last executing test programs: 2m2.094232345s ago: executing program 2 (id=1236): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, 0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) socketpair(0x28, 0x5, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000580)=0x1) syz_usbip_server_init(0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) 1m55.510259113s ago: executing program 2 (id=1243): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3f690445254ed0be, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x482, &(0x7f0000000800)=ANY=[], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() tkill(r0, 0x7) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001080)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="53dff3a44139", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x90, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, @timestamp_reply={0xe, 0x0, 0x0, 0xd, 0xff7f, 0x5, 0x43, 0xfffffffe}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 1m51.465344592s ago: executing program 2 (id=1252): syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) epoll_create(0x80) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 1m50.861447764s ago: executing program 2 (id=1253): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000480)={'macvlan1\x00', 0x600}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0xfffffffffffffd05) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8020000) r4 = semget$private(0x0, 0x1, 0x413) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) 1m49.658872727s ago: executing program 2 (id=1254): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000001"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000004c0), &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x7d, &(0x7f00000006c0)={@local, @local, @void, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x3b, 0x1, 0x0, 0x0, "2b4bf9cf62b937e4a7902dc82fca6d798c611eb10f311cac60cf28b39381cb09ae3591c94318940cda5291caa366416f776dfed450ca37a48067a1cb031f46e2"}}}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r6, 0x0) 1m48.229241356s ago: executing program 2 (id=1256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 1m32.457122593s ago: executing program 32 (id=1256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 11.469446005s ago: executing program 4 (id=1447): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) r3 = fcntl$dupfd(r1, 0x0, r1) read$snapshot(r3, 0x0, 0xffffffbf) inotify_init1(0x80800) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044146, &(0x7f0000000040)=0xaac) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f0000000000)=0x5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xca72}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x68000) 11.183365091s ago: executing program 1 (id=1450): openat$ttyprintk(0xffffff9c, 0x0, 0x20c00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="140100002700010000000000000000000101008024d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de884d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d9798ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437f01407adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a052d0000008bb982eb4ec7e08b55bbb5369dd1e04690a1267e29e89d27673dd80050419e278e6130000000000000402c59468dd9dd32a33a5e697caed95fa070b01919d7d546b9b7a9d1384881e906b465ada7c9b2330b83a50b02fa25efafdf3ceb9b750aa6756bef268b13822d6de935c00e3e4df8"], 0x114}], 0x1}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', r3, 0x7, 0x7, 0x10000, 0x317, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "d14c095cfa9bbde56915b8"}]}, @timestamp_addr={0x44, 0x1c, 0xc9, 0x1, 0x8, [{@multicast2, 0x9}, {@broadcast, 0x6}, {@remote, 0x9}]}, @rr={0x7, 0x17, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x54, [@local, @empty]}, @end, @generic={0x4, 0x9, "af9fe075c2ea28"}]}}}}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000080)='stat\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 10.631628892s ago: executing program 0 (id=1451): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) 10.310501908s ago: executing program 1 (id=1452): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x482, &(0x7f0000000800)=ANY=[], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x64f, 0x44, @mcast1, @empty, 0x8, 0x10, 0x81, 0xffffffff}}) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 9.18494108s ago: executing program 3 (id=1454): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=0x0) move_pages(r1, 0x0, &(0x7f0000001380), &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r2, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000700)={0x5, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x81, 0x5, 0x0, 0x0, @msi={0x7ff, 0x2, 0xf36, 