last executing test programs: 12.277006164s ago: executing program 3 (id=81): ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x99) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mapper/control\x00', 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000500)={0xa, {0xa, 0x5, 0x2, 0x7ff, 0xfffffff7, 0x3}}) ioctl(r1, 0xc138fd05, &(0x7f0000000080)='\x00\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000859e54479f25f672dd9fe9490991a4aaab45c52d6c6c5b00651c02f3d8a362d72656d9956e838c924d1a38b5ceddcedee0d1ec22dc997ee4b310efd223e12912d3f454b85f40f950c68874da3d9cc8b5f0e6e418a93d7454d00c3bdccba3dde2c877436bce04c9d14c3031c111494ead65b8d7f21b0eee11b4fda0e8693e8fa76f4e8944800ac1ac0bb52a1ab47c604f5fc6105895b3154a7bcc6eafff5fea2caf12a48b4be6ea5c5ba1558bcb62094719d58706a4e0954565fffc0b3ead13cb67fb4537986e38ab22999bfcb024347b27833d6c3abe8e2e2224728e906c1d101779ff1bb16bb5e52f2e3778ee65f2a8fccf5a"], 0x78) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x100002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400fcdbdf250700000005000000000000000800098004003f8058dd99a41ebc69ac683d9c5ad2d63d2c420e7011b3afd8d1426a776b93f1bfad89acf84aa71ecccd9b5606590303285782cbaa7bf034258bac028ad5c38d5500"/100], 0x24}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x4e21, @private=0xa010100}}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r10 = syz_pidfd_open(r9, 0x0) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) r13 = pidfd_getfd(r12, r10, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x40000094}, {0x19d, 0x0, 0x11}, {0xb81, 0x0, 0xe}]}) 11.520333141s ago: executing program 3 (id=82): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@private=0xa010102, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x7, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "1a000b000000366a6a849a739045002400001d0002000000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x44050) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@mcast1, 0x2, 0xd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000001010101"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f00000005c0)={0x8f, 0x0, 0x2}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x80000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x5, 0x0, 0x34}}, 0xf0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000"], 0xbc}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) r10 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0x5) setreuid(r11, 0x0) setreuid(r11, 0x0) keyctl$session_to_parent(0x12) getpriority(0x1, r0) 11.367953544s ago: executing program 3 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000002c0)=ANY=[@ANYBLOB="a7831f6c0728"]) (async) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000002c0)=ANY=[@ANYBLOB="a7831f6c0728"]) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)='4', 0x1) (async) write(r1, &(0x7f0000000440)='4', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x4008662c, &(0x7f0000000500)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @b}) mkdirat(r2, &(0x7f0000000400)='./bus\x00', 0x0) (async) mkdirat(r2, &(0x7f0000000400)='./bus\x00', 0x0) fsopen(&(0x7f0000000040)='proc\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000180)=""/47, 0x2f) getdents(r5, 0xfffffffffffffffd, 0x58) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x10a540c, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x7, 0xffff}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 11.323559455s ago: executing program 3 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(0x0, 0x60840, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee2, 0x0) 11.313373976s ago: executing program 3 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/lru_gen\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000100)={0x2000000000000006, 0x20, 0x0, 0x20, 0x10001}, 0x48) (async) write$tcp_mem(r0, &(0x7f0000000100)={0x2000000000000006, 0x20, 0x0, 0x20, 0x10001}, 0x48) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000002240)={[0x20d47, 0x1, 0xfffffffffffffffa, 0x4, 0x4000002, 0x0, 0x1000, 0xfffffffffffffff2, 0x4bfb, 0x40000000004, 0x7ff, 0x2, 0x1, 0x5, 0x9, 0x100000090], 0x25000, 0xa8657}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) readv(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f0000002340)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r1, 0x2, &(0x7f0000002380)) ptrace$cont(0x21, r1, 0x5, 0x4) (async) ptrace$cont(0x21, r1, 0x5, 0x4) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002400090243bd7000fedbdf25080000000600040058"], 0x1c}}, 0x8800) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x80}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}}}, 0xb8}}, 0x0) 11.238373397s ago: executing program 3 (id=86): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200112000000cceae80d39c6b90f08008ae8c8ab2237e4c7e39d91e28cd7e85e45dba97f33d444fc087a990df563f535e7230be18721e05f9e8a785570237192db379d46d672802b3cb24fe0524d2aea702aad63cb7c333e3c9450dffc5027867e5ef3642fafaee72e74664a40626cfe1c55facc7b4700ec7996e3ebc13e07a45186befc374c4eec9f5105387cc6375883f1029799a883d75b9a8b362b80df997496891e3ed1e591a08bea8d8d063f925655"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.66180354s ago: executing program 1 (id=112): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x6, "cb5537092ad2"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000180), &(0x7f00000001c0)={0x40, 0x5, 0x5, "efb87f1a70"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="40131e"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc0}, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x6, "cb5537092ad2"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000180), &(0x7f00000001c0)={0x40, 0x5, 0x5, "efb87f1a70"}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="40131e"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc0}, 0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) (async) 4.216111065s ago: executing program 2 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1815c48, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0xa1, 0x0, 0x0, 0x5, 0xb, 0x3c, 0x8, 0xabaa, 0x0, [{0x1, 0x3, 0x80000000}, {0x1, 0x0, 0x6}, {0x3ff, 0x4, 0x1ff}, {0x5, 0x2, 0x10000}, {0x0, 0x1009, 0x6}, {0x3, 0xb, 0x9}, {0x7, 0x4, 0x7}, {0x6, 0xd4, 0x7}, {0xfaff, 0xfff, 0x7a5}, {0xf3, 0xc06, 0x6}, {0x7, 0x10000, 0x1}, {0xc, 0x0, 0x9}, {0xff, 0xc, 0x3}, {0xc81, 0x1, 0x3}, {0x6, 0xd3, 0x7}, {0x4, 0x4, 0x8}, {0x401, 0xfffffff8, 0x9}, {0x4, 0x47, 0x6}, {0x7f, 0x1, 0x1}, {0x200, 0x5, 0xcf}, {0x3, 0x3, 0x8000}, {0x1, 0x2, 0x7}, {0x1ff, 0x0, 0x9}, {0x8001, 0x0, 0x2}, {0x10000, 0x2}, {0x1000000, 0xba, 0x7}, {0x92e, 0x716, 0x80000001}, {0xfffffffa, 0x79c97789, 0xc3}, {0x5ef, 0x10001, 0x101}, {0x2, 0x1}, {0x1, 0x0, 0x7}, {0x3, 0xb, 0xfffffef4}, {0x1, 0xb5, 0xffff}, {0x1000000, 0x3, 0x75}, {0xd, 0x0, 0x1}, {0x5, 0x70, 0x2}, {0x4, 0xf75, 0x10fff}, {0xffffff18, 0x153a, 0x1}, {0x9, 0x0, 0x9e}, {0x4, 0x3, 0x7}, {0xe6, 0x474, 0xf0cc}, {0x1, 0x3, 0x3}, {0x0, 0x4, 0x8}, {0x1, 0xf1db, 0x80000001}, {0x2, 0x4, 0x2}, {0x7f, 0x9, 0x6}, {0x3, 0x3, 0x2}, {0x7, 0x6, 0x7}, {0x4000, 0x7b1}, {0x3, 0xe, 0x1}, {0x0, 0x0, 0x8}, {0x7f, 0x5, 0xb}, {0x5aa2, 0x9, 0x2}, {0xfffffffe, 0x4bc, 0xffff3e62}, {0x1a1, 0x7, 0x7}, {0x200, 0xaf3, 0x5}, {0xff, 0x5, 0xfffffffb}, {0x5, 0x3, 0x1}, {0x6, 0x0, 0xff}, {0x2, 0x9, 0x101}]}) (async) r2 = socket(0x8000000010, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x804) (async) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') 4.202249525s ago: executing program 0 (id=128): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000240)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0x4018aee3, 0x0) 4.054043059s ago: executing program 2 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40101, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) io_setup(0x82, &(0x7f0000000580)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newsa={0x160, 0x10, 0x1, 0x20000, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {0x400}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xcd}, [@sa_dir={0x5, 0x21, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x2, 0x0, 0x0, 0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x160}}, 0x0) mount$cgroup(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000240)={[{@subsystem='net_prio'}, {@none}], [{@euid_gt={'euid>', r4}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee00}}]}) r6 = socket$inet6(0xa, 0x800, 0x4) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x8, 0x81, 0x400, 0x1, 0xc0200000, r3}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40101, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) io_setup(0x82, &(0x7f0000000580)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x1) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in=@local}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newsa={0x160, 0x10, 0x1, 0x20000, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {0x400}, 0x0, 0x0, 0xa, 0x4, 0x0, 0xcd}, [@sa_dir={0x5, 