last executing test programs: 3m55.900581581s ago: executing program 3 (id=85): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) setreuid(0x0, 0xee00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_flowlabel\x00') fchdir(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./cgroup\x00', 0x132) 3m54.078683127s ago: executing program 3 (id=90): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x4, 0x1, 0x40000333}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m52.111598249s ago: executing program 3 (id=95): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x202}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x9800, 0x0, 0x4}}, 0x2e) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r4 = memfd_create(&(0x7f0000000000)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\x00\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff(\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x00\x10\x00\x00N&\xf8#\x80z8Z\xd2}\xf5\xe4\x15\xb3r\x11g\xe7)\xaa\x91\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\r\xc2\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) fcntl$addseals(r4, 0x409, 0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r5, &(0x7f0000000700)="b068", 0x2) 3m51.685787863s ago: executing program 3 (id=96): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x402, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x7, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x10d) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0}]) 3m51.166535276s ago: executing program 3 (id=99): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4008800) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_usb_connect$uac3(0x3, 0x93, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1d, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000100)='./file0\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) 3m49.930367407s ago: executing program 3 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e00010069"], 0x11c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$usbfs(0x0, 0x9, 0x2480) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x24020014}, 0x24004000) 3m49.065563628s ago: executing program 32 (id=105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e00010069"], 0x11c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$usbfs(0x0, 0x9, 0x2480) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x24020014}, 0x24004000) 8.677587164s ago: executing program 1 (id=1155): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,us'], 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x490) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000ac0)={0x13, 0x10, 0xfa00, {&(0x7f0000000840)}}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) 8.149991216s ago: executing program 2 (id=1161): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x38, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 7.919804862s ago: executing program 2 (id=1163): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0) landlock_restrict_self(r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 7.810382017s ago: executing program 2 (id=1165): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7a3441, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000000, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8044) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xc7) r3 = socket$inet(0x2, 0x2, 0x0) r4 = add_key$user(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000002200)="7108e3c4f24d3a", 0x7, 0xfffffffffffffffe) keyctl$describe(0x6, r4, &(0x7f0000000240)=""/255, 0xff) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000740)={{[0x4, 0x8000, 0xa35, 0xcf74]}, 0x0, 0x1, 0x4, 0x0, &(0x7f00000005c0)=[{{@_ha_fsid={[0xa47, 0xfffffffc]}, {0x8, 0x1, 0xe, 0x6}}, 0x5, 0x0, '^/^^\x00'}, {{@_ha_fsid={[0x6, 0x5]}, {0xe, 0x7ff, 0x81, 0x9}}, 0x9, 0x0, '\x00'}, {{@align=0x5, {0x7, 0xd3b7}}, 0x7fff, 0x0, 'helper\x00'}, {{@align=0x2, {0x0, 0x91dc, 0x7f, 0x6}}, 0x1, 0x0, '^[\xee\x00'}, {{@_ha_fsid={[0x7fffffff, 0x3]}, {0xd5, 0x3082, 0x800, 0x8b9e}}, 0xf, 0x0, '\x00'}, {{@align=0x1, {0x8001, 0x3, 0x8000, 0xfffffffffffff801}}, 0x2, 0x0, ':&\x00'}, {{@_ha_fsid={[0x3, 0x101]}, {0x400, 0x1, 0x81, 0x8000}}, 0x2, 0x0, '-\x00'}, {{@_ha_fsid={[0x3, 0x5]}, {0x8c, 0x5, 0xb, 0xffffffff00000000}}, 0x81, 0x0, '\x00'}, {{@_ha_fsid={[0x4, 0x1]}, {0x1, 0x200, 0x1, 0x2b}}, 0x7f, 0x0, '/dev/net/tun\x00'}, {{@_ha_fsid={[0xbfc, 0x3ef]}, {0x1, 0xffff, 0x8, 0x9}}, 0x42, 0x0, '@]%\x00'}]}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100023f639010861a2d754d2d0102030209021b0001000000000904010001e911bd0009050ce33338b076d56add44"], 0x0) 7.447930235s ago: executing program 1 (id=1168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @broadcast}, {0x4e26, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b4038187fd0ea9a12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f"}}}}, 0x6a) 6.721721436s ago: executing program 0 (id=1169): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8000007, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x5, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x9}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.584278591s ago: executing program 1 (id=1171): syz_usb_connect(0x2, 0x2d, &(0x7f0000001740)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8, @ANYBLOB="f878d44ad9c97e87476aa4813347c62588d45856fe2d73ffd6bfbacac21ab051bdb3d6c7c32fe181632d8fd24034a760d6525afdfc805501ee7bae9c863b7e0bed860502671e99ae0c259734878af471c0a9a2a7b9ed27fe68f00312643c035ae953381ad9ad19b56e1e95b8bbc1b1f0cb83790a79392ac3562f18f4ffaea31780ac1e69a908ce376a0cd565610b56fab50b872c9a65081f0d695cb4ceb3103679f8fa9da687f94a88d951b5075aac407ff42a4b73fa9a5d58f2a8bd13d93b9ab7284e0477497024fecfe5b27e9dd1ca9a4cb85f8696e1fd4f7c23dd47dedf"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, 0x0) ioprio_get$pid(0x3, r1) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000240)=""/4082, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) gettid() r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) timer_create(0x2, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0a41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@tcp={{0xd, 0x4, 0x3, 0x4, 0x54, 0x65, 0x0, 0x8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x6, [{@rand_addr=0x64010102, 0x3}, {@multicast2, 0x91}, {@multicast1, 0xa}]}]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@mp_fclose={0x1e, 0xc, 0x7, 0x0, 0x2}]}}}}}, 0x62) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 6.36712409s ago: executing program 0 (id=1172): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0xd) r4 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r9, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41004}, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 6.231274285s ago: executing program 2 (id=1173): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x64, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="03", 0x1, r0) 6.230147049s ago: executing program 0 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect$uac2(0x0, 0xb8, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000300000040820516004000010203010902a60003017fc02c080b0102010020090904000000010120000924010200001c000207240c080695280c24030404030306000400060904010000010220000904010101010205000624020102040a2402010e026409fb0d10240104f802021000000709000000fc0a2402020300a40007050905010910"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x28, r10, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x28}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44451}, 0x8000) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) 6.066999205s ago: executing program 2 (id=1175): syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086307032040000102030109026f0003010890050904000000010100000a240108000a00020102090401000001020000090401010101020000072401020202f9072402012f0300230905010910008204000725010c99040009040200000102000009040201010102000009058209a0"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {0x0}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/60, 0x3c}, {0x0}], 0x2) syz_usb_connect$uac3(0x204469028748b361, 0x105, &(0x7f00000004c0)=ANY=[@ANYBLOB="12015002000000209c242c934000010203010902f30003010110bf080bd202012432030904000000010130000a24010b3e00060000001424020307050408030000000900b0090e00060009240c060478d90c60112409020100000000000000000100000006002005010230000a240202040000080505092402010951010a800624020103ce0a2402020700080002080624020100fc0a240202bc0401000c000905010910007f05030a2525a6b400000700000904020000010230000904020101010230000d240201010140015a9d06ca2c1124020200049100091a95518ddd55095a090582090002037b800a252502000000010700a374af8cfa1144c1308680c74fece9eafda63db9e1043217b3c9d845255e26a811d63f64699551a5d9f216d7bb5a51d3addf3a6cdcb0c7e33b97e1b6f3b2037ae9872cdcd0f4408a7269ce"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x100, 0x9, 0x6, 0x6, 0x10, 0x5}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x2}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2001}}, {0x1d, &(0x7f0000000280)=@string={0x1d, 0x3, "c764aba811b253db42154817623307d64362abe4285d9476e8bf7b"}}, {0x0, 0x0}, {0xb3, &(0x7f0000000340)=@string={0xb3, 0x3, "2d099c09da2ffccf78caa0c92b1b050a82134f90a891178ae0f372b5011fd4a2eb41b8786922445fd8bf047800fe080166eb4c87692861920064813fb9096a7454909f062ff5dca79f3bc3e70b1e512ca766692afcd4d671b6f27b8611a25aeae07bc3b5eb0979d85427a0b1defe5d22dc0f31ecbeb90d89f30864b3efffab68bbcab10936f7b550731e7c139d6c7971ad6a36c684959bf5599b1b0c263271fa0024faac99f34dde7c43340987f2bfd41f"}}]}) 5.204749502s ago: executing program 0 (id=1181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x300}], 0x2}, 0x20000085) 4.746493804s ago: executing program 4 (id=1182): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8000007, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x5, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x9}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.668418328s ago: executing program 1 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) r6 = openat$autofs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0x4) 4.323337243s ago: executing program 4 (id=1184): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x65, 0x37, 0x30, 0x30, 0x30, 0x39, 0x30, 0x66, 0x30, 0x30, 0x64, 0x30, 0x30, 0x65, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r0) add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x66, 0x38, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x30, 0x66, 0x30, 0x62, 0x32, 0x30, 0x34, 0x30, 0x30, 0x39, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x62, 0x35, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccdd2233445566778899c8bbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x38, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x66, 0x64]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x37, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "28ceb3e0791d62b8b62265e3c05d5c87b67e89baf42aa931804784f51d5b21c321f0b462bf6a5adcb2da779a473e0ea0db0dcf964c5b49e3f733a518c74d2d7a", 0x40}, 0x48, r0) 3.389798734s ago: executing program 4 (id=1186): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x39, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x65, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x63, 0x30, 0x30, 0x31, 0x30, 0x38, 0x1f, 0x61, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x36, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000880), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000380)="9b", 0x1, r0) 3.200227232s ago: executing program 4 (id=1187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x8, 0xa3, 0x1, @vifc_lcl_ifindex, @loopback}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x800}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b9700"], 0x0) 2.515731709s ago: executing program 5 (id=1188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002380)="c744240000000080c744240200000000c7442406000000000f011424b9a90900000f320f32c744240005000000c744240200000100c7442406000000000f01142448b802000000000000000f23d80f21f835400000a00f23f866b806018ec067430f01c248b800180000000000000f23d80f21f835800000100f23f82e0f1c440a0966b89a008ee0", 0x88}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.207024391s ago: executing program 5 (id=1189): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x98) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x800}}}}}}, 0x0) 2.092660265s ago: executing program 5 (id=1190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000300)={0x1, 0x8, 0xa3, 0x1, @vifc_lcl_ifindex, @loopback}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b9700"], 0x0) 902.032032ms ago: executing program 0 (id=1191): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x356e, &(0x7f0000000180)={0x0, 0x7be7, 0x40, 0x2, 0x1c}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 827.147727ms ago: executing program 1 (id=1192): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8000007, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x5, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x9}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 746.557387ms ago: executing program 5 (id=1193): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x61, 0x65, 0x30, 0x32, 0x37, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x65, 0x35, 0x33, 0x37]}, &(0x7f0000000100)={0x0, "0011223344557c778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40020}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @desc4}, &(0x7f0000000780)={0x0, "1b699af42db92c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c49522f82f6ffcdcf860c0cadb646c435e077ecbbae7968117a70a9a1090", 0x25}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x3f, 0x64, 0x30, 0x30, 0x30, 0x31, 0x30, 0x66, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000900)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011220011223344556677889c69bbccddeeff00", 0x22}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x34, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x63, 0x30, 0x62, 0x61, 0x66]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x65, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 695.74898ms ago: executing program 4 (id=1194): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xd}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8000007, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x5, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x9}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 599.347833ms ago: executing program 2 (id=1195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03006d0c"], 0x7) 378.631289ms ago: executing program 5 (id=1196): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000fcdbdf214400000008000300", @ANYRES32=r2, @ANYBLOB="1400238005000e0001000000060010ae05"], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, 0x0, 0x0) sendmsg$inet6(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$RTC_UIE_ON(r0, 0x7003) 269.502738ms ago: executing program 0 (id=1197): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00<'], 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x20, 0x63, 0x0}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000800), 0x20400, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001000), 0x4240, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) close(0x3) 266.320864ms ago: executing program 1 (id=1198): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x12, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 194.2477ms ago: executing program 4 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0xa8, 0x0, &(0x7f0000000140)=""/168, 0xaca1, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x88001}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x96, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbmon(0x0, 0x5, 0x801) pselect6(0x40, &(0x7f00000005c0)={0xc, 0xe, 0x80000000, 0x1, 0x6, 0x0, 0xfffffffffffffffb, 0xc8d1}, &(0x7f0000000640)={0x2, 0x8, 0x0, 0xfffffffffffffff2, 0x7, 0x2, 0x8, 0x72e}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214f, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000100)) 0s ago: executing program 5 (id=1200): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)='-.