0x20000}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x3, 0x200}}, {0x7fffffff, 0x4, 0x1, 0x0, @adapter={0x4, 0x7, 0x7ff, 0x3f9a, 0x6}}, {0x7, 0x3, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 8.67703309s ago: executing program 4 (id=1455): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x5}}, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x800}, 0x4000840) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) lseek(r5, 0xfffffffffffffff7, 0x2) socket(0x1d, 0x2, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 7.693620429s ago: executing program 3 (id=1456): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 7.554281512s ago: executing program 3 (id=1457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x100, 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x1, 0x10001, 0xfffffffffffffff7, 0x40d, 0x10000, 0x104, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r5, 0x0, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x8, 0xffffffffb1abdb1c, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r6 = open(0x0, 0x80ff, 0x88) connect$phonet_pipe(r6, &(0x7f0000000240)={0x23, 0x7f, 0xfa, 0x1}, 0x10) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peekuser(0x3, r7, 0xff) fcntl$setlease(r6, 0x400, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0xc0000101, 0x0, 0x9}]}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000200), 0x4) 7.346345566s ago: executing program 4 (id=1458): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, 0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) socketpair(0x28, 0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000580)=0x1) syz_usbip_server_init(0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) 7.275134067s ago: executing program 1 (id=1459): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = epoll_create1(0x80000) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, r4, 0x0, r2, 0x1, 0x0, 0x2}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) io_uring_enter(r2, 0x3516, 0xffffffff, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @mss={0x2, 0x7fffffff}, @sack_perm, @mss={0x2, 0xfffffe00}, @window={0x3, 0x1ff, 0x4}, @sack_perm], 0x8) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 7.199236149s ago: executing program 0 (id=1460): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x192}}, './file0\x00'}) write$cgroup_int(r0, &(0x7f0000000000)=0x2b00, 0x12) 7.178627799s ago: executing program 3 (id=1461): openat$ttyprintk(0xffffff9c, 0x0, 0x20c00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', r3, 0x7, 0x7, 0x10000, 0x317, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "d14c095cfa9bbde56915b8"}]}, @timestamp_addr={0x44, 0x1c, 0xc9, 0x1, 0x8, [{@multicast2, 0x9}, {@broadcast, 0x6}, {@remote, 0x9}]}, @rr={0x7, 0x17, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x54, [@local, @empty]}, @end, @generic={0x4, 0x9, "af9fe075c2ea28"}]}}}}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000080)='stat\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5.726068837s ago: executing program 1 (id=1462): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b00000085000000d0de00009500000000000000d0839d6a480cfbaf4e868defcbc889eba06693df16e1620fc104ea9f348583abbdeaf92f291db743a74ae5985004c98ec723ee385b66a70bd31ed8311b0dc5c28a673f84ae9a58b8ab1e97f4ed5fb84e6dcc2980cceeddf30aa9284f7f40ceb68db865dbd4a302ef16c199d970b3504000afd6a40173657bafd684abef3c4454392d9b7aaed1619cb8fa8effffffffffffff7f417705cce67184381b2dfcdc5b5e"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$xdp(0x2c, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x2002}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.60589935s ago: executing program 0 (id=1463): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 4.874298574s ago: executing program 3 (id=1464): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@remote, @local, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0xbc, 0x0, "d3", "789c2222584e025ac76cc58949d62fdb20693d84327f438ad03e4853d2aad5879c3d465076e6692dc3462f0c6fb55b543566db8db2d09d3fd4"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001340)=0x0) move_pages(r1, 0x0, &(0x7f0000001380), &(0x7f00000013c0)=[0x6], &(0x7f0000001400)=[0x0, 0x0], 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r2, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000700)={0x5, 0x0, [{0xd8, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0x6cf, 0x1ff, 0x9}}, {0x81, 0x5, 0x0, 0x0, @msi={0x7ff, 0x2, 0xf36, 0x20000}}, {0x8, 0x5, 0x1, 0x0, @irqchip={0x3, 0x200}}, {0x7fffffff, 0x4, 0x1, 0x0, @adapter={0x4, 0x7, 0x7ff, 0x3f9a, 0x6}}, {0x7, 0x3, 0x0, 0x0, @adapter={0xfffffffffffffffd, 0x9, 0x7, 0x7fffffff, 0x2}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) keyctl$search(0xa, r7, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 