0x21, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x2, 0x0, 0x0, 0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x160}}, 0x0) (async) mount$cgroup(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000240)={[{@subsystem='net_prio'}, {@none}], [{@euid_gt={'euid>', r4}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xee00}}]}) (async) socket$inet6(0xa, 0x800, 0x4) (async) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x8, 0x81, 0x400, 0x1, 0xc0200000, r3}) (async) 4.043291539s ago: executing program 0 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) open(0x0, 0x60840, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee2, 0x0) 4.023132999s ago: executing program 0 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/fail_page_alloc/interval\x00', 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20702, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'pim6reg0\x00', 0x400}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000380), 0x400, 0x180) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000019c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001a00)={0x1604, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x204, 0x3, 0x0, 0x1, [{0x4}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2e0}, @NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "e3719651dff3dc43997e79ce419941428f512c77ee6e7524e695119aa8ffd2b6679e2e12d72e26ff28761563b3201d5f440257ee65e965b837ad4c88920f1077c46ca6ba70c84f081060d74da31a11b529145bd8e9410b1c33d7fd824e9e0604272c807425916953bfc87acc55bc50c0189989ae98c4fd05005f4094a1022ce1c6d6823964e00aa73434382d8945f2e65d6bddbac29ecc86fb1adb1b4b4e393b65"}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x79a2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13a8, 0x3, 0x0, 0x1, [{0x13a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "50f2bdd564ae79bf76e6e6c4d3708e7a4f61bca4d39f4905371e58e16cd9024e2f9d86201a8da1e29adb90d92e4f6661e31c2e98"}]}, @NFTA_SET_ELEM_KEY_END={0x135c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "4e3ac5f5701916c883378cf3960b33b5f87aef9e65b77b947757a92beb15f59e2497cfe18320404a60db2e77dc2d16610b363b37ed2d46896a7d5d339905d287a25b2354dc46cbe5b4f0344e6c322b151e40771f536868d0809ff4eb7dad742a0f180366b0310f38780d671cf701e56833d9f05bf9d1c14858b798e00310998bcb9f6c5fab6493f88db75c49ee650a492f1800b389a54211"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf5, 0x1, "59a27843158815e2a54bb6275e0ee79227f2165c1aad475fa80aff36faa016bdf40b32c28d4e5c492bef93b8e6ab20dbc7e928af3b0bf9cd6cc3c8e000eb450ad047fa357ffcca8521b1a1b2e6620b8883d6455d34d474d7aec4968bc26e22c1e53ade82828a3727ad60344f87191d0e78d0b84b4d7783684a0ba6e19914fb8bd400eb22dbba6593c27cc806ba114c7cb8a76115315b1e2af4a474b93372d78092e6062b4cdee2e8d7dbfbfc6fa4d4a854ce544a6ef8865d8724ed0d7e357c2512fababd6325d1bd418f6ff32e5f4b7705c268f063f58da360611c2d8224e2904b250e76ca5d4216de1c4320740fef5ae9"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "235701117577a13d04e3da600ded8646ecf94421ae154f08c8166f615752d0582d7910e901dd3b74a5d9ef9af64449a0a43806547dbb6c958f2f48a1f2a52805db10cb821b270a4d2851cd28d5a7369b6b0e2053cd3540054906959b4e4cfee08f69da2b0df1a33d2569612d6d18e9c4406098fb44e00831256b5f140f2f506dabe3d5499e6f2b03a2f6efc35557724e54f3ff32ce01fff957cdf107f3b7cece041a891a36451fe4e9f7bc646566b216c5ab9adb7a75d96f39bafa89117002d90092d6ce75e111d1578f74"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "099f8f1b50faa61a5a58915e51f487550e46960458ad650cd67dc733aece36f42c9de2ccaa0ad9d8d49c3e9e541629de658d81f32a8ebf06752fe77d633e301e49a2fb8b3b44e8d87f86c03da20f65466c1db384f9eaf92d336b4fea79ea600b00"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x1604}, 0x1, 0x0, 0x0, 0x4000000}, 0x84080) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'vlan1\x00', 0x200}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b00300014000600631772ab00442fff00000000000000000000ffffac141411ff020000000000000000000000000001042088be00000003010008000c0086dd88a8"], 0xfdef) syz_io_uring_setup(0xf7c, &(0x7f0000000240)={0x0, 0x8dff, 0x2, 0x1, 0x106}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/fail_page_alloc/interval\x00', 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20702, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'pim6reg0\x00', 0x400}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000380), 0x400, 0x180) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000019c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000001a00)={0x1604, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x204, 0x3, 0x0, 0x1, [{0x4}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2e0}, @NFTA_SET_ELEM_KEY_END={0xac, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "e3719651dff3dc43997e79ce419941428f512c77ee6e7524e695119aa8ffd2b6679e2e12d72e26ff28761563b3201d5f440257ee65e965b837ad4c88920f1077c46ca6ba70c84f081060d74da31a11b529145bd8e9410b1c33d7fd824e9e0604272c807425916953bfc87acc55bc50c0189989ae98c4fd05005f4094a1022ce1c6d6823964e00aa73434382d8945f2e65d6bddbac29ecc86fb1adb1b4b4e393b65"}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x79a2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13a8, 0x3, 0x0, 0x1, [{0x13a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "50f2bdd564ae79bf76e6e6c4d3708e7a4f61bca4d39f4905371e58e16cd9024e2f9d86201a8da1e29adb90d92e4f6661e31c2e98"}]}, @NFTA_SET_ELEM_KEY_END={0x135c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9c, 0x1, "4e3ac5f5701916c883378cf3960b33b5f87aef9e65b77b947757a92beb15f59e2497cfe18320404a60db2e77dc2d16610b363b37ed2d46896a7d5d339905d287a25b2354dc46cbe5b4f0344e6c322b151e40771f536868d0809ff4eb7dad742a0f180366b0310f38780d671cf701e56833d9f05bf9d1c14858b798e00310998bcb9f6c5fab6493f88db75c49ee650a492f1800b389a54211"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf5, 0x1, "59a27843158815e2a54bb6275e0ee79227f2165c1aad475fa80aff36faa016bdf40b32c28d4e5c492bef93b8e6ab20dbc7e928af3b0bf9cd6cc3c8e000eb450ad047fa357ffcca8521b1a1b2e6620b8883d6455d34d474d7aec4968bc26e22c1e53ade82828a3727ad60344f87191d0e78d0b84b4d7783684a0ba6e19914fb8bd400eb22dbba6593c27cc806ba114c7cb8a76115315b1e2af4a474b93372d78092e6062b4cdee2e8d7dbfbfc6fa4d4a854ce544a6ef8865d8724ed0d7e357c2512fababd6325d1bd418f6ff32e5f4b7705c268f063f58da360611c2d8224e2904b250e76ca5d4216de1c4320740fef5ae9"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "235701117577a13d04e3da600ded8646ecf94421ae154f08c8166f615752d0582d7910e901dd3b74a5d9ef9af64449a0a43806547dbb6c958f2f48a1f2a52805db10cb821b270a4d2851cd28d5a7369b6b0e2053cd3540054906959b4e4cfee08f69da2b0df1a33d2569612d6d18e9c4406098fb44e00831256b5f140f2f506dabe3d5499e6f2b03a2f6efc35557724e54f3ff32ce01fff957cdf107f3b7cece041a891a36451fe4e9f7bc646566b216c5ab9adb7a75d96f39bafa89117002d90092d6ce75e111d1578f74"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "099f8f1b50faa61a5a58915e51f487550e46960458ad650cd67dc733aece36f42c9de2ccaa0ad9d8d49c3e9e541629de658d81f32a8ebf06752fe77d633e301e49a2fb8b3b44e8d87f86c03da20f65466c1db384f9eaf92d336b4fea79ea600b00"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x1604}, 0x1, 0x0, 0x0, 0x4000000}, 0x84080) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'vlan1\x00', 0x200}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b00300014000600631772ab00442fff00000000000000000000ffffac141411ff020000000000000000000000000001042088be00000003010008000c0086dd88a8"], 0xfdef) (async) syz_io_uring_setup(0xf7c, &(0x7f0000000240)={0x0, 0x8dff, 0x2, 0x1, 0x106}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)) (async) 3.848045374s ago: executing program 0 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x88) ioctl(r0, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x88) (async) ioctl(r0, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e") (async) 3.847194324s ago: executing program 0 (id=133): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f00000001c0)="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", 0x1d8, 0xfffffffffffffffb) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200182"], 0x0}) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f00000003c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) 3.799787265s ago: executing program 2 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r4, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000480), 0x53, 0x20040000) connect$unix(r4, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000a80)='./tracing\x00', &(0x7f0000000ac0)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000a80)='./tracing\x00', &(0x7f0000000ac0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r6, &(0x7f0000000b40)='r:s/p ./file0:0\f\\', 0x11) (async) write(r6, &(0x7f0000000b40)='r:s/p ./file0:0\f\\', 0x11) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000b80)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6ac080, 0xc) (async) open$dir(&(0x7f0000000b80)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x6ac080, 0xc) connect$unix(r4, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r4, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1, 