+{/\x00', &(0x7f0000000080)=')\x00', 0x57a}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_pidfd_open(r1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1, 0x1}}}}}]}}]}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') pidfd_send_signal(r2, 0x21, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x480, 0x0, 0x0) kernel console output (not intermixed with test programs): -1/3-1:179.65/input/input32 [ 269.622138][ T8873] block device autoloading is deprecated and will be removed. [ 269.645350][ T192] usb 3-1: USB disconnect, device number 38 [ 269.645448][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 269.645495][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 269.799296][ T5746] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 269.828677][ T4983] Dev loop5: unable to read RDB block 7 [ 269.828739][ T4983] loop5: unable to read partition table [ 269.828927][ T4983] loop5: partition table beyond EOD, truncated [ 270.549529][ T5746] gspca_se401: read req failed req 0x06 error -71 [ 270.549650][ T5746] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 270.569249][ T5746] usb 5-1: USB disconnect, device number 37 [ 271.166358][ T4983] Dev loop5: unable to read RDB block 7 [ 271.166419][ T4983] loop5: unable to read partition table [ 271.166595][ T4983] loop5: partition table beyond EOD, truncated [ 271.423681][ T5670] usb 1-1: USB disconnect, device number 40 [ 271.440920][ T5670] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 271.484300][ T8912] syzkaller0: entered promiscuous mode [ 271.484331][ T8912] syzkaller0: entered allmulticast mode [ 271.814900][ T4983] Dev loop5: unable to read RDB block 7 [ 271.814947][ T4983] loop5: unable to read partition table [ 271.815137][ T4983] loop5: partition table beyond EOD, truncated [ 272.185034][ T5746] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 272.349377][ T5746] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 272.352320][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.352346][ T5746] usb 6-1: Product: syz [ 272.352360][ T5746] usb 6-1: Manufacturer: syz [ 272.352372][ T5746] usb 6-1: SerialNumber: syz [ 272.486685][ T5663] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 272.629247][ T8919] tipc: Enabled bearer , priority 0 [ 272.633516][ T8919] syzkaller0: entered promiscuous mode [ 272.633537][ T8919] syzkaller0: entered allmulticast mode [ 272.639453][ T5663] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 272.650138][ T5663] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 272.650188][ T5663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.650206][ T5663] usb 1-1: config 0 has no interfaces? [ 272.650233][ T5663] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.686391][ T5663] usb 1-1: config 0 descriptor?? [ 272.837890][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.848929][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.892952][ T8919] tipc: Resetting bearer [ 272.956285][ T5746] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.969338][ T8918] tipc: Resetting bearer [ 273.109566][ T8918] tipc: Disabling bearer [ 273.123842][ T5663] usb 1-1: string descriptor 0 read error: -71 [ 273.144173][ T5663] usb 1-1: USB disconnect, device number 41 [ 273.178790][ T5746] usb 6-1: USB disconnect, device number 19 [ 273.237922][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.481630][ T8936] openvswitch: netlink: IP tunnel dst address not specified [ 273.501424][ T8936] sch_tbf: burst 15 is lower than device syzkaller0 mtu (1514) ! [ 273.518630][ T8936] netlink: 164 bytes leftover after parsing attributes in process `syz.2.870'. [ 273.553708][ T8944] syzkaller0: entered promiscuous mode [ 273.553752][ T8944] syzkaller0: entered allmulticast mode [ 273.792805][ T4983] Dev loop5: unable to read RDB block 7 [ 273.792862][ T4983] loop5: unable to read partition table [ 273.793085][ T4983] loop5: partition table beyond EOD, truncated [ 274.701999][ T8965] kvm [8964]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 274.957039][ T4983] Dev loop5: unable to read RDB block 7 [ 274.958688][ T4983] loop5: unable to read partition table [ 274.958909][ T4983] loop5: partition table beyond EOD, truncated [ 275.339646][ T4983] Dev loop5: unable to read RDB block 7 [ 275.339698][ T4983] loop5: unable to read partition table [ 275.339894][ T4983] loop5: partition table beyond EOD, truncated [ 275.505000][ T30] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 275.566617][ T4983] Dev loop5: unable to read RDB block 7 [ 275.572393][ T4983] loop5: unable to read partition table [ 275.578272][ T4983] loop5: partition table beyond EOD, truncated [ 275.658318][ T30] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.659359][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.659381][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.660304][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.660325][ T30] usb 5-1: SerialNumber: syz [ 275.918234][ T5663] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 275.924004][ T30] usb 5-1: 0:2 : does not exist [ 275.924103][ T30] usb 5-1: unit 10 not found! [ 275.998194][ T30] usb 5-1: USB disconnect, device number 38 [ 276.036665][ T6940] udevd[6940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.075105][ T5663] usb 6-1: Using ep0 maxpacket: 32 [ 276.075739][ T5663] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.076667][ T5663] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.076696][ T5663] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.076730][ T5663] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.087766][ T5663] usb 6-1: config 0 descriptor?? [ 276.230311][ T5670] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 276.398504][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.892'. [ 276.402819][ T8415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.403086][ T8415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.424587][ T5670] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 276.437057][ T5670] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.451158][ T5670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.459356][ T5670] usb 1-1: Product: syz [ 276.459377][ T5670] usb 1-1: Manufacturer: syz [ 276.459392][ T5670] usb 1-1: SerialNumber: syz [ 276.495239][ T5670] usb 1-1: config 0 descriptor?? [ 276.558023][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 276.582743][ T5670] mvusb_mdio 1-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 276.684071][ T9004] bridge3: port 1(veth3) entered blocking state [ 276.684213][ T9004] bridge3: port 1(veth3) entered disabled state [ 276.684378][ T9004] veth3: entered allmulticast mode [ 276.691324][ T9004] veth3: entered promiscuous mode [ 276.705347][ T9002] bridge3: port 2(veth0_to_bond) entered blocking state [ 276.705448][ T9002] bridge3: port 2(veth0_to_bond) entered disabled state [ 276.705584][ T9002] veth0_to_bond: entered allmulticast mode [ 276.707399][ T9002] veth0_to_bond: entered promiscuous mode [ 276.995126][ T30] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 277.140889][ T9021] netlink: 'syz.4.898': attribute type 1 has an invalid length. [ 277.156318][ T30] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 277.157397][ T30] usb 3-1: config 127 has an invalid interface number: 1 but max is 0 [ 277.157419][ T30] usb 3-1: config 127 has no interface number 0 [ 277.157458][ T30] usb 3-1: config 127 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 277.159401][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.159423][ T30] usb 3-1: Product: syz [ 277.159436][ T30] usb 3-1: Manufacturer: syz [ 277.159448][ T30] usb 3-1: SerialNumber: syz [ 277.178125][ T9009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.271428][ T9021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.307508][ T9023] macvlan2: entered promiscuous mode [ 277.307561][ T9023] macvlan2: entered allmulticast mode [ 277.307959][ T9023] bond4: entered allmulticast mode [ 277.308017][ T9023] bond4: entered promiscuous mode [ 277.337270][ T9023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.348319][ T9023] team0: Port device macvlan2 added [ 277.408553][ T9021] bond4: (slave ip6gretap1): making interface the new active one [ 277.408591][ T9021] ip6gretap1: entered promiscuous mode [ 277.408803][ T9021] ip6gretap1: entered allmulticast mode [ 277.451149][ T9021] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 277.599440][ T9009] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 277.664420][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 277.767459][ T9026] veth0_to_bond: left allmulticast mode [ 277.767496][ T9026] veth0_to_bond: left promiscuous mode [ 277.767752][ T9026] bridge3: port 2(veth0_to_bond) entered disabled state [ 277.800239][ T9009] vivid-004: disconnect [ 277.850796][ T9008] vivid-004: reconnect [ 277.854596][ T30] asix 3-1:127.1 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 277.855073][ T30] asix 3-1:127.1: probe with driver asix failed with error -71 [ 277.881164][ T30] usb 3-1: USB disconnect, device number 39 [ 278.102362][ T192] usb 1-1: USB disconnect, device number 42 [ 278.626358][ T192] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 278.784899][ T192] usb 5-1: Using ep0 maxpacket: 8 [ 278.791094][ T192] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 278.807020][ T192] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 278.818698][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.818737][ T192] usb 5-1: Product: syz [ 278.818760][ T192] usb 5-1: Manufacturer: syz [ 278.818777][ T192] usb 5-1: SerialNumber: syz [ 278.844741][ T192] usb 5-1: config 0 descriptor?? [ 278.857391][ T192] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 278.905820][ T5746] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 279.055966][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 279.059645][ T5746] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 279.060623][ T5746] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 279.060655][ T5746] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 279.060688][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.060713][ T5746] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.060735][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.060758][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.060781][ T5746] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 279.060804][ T5746] usb 3-1: config 168 interface 0 has no altsetting 0 [ 279.063753][ T5746] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 279.063783][ T5746] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 279.063816][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.063841][ T5746] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.063863][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.063885][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.063909][ T5746] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 279.063933][ T5746] usb 3-1: config 168 interface 0 has no altsetting 0 [ 279.066657][ T5746] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 279.066688][ T5746] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 279.066720][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 279.066745][ T5746] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.066767][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.066790][ T5746] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.066813][ T5746] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 279.066836][ T5746] usb 3-1: config 168 interface 0 has no altsetting 0 [ 279.083754][ T5746] usb 3-1: string descriptor 0 read error: -22 [ 279.083877][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.135798][ T5746] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 279.379675][ T30] usb 3-1: USB disconnect, device number 40 [ 279.430543][ T5746] usb 6-1: USB disconnect, device number 20 [ 279.492093][ T4983] Dev loop5: unable to read RDB block 7 [ 279.492153][ T4983] loop5: unable to read partition table [ 279.492332][ T4983] loop5: partition table beyond EOD, truncated [ 280.073401][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 280.116540][ T9056] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 280.116607][ T9056] block device autoloading is deprecated and will be removed. [ 281.047542][ T4983] Dev loop5: unable to read RDB block 7 [ 281.053280][ T4983] loop5: unable to read partition table [ 281.061515][ T4983] loop5: partition table beyond EOD, truncated [ 281.235256][ T5670] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 281.278459][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 281.308093][ T4983] Dev loop5: unable to read RDB block 7 [ 281.308146][ T4983] loop5: unable to read partition table [ 281.308653][ T4983] loop5: partition table beyond EOD, truncated [ 281.384913][ T5670] usb 3-1: Using ep0 maxpacket: 32 [ 281.391139][ T5670] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.403043][ T5670] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 281.411470][ T5670] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.411487][ T5670] usb 3-1: config 0 has no interfaces? [ 281.411515][ T5670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.438434][ T5670] usb 3-1: config 0 descriptor?? [ 281.478071][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 281.478114][ T31] audit: type=1804 audit(1788543694.312:515): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.918" name="/newroot/151/file1" dev="fuse" ino=1 res=1 errno=0 [ 281.590997][ T192] gspca_zc3xx: reg_r err -32 [ 281.681441][ T4983] Dev loop5: unable to read RDB block 7 [ 281.681497][ T4983] loop5: unable to read partition table [ 281.681680][ T4983] loop5: partition table beyond EOD, truncated [ 281.926612][ T30] usb 3-1: USB disconnect, device number 41 [ 282.008726][ T4983] Dev loop5: unable to read RDB block 7 [ 282.008797][ T4983] loop5: unable to read partition table [ 282.008976][ T4983] loop5: partition table beyond EOD, truncated [ 282.053286][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.921'. [ 282.187587][ T192] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 282.187690][ T192] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 282.340056][ T4983] Dev loop5: unable to read RDB block 7 [ 282.340119][ T4983] loop5: unable to read partition table [ 282.340295][ T4983] loop5: partition table beyond EOD, truncated [ 282.616612][ T192] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 282.675628][ T5746] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 282.775762][ T192] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 282.787617][ T192] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.799156][ T192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.824548][ T192] as10x_usb: device has been detected [ 282.826507][ T5746] usb 1-1: Using ep0 maxpacket: 16 [ 282.832444][ T5746] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.833082][ T5746] usb 1-1: config 0 has no interfaces? [ 282.839502][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.839527][ T5746] usb 1-1: Product: syz [ 282.839540][ T5746] usb 1-1: Manufacturer: syz [ 282.839553][ T5746] usb 1-1: SerialNumber: syz [ 282.851187][ T5746] usb 1-1: config 0 descriptor?? [ 282.877646][ T192] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 282.905087][ T192] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 282.925518][ T192] as10x_usb: error during firmware upload part1 [ 282.932631][ T192] Registered device Abilis Systems DVB-Titan [ 283.017203][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.017623][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.021100][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.021481][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.064232][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.064639][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.069661][ T9105] netlink: 'syz.0.925': attribute type 28 has an invalid length. [ 283.069682][ T9105] netlink: 'syz.0.925': attribute type 15 has an invalid length. [ 283.077146][ T5746] usb 1-1: USB disconnect, device number 43 [ 283.352192][ T192] usb 5-1: USB disconnect, device number 39 [ 283.392244][ T9111] create_pit_timer: 4 callbacks suppressed [ 283.399556][ T9111] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 283.410764][ T9111] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 283.419144][ T9111] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 283.430674][ T9111] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 283.439271][ T9111] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 283.448637][ T9111] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 283.457448][ T9111] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 283.465713][ T9111] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 283.466723][ T9111] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 283.490848][ T9111] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 283.687210][ T9122] usb usb8: usbfs: process 9122 (syz.4.929) did