][ T36] audit: type=1400 audit(1794102729.640:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.785952][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.710176][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.717325][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.724507][ T294] bridge_slave_0: entered allmulticast mode [ 30.731031][ T294] bridge_slave_0: entered promiscuous mode [ 30.747983][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.755066][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.762403][ T294] bridge_slave_1: entered allmulticast mode [ 30.768914][ T294] bridge_slave_1: entered promiscuous mode [ 30.797504][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.804587][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.811918][ T296] bridge_slave_0: entered allmulticast mode [ 30.818280][ T296] bridge_slave_0: entered promiscuous mode [ 30.835951][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.843034][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.850214][ T296] bridge_slave_1: entered allmulticast mode [ 30.856577][ T296] bridge_slave_1: entered promiscuous mode [ 30.866754][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.873839][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.881062][ T297] bridge_slave_0: entered allmulticast mode [ 30.887579][ T297] bridge_slave_0: entered promiscuous mode [ 30.906938][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.914016][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.921185][ T297] bridge_slave_1: entered allmulticast mode [ 30.927538][ T297] bridge_slave_1: entered promiscuous mode [ 30.948640][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.955718][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.962967][ T295] bridge_slave_0: entered allmulticast mode [ 30.969228][ T295] bridge_slave_0: entered promiscuous mode [ 30.978624][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.985690][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.992811][ T295] bridge_slave_1: entered allmulticast mode [ 30.999099][ T295] bridge_slave_1: entered promiscuous mode [ 31.156409][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.163547][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.170963][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.178063][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.188900][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.195991][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.203359][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.210436][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.219002][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.226100][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.233429][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.240537][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.255251][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.262366][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.269689][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.276759][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.319997][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.327906][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.335133][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.342774][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.350460][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.357883][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.365248][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.381115][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.388210][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.412730][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.419833][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.433691][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.440809][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.454071][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.461167][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.478705][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.485820][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.501409][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.508520][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.524544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.531681][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.558899][ T294] veth0_vlan: entered promiscuous mode [ 31.569820][ T297] veth0_vlan: entered promiscuous mode [ 31.597421][ T297] veth1_macvtap: entered promiscuous mode [ 31.613813][ T295] veth0_vlan: entered promiscuous mode [ 31.622469][ T296] veth0_vlan: entered promiscuous mode [ 31.631116][ T294] veth1_macvtap: entered promiscuous mode [ 31.660043][ T295] veth1_macvtap: entered promiscuous mode [ 31.669641][ T296] veth1_macvtap: entered promiscuous mode [ 31.707648][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.804447][ T323] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 31.849706][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.880812][ T333] process 'syz.3.9' launched './file1' with NULL argv: empty string added [ 31.898495][ T320] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 31.922338][ T342] FAULT_INJECTION: forcing a failure. [ 31.922338][ T342] name failslab, interval 1, probability 0, space 0, times 0 [ 31.935506][ T342] CPU: 0 UID: 0 PID: 342 Comm: syz.3.11 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 31.935543][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 31.935567][ T342] Call Trace: [ 31.935575][ T342] [ 31.935584][ T342] __dump_stack+0x21/0x30 [ 31.935612][ T342] dump_stack_lvl+0x140/0x1c0 [ 31.935634][ T342] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.935657][ T342] dump_stack+0x19/0x20 [ 31.935678][ T342] should_fail_ex+0x3c2/0x510 [ 31.935699][ T342] ? security_sk_alloc+0x65/0x260 [ 31.935736][ T342] should_failslab+0xac/0x100 [ 31.935763][ T342] __kmalloc_noprof+0x69/0x510 [ 31.935796][ T342] ? kasan_save_alloc_info+0x3a/0x50 [ 31.935826][ T342] ? security_sk_alloc+0x65/0x260 [ 31.935852][ T342] ? __kasan_slab_alloc+0x73/0x90 [ 31.935875][ T342] security_sk_alloc+0x65/0x260 [ 31.935904][ T342] sk_prot_alloc+0x123/0x3a0 [ 31.935933][ T342] sk_alloc+0x40/0x590 [ 31.935960][ T342] ? bpf_lsm_inode_alloc_security+0xd/0x20 [ 31.935993][ T342] unix_create1+0xb7/0x760 [ 31.936018][ T342] ? inode_init_always_gfp+0x76e/0x9e0 [ 31.936044][ T342] unix_create+0x15a/0x220 [ 31.936070][ T342] __sock_create+0x3a5/0x810 [ 31.936094][ T342] __sys_socketpair+0x1aa/0x5c0 [ 31.936124][ T342] __x64_sys_socketpair+0x9f/0xc0 [ 31.936170][ T342] x64_sys_call+0x2081/0x2ee0 [ 31.936196][ T342] do_syscall_64+0x57/0xf0 [ 31.936237][ T342] ? clear_bhb_loop+0x50/0xa0 [ 31.936272][ T342] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.936294][ T342] RIP: 0033:0x7fb26499fb19 [ 31.936315][ T342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.936328][ T342] RSP: 002b:00007fb265911028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 31.936372][ T342] RAX: ffffffffffffffda RBX: 00007fb264c25fa0 RCX: 00007fb26499fb19 [ 31.936391][ T342] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 31.936404][ T342] RBP: 00007fb264a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 31.936418][ T342] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 31.936432][ T342] R13: 00007fb264c26038 R14: 00007fb264c25fa0 R15: 00007ffc83489418 [ 31.936455][ T342] [ 32.188174][ T349] netlink: 108 bytes leftover after parsing attributes in process `syz.3.12'. [ 32.236154][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.397258][ T311] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 32.405693][ T311] usb 3-1: config 0 has no interface number 0 [ 32.411964][ T311] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 32.423396][ T311] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 32.433358][ T311] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 32.444566][ T311] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 32.458830][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 32.468057][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 32.476321][ T311] usb 3-1: Product: syz [ 32.480611][ T311] usb 3-1: Manufacturer: syz [ 32.485319][ T311] usb 3-1: SerialNumber: syz [ 32.492409][ T311] usb 3-1: config 0 descriptor?? [ 32.501988][ T311] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 32.513698][ T311] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.237/input/input4 [ 32.635856][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.705441][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.766437][ T360] input: syz0 as /devices/virtual/input/input5 [ 32.787132][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.804450][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.815637][ T362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=362 comm=syz.1.16 [ 32.816676][ T66] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 32.829720][ T363] netlink: 'syz.1.16': attribute type 4 has an invalid length. [ 32.837829][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.845891][ T363] netlink: 'syz.1.16': attribute type 5 has an invalid length. [ 32.854804][ T66] usb 4-1: config 0 descriptor?? [ 32.865472][ T363] netlink: 'syz.1.16': attribute type 5 has an invalid length. [ 32.873648][ T363] netlink: 3269 bytes leftover after parsing attributes in process `syz.1.16'. [ 32.884080][ T362] netlink: 'syz.1.16': attribute type 4 has an invalid length. [ 32.891839][ T362] netlink: 'syz.1.16': attribute type 5 has an invalid length. [ 32.899477][ T362] netlink: 'syz.1.16': attribute type 5 has an invalid length. [ 32.907110][ T362] netlink: 3269 bytes leftover after parsing attributes in process `syz.1.16'. [ 33.275813][ T31] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 33.284644][ T355] capability: warning: `syz.3.14' uses deprecated v2 capabilities in a way that may be