0x1, 0x0, 0x0) (async) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00', 0x8000}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) preadv(r7, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000800)=""/51, 0x33}, {&(0x7f0000000840)=""/166, 0xa6}], 0x6, 0x9, 0x6) (async) preadv(r7, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000800)=""/51, 0x33}, {&(0x7f0000000840)=""/166, 0xa6}], 0x6, 0x9, 0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000040)) recvfrom$unix(r3, &(0x7f0000000480)=""/5, 0x5, 0x40, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)={'veth1_to_team\x00'}) 3.732855786s ago: executing program 2 (id=135): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000380)={0x559, 0x14}) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x54842, &(0x7f0000000640)={'trans=virtio,', {[{@cache_loose}, {@cache_readahead}, {@noextend}, {@version_u}, {@noxattr}, {@access_any}, {@cachetag={'cachetag', 0x3d, '/proc/thread-self/make-it-fail\x00'}}, {@privport}, {@uname={'uname', 0x3d, 'sessionid\x00'}}], [{@subj_role={'subj_role', 0x3d, 'sessionid\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}}) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) dup(r1) openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r2 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) readv(r3, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/75, 0x4b}], 0x1) r4 = getpgid(0x0) ptrace(0x4207, r4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x41e04000) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x2000008, 0x0, 0x4000000) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracefs\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracefs/instances/foo\x00', 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1000, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) read$FUSE(r5, &(0x7f0000003380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000053c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x20008, 0x0, 0x0, 0x40, 0x4000000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000005440)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000007440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007500)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000007540)='./file0\x00', 0x101001, 0x12) flock(r7, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='sessionid\x00') 3.603813239s ago: executing program 1 (id=136): statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6000, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000280)={[{@gid={'gid', 0x3d, r1}}, {@mode}, {@uid={'uid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x9113}}], [{@obj_user}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, '/'}}, {@smackfsdef={'smackfsdef', 0x3d, ']+{'}}]}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x200]}, 0x8, 0x80800) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x10, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x10001}}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xc834}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) fcntl$getownex(r4, 0x10, &(0x7f0000000500)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000540)='net/netlink\x00') getdents64(r6, &(0x7f0000000580)=""/107, 0x6b) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000600)) ioctl$XFS_IOC_ERROR_CLEARALL(r6, 0x40085875) r7 = syz_open_dev$usbmon(&(0x7f0000000640), 0xfffffffffffffffd, 0x40000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0) read$FUSE(r4, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000002700)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000002800)=0xe8) read$FUSE(r4, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000004880)='./file0\x00', &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r4, &(0x7f0000004940)={0x288, 0x0, r9, [{{0x6, 0x2, 0x9, 0x7, 0x5, 0xc254, {0x6, 0x8000, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0xffff8000, 0x8, 0x169, 0x6000, 0xb, r0, r1, 0x1, 0xe}}, {0x0, 0x2, 0x4, 0x3, '!#/{'}}, {{0x2, 0x0, 0xa7ec, 0x0, 0x4, 0x9, {0x5, 0x4d, 0x6, 0x8, 0x7, 0x9, 0x2, 0x40, 0x599, 0x6000, 0x0, r11, r12, 0x5, 0x446}}, {0x0, 0x4, 0x0, 0x8}}, {{0x0, 0x2, 0x0, 0x4, 0x3, 0x9, {0x4, 0x1, 0x7, 0xffffffff, 0x7, 0x0, 0x0, 0x6, 0x6, 0x0, 0x98, r0, r3, 0x9, 0x6}}, {0x6, 0x9, 0x5, 0x6, '({{$*'}}, {{0x0, 0x0, 0xb, 0x101, 0x3, 0x3, {0x6, 0x9, 0x7d12, 0x91, 0x7, 0x9, 0x4, 0x7, 0xffffff9b, 0x2000, 0x4, r13, r1, 0xfffffff9, 0x2}}, {0x0, 0x0, 0x6, 0x4bcf, 'user_u'}}]}, 0x288) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r6, 0x24aa5000) ioctl$KVM_RUN(r6, 0xae80, 0x0) accept4$unix(r4, &(0x7f0000004c00)=@abs, &(0x7f0000004c80)=0x6e, 0x80800) syz_open_procfs(r10, &(0x7f0000004cc0)='fdinfo/3\x00') cachestat(r7, &(0x7f0000004d00)={0x3, 0x8}, &(0x7f0000004d40), 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r7, 0x4030582b, &(0x7f0000004d80)={0x0, 0x2, 0x1, 0x1, 0x0, 0x6}) connect$inet6(r6, &(0x7f0000004dc0)={0xa, 0x4e23, 0x3, @private1, 0xfff}, 0x1c) write$binfmt_script(r4, &(0x7f0000004e00)={'#! ', './file0', [{0x20, 'max_read'}, {0x20, ')\x82{x)){#-]+${/\\\\'}, {0x20, ',@0'}, {0x20, '\x00'}, {}], 0xa, "0b537cd277778580a1a32800fd68a6fdd0a01dfa38da85cf70264aa9e14f8b0c1d0a9ddeb60fc3498fe998cecde970f269e5775827aaab2ca44b11295f35082f5132e69be9a40c07cba2b3234e91c2f3a893b6d82be98a08f06dafbcce34f555ed610b5b05bbdd3d8e9412dcb433dd12533e32d348cd4e4bf9963b15781af145afd087b38d0a44acc3b49882ab0ae2e0497a4ca194167e3d6865e876d10f385fd20b3901eb59dcab766b4154bcc4349da74897ff62540a220cc7ed37756b6e1413e1f59631ca"}, 0xf2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000004f80)={&(0x7f0000004f00)=""/81, 0x51, 0x9, 0x4}) read$FUSE(r4, &(0x7f0000004fc0)={0x2020}, 0x2020) r14 = memfd_secret(0x80000) sendmsg$tipc(r14, &(0x7f0000008680)={&(0x7f0000007000)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000007040)="90ca2633b1d755054fa45989f721a9a865c7f44d3d15ea7efc", 0x19}, {&(0x7f0000007080)="d3f72138478179129c881a054c3249a6849a277e61acec3f5bfdd38b2afc08fca4f373481c1775d3830b85db5fd5e950255573aa8b53933aff1205cc0e0853e66905e639d05456dd82d175a5836316b4ae2f330b37560d3df0dc5d83de98412f958379e11619d6a326596ea7db8b4ca4cf720abb2ab2aeaa697bcbddf38eaa2fcf724fa6968996855d06b166041ca5c5e938057b7a5289", 0x97}, {&(0x7f0000007140)="8407fe2e6367c86afb8eaae53391837e19d6f25a971d5f23411dd677a7f2dc1b904cffc379a8e79a236053825a2ca67fed05451c29b9b1e579e8e2359ea4155d910fe6e8f366cc0ea2a2f837", 0x4c}, {&(0x7f00000071c0)="8ee0a3062ba72f3ef16ea64fb0335088e8a1a7949f72cc27792088e128e71b9dae616dc4d9a0fcf848de8b6c865069b00929a9537d6db204d695224d0772f793d8cf4a02af7caaa0ccf370b0c2144574a106bdb5e5a55a7770fe54f9165fb1449df0bbdcd151e2cf02d3b4234046bfc2f92a9c502f90ba00bf59924140865f6fd6784727eba00cd249a6c773d90d7e37dd32999166943c127e2ed8ef1f079b0c74d7d198d0cc39c4e24e04d9749beac38fdaf93352689f5c244e7e956b9838", 0xbf}, {&(0x7f0000007280)="111142da271b61eca6998cc67d0ccf1faeec7197ff834899132d0ed679fe161d7ba6dc6ff01329eedf24881f01753d7e4f5a503f36819f1cef535149b1850af4c2d950519300458ea1f3caa9e5fface04bfefffb4d571595d3ee6ae7b71ede30891f81ae3535462146d289397f49e82e21ec9c1180611d14b1af3ced58c9201daeacc93cc61bf748abc4ffaa52356dca8317898b2ec71ce6833bd7f6c61dcaa655620f6f9d7b2018641cee649dc62f1bec626b6924daf13a1b369d53e347ddff77ce9ad51554273eba3f2d7fe15c4261a24330e744ff4591c3dee8ac918abcb8916f7bb6ba918529ba2b835a06ad1241e5d9ebb6363eab1b1e582f511ebb39", 0xff}, {&(0x7f0000007380)="490717cf8f3086d4a3a888159570dda953726faa954203c06f30edd77a77fa3a381566718d03c4c5dbb940f5c9f3100a500c3e6263d08568bb0d7c0826a3826c0015286f871a9741ddb8aefd0911f2f03db71afefbd43887265c2c6319", 0x5d}, {&(0x7f0000007400)="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", 0x1000}, {&(0x7f0000008400)="a69dd541c3d618b28ee5bbe17a0550ac4b1daac924c180403ca6dfdff376a694689fee9ffb98cd4f413b040825e479f0f5fe6c936765f62cdec293a4603052629f700e368ed50afd0e4c10a3e0e3b6ff5df465b4220df3b0550e01ee8dee8ae9cf7dafcacf667ef3ba76f10b", 0x6c}, {&(0x7f0000008480)="5ffa782b1f381959f29bcc7384116b43", 0x10}], 0x9, &(0x7f0000008580)="40caecf14a2074a93f04b82a8c7b60ca3c244fae3ddff0240bad20123ebfd83d5c3a0718e1be558e7afbaab101030783b6c28e805affc883a43abb1681a0c20703c20950957eb2908a0d9d7f18491e9a80a65ad9bdcb3e5c92338ce9fe2b794f0e9bca308ebc09e764be4dbba78a618e83e076670480a4cfcf88ba6a4ec02edb0a85f7fe3c0065047c528af2b26686dde8f42fcb505e76095b7eb0bcf611b41aa284e76543810e72355cdf5e4199d0f788e4ac11147f38aea342c5b4fd7580efd5c489c2ccf5ff00ccc4d327acabe666bbc8387ab095d453f0cadcf745913470c985", 0xe2, 0x44840}, 0x24004054) 3.600550319s ago: executing program 1 (id=137): setuid(0xee01) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xc4, 0xb, 0x62, 0x20, 0x5f9, 0xffff, 0x645b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x81, 0x30, 0x32, "", [{{0x9, 0x4, 0x67, 0x2, 0x0, 0x91, 0x2c, 0x65, 0x9}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) 2.886915965s ago: executing program 2 (id=138): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2000010, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002440)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1011100, 