not claim interface 0 before use [ 283.854366][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 284.574983][ T5746] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 284.724956][ T5746] usb 1-1: Using ep0 maxpacket: 16 [ 284.725959][ T5746] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.727492][ T5746] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.727520][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.729357][ T5746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.729378][ T5746] usb 1-1: Product: syz [ 284.729390][ T5746] usb 1-1: Manufacturer: syz [ 284.729403][ T5746] usb 1-1: SerialNumber: syz [ 284.732842][ T5746] usb 1-1: config 0 descriptor?? [ 284.741962][ T5746] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 284.741993][ T5746] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 285.092036][ T31] audit: type=1326 audit(1788543697.922:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea39e159 code=0x7ffc0000 [ 285.107383][ T31] audit: type=1326 audit(1788543697.922:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea39e159 code=0x7ffc0000 [ 285.107427][ T31] audit: type=1326 audit(1788543697.922:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7eea35e98e code=0x7ffc0000 [ 285.107462][ T31] audit: type=1326 audit(1788543697.922:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eea39ddeb code=0x7ffc0000 [ 285.107517][ T31] audit: type=1326 audit(1788543697.922:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eea39ddeb code=0x7ffc0000 [ 285.107560][ T31] audit: type=1326 audit(1788543697.932:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eea39ddeb code=0x7ffc0000 [ 285.107595][ T31] audit: type=1326 audit(1788543697.932:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eea39ddeb code=0x7ffc0000 [ 285.121897][ T7168] usb 6-1: USB disconnect, device number 21 [ 285.171807][ T7168] Unregistered device Abilis Systems DVB-Titan [ 285.184351][ T7168] as10x_usb: device has been disconnected [ 285.207333][ T31] audit: type=1326 audit(1788543698.042:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eea39ddeb code=0x7ffc0000 [ 285.278220][ T31] audit: type=1326 audit(1788543698.112:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7eea39ddeb code=0x7ffc0000 [ 285.336108][ T30] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 285.394480][ T5746] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 285.398614][ T5746] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 285.485808][ T30] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 285.491583][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.491608][ T30] usb 3-1: Product: syz [ 285.491620][ T30] usb 3-1: Manufacturer: syz [ 285.491633][ T30] usb 3-1: SerialNumber: syz [ 285.494712][ T30] usb 3-1: config 0 descriptor?? [ 285.504588][ T30] hub 3-1:0.0: bad descriptor, ignoring hub [ 285.504612][ T30] hub 3-1:0.0: probe with driver hub failed with error -5 [ 285.685927][ T4983] Dev loop5: unable to read RDB block 7 [ 285.685986][ T4983] loop5: unable to read partition table [ 285.686158][ T4983] loop5: partition table beyond EOD, truncated [ 285.713694][ T30] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 285.725841][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.737287][ T30] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 285.746108][ T30] usb 3-1: media controller created [ 285.746330][ T9161] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 285.776690][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.786473][ T4983] Dev loop5: unable to read RDB block 7 [ 285.786539][ T4983] loop5: unable to read partition table [ 285.786723][ T4983] loop5: partition table beyond EOD, truncated [ 285.857521][ T30] DVB: Unable to find symbol dib7000p_attach() [ 285.863850][ T30] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 285.935837][ T30] rc_core: IR keymap rc-dib0700-rc5 not found [ 285.937766][ T30] Registered IR keymap rc-empty [ 285.938521][ T30] dvb-usb: could not initialize remote control. [ 285.938579][ T30] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 286.095040][ T4983] Dev loop5: unable to read RDB block 7 [ 286.095129][ T4983] loop5: unable to read partition table [ 286.095383][ T4983] loop5: partition table beyond EOD, truncated [ 286.210028][ T4983] Dev loop5: unable to read RDB block 7 [ 286.215859][ T4983] loop5: unable to read partition table [ 286.216111][ T4983] loop5: partition table beyond EOD, truncated [ 286.274647][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.946'. [ 286.356036][ T2349] pvrusb2: request_firmware fatal error with code=-110 [ 286.356068][ T2349] pvrusb2: Failure uploading firmware1 [ 286.356090][ T2349] pvrusb2: Device initialization was not successful. [ 286.356100][ T2349] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 286.356111][ T2349] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 286.358084][ T10] pvrusb2: Device being rendered inoperable [ 286.387958][ T9157] dib0700: could not acquire lock [ 286.414483][ T5746] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 286.422188][ T5746] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 286.430832][ T30] usb 3-1: USB disconnect, device number 42 [ 286.438550][ T5746] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 286.446811][ T5746] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 286.489114][ T31] kauditd_printk_skb: 121 callbacks suppressed [ 286.489173][ T31] audit: type=1326 audit(1788543699.322:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 286.489209][ T31] audit: type=1326 audit(1788543699.322:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 286.489240][ T31] audit: type=1326 audit(1788543699.322:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea39e159 code=0x7ffc0000 [ 286.502885][ T31] audit: type=1326 audit(1788543699.332:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 286.502941][ T31] audit: type=1326 audit(1788543699.332:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 286.502978][ T31] audit: type=1326 audit(1788543699.332:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eea39e159 code=0x7ffc0000 [ 286.518461][ T31] audit: type=1326 audit(1788543699.332:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 286.518513][ T31] audit: type=1326 audit(1788543699.332:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 286.518549][ T31] audit: type=1326 audit(1788543699.332:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 286.518585][ T31] audit: type=1326 audit(1788543699.332:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.2.941" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 286.625672][ T4983] Dev loop5: unable to read RDB block 7 [ 286.625717][ T4983] loop5: unable to read partition table [ 286.625923][ T4983] loop5: partition table beyond EOD, truncated [ 286.672097][ T30] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 286.727727][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 286.875046][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 286.878152][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 286.879196][ T10] usb 2-1: config 0 has no interfaces? [ 286.882858][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.882880][ T10] usb 2-1: Product: syz [ 286.882894][ T10] usb 2-1: Manufacturer: syz [ 286.882906][ T10] usb 2-1: SerialNumber: syz [ 286.890037][ T10] usb 2-1: config 0 descriptor?? [ 287.007061][ T9180] syzkaller0: entered promiscuous mode [ 287.012791][ T9180] syzkaller0: entered allmulticast mode [ 287.071785][ T5746] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 287.090951][ T5746] usb 1-1: USB disconnect, device number 44 [ 287.139483][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.141679][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.155303][ T9159] netlink: 'syz.1.942': attribute type 28 has an invalid length. [ 287.155322][ T9159] netlink: 'syz.1.942': attribute type 15 has an invalid length. [ 287.160311][ T10] usb 2-1: USB disconnect, device number 18 [ 287.405265][ T192] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 287.486400][ T4983] Dev loop5: unable to read RDB block 7 [ 287.486470][ T4983] loop5: unable to read partition table [ 287.486646][ T4983] loop5: partition table beyond EOD, truncated [ 287.510558][ T9187] netlink: 128 bytes leftover after parsing attributes in process `syz.4.952'. [ 287.510613][ T9187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.565095][ T192] usb 3-1: Using ep0 maxpacket: 16 [ 287.569175][ T192] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.569223][ T192] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 287.570447][ T192] usb 3-1: config 1 has an invalid interface number: 151 but max is 0 [ 287.570468][ T192] usb 3-1: config 1 has no interface number 0 [ 287.570494][ T192] usb 3-1: config 1 interface 151 has no altsetting 0 [ 287.574715][ T192] usb 3-1: string descriptor 0 read error: -22 [ 287.574912][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.600746][ T192] gspca_main: pac7311-2.14.0 probing 093a:260e [ 287.628250][ T4983] Dev loop5: unable to read RDB block 7 [ 287.628292][ T4983] loop5: unable to read partition table [ 287.628486][ T4983] loop5: partition table beyond EOD, truncated [ 287.789080][ T4983] Dev loop5: unable to read RDB block 7 [ 287.789142][ T4983] loop5: unable to read partition table [ 287.789372][ T4983] loop5: partition table beyond EOD, truncated [ 287.844496][ T9195] tipc: Failed to remove unknown binding: 66,0,0/0:2282208146/2282208148 [ 287.844545][ T9195] tipc: Failed to remove unknown binding: 66,0,0/0:2282208146/2282208147 [ 287.856288][ T9195] tipc: Failed to remove unknown binding: 66,0,0/0:2282208146/2282208148 [ 287.856319][ T9195] tipc: Failed to remove unknown binding: 66,0,0/0:2282208146/2282208147 [ 287.857001][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 287.926552][ T4983] Dev loop5: unable to read RDB block 7 [ 287.932256][ T4983] loop5: unable to read partition table [ 287.938233][ T4983] loop5: partition table beyond EOD, truncated [ 287.980642][ T9203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.022917][ T9196] syzkaller0: entered promiscuous mode [ 288.029934][ T9196] syzkaller0: entered allmulticast mode [ 288.043460][ T4983] Dev loop5: unable to read RDB block 7 [ 288.043522][ T4983] loop5: unable to read partition table [ 288.043751][ T4983] loop5: partition table beyond EOD, truncated [ 288.092264][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.950'. [ 288.105083][ T10] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 288.152903][ T192] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 288.153005][ T192] pac7311 3-1:1.151: probe with driver pac7311 failed with error -71 [ 288.161656][ T192] usb 3-1: USB disconnect, device number 43 [ 288.242745][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.962'. [ 288.275808][ T10] usb 1-1: New USB device found, idVendor=19d2, idProduct=1255, bcdDevice=3b.e9 [ 288.276926][ T10] usb 1-1: config 8 has an invalid interface number: 20 but max is 0 [ 288.276948][ T10] usb 1-1: config 8 has no interface number 0 [ 288.276984][ T10] usb 1-1: config 8 interface 20 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 288.277009][ T10] usb 1-1: config 8 interface 20 has no altsetting 0 [ 288.278843][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.278863][ T10] usb 1-1: Product: Я [ 288.278876][ T10] usb 1-1: Manufacturer: ࠒ [ 288.278888][ T10] usb 1-1: SerialNumber: 砬벂뫟ꡩ삍彡⥐琖暪穛薾敭⪦즵ᡧࡪொ [ 288.385179][ T5746] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 288.434977][ T30] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 288.468770][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.964'. [ 288.531213][ T10] option 1-1:8.20: GSM modem (1-port) converter detected [ 288.535217][ T5746] usb 6-1: Using ep0 maxpacket: 16 [ 288.535961][ T5746] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 288.538083][ T5746] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 288.538111][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.540716][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.540737][ T5746] usb 6-1: Product: syz [ 288.540750][ T5746] usb 6-1: Manufacturer: syz [ 288.540763][ T5746] usb 6-1: SerialNumber: syz [ 288.585038][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 288.588072][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.588118][ T30] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=a0.e0 [ 288.590919][ T30] usb 2-1: config 3 has an invalid interface number: 166 but max is 0 [ 288.590943][ T30] usb 2-1: config 3 has no interface number 0 [ 288.590967][ T30] usb 2-1: config 3 interface 166 has no altsetting 0 [ 288.592795][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.592816][ T30] usb 2-1: Product: syz [ 288.592829][ T30] usb 2-1: Manufacturer: syz [ 288.592841][ T30] usb 2-1: SerialNumber: syz [ 288.695242][ T10] usb 1-1: USB disconnect, device number 45 [ 288.699877][ T5746] usb 6-1: config 0 descriptor?? [ 288.719319][ T10] option 1-1:8.20: device disconnected [ 288.732251][ T5746] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.732336][ T5746] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 288.971336][ T30] usb 2-1: MBOX3: Invalid descriptor size=18. [ 288.978918][ T30] usb 2-1: USB disconnect, device number 19 [ 289.144322][ T9228] syzkaller0: entered promiscuous mode [ 289.144365][ T9228] syzkaller0: entered allmulticast mode [ 289.185045][ T9232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 289.319499][ T5746] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 289.320330][ T5746] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 289.493780][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 289.584113][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 289.599047][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 289.711656][ T9247] tipc: Enabled bearer , priority 0 [ 289.712610][ T9247] syzkaller0: entered promiscuous mode [ 289.712627][ T9247] syzkaller0: entered allmulticast mode [ 289.746767][ T9247] tipc: Resetting bearer [ 289.864937][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 289.865135][ T5670] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 290.020900][ T5670] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.030926][ T10] usb 2-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 290.031924][ T5670] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.031952][ T5670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.031999][ T5670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 290.032018][ T5670] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.032055][ T5670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.040308][ T5670] usb 1-1: config 0 descriptor?? [ 290.045265][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.045325][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.064753][ T10] cdc_phonet 2-1:1.0: probe with driver cdc_phonet failed with error -22 [ 290.246716][ T9250] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 290.281989][ T9245] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 290.281989][ T9245] program syz.0.975 not setting count and/or reply_len properly [ 290.294471][ T7158] usb 2-1: USB disconnect, device number 20 [ 290.340337][ T5746] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 290.348846][ T5746] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 290.357957][ T5746] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 290.371566][ T5746] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 290.382990][ T5746] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 290.404210][ T9246] tipc: Resetting bearer [ 290.438111][ T9246] tipc: Disabling bearer [ 290.459812][ T9253] syzkaller0: entered promiscuous mode [ 290.459841][ T9253] syzkaller0: entered allmulticast mode [ 290.536328][ T5670] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 290.539968][ T5670] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 290.540002][ T5670] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 290.540027][ T5670] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 290.540053][ T5670] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 290.581519][ T5670] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 290.682655][ T9258] syzkaller0: entered promiscuous mode [ 290.688458][ T9258] syzkaller0: entered allmulticast mode [ 290.698798][ T9258] simple: bas](0aޣ9oς>Q/ic_2 [ 290.797734][ T5746] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 290.807064][ T5746] usb 6-1: USB disconnect, device number 22 [ 290.819734][ T7158] usb 1-1: USB disconnect, device number 46 [ 290.866791][ T5670] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 291.026709][ T5670] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 291.037280][ T5670] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 291.037322][ T5670] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 291.037376][ T5670] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.037404][ T5670] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.037440][ T5670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.092655][ T5670] usb 3-1: config 0 descriptor?? [ 291.101350][ T9255] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.374018][ T4983] Dev loop5: unable to read RDB block 7 [ 291.374091][ T4983] loop5: unable to read partition table [ 291.374272][ T4983] loop5: partition table beyond EOD, truncated [ 291.425957][ T5746] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 291.476104][ T9275] __nla_validate_parse: 2 callbacks suppressed [ 291.476161][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 291.521599][ T5670] hid-multitouch 0003:0EEF:72C4.000C: item 0 1 0 9 parsing failed [ 291.534111][ T5670] hid-multitouch 0003:0EEF:72C4.000C: probe with driver hid-multitouch failed with error -22 [ 291.587749][ T5746] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.587823][ T5746] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 291.591076][ T5746] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.591099][ T5746] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.596865][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.596887][ T5746] usb 2-1: Product: syz [ 291.596900][ T5746] usb 2-1: Manufacturer: syz [ 291.596913][ T5746] usb 2-1: SerialNumber: syz [ 291.630460][ T5746] usb 2-1: 0:1 : does not exist [ 291.654626][ T4983] Dev loop5: unable to read RDB block 7 [ 291.654706][ T4983] loop5: unable to read partition table [ 291.660775][ T4983] loop5: partition table beyond EOD, truncated [ 291.879795][ T31] kauditd_printk_skb: 96 callbacks suppressed [ 291.880104][ T31] audit: type=1400 audit(1788543704.712:752): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: unit 0 not found! [ 292.034063][ T7168] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 292.085260][ T5746] usb 2-1: USB disconnect, device number 21 [ 292.096481][ T30] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 292.157002][ T6246] udevd[6246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.195936][ T7168] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.196914][ T7168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.196942][ T7168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.196963][ T7168] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.197008][ T7168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.199777][ T7168] usb 6-1: config 0 descriptor?? [ 292.254941][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 292.261119][ T30] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.262911][ T30] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 292.262964][ T30] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.263008][ T30] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.263031][ T30] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.263052][ T30] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.263089][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.365217][ T7158] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 292.382616][ T25] usb 3-1: USB disconnect, device number 44 [ 292.516964][ T7158] usb 5-1: Using ep0 maxpacket: 16 [ 292.523257][ T7158] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 292.534697][ T7158] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 292.544576][ T7158] usb 5-1: config 0 has no interface number 0 [ 292.544623][ T7158] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 292.544648][ T7158] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 292.618951][ T7158] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 292.628261][ T7158] usb 5-1: Product: syz [ 292.633473][ T7158] usb 5-1: Manufacturer: syz [ 292.633523][ T7158] usb 5-1: SerialNumber: syz [ 292.647092][ T7158] usb 5-1: config 0 descriptor?? [ 292.660154][ T7158] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 292.668308][ T7158] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 292.688217][ T7158] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 292.700271][ T7158] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 292.702881][ T7168] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 292.735246][ T7158] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 292.754098][ T7158] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 292.772351][ T7158] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 292.783551][ T7158] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 292.795873][ T7158] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 292.808836][ T7158] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 292.953548][ T9286] netlink: 64 bytes leftover after parsing attributes in process `syz.0.990'. [ 293.147824][ T30] usb 1-1: usb_control_msg returned -71 [ 293.147887][ T30] usbtmc 1-1:16.0: can't read capabilities [ 293.194376][ T30] usb 1-1: USB disconnect, device number 47 [ 294.011269][ T30] usb 5-1: USB disconnect, device number 40 [ 294.033464][ T30] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 294.066826][ T30] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 294.081591][ T30] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 294.097406][ T30] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 294.098126][ T30] keyspan 5-1:0.107: device disconnected [ 294.384930][ T192] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 294.385089][ T25] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 294.536128][ T25] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 294.540764][ T25] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 294.540791][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.540808][ T25] usb 1-1: config 0 has no interfaces? [ 294.540844][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.547857][ T25] usb 1-1: config 0 descriptor?? [ 294.587602][ T192] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 294.599740][ T192] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.599785][ T192] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.599822][ T192] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 294.599862][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.664961][ T9311] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 294.779385][ T4983] Dev loop5: unable to read RDB block 7 [ 294.785546][ T4983] loop5: unable to read partition table [ 294.791747][ T4983] loop5: partition table beyond EOD, truncated [ 294.833452][ T25] usb 1-1: string descriptor 0 read error: -71 [ 294.840698][ T7158] usb 6-1: USB disconnect, device number 23 [ 294.841230][ T25] usb 1-1: USB disconnect, device number 48 [ 294.913719][ T9320] netlink: 292 bytes leftover after parsing attributes in process `syz.5.999'. [ 294.913823][ T9320] tunl0: Caught tx_queue_len zero misconfig [ 295.117313][ T9311] capability: warning: `syz.1.996' uses deprecated v2 capabilities in a way that may be insecure [ 295.149930][ T9326] create_pit_timer: 28 callbacks suppressed [ 295.150219][ T9326] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 295.150364][ T9326] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 295.150474][ T9326] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 295.152745][ T9326] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 295.152898][ T9326] kvm: requested 191085 ns i8254 timer period limited to 200000 ns [ 295.153166][ T9326] kvm: requested 23466 ns i8254 timer period limited to 200000 ns [ 295.153372][ T9326] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 295.153604][ T9326] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 295.153745][ T9326] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 295.153900][ T9326] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 295.303353][ T9330] syzkaller0: entered promiscuous mode [ 295.303392][ T9330] syzkaller0: entered allmulticast mode [ 295.318205][ T9330] tipc: Enabled bearer , priority 0 [ 295.336406][ T9329] tipc: Resetting bearer [ 295.405857][ T9329] tipc: Disabling bearer [ 295.432593][ T9332] syzkaller0: entered promiscuous mode [ 295.438264][ T9332] syzkaller0: entered allmulticast mode [ 295.794417][ T9342] netlink: 'syz.2.1007': attribute type 4 has an invalid length. [ 295.846556][ T4983] Dev loop5: unable to read RDB block 7 [ 295.853029][ T4983] loop5: unable to read partition table [ 295.860771][ T4983] loop5: partition table beyond EOD, truncated [ 295.875862][ T7168] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 295.977915][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 296.007297][ T9349] syz_tun: entered allmulticast mode [ 296.034977][ T7168] usb 5-1: Using ep0 maxpacket: 16 [ 296.035710][ T7168] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 296.036212][ T7168] usb 5-1: config 0 has no interfaces? [ 296.038037][ T7168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.038059][ T7168] usb 5-1: Product: syz [ 296.038072][ T7168] usb 5-1: Manufacturer: syz [ 296.038085][ T7168] usb 5-1: SerialNumber: syz [ 296.042050][ T7168] usb 5-1: config 0 descriptor?? [ 296.154944][ T7158] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 296.244930][ T5670] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 296.251280][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.251907][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.255250][ T9338] netlink: 'syz.4.1006': attribute type 28 has an invalid length. [ 296.255267][ T9338] netlink: 'syz.4.1006': attribute type 15 has an invalid length. [ 296.257846][ T7168] usb 5-1: USB disconnect, device number 41 [ 296.306622][ T7158] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.319656][ T7158] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.319707][ T7158] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.340506][ T7158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.340544][ T7158] usb 6-1: SerialNumber: syz [ 296.455113][ T5670] usb 3-1: Using ep0 maxpacket: 8 [ 296.457421][ T5670] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 296.459093][ T5670] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 296.459115][ T5670] usb 3-1: config 0 has no interface number 0 [ 296.462099][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.462119][ T5670] usb 3-1: Product: syz [ 296.462132][ T5670] usb 3-1: Manufacturer: syz [ 296.462146][ T5670] usb 3-1: SerialNumber: syz [ 296.471404][ T5670] usb 3-1: config 0 descriptor?? [ 296.569960][ T7158] usb 6-1: 0:2 : does not exist [ 296.570073][ T7158] usb 6-1: unit 10 not found! [ 296.601238][ T7158] usb 6-1: USB disconnect, device number 24 [ 296.627235][ T6940] udevd[6940]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.910644][ T192] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 296.916173][ T192] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input34 [ 296.962290][ T192] usb 2-1: USB disconnect, device number 22 [ 296.962387][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 297.126725][ T4983] Dev loop5: unable to read RDB block 7 [ 297.126798][ T4983] loop5: unable to read partition table [ 297.127004][ T4983] loop5: partition table beyond EOD, truncated [ 297.426759][ T4983] Dev loop5: unable to read RDB block 7 [ 297.426842][ T4983] loop5: unable to read partition table [ 297.427062][ T4983] loop5: partition table beyond EOD, truncated [ 297.726801][ T25] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 297.887092][ T25] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 297.897926][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.900646][ T25] usb 6-1: config 0 descriptor?? [ 297.911545][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 298.004988][ T192] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 298.007259][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 298.094939][ T7168] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 298.125418][ T25] gp8psk: usb in 128 operation failed. [ 298.128830][ T25] gp8psk: usb in 137 operation failed. [ 298.128848][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.130048][ T25] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 298.130095][ T25] usb 6-1: media controller created [ 298.149577][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.175571][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 298.177906][ T25] gp8psk_fe: Frontend attached [ 298.177953][ T25] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 298.178447][ T25] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 298.182917][ T192] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 298.188950][ T192] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 298.189046][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.189093][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.189112][ T192] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 298.197887][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 298.197931][ T10] usb 5-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 298.230045][ T192] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 298.230072][ T192] usb 2-1: Manufacturer: syz [ 298.244357][ T25] gp8psk: usb in 138 operation failed. [ 298.244373][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 298.244384][ T25] gp8psk: found Genpix USB device pID = 203 (hex) [ 298.250947][ T25] usb 6-1: USB disconnect, device number 25 [ 298.276780][ T7168] usb 1-1: Using ep0 maxpacket: 32 [ 298.283560][ T7168] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.283605][ T7168] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 298.284568][ T7168] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 298.284590][ T7168] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 298.284607][ T7168] usb 1-1: config 14 has no interface number 0 [ 298.284621][ T7168] usb 1-1: config 14 has no interface number 1 [ 298.284677][ T7168] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 298.284699][ T7168] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 298.284720][ T7168] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 298.284742][ T7168] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 298.284766][ T7168] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 298.284788][ T7168] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.286685][ T7168] usb 1-1: config 14 interface 57 has no altsetting 0 [ 298.286706][ T7168] usb 1-1: config 14 interface 228 has no altsetting 0 [ 298.292251][ T7168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.292274][ T7168] usb 1-1: Product: syz [ 298.292286][ T7168] usb 1-1: Manufacturer: syz [ 298.292299][ T7168] usb 1-1: SerialNumber: syz [ 298.352634][ T10] usb 5-1: config 2 has an invalid interface number: 99 but max is 0 [ 298.352661][ T10] usb 5-1: config 2 has no interface number 0 [ 298.352698][ T10] usb 5-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 298.352723][ T10] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 298.352744][ T10] usb 5-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 298.352788][ T10] usb 5-1: config 2 interface 99 has no altsetting 0 [ 298.423020][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 298.468549][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.468601][ T10] usb 5-1: Product: syz [ 298.468614][ T10] usb 5-1: Manufacturer: syz [ 298.468629][ T10] usb 5-1: SerialNumber: syz [ 298.488247][ T192] usb 2-1: config 0 descriptor?? [ 298.706676][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.99/input/input35 [ 298.740048][ T7168] legousbtower 1-1:14.57: interrupt endpoints not found [ 298.799481][ T4983] Dev loop5: unable to read RDB block 7 [ 298.807308][ T4983] loop5: unable to read partition table [ 298.807510][ T4983] loop5: partition table beyond EOD, truncated [ 298.914356][ T192] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 298.947682][ T25] usb 5-1: USB disconnect, device number 42 [ 298.981831][ T192] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 299.015308][ T5670] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 299.027853][ T5670] usb 3-1: USB disconnect, device number 45 [ 299.044219][ T9346] syz_tun: left allmulticast mode [ 299.171269][ T7168] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 299.186273][ T7168] legousbtower 1-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 299.291693][ T9387] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1016'. [ 299.515136][ T5670] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 299.679238][ T5670] usb 3-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 299.685307][ T5670] usb 3-1: config 0 interface 0 has no altsetting 0 [ 299.685345][ T5670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.689792][ T5670] usb 3-1: config 0 descriptor?? [ 299.989517][ T4983] Dev loop5: unable to read RDB block 7 [ 299.997496][ T4983] loop5: unable to read partition table [ 300.003463][ T4983] loop5: partition table beyond EOD, truncated [ 300.109024][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1021'. [ 300.128076][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128135][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128463][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128490][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128515][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128540][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128565][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128589][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.128613][ T5670] topre 0003:0853:0146.000F: unknown main item tag 0x0 [ 300.135120][ T5670] topre 0003:0853:0146.000F: collection stack underflow [ 300.135148][ T5670] topre 0003:0853:0146.000F: item 0 0 0 12 parsing failed [ 300.139891][ T5670] topre 0003:0853:0146.000F: probe with driver topre failed with error -22 [ 300.230481][ T25] usb 1-1: USB disconnect, device number 49 [ 300.290508][ T25] legousbtower 1-1:14.228: LEGO USB Tower #-159 now disconnected [ 300.347994][ T7168] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 300.485337][ T7168] usb 2-1: device descriptor read/64, error -32 [ 300.614961][ T5670] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 300.647484][ T4983] Dev loop5: unable to read RDB block 7 [ 300.647544][ T4983] loop5: unable to read partition table [ 300.647732][ T4983] loop5: partition table beyond EOD, truncated [ 300.694038][ T9425] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 300.764923][ T25] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 300.764929][ T5670] usb 5-1: Using ep0 maxpacket: 16 [ 300.765769][ T5670] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.766264][ T5670] usb 5-1: config 0 has no interfaces? [ 300.770189][ T5670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.770212][ T5670] usb 5-1: Product: syz [ 300.770225][ T5670] usb 5-1: Manufacturer: syz [ 300.770237][ T5670] usb 5-1: SerialNumber: syz [ 300.774435][ T5670] usb 5-1: config 0 descriptor?? [ 300.975595][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.983634][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.987938][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.992670][ T9416] netlink: 'syz.4.1023': attribute type 28 has an invalid length. [ 300.992687][ T9416] netlink: 'syz.4.1023': attribute type 15 has an invalid length. [ 301.004650][ T192] usb 5-1: USB disconnect, device number 43 [ 301.028442][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.028482][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.050471][ T4983] Dev loop5: unable to read RDB block 7 [ 301.056295][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.056325][ T25] usb 1-1: SerialNumber: syz [ 301.070709][ T4983] loop5: unable to read partition table [ 301.070946][ T4983] loop5: partition table beyond EOD, truncated [ 301.315589][ T5670] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 301.330154][ T25] usb 1-1: 0:2 : does not exist [ 301.335470][ T25] usb 1-1: unit 10 not found! [ 301.381281][ T9432] kvm [9431]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffe100000000 [ 301.381776][ T9432] kvm [9431]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xfff600000000 [ 301.386988][ T9432] kvm [9431]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffffff9400000000 [ 301.387061][ T9432] kvm [9431]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 301.390618][ T9432] kvm [9431]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffa000000000 [ 301.390687][ T9432] kvm [9431]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 301.398401][ T9432] kvm [9431]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffff7300000000 [ 301.399259][ T9432] kvm [9431]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffeb00000000 [ 301.401293][ T9432] kvm [9431]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfffd00000000 [ 301.401362][ T9432] kvm [9431]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 301.468028][ T5670] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 301.469754][ T5670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.495960][ T5670] usb 6-1: config 0 descriptor?? [ 301.498440][ T5670] cp210x 6-1:0.0: cp210x converter detected [ 301.524201][ T30] usb 2-1: USB disconnect, device number 23 [ 301.541126][ T25] usb 1-1: USB disconnect, device number 50 [ 301.747936][ T7160] usb 3-1: USB disconnect, device number 46 [ 301.783482][ T6940] udevd[6940]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.015375][ T31] audit: type=1326 audit(1788543714.842:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.5.1026" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dd7f9e159 code=0x0 [ 302.218021][ T5670] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 302.218081][ T5670] cp210x 6-1:0.0: querying part number failed [ 302.259231][ T5670] usb 6-1: cp210x converter now attached to ttyUSB0 [ 302.857351][ T9453] TC_ACT_REPEAT abuse ? [ 303.090608][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'. [ 303.714067][ T5670] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 303.874969][ T5670] usb 3-1: Using ep0 maxpacket: 16 [ 303.875808][ T5670] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.876395][ T5670] usb 3-1: config 0 has no interfaces? [ 303.878484][ T5670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.878506][ T5670] usb 3-1: Product: syz [ 303.878519][ T5670] usb 3-1: Manufacturer: syz [ 303.878532][ T5670] usb 3-1: SerialNumber: syz [ 303.883839][ T5670] usb 3-1: config 0 descriptor?? [ 304.000908][ T9487] batman_adv: batadv0: Adding interface: dummy0 [ 304.000947][ T9487] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.000974][ T9487] batman_adv: batadv0: Interface activated: dummy0 [ 304.037003][ T9487] batadv0: mtu less than device minimum [ 304.039874][ T9487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.041232][ T9487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.042576][ T9487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.045364][ T9487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.046751][ T9487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.048099][ T9487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.049463][ T9487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 304.091408][ T30] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 304.106683][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.107099][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.116329][ T9473] netlink: 'syz.2.1038': attribute type 28 has an invalid length. [ 304.116348][ T9473] netlink: 'syz.2.1038': attribute type 15 has an invalid length. [ 304.122236][ T7160] usb 3-1: USB disconnect, device number 47 [ 304.202448][ T5670] usb 6-1: USB disconnect, device number 26 [ 304.207436][ T5670] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.207905][ T5670] cp210x 6-1:0.0: device disconnected [ 304.266242][ T30] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.279514][ T4983] Dev loop5: unable to read RDB block 7 [ 304.279569][ T4983] loop5: unable to read partition table [ 304.279769][ T4983] loop5: partition table beyond EOD, truncated [ 304.297925][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.297950][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.317367][ T25] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 304.330335][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.330376][ T30] usb 5-1: SerialNumber: syz [ 304.457068][ T9495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.497095][ T25] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 304.511271][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.511325][ T25] usb 2-1: Product: syz [ 304.511343][ T25] usb 2-1: Manufacturer: syz [ 304.511360][ T25] usb 2-1: SerialNumber: syz [ 304.521389][ T25] usb 2-1: config 0 descriptor?? [ 304.526219][ T25] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 304.567492][ T30] usb 5-1: 0:2 : does not exist [ 304.567631][ T30] usb 5-1: unit 10 not found! [ 304.623247][ T30] usb 5-1: USB disconnect, device number 44 [ 304.727745][ T4983] Dev loop5: unable to read RDB block 7 [ 304.727803][ T4983] loop5: unable to read partition table [ 304.728043][ T4983] loop5: partition table beyond EOD, truncated [ 304.766283][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.774360][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 304.780328][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.795752][ T9503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1049'. [ 304.815198][ T6940] udevd[6940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.029525][ T25] gspca_sunplus: reg_r err -110 [ 305.085099][ T7168] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 305.197622][ T5670] hsr0: entered promiscuous mode [ 305.203320][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 305.245236][ T7168] usb 3-1: Using ep0 maxpacket: 16 [ 305.250814][ T7168] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 305.263885][ T7168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.263925][ T7168] usb 3-1: Product: syz [ 305.263953][ T7168] usb 3-1: Manufacturer: syz [ 305.263970][ T7168] usb 3-1: SerialNumber: syz [ 305.291916][ T7168] usb 3-1: config 0 descriptor?? [ 305.311458][ T7168] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 305.386631][ T4983] Dev loop5: unable to read RDB block 7 [ 305.387150][ T4983] loop5: unable to read partition table [ 305.387343][ T4983] loop5: partition table beyond EOD, truncated [ 305.509535][ T7168] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 305.509717][ T7168] visor 3-1:0.0: probe with driver visor failed with error -5 [ 305.656139][ T25] usb 2-1: USB disconnect, device number 24 [ 305.861360][ T5670] usb 3-1: USB disconnect, device number 48 [ 305.908655][ T9527] syzkaller0: entered promiscuous mode [ 305.914242][ T9527] syzkaller0: entered allmulticast mode [ 305.937251][ T9527] tipc: Enabled bearer , priority 0 [ 305.961670][ T9527] tipc: Resetting bearer [ 305.967764][ T9526] tipc: Resetting bearer [ 305.995843][ T9526] tipc: Disabling bearer [ 306.102005][ T4983] Dev loop5: unable to read RDB block 7 [ 306.102054][ T4983] loop5: unable to read partition table [ 306.102697][ T4983] loop5: partition table beyond EOD, truncated [ 306.325773][ T9541] syzkaller0: entered promiscuous mode [ 306.325816][ T9541] syzkaller0: entered allmulticast mode [ 306.333861][ T9541] tipc: Enabled bearer , priority 0 [ 306.339144][ T192] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 306.363919][ T9541] tipc: Resetting bearer [ 306.369927][ T9540] tipc: Resetting bearer [ 306.392866][ T9540] tipc: Disabling bearer [ 306.406252][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 306.485154][ T192] usb 1-1: Using ep0 maxpacket: 32 [ 306.485872][ T192] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 306.486887][ T192] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 306.486924][ T192] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 306.486949][ T192] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.486978][ T192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.492469][ T192] usb 1-1: config 0 descriptor?? [ 306.557786][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 306.560726][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 306.561438][ T10] usb 6-1: config 0 has no interfaces? [ 306.567337][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.567360][ T10] usb 6-1: Product: syz [ 306.567373][ T10] usb 6-1: Manufacturer: syz [ 306.567386][ T10] usb 6-1: SerialNumber: syz [ 306.583728][ T10] usb 6-1: config 0 descriptor?? [ 306.791218][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.791721][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.793622][ T9535] netlink: 'syz.5.1059': attribute type 28 has an invalid length. [ 306.793639][ T9535] netlink: 'syz.5.1059': attribute type 15 has an invalid length. [ 306.796900][ T10] usb 6-1: USB disconnect, device number 27 [ 306.885079][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 306.907680][ T192] wacom 0003:056A:00C5.0010: ignoring exceeding usage max [ 306.909740][ T192] hid_parser_main: 165 callbacks suppressed [ 306.909760][ T192] wacom 0003:056A:00C5.0010: unknown main item tag 0x6 [ 306.909837][ T192] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 306.909870][ T192] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 306.909896][ T192] wacom 0003:056A:00C5.0010: unknown main item tag 0x0 [ 306.924662][ T192] wacom 0003:056A:00C5.0010: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0 [ 306.963643][ T5746] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 306.976900][ T9556] create_pit_timer: 18 callbacks suppressed [ 306.977126][ T9556] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 306.977290][ T9556] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 306.985789][ T9556] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 307.045878][ T25] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 307.057220][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.067631][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.083239][ T25] usb 2-1: config 0 descriptor?? [ 307.096353][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 307.119559][ T5746] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.131740][ T5746] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.131801][ T5746] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.155027][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.155087][ T5746] usb 3-1: SerialNumber: syz [ 307.193011][ T9533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.205132][ T10] usb 1-1: USB disconnect, device number 51 [ 307.342425][ T4983] Dev loop5: unable to read RDB block 7 [ 307.342494][ T4983] loop5: unable to read partition table [ 307.342677][ T4983] loop5: partition table beyond EOD, truncated [ 307.411038][ T5746] usb 3-1: 0:2 : does not exist [ 307.411163][ T5746] usb 3-1: unit 10 not found! [ 307.462730][ T5746] usb 3-1: USB disconnect, device number 49 [ 307.500899][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 307.506200][ T6940] udevd[6940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.526962][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 307.534023][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 307.541206][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 307.549849][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 307.553409][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 307.554101][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 307.555364][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 307.555934][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 307.556746][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 307.577292][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 307.597187][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 307.607621][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 307.614648][ T25] pwc: recv_control_msg error -32 req 02 val 2800 [ 307.623955][ T25] pwc: recv_control_msg error -32 req 04 val 1100 [ 307.643463][ T25] pwc: Registered as video103. [ 307.654293][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input39 [ 307.665338][ T192] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 307.693624][ T9567] sctp: [Deprecated]: syz.4.1070 (pid 9567) Use of int in max_burst socket option deprecated. [ 307.693624][ T9567] Use struct sctp_assoc_value instead [ 307.825787][ T192] usb 6-1: Using ep0 maxpacket: 16 [ 307.828017][ T192] usb 6-1: unable to get BOS descriptor or descriptor too short [ 307.828063][ T192] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 307.829113][ T192] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 307.829135][ T192] usb 6-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 307.829152][ T192] usb 6-1: config 13 has no interface number 0 [ 307.829187][ T192] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 307.829209][ T192] usb 