insecure [ 33.298229][ T66] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 33.305448][ T66] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 33.312761][ T66] hid-led 0003:1D34:000A.0001: unknown main item tag 0x0 [ 33.427528][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.436100][ T31] usb 2-1: config index 0 descriptor too short (expected 575, got 63) [ 33.444402][ T31] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 33.452755][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 33.461843][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 33.472907][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 33.482666][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 33.492610][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 33.502481][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 33.505403][ T66] hid-led 0003:1D34:000A.0001: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 33.525698][ T31] usb 2-1: string descriptor 0 read error: -22 [ 33.527674][ T66] hid-led 0003:1D34:000A.0001: Dream Cheeky Webmail Notifier initialized [ 33.532431][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 33.557781][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.574766][ T31] usb 2-1: config 0 descriptor?? [ 33.583118][ T370] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 33.604790][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.708426][ T31] usb 4-1: USB disconnect, device number 2 [ 33.797648][ T66] usb 2-1: USB disconnect, device number 2 [ 34.224393][ T375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.321229][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 34.321248][ T36] audit: type=1400 audit(1794102734.200:177): avc: denied { write } for pid=378 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.347148][ T36] audit: type=1400 audit(1794102734.230:178): avc: denied { bind } for pid=378 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.495815][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.605796][ T66] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.656978][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.668080][ T31] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 34.677285][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.686413][ T31] usb 4-1: config 0 descriptor?? [ 34.755800][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 34.762149][ T66] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 34.770447][ T66] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.780604][ T358] Bluetooth: hci0: command 0x1003 tx timeout [ 34.780640][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.781624][ T66] usb 2-1: config 0 has no interface number 0 [ 34.817197][ T66] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 34.826396][ T36] audit: type=1400 audit(1794102734.700:179): avc: denied { shutdown } for pid=380 comm="syz.2.23" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.847837][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.856084][ T356] usb 3-1: USB disconnect, device number 2 [ 34.862467][ T356] xpad 3-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 34.872739][ T66] usb 2-1: Product: syz [ 34.876982][ T66] usb 2-1: Manufacturer: syz [ 34.881617][ T66] usb 2-1: SerialNumber: syz [ 34.886288][ T36] audit: type=1400 audit(1794102734.700:180): avc: denied { create } for pid=380 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.901466][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.909892][ T66] usb 2-1: config 0 descriptor?? [ 34.919242][ T36] audit: type=1400 audit(1794102734.710:182): avc: denied { map } for pid=380 comm="syz.2.23" path="socket:[4217]" dev="sockfs" ino=4217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.948517][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.959044][ T66] uvcvideo 2-1:0.105: Found Unit with invalid ID 0 [ 34.965652][ T66] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 34.976938][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.985537][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.995852][ T66] usb 2-1: No valid video chain found. [ 35.005820][ T36] audit: type=1400 audit(1794102734.700:181): avc: denied { setopt } for pid=380 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.034382][ T36] audit: type=1400 audit(1794102734.710:183): avc: denied { read write } for pid=380 comm="syz.2.23" path="socket:[4217]" dev="sockfs" ino=4217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.035546][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 35.057921][ T36] audit: type=1400 audit(1794102734.760:184): avc: denied { name_bind } for pid=380 comm="syz.2.23" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.084993][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.097878][ T31] usb 4-1: USB disconnect, device number 3 [ 35.117691][ T36] audit: type=1400 audit(1794102735.000:185): avc: denied { unlink } for pid=295 comm="syz-executor" name="file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.142138][ T36] audit: type=1400 audit(1794102735.020:186): avc: denied { create } for pid=384 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.174924][ T390] SELinux: Context ϧ is not valid (left unmapped). [ 35.195462][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.202844][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.210197][ T393] bridge0: entered allmulticast mode [ 35.219814][ T393] Zero length message leads to an empty skb [ 35.405827][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.475858][ T356] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.555811][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 35.561021][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.569715][ T45] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 35.579382][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.588382][ T45] usb 3-1: config 0 descriptor?? [ 35.625805][ T356] usb 1-1: Using ep0 maxpacket: 16 [ 35.632202][ T356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.643260][ T356] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.656265][ T356] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.665653][ T356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.674545][ T356] usb 1-1: config 0 descriptor?? [ 35.700474][ T66] usb 2-1: USB disconnect, device number 3 [ 35.717153][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.728971][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 35.739067][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.756018][ T31] usb 4-1: config 0 descriptor?? [ 35.787356][ T399] kvm: pic: non byte read [ 35.891294][ T395] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: syza0 [ 35.972566][ T377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.982372][ T377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.158141][ T426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.169208][ T426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.181316][ T356] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.188881][ T356] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.196636][ T356] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 36.204853][ T356] HID 045e:07da: Invalid code 65791 type 1 [ 36.218808][ T356] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input7 [ 36.237011][ T356] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 36.590974][ T373] usb 1-1: USB disconnect, device number 2 [ 36.606339][ T31] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 36.616002][ T31] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 36.640359][ C1] ------------[ cut here ]------------ [ 36.645886][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 36.654536][ C1] index 56095 is out of range for type 'const int[34]' [ 36.661442][ C1] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 36.661487][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 36.661510][ C1] Workqueue: usb_hub_wq hub_event [ 36.661555][ C1] Call Trace: [ 36.661566][ C1] [ 36.661581][ C1] __dump_stack+0x21/0x30 [ 36.661619][ C1] dump_stack_lvl+0x140/0x1c0 [ 36.661653][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.661689][ C1] dump_stack+0x19/0x20 [ 36.661719][ C1] ubsan_epilogue+0xe/0x40 [ 36.661756][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 36.661798][ C1] aiptek_irq+0x208d/0x2a00 [ 36.661848][ C1] ? _raw_spin_unlock+0x45/0x60 [ 36.661896][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 36.661939][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 36.662006][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 36.662039][ C1] dummy_timer+0xa3f/0x4900 [ 36.662096][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.662141][ C1] ? timerqueue_del+0xd7/0x130 [ 36.662171][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 36.662212][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.662255][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 36.662298][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 36.662335][ C1] ? read_tsc+0xd/0x20 [ 36.662363][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 36.662414][ C1] hrtimer_run_softirq+0x159/0x560 [ 36.662455][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 36.662487][ C1] handle_softirqs+0x1b0/0x5b0 [ 36.662527][ C1] __irq_exit_rcu+0x47/0xb0 [ 36.662563][ C1] irq_exit_rcu+0xd/0x30 [ 36.662598][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 36.662643][ C1] [ 36.662653][ C1] [ 36.662663][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 36.662709][ C1] RIP: 0010:kcov_remote_stop+0x2c5/0x310 [ 36.662757][ C1] Code: 4c 89 35 de 5f 57 06 48 c7 c7 00 7e 40 89 e8 f2 7e 23 04 65 48 8b 05 72 98 78 7e 41 f7 c4 00 02 00 00 74 01 fb b8 ff ff ff ff 0f c1 03 83 f8 01 75 1e 48 89 df e8 9a 00 00 00 48 8b 7b 10 e8 [ 36.662782][ C1] RSP: 0018:ffffc90000207960 EFLAGS: 00000206 [ 36.662812][ C1] RAX: 00000000ffffffff RBX: ffff888104ee5c00 RCX: dffffc0000000000 [ 36.662848][ C1] RDX: ffffc9000d1b1000 RSI: ffffffff87e0d900 RDI: ffffffff89407e00 [ 36.662874][ C1] RBP: ffffc900002079b0 R08: 0000000000000003 R09: 0000000000000004 [ 36.662895][ C1] R10: dffffc0000000000 R11: fffff52000040f1c R12: 0000000000000246 [ 36.662921][ C1] R13: 000000000001b89d R14: ffffc9000c0f1000 R15: ffffc9000d1b1000 [ 36.662951][ C1] hub_event+0x416a/0x4360 [ 36.663000][ C1] ? __cfi_hub_event+0x10/0x10 [ 36.663037][ C1] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 36.663074][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 36.663107][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.663150][ C1] ? kick_pool+0xb9/0x540 [ 36.663194][ C1] process_scheduled_works+0x7f7/0x1060 [ 36.663239][ C1] worker_thread+0xc99/0x13f0 [ 36.663284][ C1] kthread+0x2c7/0x360 [ 36.663324][ C1] ? __cfi_worker_thread+0x10/0x10 [ 36.663362][ C1] ? __cfi_kthread+0x10/0x10 [ 36.663402][ C1] ret_from_fork+0x64/0xa0 [ 36.663434][ C1] ? __cfi_kthread+0x10/0x10 [ 36.663474][ C1] ret_from_fork_asm+0x1a/0x30 [ 36.663512][ C1] [ 36.663523][ C1] ---[ end trace ]--- [ 36.983323][ C1] ================================================================== [ 36.991445][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 36.999161][ C1] Read of size 4 at addr ffffffff86742e3c by task kworker/1:0/31 [ 37.007025][ C1] [ 37.009392][ C1] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Not tainted syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 37.009433][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 37.009455][ C1] Workqueue: usb_hub_wq hub_event [ 37.009500][ C1] Call Trace: [ 37.009511][ C1] [ 37.009524][ C1] __dump_stack+0x21/0x30 [ 37.009560][ C1] dump_stack_lvl+0x140/0x1c0 [ 37.009593][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.009627][ C1] ? __cfi__printk+0x10/0x10 [ 37.009675][ C1] print_address_description+0x71/0x210 [ 37.009710][ C1] print_report+0x4a/0x70 [ 37.009742][ C1] kasan_report+0x162/0x1a0 [ 37.009780][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 37.009829][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 37.009868][ C1] __asan_report_load4_noabort+0x18/0x20 [ 37.009913][ C1] aiptek_irq+0x20ab/0x2a00 [ 37.009953][ C1] ? _raw_spin_unlock+0x45/0x60 [ 37.009988][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 37.010037][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 37.010083][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 37.010127][ C1] dummy_timer+0xa3f/0x4900 [ 37.010185][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.010232][ C1] ? timerqueue_del+0xd7/0x130 [ 37.010261][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 37.010301][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.010345][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 37.010391][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 37.010430][ C1] ? read_tsc+0xd/0x20 [ 37.010457][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 37.010511][ C1] hrtimer_run_softirq+0x159/0x560 [ 37.010554][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 37.010588][ C1] handle_softirqs+0x1b0/0x5b0 [ 37.010629][ C1] __irq_exit_rcu+0x47/0xb0 [ 37.010666][ C1] irq_exit_rcu+0xd/0x30 [ 37.010702][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 37.010747][ C1] [ 37.010757][ C1] [ 37.010768][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 37.010827][ C1] RIP: 0010:kcov_remote_stop+0x2c5/0x310 [ 37.010875][ C1] Code: 4c 89 35 de 5f 57 06 48 c7 c7 00 7e 40 89 e8 f2 7e 23 04 65 48 8b 05 72 98 78 7e 41 f7 c4 00 02 00 00 74 01 fb b8 ff ff ff ff 0f c1 03 83 f8 01 75 1e 48 89 df e8 9a 00 00 00 48 8b 7b 10 e8 [ 37.010903][ C1] RSP: 0018:ffffc90000207960 EFLAGS: 00000206 [ 37.010932][ C1] RAX: 00000000ffffffff RBX: ffff888104ee5c00 RCX: dffffc0000000000 [ 37.010956][ C1] RDX: ffffc9000d1b1000 RSI: ffffffff87e0d900 RDI: ffffffff89407e00 [ 37.010983][ C1] RBP: ffffc900002079b0 R08: 0000000000000003 R09: 0000000000000004 [ 37.011006][ C1] R10: dffffc0000000000 R11: fffff52000040f1c R12: 0000000000000246 [ 37.011030][ C1] R13: 000000000001b89d R14: ffffc9000c0f1000 R15: ffffc9000d1b1000 [ 37.011061][ C1] hub_event+0x416a/0x4360 [ 37.011112][ C1] ? __cfi_hub_event+0x10/0x10 [ 37.011149][ C1] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 37.011187][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 37.011222][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.011257][ C1] ? kick_pool+0xb9/0x540 [ 37.011300][ C1] process_scheduled_works+0x7f7/0x1060 [ 37.011344][ C1] worker_thread+0xc99/0x13f0 [ 37.011388][ C1] kthread+0x2c7/0x360 [ 37.011429][ C1] ? __cfi_worker_thread+0x10/0x10 [ 37.011467][ C1] ? __cfi_kthread+0x10/0x10 [ 37.011507][ C1] ret_from_fork+0x64/0xa0 [ 37.011539][ C1] ? __cfi_kthread+0x10/0x10 [ 37.011581][ C1] ret_from_fork_asm+0x1a/0x30 [ 37.011619][ C1] [ 37.011629][ C1] [ 37.350378][ C1] The buggy address belongs to the variable: [ 37.356392][ C1] .str.65+0x5c/0x60 [ 37.360355][ C1] [ 37.362709][ C1] The buggy address belongs to the physical page: [ 37.369167][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6742 [ 37.377896][ C1] flags: 0x4000(reserved|zone=0) [ 37.382929][ C1] raw: 0000000000004000 ffffea000019d088 ffffea000019d088 0000000000000000 [ 37.391564][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 37.400188][ C1] page dumped because: kasan: bad access detected [ 37.406661][ C1] page_owner info is not present (never set?) [ 37.412950][ C1] [ 37.415349][ C1] Memory state around the buggy address: [ 37.421023][ C1] ffffffff86742d00: 07 f9 f9 f9 00 00 00 00 00 00 00 06 f9 f9 f9 f9 [ 37.429134][ C1] ffffffff86742d80: 00 00 00 00 00 00 00 02 f9 f9 f9 f9 00 00 00 00 [ 37.437235][ C1] >ffffffff86742e00: 03 f9 f9 f9 f9 f9 f9 f9 00 00 02 f9 f9 f9 f9 f9 [ 37.445436][ C1] ^ [ 37.451371][ C1] ffffffff86742e80: 00 00 00 00 00 00 00 00 04 f9 f9 f9 f9 f9 f9 f9 [ 37.459493][ C1] ffffffff86742f00: 00 00 00 00 00 00 00 00 05 f9 f9 f9 f9 f9 f9 f9 [ 37.467691][ C1] ================================================================== [ 37.475817][ C1] Disabling lock debugging due to kernel taint [ 37.482017][ C1] ------------[ cut here ]------------ [ 37.487511][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 37.496146][ C1] index 56096 is out of range for type 'const int[34]' [ 37.503031][ C1] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G B syzkaller #0 ff996278633adec6fd25d1632b496761701c4fe9 [ 37.503079][ C1] Tainted: [B]=BAD_PAGE [ 37.503093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 37.503113][ C1] Workqueue: usb_hub_wq hub_event [ 37.503155][ C1] Call Trace: [ 37.503168][ C1] [ 37.503179][ C1] __dump_stack+0x21/0x30 [ 37.503214][ C1] dump_stack_lvl+0x140/0x1c0 [ 37.503246][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.503277][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 37.503322][ C1] dump_stack+0x19/0x20 [ 37.503350][ C1] ubsan_epilogue+0xe/0x40 [ 37.503384][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 37.503431][ C1] aiptek_irq+0x1f3c/0x2a00 [ 37.503471][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 37.503529][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 37.503572][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 37.503613][ C1] dummy_timer+0xa3f/0x4900 [ 37.503670][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.503714][ C1] ? timerqueue_del+0xd7/0x130 [ 37.503747][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 37.503788][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.503831][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 37.503873][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 37.503911][ C1] ? read_tsc+0xd/0x20 [ 37.503937][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 37.503988][ C1] hrtimer_run_softirq+0x159/0x560 [ 37.504028][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 37.504058][ C1] handle_softirqs+0x1b0/0x5b0 [ 37.504097][ C1] __irq_exit_rcu+0x47/0xb0 [ 37.504133][ C1] irq_exit_rcu+0xd/0x30 [ 37.504168][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 37.504217][ C1] [ 37.504230][ C1] [ 37.504240][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 37.504284][ C1] RIP: 0010:kcov_remote_stop+0x2c5/0x310 [ 37.504331][ C1] Code: 4c 89 35 de 5f 57 06 48 c7 c7 00 7e 40 89 e8 f2 7e 23 04 65 48 8b 05 72 98 78 7e 41 f7 c4 00 02 00 00 74 01 fb b8 ff ff ff ff 0f c1 03 83 f8 01 75 1e 48 89 df e8 9a 00 00 00 48 8b 7b 10 e8 [ 37.504357][ C1] RSP: 0018:ffffc90000207960 EFLAGS: 00000206 [ 37.504384][ C1] RAX: 00000000ffffffff RBX: ffff888104ee5c00 RCX: dffffc0000000000 [ 37.504406][ C1] RDX: ffffc9000d1b1000 RSI: ffffffff87e0d900 RDI: ffffffff89407e00 [ 37.504430][ C1] RBP: ffffc900002079b0 R08: 0000000000000003 R09: 0000000000000004 [ 37.504451][ C1] R10: dffffc0000000000 R11: fffff52000040f1c R12: 0000000000000246 [ 37.504485][ C1] R13: 000000000001b89d R14: ffffc9000c0f1000 R15: ffffc9000d1b1000 [ 37.504515][ C1] hub_event+0x416a/0x4360 [ 37.504561][ C1] ? __cfi_hub_event+0x10/0x10 [ 37.504598][ C1] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 37.504635][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 37.504674][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.504707][ C1] ? kick_pool+0xb9/0x540 [ 37.504750][ C1] process_scheduled_works+0x7f7/0x1060 [ 37.504792][ C1] worker_thread+0xc99/0x13f0 [ 37.504834][ C1] kthread+0x2c7/0x360 [ 37.504874][ C1] ? __cfi_worker_thread+0x10/0x10 [ 37.504911][ C1] ? __cfi_kthread+0x10/0x10 [ 37.504950][ C1] ret_from_fork+0x64/0xa0 [ 37.504981][ C1] ? __cfi_kthread+0x10/0x10 [ 37.505021][ C1] ret_from_fork_asm+0x1a/0x30 [ 37.505058][ C1] [ 37.505068][ C1] ---[ end trace ]--- [ 37.868129][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 37.876325][ T31] usb 4-1: USB disconnect, device number 4 [ 37.891256][ T45] usb 3-1: string descriptor 0 read error: -71 [ 37.897733][ T45] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 37.904391][ T45] usb 3-1: Found UVC 0.00 device (2833:0201) [ 37.912689][ T45] usb 3-1: No valid video chain found. [ 37.919097][ T45] usb 3-1: USB disconnect, device number 3