0x40, 0x0, 0x6, 0x6, 0x0, 0x0, 0x40}}, 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000005480)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000054c0)) timer_settime(0x0, 0x0, &(0x7f0000005500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, r2, 0x100000000000019) syz_fuse_handle_req(r0, &(0x7f00000024c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df201000000d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 1) r3 = openat(0xffffffffffffff9c, &(0x7f00000045c0)='./file0\x00', 0x22801, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x80086601, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, 0x0, 0x4008010) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, 0x0, 0x804) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x804) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, 0x0) epoll_pwait(r7, 0x0, 0x0, 0x4, 0x0, 0x0) 2.040622304s ago: executing program 2 (id=139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hiddev(0x0, 0x7, 0x2401) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') read$FUSE(r3, &(0x7f00000018c0)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000039c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32, @ANYBLOB="0800c300"], 0x30}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000001c0)) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) r9 = syz_open_dev$loop(&(0x7f0000000280), 0x75f, 0xea982) r10 = memfd_create(&(0x7f00000002c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n initial count (200000 ns). Using initial count to start timer. [ 31.009930][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.020997][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 31.030480][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.039162][ T31] usb 1-1: config 0 descriptor?? [ 31.258820][ T310] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.409832][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.420804][ T310] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.429894][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.438524][ T310] usb 4-1: config 0 descriptor?? [ 31.458810][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.609921][ T45] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 31.621132][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 31.627760][ T45] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 31.636808][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.645554][ T45] usb 3-1: config 0 descriptor?? [ 31.849192][ T31] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 31.857226][ T45] usb 3-1: string descriptor 0 read error: -71 [ 31.863523][ T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 31.873223][ T45] usbhid 3-1:0.0: can't add hid device: -22 [ 31.879541][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 31.888794][ T31] usb 1-1: USB disconnect, device number 5 [ 31.889631][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 31.895806][ T45] usb 3-1: USB disconnect, device number 5 [ 32.371504][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 32.371521][ T36] audit: type=1400 audit(1791903185.400:223): avc: denied { setopt } for pid=642 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.394414][ T645] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 32.397846][ T36] audit: type=1400 audit(1791903185.400:224): avc: denied { write } for pid=642 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.552854][ T683] capability: warning: `syz.2.68' uses 32-bit capabilities (legacy support in use) [ 32.636780][ T419] usb 2-1: MIDIStreaming interface descriptor not found [ 32.652214][ T419] usb 2-1: USB disconnect, device number 5 [ 32.688486][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.898854][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.948864][ T419] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.048827][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 33.054978][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.065177][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.075446][ T10] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 33.084582][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.092620][ T10] usb 1-1: Product: syz [ 33.096779][ T10] usb 1-1: Manufacturer: syz [ 33.101397][ T10] usb 1-1: SerialNumber: syz [ 33.108824][ T419] usb 2-1: Using ep0 maxpacket: 32 [ 33.115124][ T419] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.123298][ T419] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.133442][ T419] usb 2-1: config 0 has no interface number 0 [ 33.139569][ T419] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.153886][ T419] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.162992][ T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.171037][ T419] usb 2-1: Product: syz [ 33.175203][ T419] usb 2-1: Manufacturer: syz [ 33.179841][ T419] usb 2-1: SerialNumber: syz [ 33.185179][ T419] usb 2-1: config 0 descriptor?? [ 33.191023][ T419] smsc95xx v2.0.0 [ 33.194681][ T419] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 33.204753][ T419] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 33.225193][ T310] usbhid 4-1:0.0: can't add hid device: -71 [ 33.231999][ T310] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.232191][ T36] audit: type=1400 audit(1791903186.260:225): avc: denied { mounton } for pid=690 comm="syz.3.74" path="/15/file0" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.263695][ T310] usb 4-1: USB disconnect, device number 5 [ 33.286035][ T36] audit: type=1400 audit(1791903186.310:226): avc: denied { append } for pid=692 comm="syz.2.75" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.337722][ T36] audit: type=1400 audit(1791903186.360:227): avc: denied { mounton } for pid=692 comm="syz.2.75" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.374597][ T36] audit: type=1400 audit(1791903186.400:228): avc: denied { read write } for pid=699 comm="syz.2.76" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.406555][ T36] audit: type=1400 audit(1791903186.400:229): avc: denied { open } for pid=699 comm="syz.2.76" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.430750][ T36] audit: type=1400 audit(1791903186.410:230): avc: denied { ioctl } for pid=699 comm="syz.2.76" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.456571][ T36] audit: type=1400 audit(1791903186.460:231): avc: denied { mounton } for pid=690 comm="syz.3.74" path="/15/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 34.067108][ T36] audit: type=1400 audit(1791903187.090:232): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 34.298817][ T419] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.449384][ T419] usb 3-1: Using ep0 maxpacket: 32 [ 34.455678][ T419] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.463820][ T419] usb 3-1: config 0 has no interface number 0 [ 34.471541][ T419] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.480659][ T419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.489150][ T419] usb 3-1: Product: syz [ 34.493342][ T419] usb 3-1: Manufacturer: syz [ 34.497930][ T419] usb 3-1: SerialNumber: syz [ 34.503387][ T419] usb 3-1: config 0 descriptor?? [ 34.509716][ T419] smsc95xx v2.0.0 [ 34.912371][ T419] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 34.923155][ T419] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.952940][ T419] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 34.963733][ T419] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 34.993545][ T783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 35.003061][ T783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.82'. [ 35.038883][ T783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.82'. [ 35.114648][ T788] overlayfs: failed to resolve './file1/file0': -2 [ 35.566270][ T10] usb 1-1: Unsupported UAC3 BADD profile [ 35.580650][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.593454][ T10] usb 1-1: USB disconnect, device number 6 [ 35.613411][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.656024][ T801] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.673096][ T419] usb 2-1: USB disconnect, device number 6 [ 36.068837][ T419] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.238819][ T419] usb 2-1: Using ep0 maxpacket: 32 [ 36.245256][ T419] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 36.257504][ T419] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 36.268613][ T419] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 36.277890][ T419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.287918][ T419] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.297839][ T419] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.311496][ T419] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 36.320744][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.329723][ T419] usb 2-1: config 0 descriptor?? [ 