6-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.829232][ T192] usb 6-1: config 13 interface 50 has no altsetting 0 [ 307.832575][ T192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.832597][ T192] usb 6-1: Product: syz [ 307.832610][ T192] usb 6-1: Manufacturer: syz [ 307.832623][ T192] usb 6-1: SerialNumber: syz [ 307.842904][ T9564] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 307.865325][ T10] usb 2-1: USB disconnect, device number 25 [ 308.053179][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 308.188448][ T192] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.188521][ T192] usb 6-1: MIDIStreaming interface descriptor not found [ 308.232581][ T31] audit: type=1326 audit(1788543721.062:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 308.232922][ T31] audit: type=1326 audit(1788543721.062:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 308.233160][ T31] audit: type=1326 audit(1788543721.062:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 308.236870][ T31] audit: type=1326 audit(1788543721.072:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 308.236914][ T31] audit: type=1326 audit(1788543721.072:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 308.238045][ T31] audit: type=1326 audit(1788543721.072:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 308.238389][ T31] audit: type=1326 audit(1788543721.072:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 308.239260][ T31] audit: type=1326 audit(1788543721.072:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 308.241934][ T31] audit: type=1326 audit(1788543721.072:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7eea397ed7 code=0x7ffc0000 [ 308.241975][ T31] audit: type=1326 audit(1788543721.072:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9577 comm="syz.2.1073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7eea33f4d9 code=0x7ffc0000 [ 308.373340][ T192] usb 6-1: USB disconnect, device number 28 [ 308.566615][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.791912][ T4983] Dev loop5: unable to read RDB block 7 [ 308.791971][ T4983] loop5: unable to read partition table [ 308.794744][ T4983] loop5: partition table beyond EOD, truncated [ 308.874913][ T5746] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 308.945606][ T7168] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 308.955667][ T9594] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 308.964040][ T9594] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 308.965889][ T9594] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 309.025624][ T5746] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 309.036464][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 309.047568][ T5746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.047594][ T5746] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.047638][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.082448][ T5746] usb 1-1: config 0 descriptor?? [ 309.105691][ T7168] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91 [ 309.117589][ T7168] usb 2-1: config 0 has an invalid interface number: 252 but max is 0 [ 309.117630][ T7168] usb 2-1: config 0 has no interface number 0 [ 309.117673][ T7168] usb 2-1: config 0 interface 252 has no altsetting 0 [ 309.146386][ T7168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.146423][ T7168] usb 2-1: Product: syz [ 309.146456][ T7168] usb 2-1: Manufacturer: syz [ 309.146499][ T7168] usb 2-1: SerialNumber: syz [ 309.155059][ T192] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 309.182900][ T7168] usb 2-1: config 0 descriptor?? [ 309.305778][ T192] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 309.306932][ T192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 309.306959][ T192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 309.306980][ T192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 309.309860][ T192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.309882][ T192] usb 6-1: Product: syz [ 309.309895][ T192] usb 6-1: Manufacturer: syz [ 309.309908][ T192] usb 6-1: SerialNumber: syz [ 309.318480][ T192] usb 6-1: config 0 descriptor?? [ 309.384919][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 309.536154][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 309.538157][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.538796][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 309.539279][ T10] usb 3-1: config 0 has no interfaces? [ 309.543506][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.543528][ T10] usb 3-1: Product: syz [ 309.543541][ T10] usb 3-1: Manufacturer: syz [ 309.543554][ T10] usb 3-1: SerialNumber: syz [ 309.545198][ T192] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 309.566091][ T10] usb 3-1: config 0 descriptor?? [ 309.598184][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.600583][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.636222][ T5746] acrux 0003:1A34:0802.0011: unknown main item tag 0x6 [ 309.643478][ T5746] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 309.651490][ T5746] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 309.658990][ T5746] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 309.666099][ T5746] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 309.673289][ T5746] acrux 0003:1A34:0802.0011: unknown main item tag 0x0 [ 309.673484][ T5746] acrux 0003:1A34:0802.0011: item fetching failed at offset 37/41 [ 309.689832][ T5746] acrux 0003:1A34:0802.0011: parse failed [ 309.696479][ T5746] acrux 0003:1A34:0802.0011: probe with driver acrux failed with error -22 [ 309.747012][ T5746] usb 6-1: USB disconnect, device number 29 [ 309.787372][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.787867][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.793014][ T9602] netlink: 'syz.2.1079': attribute type 28 has an invalid length. [ 309.793034][ T9602] netlink: 'syz.2.1079': attribute type 15 has an invalid length. [ 309.814524][ T10] usb 3-1: USB disconnect, device number 50 [ 310.052928][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 310.371927][ T9613] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 310.557223][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.569510][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.568498][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 311.852408][ T7168] usb 2-1: USB disconnect, device number 26 [ 311.865141][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 311.924166][ T4983] Dev loop5: unable to read RDB block 7 [ 311.924232][ T4983] loop5: unable to read partition table [ 311.924410][ T4983] loop5: partition table beyond EOD, truncated [ 312.016120][ T25] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 312.017295][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 312.017334][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 312.017357][ T25] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 312.017379][ T25] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 312.017413][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.027108][ T9628] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 312.145258][ T9635] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 312.153533][ T9635] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 312.164569][ T9635] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 312.283482][ T4983] Dev loop5: unable to read RDB block 7 [ 312.283544][ T4983] loop5: unable to read partition table [ 312.284061][ T4983] loop5: partition table beyond EOD, truncated [ 312.287022][ T7168] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 312.435022][ T7168] usb 2-1: Using ep0 maxpacket: 8 [ 312.540025][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 312.656471][ T25] ims_pcu 3-1:1.0: GET_INFO command failed, error: -71 [ 312.657353][ T25] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -71 [ 312.680416][ T4983] Dev loop5: unable to read RDB block 7 [ 312.688793][ T4983] loop5: unable to read partition table [ 312.688850][ T7168] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.688895][ T7168] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 312.689029][ T4983] loop5: partition table beyond EOD, truncated [ 312.689996][ T7168] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 312.690026][ T7168] usb 2-1: can't read configurations, error -71 [ 312.881679][ T5746] usb 3-1: USB disconnect, device number 51 [ 312.935166][ T25] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 313.085044][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 313.085870][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.086631][ T25] usb 5-1: config 0 has no interfaces? [ 313.089257][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.089277][ T25] usb 5-1: Product: syz [ 313.089290][ T25] usb 5-1: Manufacturer: syz [ 313.089301][ T25] usb 5-1: SerialNumber: syz [ 313.102569][ T25] usb 5-1: config 0 descriptor?? [ 313.265190][ T9651] dvmrp12: entered allmulticast mode [ 313.310755][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.317442][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.328483][ T9647] netlink: 'syz.4.1092': attribute type 28 has an invalid length. [ 313.328523][ T9647] netlink: 'syz.4.1092': attribute type 15 has an invalid length. [ 313.349918][ T25] usb 5-1: USB disconnect, device number 45 [ 313.723075][ T4983] Dev loop5: unable to read RDB block 7 [ 313.723131][ T4983] loop5: unable to read partition table [ 313.723333][ T4983] loop5: partition table beyond EOD, truncated [ 313.906479][ T7168] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 314.031383][ T9677] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 314.040546][ T9677] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 314.048917][ T9677] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 314.076270][ T7168] usb 2-1: Using ep0 maxpacket: 8 [ 314.081209][ T7168] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 314.086184][ T7168] usb 2-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 314.086229][ T7168] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 314.086253][ T7168] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 314.086275][ T7168] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 314.086298][ T7168] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 314.087222][ T30] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 314.089078][ T7168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.089100][ T7168] usb 2-1: Product: syz [ 314.089112][ T7168] usb 2-1: Manufacturer: syz [ 314.089125][ T7168] usb 2-1: SerialNumber: syz [ 314.131266][ T7168] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 314.133628][ T7168] usbtest 2-1:1.0: Linux user mode ISO test driver [ 314.133647][ T7168] usbtest 2-1:1.0: high-speed {control iso-in} tests (+alt) [ 314.240543][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 314.242694][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 314.242740][ T30] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 314.243810][ T30] usb 6-1: config 8 has an invalid interface number: 94 but max is 0 [ 314.243832][ T30] usb 6-1: config 8 has no interface number 0 [ 314.243866][ T30] usb 6-1: config 8 interface 94 has no altsetting 0 [ 314.247765][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.247789][ T30] usb 6-1: Product: syz [ 314.247801][ T30] usb 6-1: Manufacturer: syz [ 314.247814][ T30] usb 6-1: SerialNumber: syz [ 314.399571][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.409059][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.457017][ T10] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 314.490343][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1098'. [ 314.490498][ T9671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.531747][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.619402][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.626390][ T30] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 314.630490][ T30] gspca_sn9c2028: read1 error -71 [ 314.631497][ T30] gspca_sn9c2028: read1 error -71 [ 314.632325][ T30] gspca_sn9c2028: read1 error -71 [ 314.632404][ T30] sn9c2028 6-1:8.94: probe with driver sn9c2028 failed with error -71 [ 314.647237][ T30] usb 6-1: USB disconnect, device number 30 [ 314.666227][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 314.666279][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 314.688597][ T10] usb 5-1: config 1 has an invalid interface number: 93 but max is 0 [ 314.688639][ T10] usb 5-1: config 1 has no interface number 0 [ 314.688693][ T10] usb 5-1: config 1 interface 93 has no altsetting 0 [ 314.711938][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.711978][ T10] usb 5-1: Product: syz [ 314.712012][ T10] usb 5-1: Manufacturer: syz [ 314.712029][ T10] usb 5-1: SerialNumber: syz [ 314.991007][ T10] peak_usb 5-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 314.991052][ T10] peak_usb 5-1:1.93: unable to read PCAN-USB serial number (err -22) [ 315.095683][ T10] peak_usb 5-1:1.93: probe with driver peak_usb failed with error -22 [ 315.116294][ T10] usb 5-1: USB disconnect, device number 46 [ 315.196913][ T4983] Dev loop5: unable to read RDB block 7 [ 315.196974][ T4983] loop5: unable to read partition table [ 315.199298][ T4983] loop5: partition table beyond EOD, truncated [ 315.484904][ T5670] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 315.646956][ T5670] usb 6-1: Using ep0 maxpacket: 32 [ 315.655826][ T5670] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 315.669083][ T5670] usb 6-1: config 123 interface 0 has no altsetting 0 [ 315.679519][ T5670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.688839][ T5670] usb 6-1: Product: syz [ 315.693401][ T5670] usb 6-1: Manufacturer: syz [ 315.693419][ T5670] usb 6-1: SerialNumber: syz [ 316.235452][ T192] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 316.335763][ T7160] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 316.360982][ T30] usb 2-1: USB disconnect, device number 29 [ 316.396078][ T192] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 316.419271][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.430838][ T192] usb 3-1: Product: syz [ 316.430858][ T192] usb 3-1: Manufacturer: syz [ 316.430872][ T192] usb 3-1: SerialNumber: syz [ 316.526069][ T7160] usb 5-1: Using ep0 maxpacket: 16 [ 316.532284][ T7160] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 316.542789][ T7160] usb 5-1: config 0 has no interfaces? [ 316.555156][ T7160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.555231][ T7160] usb 5-1: Product: syz [ 316.555249][ T7160] usb 5-1: Manufacturer: syz [ 316.555265][ T7160] usb 5-1: SerialNumber: syz [ 316.589197][ T7160] usb 5-1: config 0 descriptor?? [ 316.684347][ T9711] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1111'. [ 316.684466][ T9711] batman_adv: batadv0: Interface deactivated: dummy0 [ 316.701320][ T9711] batman_adv: batadv0: Removing interface: dummy0 [ 316.733996][ T9704] netlink: 'syz.2.1108': attribute type 17 has an invalid length. [ 316.743600][ T192] net_ratelimit: 12 callbacks suppressed [ 316.743648][ T192] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 316.743699][ T192] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 316.743752][ T192] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 316.794451][ T192] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 316.829539][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.844406][ T192] usb 3-1: USB disconnect, device number 52 [ 316.856920][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.874082][ T9706] netlink: 'syz.4.1110': attribute type 28 has an invalid length. [ 316.874123][ T9706] netlink: 'syz.4.1110': attribute type 15 has an invalid length. [ 316.899779][ T30] usb 5-1: USB disconnect, device number 47 [ 317.002092][ T9714] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 317.002291][ T9714] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 317.002517][ T9714] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 317.068308][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.078509][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.078560][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.088998][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.449618][ T9693] syz.5.1104 (9693): drop_caches: 2 [ 317.567642][ T5670] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 317.585026][ T5670] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.597835][ T5670] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 317.597906][ T5670] usb 6-1: media controller created [ 