36.468827][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.536948][ T807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.546757][ T807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.556585][ T807] netlink: 112 bytes leftover after parsing attributes in process `syz.1.90'. [ 36.598964][ T419] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 36.628974][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 36.635264][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.643463][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.670304][ T10] usb 1-1: config 0 has no interface number 0 [ 36.676465][ T10] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.698652][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.707798][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.715977][ T10] usb 1-1: Product: syz [ 36.720184][ T10] usb 1-1: Manufacturer: syz [ 36.724820][ T10] usb 1-1: SerialNumber: syz [ 36.730379][ T10] usb 1-1: config 0 descriptor?? [ 36.736360][ T10] smsc95xx v2.0.0 [ 36.740065][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 36.750757][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 36.797216][ C0] usblp0: nonzero read bulk status received: -71 [ 36.803877][ T10] usb 2-1: USB disconnect, device number 7 [ 37.013044][ T806] usblp0: removed [ 37.074445][ T10] usb 3-1: USB disconnect, device number 6 [ 39.046716][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 39.046731][ T36] audit: type=1400 audit(1791903192.070:246): avc: denied { mount } for pid=853 comm="syz.1.105" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 39.047590][ T854] 9pnet_fd: p9_fd_create_tcp (854): problem connecting socket to 127.0.0.1 [ 39.059062][ T36] audit: type=1400 audit(1791903192.070:247): avc: denied { read } for pid=853 comm="syz.1.105" name="set_event" dev="tracefs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.110417][ T36] audit: type=1400 audit(1791903192.140:248): avc: denied { mounton } for pid=853 comm="syz.1.105" path="/19/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 39.112664][ T854] 9pnet_fd: p9_fd_create_tcp (854): problem connecting socket to 127.0.0.1 [ 39.197708][ T36] audit: type=1400 audit(1791903192.220:249): avc: denied { mount } for pid=861 comm="syz.1.107" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.226212][ T36] audit: type=1400 audit(1791903192.250:250): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 39.232466][ T10] usb 1-1: USB disconnect, device number 7 [ 39.632942][ T36] audit: type=1400 audit(1791903192.660:251): avc: denied { read write } for pid=874 comm="syz.1.111" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.658849][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.670007][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.698937][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.718803][ T36] audit: type=1400 audit(1791903192.660:252): avc: denied { open } for pid=874 comm="syz.1.111" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 39.791993][ T874] mmap: syz.1.111 (874): VmData 17448960 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 39.818816][ T10] usb 1-1: device descriptor read/64, error -71 [ 40.068845][ T10] usb 1-1: device descriptor read/64, error -71 [ 40.098833][ T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 40.228827][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.318890][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.458824][ T10] usb 1-1: device descriptor read/64, error -71 [ 40.488824][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.646855][ T36] audit: type=1400 audit(1791903193.670:253): avc: denied { getopt } for pid=879 comm="syz.2.113" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.691511][ T884] FAULT_INJECTION: forcing a failure. [ 40.691511][ T884] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.704639][ T10] usb 1-1: device descriptor read/64, error -71 [ 40.710991][ T884] CPU: 0 UID: 0 PID: 884 Comm: syz.2.115 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 40.711020][ T884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 40.711041][ T884] Call Trace: [ 40.711048][ T884] [ 40.711055][ T884] __dump_stack+0x21/0x30 [ 40.711087][ T884] dump_stack_lvl+0x140/0x1c0 [ 40.711112][ T884] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.711139][ T884] dump_stack+0x19/0x20 [ 40.711164][ T884] should_fail_ex+0x3c2/0x510 [ 40.711183][ T884] should_fail+0xf/0x20 [ 40.711199][ T884] should_fail_usercopy+0x1e/0x30 [ 40.711218][ T884] _copy_from_user+0x20/0xa0 [ 40.711240][ T884] kvm_arch_dev_ioctl+0x3ae/0x990 [ 40.711260][ T884] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 40.711279][ T884] ? selinux_file_ioctl+0x732/0x1480 [ 40.711304][ T884] ? vfs_write+0xbcf/0xfd0 [ 40.711328][ T884] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 40.711353][ T884] ? __cfi_vfs_write+0x10/0x10 [ 40.711385][ T884] ? __kasan_check_write+0x18/0x20 [ 40.711409][ T884] ? mutex_unlock+0x90/0x240 [ 40.711430][ T884] ? __cfi_mutex_unlock+0x10/0x10 [ 40.711450][ T884] kvm_dev_ioctl+0x48e/0x14c0 [ 40.711469][ T884] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 40.711488][ T884] ? bpf_lsm_file_ioctl+0xd/0x20 [ 40.711507][ T884] ? security_file_ioctl+0x3e/0x110 [ 40.711531][ T884] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 40.711548][ T884] __se_sys_ioctl+0x126/0x1b0 [ 40.711567][ T884] __x64_sys_ioctl+0x7f/0xa0 [ 40.711585][ T884] x64_sys_call+0x1878/0x2ee0 [ 40.711603][ T884] do_syscall_64+0x57/0xf0 [ 40.711620][ T884] ? clear_bhb_loop+0x50/0xa0 [ 40.711642][ T884] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.711663][ T884] RIP: 0033:0x7f2642f9e2d9 [ 40.711685][ T884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.711700][ T884] RSP: 002b:00007f2643dab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.711720][ T884] RAX: ffffffffffffffda RBX: 00007f2643225fa0 RCX: 00007f2642f9e2d9 [ 40.711734][ T884] RDX: 0000000000000000 RSI: 000000004018aee2 RDI: 0000000000000003 [ 40.711746][ T884] RBP: 00007f2643dab090 R08: 0000000000000000 R09: 0000000000000000 [ 40.711758][ T884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.711770][ T884] R13: 00007f2643226038 R14: 00007f2643225fa0 R15: 00007ffcf0395808 [ 40.711785][ T884] [ 40.778836][ T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 40.818909][ T10] usb usb1-port1: attempt power cycle [ 40.968807][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.208854][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.318828][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.318908][ T31] usb usb2-port1: attempt power cycle [ 41.349837][ T10] usb 1-1: device descriptor read/8, error -71 [ 41.479853][ T10] usb 1-1: device descriptor read/8, error -71 [ 41.635196][ T36] audit: type=1400 audit(1791903194.660:254): avc: denied { bind } for pid=888 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.637478][ T889] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 41.663868][ T36] audit: type=1400 audit(1791903194.660:255): avc: denied { setopt } for pid=888 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.688901][ T31] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 41.718815][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.727271][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.749871][ T10] usb 1-1: device descriptor read/8, error -71 [ 41.873946][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.899542][ T10] usb 1-1: device descriptor read/8, error -71 [ 42.008883][ T10] usb usb1-port1: unable to enumerate USB device [ 42.019609][ T900] netlink: 'syz.2.121': attribute type 4 has an invalid length. [ 42.118877][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 42.139864][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.187849][ T905] netlink: 112 bytes leftover after parsing attributes in process `syz.2.123'. [ 42.232773][ T911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'. [ 42.269791][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.305673][ T913] usb usb8: usbfs: process 913 (syz.2.127) did not claim interface 0 before use [ 42.328841][ T914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.127'. [ 42.378904][ T31] usb usb2-port1: unable to enumerate USB device [ 42.491885][ T922] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 42.504805][ T928] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 42.533449][ T926] vlan1: entered allmulticast mode [ 42.538609][ T926] veth0_vlan: entered allmulticast mode [ 42.622782][ T942] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 42.631603][ T942] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 42.780773][ T952] mmap: syz.2.135 (952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.888825][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.039965][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.051069][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.061214][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 