317.622475][ T5670] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.652780][ T5670] set interface failed [ 317.654956][ T5670] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 317.688608][ T5670] error writing reg: 0xff, val: 0x00 [ 317.753836][ T5670] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 317.772442][ T5670] usb 6-1: USB disconnect, device number 31 [ 317.825885][ T5746] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 317.840444][ T6940] udevd[6940]: setting mode of /dev/bus/usb/006/031 to 020664 failed: No such file or directory [ 317.840575][ T6940] udevd[6940]: setting owner of /dev/bus/usb/006/031 to uid=0, gid=0 failed: No such file or directory [ 317.977995][ T5746] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.979145][ T5746] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.979167][ T5746] usb 2-1: config 0 has no interfaces? [ 317.988591][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.988615][ T5746] usb 2-1: Product: syz [ 317.988628][ T5746] usb 2-1: Manufacturer: syz [ 317.988641][ T5746] usb 2-1: SerialNumber: syz [ 317.996130][ T5746] usb 2-1: config 0 descriptor?? [ 318.219642][ T30] usb 2-1: USB disconnect, device number 30 [ 318.269578][ T4983] Dev loop5: unable to read RDB block 7 [ 318.269637][ T4983] loop5: unable to read partition table [ 318.269869][ T4983] loop5: partition table beyond EOD, truncated [ 318.583799][ T4983] Dev loop5: unable to read RDB block 7 [ 318.583863][ T4983] loop5: unable to read partition table [ 318.584043][ T4983] loop5: partition table beyond EOD, truncated [ 318.636195][ T9740] netlink: 'syz.5.1122': attribute type 1 has an invalid length. [ 318.664940][ T9742] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1121'. [ 318.676602][ T9740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.723692][ T9740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.724086][ T9740] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 318.733665][ T9740] bond4: (slave gre1): Error -95 calling set_mac_address [ 318.897102][ T9744] gretap1: entered promiscuous mode [ 318.907551][ T9744] bond4: (slave gretap1): making interface the new active one [ 318.933246][ T9744] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 319.012712][ T9746] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.019577][ T9746] bond4: (slave bond5): Enslaving as an active interface with a down link [ 319.035900][ T9740] bond4 (unregistering): (slave gretap1): Releasing active interface [ 319.084484][ T9740] bond4 (unregistering): (slave bond5): Releasing active interface [ 319.096043][ T192] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 319.117094][ T9740] bond4 (unregistering): Released all slaves [ 319.148552][ T9752] binder: 9751:9752 ioctl c0306201 0 returned -14 [ 319.165677][ T9752] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 319.174531][ T9752] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 319.185530][ T9752] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 319.265541][ T192] usb 3-1: Using ep0 maxpacket: 16 [ 319.271336][ T8394] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.271808][ T192] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 319.275246][ T192] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 319.275268][ T192] usb 3-1: config 0 has no interface number 0 [ 319.278103][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.278124][ T192] usb 3-1: Product: syz [ 319.278137][ T192] usb 3-1: Manufacturer: syz [ 319.278150][ T192] usb 3-1: SerialNumber: syz [ 319.304189][ T192] usb 3-1: config 0 descriptor?? [ 319.314683][ T192] hub 3-1:0.132: bad descriptor, ignoring hub [ 319.314709][ T192] hub 3-1:0.132: probe with driver hub failed with error -5 [ 319.332097][ T192] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input40 [ 319.356574][ T7160] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 319.508113][ T7160] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.508189][ T7160] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 319.514004][ T7160] usb 2-1: config 8 has an invalid interface number: 59 but max is 3 [ 319.514041][ T7160] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 319.514058][ T7160] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 319.514076][ T7160] usb 2-1: config 8 has no interface number 0 [ 319.514112][ T7160] usb 2-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 319.514134][ T7160] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid maxpacket 64, setting to 0 [ 319.514157][ T7160] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 319.514179][ T7160] usb 2-1: config 8 interface 59 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 319.514197][ T7160] usb 2-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 319.514220][ T7160] usb 2-1: config 8 interface 59 has no altsetting 0 [ 319.519066][ T7160] usb 2-1: string descriptor 0 read error: -22 [ 319.519190][ T7160] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.536543][ T7160] ttusbir 2-1:8.59: cannot find expected altsetting [ 319.585925][ T9742] netlink: 'syz.2.1121': attribute type 4 has an invalid length. [ 319.585945][ T9742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1121'. [ 319.598532][ T9742] .`: renamed from bond0 [ 319.777956][ T4983] Dev loop5: unable to read RDB block 7 [ 319.778025][ T4983] loop5: unable to read partition table [ 319.778222][ T4983] loop5: partition table beyond EOD, truncated [ 319.816703][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1126'. [ 319.822124][ T9758] fuse: root generation should be zero [ 319.951315][ T192] usb 2-1: USB disconnect, device number 31 [ 319.984984][ T7168] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 320.014262][ T4983] Dev loop5: unable to read RDB block 7 [ 320.023051][ T4983] loop5: unable to read partition table [ 320.023255][ T4983] loop5: partition table beyond EOD, truncated [ 320.071677][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'. [ 320.102281][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.103410][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.147386][ T9764] netlink: 'syz.5.1127': attribute type 10 has an invalid length. [ 320.158711][ T7168] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.172198][ T7168] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.172236][ T7168] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.194562][ T7168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.194604][ T7168] usb 5-1: Product: syz [ 320.194632][ T7168] usb 5-1: Manufacturer: syz [ 320.194649][ T7168] usb 5-1: SerialNumber: syz [ 320.235372][ T7168] usb 5-1: 0:2 : does not exist [ 320.316075][ T9764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.319276][ T9764] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 320.393180][ T4983] Dev loop5: unable to read RDB block 7 [ 320.393242][ T4983] loop5: unable to read partition table [ 320.393416][ T4983] loop5: partition table beyond EOD, truncated [ 320.452970][ T7168] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 320.510384][ T4983] Dev loop5: unable to read RDB block 7 [ 320.510459][ T4983] loop5: unable to read partition table [ 320.510632][ T4983] loop5: partition table beyond EOD, truncated [ 320.584544][ T7168] usb 5-1: USB disconnect, device number 48 [ 320.644481][ T6940] udevd[6940]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.160722][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.163094][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.266808][ T9776] syzkaller1: entered promiscuous mode [ 321.273924][ T9776] syzkaller1: entered allmulticast mode [ 321.384480][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 321.523940][ T4983] Dev loop5: unable to read RDB block 7 [ 321.523999][ T4983] loop5: unable to read partition table [ 321.524204][ T4983] loop5: partition table beyond EOD, truncated [ 321.881671][ T9801] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !`ݗb"^6C2W [ 321.881671][ T9801] 7 [ 322.271304][ T4983] Dev loop5: unable to read RDB block 7 [ 322.271365][ T4983] loop5: unable to read partition table [ 322.271542][ T4983] loop5: partition table beyond EOD, truncated [ 322.463734][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1146'. [ 322.638550][ T192] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 322.733749][ T6246] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 322.770965][ T6246] usb 3-1: device reset changed ep0 maxpacket size! [ 322.785645][ T192] usb 6-1: Using ep0 maxpacket: 8 [ 322.788702][ T192] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 322.790927][ T192] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 322.790959][ T192] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 322.790996][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.791020][ T192] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.791042][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.791064][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.791088][ T192] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 322.791185][ T192] usb 6-1: config 168 interface 0 has no altsetting 0 [ 322.809257][ T192] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 322.809300][ T192] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 322.809334][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.809359][ T192] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.809381][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.809403][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.809438][ T192] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 322.809461][ T192] usb 6-1: config 168 interface 0 has no altsetting 0 [ 322.818758][ T7160] usb 3-1: USB disconnect, device number 53 [ 322.829144][ T192] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 322.829181][ T192] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 322.829215][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 322.829239][ T192] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 322.829262][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 322.829284][ T192] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 322.829316][ T192] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 322.829340][ T192] usb 6-1: config 168 interface 0 has no altsetting 0 [ 322.856033][ T192] usb 6-1: string descriptor 0 read error: -22 [ 322.856160][ T192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.028838][ T192] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 323.051813][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.052216][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.257762][ T7160] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 323.408385][ T7160] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 323.410684][ T7160] usb 3-1: config 0 has no interfaces? [ 323.410716][ T7160] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.419129][ T7160] usb 3-1: config 0 descriptor?? [ 323.532395][ T7168] usb 6-1: USB disconnect, device number 32 [ 323.535976][ T9845] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 323.663842][ T7160] usb 3-1: USB disconnect, device number 54 [ 323.843230][ T9861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.197293][ T4983] Dev loop5: unable to read RDB block 7 [ 324.205755][ T4983] loop5: unable to read partition table [ 324.211697][ T4983] loop5: partition table beyond EOD, truncated [ 324.320883][ T9872] netlink: ct_mark mask cannot be 0 [ 324.320948][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.492050][ T9872] ip6tnl0: Caught tx_queue_len zero misconfig [ 324.676034][ T4983] Dev loop5: unable to read RDB block 7 [ 324.681727][ T4983] loop5: unable to read partition table [ 324.688563][ T4983] loop5: partition table beyond EOD, truncated [ 324.754600][ T9885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.881835][ T4983] Dev loop5: unable to read RDB block 7 [ 324.881903][ T4983] loop5: unable to read partition table [ 324.882082][ T4983] loop5: partition table beyond EOD, truncated [ 324.899424][ T7168] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 325.077021][ T7168] usb 5-1: unable to get BOS descriptor or descriptor too short [ 325.077089][ T7168] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 325.085017][ T7160] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 325.102721][ T7168] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.102759][ T7168] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.102818][ T7168] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 325.102852][ T7168] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 325.102885][ T7168] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 325.102909][ T7168] usb 5-1: config 1 interface 1 has no altsetting 0 [ 325.176525][ T7168] usb 5-1: string descriptor 0 read error: -22 [ 325.176682][ T7168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.235611][ T7160] usb 3-1: Using ep0 maxpacket: 16 [ 325.237097][ T7160] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 325.239160][ T7160] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.239181][ T7160] usb 3-1: config 0 has no interface number 0 [ 325.239217][ T7160] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 325.239241][ T7160] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 325.244753][ T7160] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.244776][ T7160] usb 3-1: config 0 has no interface number 0 [ 325.244927][ T7160] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 176, changing to 11 [ 325.244952][ T7160] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid maxpacket 8243, setting to 1024 [ 325.247588][ T7160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.247610][ T7160] usb 3-1: Product: syz [ 325.247623][ T7160] usb 3-1: Manufacturer: syz [ 325.247636][ T7160] usb 3-1: SerialNumber: syz [ 325.253982][ T7160] usb 3-1: config 0 descriptor?? [ 325.599822][ T7168] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 325.599854][ T7168] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 325.599878][ T7168] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 325.826389][ T4983] Dev loop5: unable to read RDB block 7 [ 325.826455][ T4983] loop5: unable to read partition table [ 325.826635][ T4983] loop5: partition table beyond EOD, truncated [ 325.878498][ T9902] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 325.887692][ T9902] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 325.895989][ T9902] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 326.187543][ T5670] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 326.340098][ T5670] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 326.345932][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 30968, setting to 64 [ 326.351587][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.351611][ T5670] usb 2-1: Product: syz [ 326.351623][ T5670] usb 2-1: Manufacturer: syz [ 326.351637][ T5670] usb 2-1: SerialNumber: syz [ 326.366262][ T5670] usb 2-1: config 0 descriptor?? [ 326.368776][ T9907] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 326.376832][ T5670] hub 2-1:0.0: bad descriptor, ignoring hub [ 326.376859][ T5670] hub 2-1:0.0: probe with driver hub failed with error -5 [ 326.422177][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.422606][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.440460][ T5670] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input43 [ 326.477220][ T4983] Dev loop5: unable to read RDB block 7 [ 326.477290][ T4983] loop5: unable to read partition table [ 326.477495][ T4983] loop5: partition table beyond EOD, truncated [ 326.579338][ T4983] Dev loop5: unable to read RDB block 7 [ 326.579391][ T4983] loop5: unable to read partition table [ 326.579553][ T4983] loop5: partition table beyond EOD, truncated [ 326.697013][ T7168] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 326.772597][ T4983] Dev loop5: unable to read RDB block 7 [ 326.772654][ T4983] loop5: unable to read partition table [ 326.772876][ T4983] loop5: partition table beyond EOD, truncated [ 326.803827][ T7160] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.820127][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 326.852321][ T7168] usb 5-1: USB disconnect, device number 49 [ 327.094743][ T7160] usb 3-1: USB disconnect, device number 55 [ 327.125087][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 327.275056][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 327.275962][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 327.279516][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.279558][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.286906][ T10] usb 6-1: config 0 descriptor?? [ 327.300548][ T9939] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 327.300693][ T9939] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 327.300928][ T9939] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 327.385212][ T7158] usb 2-1: USB disconnect, device number 32 [ 327.457942][ T5900] udevd[5900]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 327.610024][ T9945] syzkaller0: entered promiscuous mode [ 327.616217][ T9945] syzkaller0: entered allmulticast mode [ 327.715714][ T7160] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 327.772552][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'. [ 327.836206][ T9952] netlink: 'syz.1.1183': attribute type 10 has an invalid length. [ 327.864904][ T7160] usb 3-1: Using ep0 maxpacket: 8 [ 327.865604][ T7160] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 327.867053][ T7160] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.867074][ T7160] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 327.867124][ T7160] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.869590][ T7160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.869610][ T7160] usb 3-1: Product: syz [ 327.869623][ T7160] usb 3-1: Manufacturer: syz [ 327.869636][ T7160] usb 3-1: SerialNumber: syz [ 327.881171][ T9948] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 327.881404][ T9948] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 327.883757][ T9948] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 328.437885][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 328.438029][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 328.444751][ T10] usb 6-1: USB disconnect, device number 33 [ 329.014037][ T4983] Dev loop5: unable to read RDB block 7 [ 329.014100][ T4983] loop5: unable to read partition table [ 329.021532][ T4983] loop5: partition table beyond EOD, truncated [ 329.253646][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 329.910700][ T4983] Dev loop5: unable to read RDB block 7 [ 329.916523][ T4983] loop5: unable to read partition table [ 329.922547][ T4983] loop5: partition table beyond EOD, truncated [ 330.200980][ T4983] Dev loop5: unable to read RDB block 7 [ 330.201071][ T4983] loop5: unable to read partition table [ 330.201300][ T4983] loop5: partition table beyond EOD, truncated [ 330.321688][ T4983] Dev loop5: unable to read RDB block 7 [ 330.321745][ T4983] loop5: unable to read partition table [ 330.322419][ T4983] loop5: partition table beyond EOD, truncated [ 331.517140][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.530736][ T9952] .`: (slave netdevsim1): Enslaving as an active interface with a down link [ 331.674266][ T4983] Dev loop5: unable to read RDB block 7 [ 331.674347][ T4983] loop5: unable to read partition table [ 331.674546][ T4983] loop5: partition table beyond EOD, truncated [ 331.841549][ T9981] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 331.841732][ T9981] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 331.861752][ T9981] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 331.868412][ T7160] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 331.869176][ T7160] usb 3-1: 0:2 : does not exist [ 331.960785][ T9986] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 331.960961][ T9986] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 331.978331][ T9986] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 332.067549][ T4983] Dev loop5: unable to read RDB block 7 [ 332.067599][ T4983] loop5: unable to read partition table [ 332.067794][ T4983] loop5: partition table beyond EOD, truncated [ 332.115002][ T7160] usb 3-1: USB disconnect, device number 56 [ 332.281383][ T6940] udevd[6940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.416755][ T4983] Dev loop5: unable to read RDB block 7 [ 332.416813][ T4983] loop5: unable to read partition table [ 332.416999][ T4983] loop5: partition table beyond EOD, truncated [ 332.527430][ C1] ------------[ cut here ]------------ [ 332.527466][ C1] refcount_t: underflow; use-after-free. [ 332.527493][ C1] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xb2/0x110, CPU#1: syz.5.1200/10011 [ 332.550041][ C1] Modules linked in: [ 332.553988][ C1] CPU: 1 UID: 0 PID: 10011 Comm: syz.5.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.565014][ C1] Tainted: [L]=SOFTLOCKUP [ 332.569351][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.570953][ T52] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 332.586307][ C1] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 332.592405][ C1] Code: 24 0b a7 0b 67 48 0f b9 3a eb 4a e8 58 96 e9 fc 48 8d 3d 21 0b a7 0b 67 48 0f b9 3a eb 37 e8 45 96 e9 fc 48 8d 3d 1e 0b a7 0b <67> 48 0f b9 3a eb 24 e8 32 96 e9 fc 48 8d 3d 1b 0b a7 0b 67 48 0f [ 332.612198][ C1] RSP: 0018:ffffc90000a18c68 EFLAGS: 00010246 [ 332.618340][ C1] RAX: ffffffff84de24db RBX: 0000000000000003 RCX: ffff888028633e80 [ 332.626393][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffffffff90853000 [ 332.634385][ C1] RBP: ffffc90000a18d70 R08: ffff888028633e80 R09: 0000000000000005 [ 332.642441][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: 0000000000000001 [ 332.650474][ C1] R13: 0000000100000c09 R14: ffff88802778c020 R15: ffff88802778c1b8 [ 332.658532][ C1] FS: 00007f6dd8db86c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 332.667521][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.674131][ C1] CR2: 0000200000002480 CR3: 0000000058f3c000 CR4: 00000000003526f0 [ 332.682195][ C1] DR0: ffffffffffffffff DR1: 20000000000001f8 DR2: 0000000000000002 [ 332.690230][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 332.698285][ C1] Call Trace: [ 332.701598][ C1] [ 332.704462][ C1] call_timer_fn+0x18d/0x5f0 [ 332.709138][ C1] ? __pfx_sctp_generate_heartbeat_event+0x10/0x10 [ 332.715705][ C1] ? call_timer_fn+0xd5/0x5f0 [ 332.720410][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 332.725624][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.730851][ C1] ? __pfx_sctp_generate_heartbeat_event+0x10/0x10 [ 332.737453][ C1] __run_timer_base+0x652/0x8b0 [ 332.742346][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 332.747805][ C1] ? ktime_get+0x1f5/0x220 [ 332.752245][ C1] ? lapic_next_event+0x11/0x20 [ 332.757179][ C1] run_timer_softirq+0xb7/0x170 [ 332.762054][ C1] handle_softirqs+0x226/0x860 [ 332.766913][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 332.771722][ C1] __irq_exit_rcu+0xcb/0x220 [ 332.776419][ C1] irq_exit_rcu+0x9/0x30 [ 332.780696][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.786507][ C1] [ 332.789446][ C1] [ 332.792389][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.798446][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 332.804287][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 1a 4d bc f5 48 89 df e8 d2 c4 bc f5 e8 cd 01 e9 f5 fb bf 01 00 00 00 82 de ad f5 65 48 8b 05 2a 71 ad 07 48 85 c0 74 07 5b c3 cc cc [ 332.823975][ C1] RSP: 0018:ffffc900050a7350 EFLAGS: 00000202 [ 332.830110][ C1] RAX: 0000000000001cd9 RBX: ffff888031430f78 RCX: 8000000000000001 [ 332.838152][ C1] RDX: 0000000000000007 RSI: ffffffff8e474a01 RDI: 0000000000000001 [ 332.846177][ C1] RBP: ffffc900050a74b0 R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 332.854171][ C1] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: dffffc0000000000 [ 332.862223][ C1] R13: ffffc900050a7400 R14: 0000000000000000 R15: 0000000000000001 [ 332.870275][ C1] shmem_add_to_page_cache+0xa5e/0xd40 [ 332.875831][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 332.881848][ C1] shmem_alloc_and_add_folio+0x854/0xf60 [ 332.887575][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 332.892630][ C1] ? filemap_map_pages+0x1d1/0x2170 [ 332.897921][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 332.903415][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 332.909661][ C1] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 332.915714][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 332.920957][ C1] shmem_fault+0x179/0x390 [ 332.925471][ C1] __do_fault+0x138/0x2a0 [ 332.929821][ C1] ? do_pte_missing+0x140c/0x34b0 [ 332.934928][ C1] do_pte_missing+0x2215/0x34b0 [ 332.939823][ C1] ? handle_mm_fault+0xf1/0x3750 [ 332.946488][ C1] handle_mm_fault+0x1a53/0x3750 [ 332.951468][ C1] ? handle_mm_fault+0xf1/0x3750 [ 332.956475][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 332.961785][ C1] ? follow_page_pte+0x748/0xf10 [ 332.966790][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 332.972114][ C1] __get_user_pages+0x1675/0x2750 [ 332.977231][ C1] populate_vma_page_range+0x2be/0x3c0 [ 332.982717][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 332.988758][ C1] ? down_read+0x2be/0x330 [ 332.993197][ C1] __mm_populate+0x25f/0x390 [ 332.997850][ C1] ? __pfx___mm_populate+0x10/0x10 [ 333.002991][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 333.007655][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 333.012790][ C1] ? rcu_is_watching+0x16/0xb0 [ 333.017612][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 333.022487][ C1] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 333.028791][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 333.033584][ C1] do_syscall_64+0x166/0x520 [ 333.038254][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.044347][ C1] ? clear_bhb_loop+0x70/0xc0 [ 333.049087][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.055028][ C1] RIP: 0033:0x7f6dd7f9e159 [ 333.059473][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.079142][ C1] RSP: 002b:00007f6dd8db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 333.087627][ C1] RAX: ffffffffffffffda RBX: 00007f6dd8225fa0 RCX: 00007f6dd7f9e159 [ 333.095656][ C1] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 333.103649][ C1] RBP: 00007f6dd8035024 R08: ffffffffffffffff R09: 0000000000000000 [ 333.111689][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 333.119724][ C1] R13: 00007f6dd8226038 R14: 00007f6dd8225fa0 R15: 00007f6dd834fa48 [ 333.127776][ C1] [ 333.130818][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.138108][ C1] CPU: 1 UID: 0 PID: 10011 Comm: syz.5.1200 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.149056][ C1] Tainted: [L]=SOFTLOCKUP [ 333.153385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.163453][ C1] Call Trace: [ 333.166741][ C1] [ 333.169594][ C1] vpanic+0x56d/0xa60 [ 333.173598][ C1] ? __pfx__printk+0x10/0x10 [ 333.178205][ C1] ? __pfx_vpanic+0x10/0x10 [ 333.182733][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 333.188035][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 333.193247][ C1] panic+0xc5/0xd0 [ 333.196973][ C1] ? __pfx_panic+0x10/0x10 [ 333.201427][ C1] __warn+0x315/0x4c0 [ 333.205440][ C1] ? refcount_warn_saturate+0xb2/0x110 [ 333.210913][ C1] ? refcount_warn_saturate+0xb2/0x110 [ 333.216391][ C1] __report_bug+0x276/0x570 [ 333.220934][ C1] ? refcount_warn_saturate+0xb2/0x110 [ 333.226415][ C1] ? __pfx___report_bug+0x10/0x10 [ 333.231491][ C1] report_bug_entry+0x19b/0x290 [ 333.236366][ C1] ? refcount_warn_saturate+0xb2/0x110 [ 333.241853][ C1] ? refcount_warn_saturate+0xb7/0x110 [ 333.247335][ C1] handle_bug+0xce/0x200 [ 333.251602][ C1] exc_invalid_op+0x1a/0x50 [ 333.256123][ C1] asm_exc_invalid_op+0x1a/0x20 [ 333.260983][ C1] RIP: 0010:refcount_warn_saturate+0xb2/0x110 [ 333.267073][ C1] Code: 24 0b a7 0b 67 48 0f b9 3a eb 4a e8 58 96 e9 fc 48 8d 3d 21 0b a7 0b 67 48 0f b9 3a eb 37 e8 45 96 e9 fc 48 8d 3d 1e 0b a7 0b <67> 48 0f b9 3a eb 24 e8 32 96 e9 fc 48 8d 3d 1b 0b a7 0b 67 48 0f [ 333.286698][ C1] RSP: 0018:ffffc90000a18c68 EFLAGS: 00010246 [ 333.292786][ C1] RAX: ffffffff84de24db RBX: 0000000000000003 RCX: ffff888028633e80 [ 333.300763][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: ffffffff90853000 [ 333.308732][ C1] RBP: ffffc90000a18d70 R08: ffff888028633e80 R09: 0000000000000005 [ 333.316703][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: 0000000000000001 [ 333.324671][ C1] R13: 0000000100000c09 R14: ffff88802778c020 R15: ffff88802778c1b8 [ 333.332646][ C1] ? refcount_warn_saturate+0xab/0x110 [ 333.338116][ C1] ? refcount_warn_saturate+0xab/0x110 [ 333.343573][ C1] call_timer_fn+0x18d/0x5f0 [ 333.348173][ C1] ? __pfx_sctp_generate_heartbeat_event+0x10/0x10 [ 333.354708][ C1] ? call_timer_fn+0xd5/0x5f0 [ 333.359385][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 333.364598][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.369799][ C1] ? __pfx_sctp_generate_heartbeat_event+0x10/0x10 [ 333.376311][ C1] __run_timer_base+0x652/0x8b0 [ 333.381178][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 333.386560][ C1] ? ktime_get+0x1f5/0x220 [ 333.390991][ C1] ? lapic_next_event+0x11/0x20 [ 333.395857][ C1] run_timer_softirq+0xb7/0x170 [ 333.400710][ C1] handle_softirqs+0x226/0x860 [ 333.405479][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 333.410250][ C1] __irq_exit_rcu+0xcb/0x220 [ 333.414843][ C1] irq_exit_rcu+0x9/0x30 [ 333.419096][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 333.424733][ C1] [ 333.427658][ C1] [ 333.430581][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.436559][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 333.442372][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 1a 4d bc f5 48 89 df e8 d2 c4 bc f5 e8 cd 01 e9 f5 fb bf 01 00 00 00 82 de ad f5 65 48 8b 05 2a 71 ad 07 48 85 c0 74 07 5b c3 cc cc [ 333.462071][ C1] RSP: 0018:ffffc900050a7350 EFLAGS: 00000202 [ 333.468142][ C1] RAX: 0000000000001cd9 RBX: ffff888031430f78 RCX: 8000000000000001 [ 333.476112][ C1] RDX: 0000000000000007 RSI: ffffffff8e474a01 RDI: 0000000000000001 [ 333.484082][ C1] RBP: ffffc900050a74b0 R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 333.492054][ C1] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: dffffc0000000000 [ 333.500031][ C1] R13: ffffc900050a7400 R14: 0000000000000000 R15: 0000000000000001 [ 333.508014][ C1] shmem_add_to_page_cache+0xa5e/0xd40 [ 333.513484][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 333.519487][ C1] shmem_alloc_and_add_folio+0x854/0xf60 [ 333.525130][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 333.530159][ C1] ? filemap_map_pages+0x1d1/0x2170 [ 333.535365][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 333.540849][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 333.547019][ C1] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 333.553008][ C1] shmem_get_folio_gfp+0x5da/0x16d0 [ 333.558225][ C1] shmem_fault+0x179/0x390 [ 333.562646][ C1] __do_fault+0x138/0x2a0 [ 333.566978][ C1] ? do_pte_missing+0x140c/0x34b0 [ 333.572004][ C1] do_pte_missing+0x2215/0x34b0 [ 333.576868][ C1] ? handle_mm_fault+0xf1/0x3750 [ 333.581810][ C1] handle_mm_fault+0x1a53/0x3750 [ 333.586753][ C1] ? handle_mm_fault+0xf1/0x3750 [ 333.591705][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 333.596996][ C1] ? follow_page_pte+0x748/0xf10 [ 333.601943][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 333.607234][ C1] __get_user_pages+0x1675/0x2750 [ 333.612282][ C1] populate_vma_page_range+0x2be/0x3c0 [ 333.617739][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 333.623716][ C1] ? down_read+0x2be/0x330 [ 333.628128][ C1] __mm_populate+0x25f/0x390 [ 333.632715][ C1] ? __pfx___mm_populate+0x10/0x10 [ 333.637830][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 333.642424][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 333.647533][ C1] ? rcu_is_watching+0x16/0xb0 [ 333.652301][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 333.657150][ C1] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 333.663392][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 333.668156][ C1] do_syscall_64+0x166/0x520 [ 333.672755][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.678829][ C1] ? clear_bhb_loop+0x70/0xc0 [ 333.683512][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.689412][ C1] RIP: 0033:0x7f6dd7f9e159 [ 333.693830][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.713437][ C1] RSP: 002b:00007f6dd8db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 333.721861][ C1] RAX: ffffffffffffffda RBX: 00007f6dd8225fa0 RCX: 00007f6dd7f9e159 [ 333.729838][ C1] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 333.737808][ C1] RBP: 00007f6dd8035024 R08: ffffffffffffffff R09: 0000000000000000 [ 333.745786][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 333.753762][ C1] R13: 00007f6dd8226038 R14: 00007f6dd8225fa0 R15: 00007f6dd834fa48 [ 333.761752][ C1] [ 333.765031][ C1] Kernel Offset: disabled [ 333.769359][ C1] Rebooting in 86400 seconds..