43.070717][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.079716][ T31] usb 1-1: config 0 descriptor?? [ 43.258845][ T65] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 43.398819][ T65] usb 2-1: device descriptor read/64, error -71 [ 43.492528][ T31] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 43.499536][ T31] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 43.506384][ T31] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 43.513747][ T31] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 43.520868][ T31] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 43.528029][ T31] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 43.535047][ T31] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 43.543191][ T31] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 43.638587][ T961] FAULT_INJECTION: forcing a failure. [ 43.638587][ T961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.651804][ T65] usb 2-1: device descriptor read/64, error -71 [ 43.658148][ T961] CPU: 1 UID: 0 PID: 961 Comm: syz.2.138 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 43.658177][ T961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 43.658189][ T961] Call Trace: [ 43.658195][ T961] [ 43.658206][ T961] __dump_stack+0x21/0x30 [ 43.658238][ T961] dump_stack_lvl+0x140/0x1c0 [ 43.658264][ T961] ? __cfi_dump_stack_lvl+0x10/0x10 [ 43.658292][ T961] dump_stack+0x19/0x20 [ 43.658317][ T961] should_fail_ex+0x3c2/0x510 [ 43.658335][ T961] should_fail+0xf/0x20 [ 43.658352][ T961] should_fail_usercopy+0x1e/0x30 [ 43.658370][ T961] copy_fpstate_to_sigframe+0x906/0xbb0 [ 43.658396][ T961] ? prepare_to_wait_event+0x40f/0x450 [ 43.658423][ T961] ? copy_fpstate_to_sigframe+0x177/0xbb0 [ 43.658448][ T961] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 43.658475][ T961] ? timerqueue_add+0x212/0x240 [ 43.658501][ T961] ? fpu__alloc_mathframe+0xb7/0x150 [ 43.658526][ T961] get_sigframe+0x604/0x830 [ 43.658546][ T961] ? __cfi_get_sigframe+0x10/0x10 [ 43.658565][ T961] ? __kasan_check_write+0x18/0x20 [ 43.658589][ T961] ? _raw_spin_lock+0x92/0x120 [ 43.658615][ T961] ? __cfi__raw_spin_lock+0x10/0x10 [ 43.658640][ T961] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 43.658658][ T961] x64_setup_rt_frame+0x162/0xc20 [ 43.658677][ T961] ? __asan_memcpy+0x5a/0x80 [ 43.658701][ T961] ? _raw_spin_unlock_irq+0x45/0x70 [ 43.658725][ T961] ? get_signal+0x120a/0x1490 [ 43.658751][ T961] ? __cfi_x64_setup_rt_frame+0x10/0x10 [ 43.658770][ T961] arch_do_signal_or_restart+0x328/0x700 [ 43.658788][ T961] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 43.658808][ T961] ? ksys_read+0x1f3/0x260 [ 43.658833][ T961] ? __kasan_check_read+0x15/0x20 [ 43.658857][ T961] syscall_exit_to_user_mode+0x57/0xb0 [ 43.658881][ T961] do_syscall_64+0x63/0xf0 [ 43.658897][ T961] ? clear_bhb_loop+0x50/0xa0 [ 43.658919][ T961] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 43.658940][ T961] RIP: 0033:0x7f2642f5eb0c [ 43.658956][ T961] Code: f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 <0f> 05 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 [ 43.658971][ T961] RSP: 002b:00007f2643daaf68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.658992][ T961] RAX: 0000000000000000 RBX: 00007f2643dab6c0 RCX: 00007f2642f5eb0e [ 43.659005][ T961] RDX: 0000000000002000 RSI: 00002000000024c0 RDI: 0000000000000003 [ 43.659017][ T961] RBP: 00007f2643dab090 R08: 0000000000000000 R09: 0000000000000000 [ 43.659029][ T961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 43.659041][ T961] R13: 00002000000044c0 R14: 00007f2643225fa0 R15: 00007ffcf0395808 [ 43.659057][ T961] [ 44.058830][ T65] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 44.131764][ T31] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 44.139245][ T31] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 44.146387][ T31] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 44.157382][ T31] usb 1-1: USB disconnect, device number 12 [ 44.189017][ T65] usb 2-1: device descriptor read/64, error -71 [ 44.428837][ T65] usb 2-1: device descriptor read/64, error -71 [ 44.538971][ T65] usb usb2-port1: attempt power cycle [ 44.708854][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.721828][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 44.721844][ T36] audit: type=1400 audit(1791903197.750:280): avc: denied { call } for pid=966 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 44.746682][ T967] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 44.746733][ T967] rust_binder: Failure in copy_transaction_data: ENOSPC [ 44.754702][ T967] rust_binder: 966:967 transaction async to 966:0 failed ENOSPC, code 0 size 0-24 line process.rs:1085 [ 44.869902][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.888844][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.898018][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.908830][ T65] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 44.929693][ T31] usb 3-1: config 0 descriptor?? [ 44.949860][ T65] usb 2-1: device descriptor read/8, error -71 [ 45.078823][ T310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 45.079889][ T65] usb 2-1: device descriptor read/8, error -71 [ 45.138282][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 45.144305][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 45.169793][ T31] usb 3-1: USB disconnect, device number 7 [ 45.238816][ T310] usb 1-1: Using ep0 maxpacket: 8 [ 45.251209][ T310] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 45.268847][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.287217][ T310] usb 1-1: Product: syz [ 45.297155][ T310] usb 1-1: Manufacturer: syz [ 45.307271][ T310] usb 1-1: SerialNumber: syz [ 45.351215][ T65] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 45.389834][ T65] usb 2-1: device descriptor read/8, error -71 [ 45.519841][ T65] usb 2-1: device descriptor read/8, error -71 [ 45.608815][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.628903][ T65] usb usb2-port1: unable to enumerate USB device [ 45.769853][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.788811][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 45.808195][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.829076][ T31] usb 3-1: config 0 descriptor?? [ 46.099855][ T36] audit: type=1400 audit(1791903199.130:281): avc: denied { getattr } for pid=970 comm="syz.1.141" path="cgroup:[4026532300]" dev="nsfs" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.144245][ T36] audit: type=1400 audit(1791903199.170:282): avc: denied { ioctl } for pid=970 comm="syz.1.141" path="socket:[7421]" dev="sockfs" ino=7421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.243117][ T974] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.142'. [ 46.308888][ T974] tap0: tun_chr_ioctl cmd 1074025676 [ 46.318793][ T974] tap0: owner set to 0 [ 46.468532][ T977] SELinux: Context system_u: is not valid (left unmapped). [ 46.489619][ T36] audit: type=1400 audit(1791903199.520:283): avc: denied { relabelto } for pid=976 comm="syz.1.143" name="30" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 46.546407][ T36] audit: type=1400 audit(1791903199.520:284): avc: denied { associate } for pid=976 comm="syz.1.143" name="30" dev="tmpfs" ino=177 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 46.598804][ T36] audit: type=1400 audit(1791903199.540:285): avc: denied { write } for pid=976 comm="syz.1.143" name="30" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 46.638856][ T36] audit: type=1400 audit(1791903199.540:286): avc: denied { add_name } for pid=976 comm="syz.1.143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 46.669361][ T31] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 46.679268][ T965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 46.693231][ T31] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 46.718969][ T965] loop7: detected capacity change from 0 to 16384 [ 46.719166][ T36] audit: type=1400 audit(1791903199.540:287): avc: denied { create } for pid=976 comm="syz.1.143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 46.758803][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 46.770828][ T36] audit: type=1400 audit(1791903199.540:288): avc: denied { associate } for pid=976 comm="syz.1.143" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.906190][ T978] loop7: detected capacity change from 16384 to 0 [ 46.918955][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 46.925851][ C0] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 46.931130][ C1] ------------[ cut here ]------------ [ 46.941155][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 46.949771][ C1] index 21369 is out of range for type 'const int[34]' [ 46.956640][ C1] CPU: 1 UID: 0 PID: 967 Comm: syz.0.140 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 46.956671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 46.956685][ C1] Call Trace: [ 46.956690][ C1] [ 46.956698][ C1] __dump_stack+0x21/0x30 [ 46.956735][ C1] dump_stack_lvl+0x140/0x1c0 [ 46.956765][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.956806][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.956837][ C1] dump_stack+0x19/0x20 [ 46.956869][ C1] ubsan_epilogue+0xe/0x40 [ 46.956893][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 46.956922][ C1] aiptek_irq+0x208d/0x2a00 [ 46.956950][ C1] ? _raw_spin_unlock+0x45/0x60 [ 46.956969][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 46.957000][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 46.957032][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 46.957062][ C1] dummy_timer+0xa3f/0x4900 [ 46.957098][ C1] ? psi_account_irqtime+0x307/0x9a0 [ 46.957125][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 46.957157][ C1] ? timerqueue_del+0xd7/0x130 [ 46.957187][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 46.957214][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 46.957244][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 46.957269][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 46.957293][ C1] ? read_tsc+0xd/0x20 [ 46.957323][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 46.957356][ C1] hrtimer_run_softirq+0x159/0x560 [ 46.957382][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 46.957416][ C1] handle_softirqs+0x1aa/0x5b0 [ 46.957442][ C1] __irq_exit_rcu+0x47/0xb0 [ 46.957465][ C1] irq_exit_rcu+0xd/0x30 [ 46.957487][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 46.957514][ C1] [ 46.957520][ C1] [ 46.957526][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 46.957548][ C1] RIP: 0010:vcpu_run+0x4a85/0x7830 [ 46.957579][ C1] Code: 88 14 e6 7e 01 48 8b 94 24 d0 00 00 00 4c 89 e3 48 c1 eb 03 42 0f b6 04 33 84 c0 0f 85 04 1a 00 00 41 c6 04 24 01 fb 48 89 d0 <48> c1 e8 03 42 80 3c 30 00 74 15 48 8b bc 24 d0 00 00 00 e8 13 54 [ 46.957594][ C1] RSP: 0018:ffffc9000ebcf540 EFLAGS: 00000246 [ 46.957611][ C1] RAX: ffff88811c893708 RBX: 1ffff11023912577 RCX: 0000000000080000 [ 46.957626][ C1] RDX: ffff88811c893708 RSI: 000000000007ffff RDI: 0000000000080000 [ 46.957639][ C1] RBP: ffffc9000ebcf9d0 R08: ffff88811df393c0 R09: 0000000000000002 [ 46.957654][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff88811c892bba [ 46.957667][ C1] R13: ffff88811c892180 R14: dffffc0000000000 R15: ffffffe68e0d00e2 [ 46.957698][ C1] ? signal_pending+0xc0/0xc0 [ 46.957730][ C1] ? __kasan_check_write+0x18/0x20 [ 46.957760][ C1] ? xfd_validate_state+0x68/0x140 [ 46.957793][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 46.957833][ C1] ? __kasan_check_write+0x18/0x20 [ 46.957863][ C1] ? fpregs_mark_activate+0x68/0x160 [ 46.957890][ C1] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 46.957918][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 46.957947][ C1] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 46.957980][ C1] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 46.958013][ C1] ? __futex_wait+0x330/0x3d0 [ 46.958039][ C1] ? __cfi___futex_wait+0x10/0x10 [ 46.958066][ C1] ? ioctl_has_perm+0x1bc/0x500 [ 46.958096][ C1] ? __asan_memcpy+0x5a/0x80 [ 46.958125][ C1] ? ioctl_has_perm+0x408/0x500 [ 46.958154][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 46.958183][ C1] ? __kasan_check_write+0x18/0x20 [ 46.958212][ C1] ? mutex_lock_killable+0x97/0x1d0 [ 46.958238][ C1] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.958266][ C1] kvm_vcpu_ioctl+0xa43/0x1000 [ 46.958290][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.958312][ C1] ? do_futex+0x32a/0x510 [ 46.958334][ C1] ? __cfi_do_futex+0x10/0x10 [ 46.958356][ C1] ? __fget_files+0x2bc/0x330 [ 46.958377][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.958400][ C1] ? security_file_ioctl+0x3e/0x110 [ 46.958428][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 46.958450][ C1] __se_sys_ioctl+0x126/0x1b0 [ 46.958471][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 46.958492][ C1] x64_sys_call+0x1878/0x2ee0 [ 46.958515][ C1] do_syscall_64+0x57/0xf0 [ 46.958534][ C1] ? clear_bhb_loop+0x50/0xa0 [ 46.958560][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.958586][ C1] RIP: 0033:0x7fc27079e2d9 [ 46.958608][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.958627][ C1] RSP: 002b:00007fc271669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.958651][ C1] RAX: ffffffffffffffda RBX: 00007fc270a25fa0 RCX: 00007fc27079e2d9 [ 46.958670][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 46.958684][ C1] RBP: 00007fc270835888 R08: 0000000000000000 R09: 0000000000000000 [ 46.958699][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.958711][ C1] R13: 00007fc270a26038 R14: 00007fc270a25fa0 R15: 00007ffed29d7ff8 [ 46.958728][ C1] [ 46.958735][ C1] ---[ end trace ]--- [ 47.453159][ C1] ================================================================== [ 47.461239][ C1] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 47.468818][ C1] Read of size 4 at addr ffffffff8671e784 by task syz.0.140/967 [ 47.476456][ C1] [ 47.478779][ C1] CPU: 1 UID: 0 PID: 967 Comm: syz.0.140 Not tainted syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 47.478808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 47.478821][ C1] Call Trace: [ 47.478826][ C1] [ 47.478833][ C1] __dump_stack+0x21/0x30 [ 47.478864][ C1] dump_stack_lvl+0x140/0x1c0 [ 47.478889][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.478914][ C1] ? __cfi__printk+0x10/0x10 [ 47.478940][ C1] print_address_description+0x71/0x210 [ 47.478966][ C1] print_report+0x4a/0x70 [ 47.478990][ C1] kasan_report+0x162/0x1a0 [ 47.479008][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 47.479029][ C1] ? aiptek_irq+0x20ab/0x2a00 [ 47.479048][ C1] __asan_report_load4_noabort+0x18/0x20 [ 47.479074][ C1] aiptek_irq+0x20ab/0x2a00 [ 47.479094][ C1] ? _raw_spin_unlock+0x45/0x60 [ 47.479109][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 47.479133][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 47.479158][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 47.479180][ C1] dummy_timer+0xa3f/0x4900 [ 47.479211][ C1] ? psi_account_irqtime+0x307/0x9a0 [ 47.479231][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 47.479256][ C1] ? timerqueue_del+0xd7/0x130 [ 47.479278][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 47.479299][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 47.479322][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 47.479346][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 47.479364][ C1] ? read_tsc+0xd/0x20 [ 47.479388][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 47.479414][ C1] hrtimer_run_softirq+0x159/0x560 [ 47.479434][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 47.479463][ C1] handle_softirqs+0x1aa/0x5b0 [ 47.479503][ C1] __irq_exit_rcu+0x47/0xb0 [ 47.479521][ C1] irq_exit_rcu+0xd/0x30 [ 47.479538][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 47.479559][ C1] [ 47.479564][ C1] [ 47.479570][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 47.479594][ C1] RIP: 0010:vcpu_run+0x4a85/0x7830 [ 47.479629][ C1] Code: 88 14 e6 7e 01 48 8b 94 24 d0 00 00 00 4c 89 e3 48 c1 eb 03 42 0f b6 04 33 84 c0 0f 85 04 1a 00 00 41 c6 04 24 01 fb 48 89 d0 <48> c1 e8 03 42 80 3c 30 00 74 15 48 8b bc 24 d0 00 00 00 e8 13 54 [ 47.479648][ C1] RSP: 0018:ffffc9000ebcf540 EFLAGS: 00000246 [ 47.479669][ C1] RAX: ffff88811c893708 RBX: 1ffff11023912577 RCX: 0000000000080000 [ 47.479684][ C1] RDX: ffff88811c893708 RSI: 000000000007ffff RDI: 0000000000080000 [ 47.479699][ C1] RBP: ffffc9000ebcf9d0 R08: ffff88811df393c0 R09: 0000000000000002 [ 47.479716][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff88811c892bba [ 47.479731][ C1] R13: ffff88811c892180 R14: dffffc0000000000 R15: ffffffe68e0d00e2 [ 47.479771][ C1] ? signal_pending+0xc0/0xc0 [ 47.479804][ C1] ? __kasan_check_write+0x18/0x20 [ 47.479830][ C1] ? xfd_validate_state+0x68/0x140 [ 47.479863][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 47.479891][ C1] ? __kasan_check_write+0x18/0x20 [ 47.479921][ C1] ? fpregs_mark_activate+0x68/0x160 [ 47.479950][ C1] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 47.479978][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 47.480007][ C1] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 47.480041][ C1] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 47.480073][ C1] ? __futex_wait+0x330/0x3d0 [ 47.480101][ C1] ? __cfi___futex_wait+0x10/0x10 [ 47.480128][ C1] ? ioctl_has_perm+0x1bc/0x500 [ 47.480159][ C1] ? __asan_memcpy+0x5a/0x80 [ 47.480189][ C1] ? ioctl_has_perm+0x408/0x500 [ 47.480219][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 47.480249][ C1] ? __kasan_check_write+0x18/0x20 [ 47.480277][ C1] ? mutex_lock_killable+0x97/0x1d0 [ 47.480303][ C1] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.480330][ C1] kvm_vcpu_ioctl+0xa43/0x1000 [ 47.480356][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 47.480379][ C1] ? do_futex+0x32a/0x510 [ 47.480402][ C1] ? __cfi_do_futex+0x10/0x10 [ 47.480426][ C1] ? __fget_files+0x2bc/0x330 [ 47.480448][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 47.480471][ C1] ? security_file_ioctl+0x3e/0x110 [ 47.480500][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 47.480523][ C1] __se_sys_ioctl+0x126/0x1b0 [ 47.480546][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 47.480567][ C1] x64_sys_call+0x1878/0x2ee0 [ 47.480590][ C1] do_syscall_64+0x57/0xf0 [ 47.480607][ C1] ? clear_bhb_loop+0x50/0xa0 [ 47.480634][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.480660][ C1] RIP: 0033:0x7fc27079e2d9 [ 47.480677][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.480695][ C1] RSP: 002b:00007fc271669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 47.480714][ C1] RAX: ffffffffffffffda RBX: 00007fc270a25fa0 RCX: 00007fc27079e2d9 [ 47.480727][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 47.480738][ C1] RBP: 00007fc270835888 R08: 0000000000000000 R09: 0000000000000000 [ 47.480755][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.480766][ C1] R13: 00007fc270a26038 R14: 00007fc270a25fa0 R15: 00007ffed29d7ff8 [ 47.480781][ C1] [ 47.480787][ C1] [ 47.986363][ C1] The buggy address belongs to the variable: [ 47.992343][ C1] .str.2+0x4/0x20 [ 47.996084][ C1] [ 47.998423][ C1] The buggy address belongs to the physical page: [ 48.004857][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x671e [ 48.013540][ C1] flags: 0x4000(reserved|zone=0) [ 48.018494][ C1] raw: 0000000000004000 ffffea000019c788 ffffea000019c788 0000000000000000 [ 48.027096][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 48.035686][ C1] page dumped because: kasan: bad access detected [ 48.042142][ C1] page_owner info is not present (never set?) [ 48.048209][ C1] [ 48.050536][ C1] Memory state around the buggy address: [ 48.056250][ C1] ffffffff8671e680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.064316][ C1] ffffffff8671e700: 00 00 00 00 01 f9 f9 f9 00 00 00 00 f9 f9 f9 f9 [ 48.072383][ C1] >ffffffff8671e780: 02 f9 f9 f9 02 f9 f9 f9 00 00 00 00 00 00 01 f9 [ 48.080473][ C1] ^ [ 48.084542][ C1] ffffffff8671e800: f9 f9 f9 f9 02 f9 f9 f9 02 f9 f9 f9 00 00 00 00 [ 48.092611][ C1] ffffffff8671e880: 00 07 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 04 [ 48.100670][ C1] ================================================================== [ 48.108733][ C1] Disabling lock debugging due to kernel taint [ 48.114891][ C1] ------------[ cut here ]------------ [ 48.120347][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 48.128954][ C1] index 21370 is out of range for type 'const int[34]' [ 48.135813][ C1] CPU: 1 UID: 0 PID: 967 Comm: syz.0.140 Tainted: G B syzkaller #0 4bc62a9bdafb808e3133dbe6927c9cb60f98f7d5 [ 48.135853][ C1] Tainted: [B]=BAD_PAGE [ 48.135861][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.135876][ C1] Call Trace: [ 48.135882][ C1] [ 48.135892][ C1] __dump_stack+0x21/0x30 [ 48.135934][ C1] dump_stack_lvl+0x140/0x1c0 [ 48.135966][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.135998][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 48.136030][ C1] dump_stack+0x19/0x20 [ 48.136062][ C1] ubsan_epilogue+0xe/0x40 [ 48.136084][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 48.136114][ C1] aiptek_irq+0x1f3c/0x2a00 [ 48.136142][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 48.136173][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 48.136205][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 48.136234][ C1] dummy_timer+0xa3f/0x4900 [ 48.136267][ C1] ? psi_account_irqtime+0x307/0x9a0 [ 48.136293][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 48.136324][ C1] ? timerqueue_del+0xd7/0x130 [ 48.136353][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 48.136380][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 48.136410][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 48.136437][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 48.136461][ C1] ? read_tsc+0xd/0x20 [ 48.136493][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 48.136527][ C1] hrtimer_run_softirq+0x159/0x560 [ 48.136553][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 48.136587][ C1] handle_softirqs+0x1aa/0x5b0 [ 48.136611][ C1] __irq_exit_rcu+0x47/0xb0 [ 48.136634][ C1] irq_exit_rcu+0xd/0x30 [ 48.136657][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 48.136691][ C1] [ 48.136699][ C1] [ 48.136706][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 48.136734][ C1] RIP: 0010:vcpu_run+0x4a85/0x7830 [ 48.136769][ C1] Code: 88 14 e6 7e 01 48 8b 94 24 d0 00 00 00 4c 89 e3 48 c1 eb 03 42 0f b6 04 33 84 c0 0f 85 04 1a 00 00 41 c6 04 24 01 fb 48 89 d0 <48> c1 e8 03 42 80 3c 30 00 74 15 48 8b bc 24 d0 00 00 00 e8 13 54 [ 48.136788][ C1] RSP: 0018:ffffc9000ebcf540 EFLAGS: 00000246 [ 48.136809][ C1] RAX: ffff88811c893708 RBX: 1ffff11023912577 RCX: 0000000000080000 [ 48.136826][ C1] RDX: ffff88811c893708 RSI: 000000000007ffff RDI: 0000000000080000 [ 48.136840][ C1] RBP: ffffc9000ebcf9d0 R08: ffff88811df393c0 R09: 0000000000000002 [ 48.136855][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffff88811c892bba [ 48.136868][ C1] R13: ffff88811c892180 R14: dffffc0000000000 R15: ffffffe68e0d00e2 [ 48.136895][ C1] ? signal_pending+0xc0/0xc0 [ 48.136920][ C1] ? __kasan_check_write+0x18/0x20 [ 48.136943][ C1] ? xfd_validate_state+0x68/0x140 [ 48.136971][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 48.136993][ C1] ? __kasan_check_write+0x18/0x20 [ 48.137015][ C1] ? fpregs_mark_activate+0x68/0x160 [ 48.137036][ C1] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 48.137057][ C1] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 48.137079][ C1] kvm_arch_vcpu_ioctl_run+0x114c/0x1bc0 [ 48.137108][ C1] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 48.137133][ C1] ? __futex_wait+0x330/0x3d0 [ 48.137155][ C1] ? __cfi___futex_wait+0x10/0x10 [ 48.137176][ C1] ? ioctl_has_perm+0x1bc/0x500 [ 48.137199][ C1] ? __asan_memcpy+0x5a/0x80 [ 48.137222][ C1] ? ioctl_has_perm+0x408/0x500 [ 48.137248][ C1] ? has_cap_mac_admin+0xd0/0xd0 [ 48.137270][ C1] ? __kasan_check_write+0x18/0x20 [ 48.137292][ C1] ? mutex_lock_killable+0x97/0x1d0 [ 48.137312][ C1] ? __cfi_mutex_lock_killable+0x10/0x10 [ 48.137333][ C1] kvm_vcpu_ioctl+0xa43/0x1000 [ 48.137352][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.137373][ C1] ? do_futex+0x32a/0x510 [ 48.137391][ C1] ? __cfi_do_futex+0x10/0x10 [ 48.137409][ C1] ? __fget_files+0x2bc/0x330 [ 48.137425][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.137443][ C1] ? security_file_ioctl+0x3e/0x110 [ 48.137465][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 48.137482][ C1] __se_sys_ioctl+0x126/0x1b0 [ 48.137502][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 48.137518][ C1] x64_sys_call+0x1878/0x2ee0 [ 48.137536][ C1] do_syscall_64+0x57/0xf0 [ 48.137550][ C1] ? clear_bhb_loop+0x50/0xa0 [ 48.137570][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.137589][ C1] RIP: 0033:0x7fc27079e2d9 [ 48.137603][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.137618][ C1] RSP: 002b:00007fc271669028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.137639][ C1] RAX: ffffffffffffffda RBX: 00007fc270a25fa0 RCX: 00007fc27079e2d9 [ 48.137652][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 48.137662][ C1] RBP: 00007fc270835888 R08: 0000000000000000 R09: 0000000000000000 [ 48.137680][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.137690][ C1] R13: 00007fc270a26038 R14: 00007fc270a25fa0 R15: 00007ffed29d7ff8 [ 48.137705][ C1] [ 48.137711][ C1] ---[ end trace ]--- [ 48.645164][ T36] audit: type=1400 audit(1791903201.660:289): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.667443][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.678403][ T65] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 48.687569][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.695641][ T65] usb 2-1: SerialNumber: syz [ 48.701275][ T65] usb 2-1: config 0 descriptor?? [ 48.710425][ T65] hub 2-1:0.0: bad descriptor, ignoring hub [ 48.716410][ T65] hub 2-1:0.0: probe with driver hub failed with error -5 [ 48.723884][ T65] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 48.731895][ T65] usb 2-1: Detected SIO [ 48.736729][ T65] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.752701][ T310] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.774975][ T310] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 48.806554][ T310] usb 1-1: USB disconnect, device number 13 [ 48.836949][ T10] rust_binder: 966: undelivered TRANSACTION_ERROR: 29201 [ 48.931795][ T977] capability: warning: `syz.1.143' uses deprecated v2 capabilities in a way that may be insecure [ 48.996541][ T65] usb 3-1: USB disconnect, device number 8 [ 49.002435][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 49.048892][ T10] usb 2-1: USB disconnect, device number 16 [ 49.057043][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.068078][ T10] ftdi_sio 2-1:0.0: device disconnected