4.640044589s ago: executing program 1 (id=1465): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 4.55310353s ago: executing program 0 (id=1466): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x5}}, 0x10, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x800}, 0x4000840) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) lseek(r5, 0xfffffffffffffff7, 0x2) socket(0x1d, 0x2, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 3.56535828s ago: executing program 1 (id=1467): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x0, 0x0, 0x0, 0x5e3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x482, &(0x7f0000000800)=ANY=[], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff2, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x3, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x64f, 0x44, @mcast1, @empty, 0x8, 0x10, 0x81, 0xffffffff}}) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 3.521584941s ago: executing program 3 (id=1468): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000100001040000", @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) 3.469247012s ago: executing program 4 (id=1469): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b00000085000000d0de00009500000000000000d0839d6a480cfbaf4e868defcbc889eba06693df16e1620fc104ea9f348583abbdeaf92f291db743a74ae5985004c98ec723ee385b66a70bd31ed8311b0dc5c28a673f84ae9a58b8ab1e97f4ed5fb84e6dcc2980cceeddf30aa9284f7f40ceb68db865dbd4a302ef16c199d970b3504000afd6a40173657bafd684abef3c4454392d9b7aaed1619cb8fa8effffffffffffff7f417705cce67184381b2dfcdc5b5e"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$xdp(0x2c, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x1, 0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, &(0x7f0000000540)='\x00', 0x0, 0x2}, 0x4c) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0x2002}, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x1, 0x2, 0x10000, 0x100, 0x8000000000000001, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0xb, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x9, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x8890, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x622, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x6, 0xfffffffeffffffff, 0x8, 0xd, 0x9, 0xe8, 0x80000000, 0xc62, 0x2, 0x10004, 0x2, 0xcdc, 0x7, 0x2, 0xa, 0x2, 0x5, 0xfff, 0x9, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x5, 0x53a, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x34, 0x0, 0xd, 0x2, 0x0, 0x2, 0x2, 0x7, 0x8, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x5, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0xec, @loopback, 0x5, 0x3}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000880)="90dbc83fcb6c375353573eed102f72a843d0bcfafbf237f5dfb3044db5ba2cfb802ee2a0cb62dccfde35c7fb38746d759ceddec7490eb0fd7534bf42ffe75a74792ac6d96c2e63c849a2c98b58193c5f9a0560fd6946633563507105210882cf13a9e32b30b3dca918dadc288e2aa43c5a9cc5ae75014ef10db65e51d419f3a5202d2af123f8b7a21611ebfa090ad5bdbad31ecb2469417188cb361901214b5f1163530d556b9d1d28ad4d635bcfa2836c5a334150761b6ed5775b58643b60cdd4131e86cd1f8e3420e27954659557", 0xcf}, {&(0x7f0000000780)="29f57a41ac53966b9e004fa3d1e6d7e22fa5ed2ef179500bff5275d7285b03e4683cf26ff7311c2a5d959052fdff5075338558dbd3b86f5b842f039b58c4de8f29355cb66a41ca0c5d524f5a793cc5a0073da831f8279a282ef7233f268a1bce9daaf86330528a0023b542bc9b593c3242c505fcf33213afc2ed9b618200151a37455593766f10926d8425c1b1ebfcf06cc33ea74397467f", 0x98}, {&(0x7f0000000980)}, {&(0x7f0000000a00)="b4ecd056476f3e7f16b6ddf7ab08fa112f6b0ea1f066656bc048957fe5edddc81d527f65cd24aead06f321ac912b9d93abcafbbf32484d8c32fb1b34cec0460bfae7605116752091e00c8c0690bbe3de1df28518d70dcca1da4ac1445db4a8463702d7d8ee1d79fd56fea99c203c770eedaa783943a949751180ec5928201a17015e511b35693113dcde5a03b28de7cac74f7f7eb4986af5bcb9ea68b6759d224b4acdb93d2c16edec47718c020ed756882483d0d2cba3", 0xb7}, {&(0x7f0000000100)="4e50cbb043fa201b97c2415a9719ab5bc562e23f8ca8ee4bb84a67", 0x1b}], 0x5, &(0x7f0000000b00)=[{0x20, 0x84, 0x8, "b80af6de7880d9da8d98d078c6a76532aca1"}, {0xf8, 0x0, 0x7fff, "1150d4e6cd03b57a25ecb297d08ddd02c89fe7da601d2df95334810160ed7982dd668410c33bc577ce1356eaea820a06756bb6db3470a81b073a357223ac99720a072260fa9216219f5182e8535df466ee733bc6e66d3c562e090106483d0f794abcf2d5bca8f3a48309efae734e2ef85136544db016787ce1be3b9b0c186d94384b40088c41a899ea44054535fbd98a73858e55b68d2e0fa20613b7b91ccfb1d624a1ced82ed43095c3f79299ae9d374b7a42f1f963b631bc89f16aef33606157abd9c58c6d24df6d59e1544dbee357a9e3083324c45bac33e3a11bf659ae9d3b5ccfdd0c183226993181"}, {0x5c, 0x104, 0x65a2, "9a7abfa048cb242ffd900bcfbf3ea8cf1e3837247f3e2841d4aad5086d8449661b9f8e5b2fd95f2ebbedf1a56fdc89e8add6f9e3b4291a35c754e1b92f6cbdd83630f207790e608a8860250b21ea5ea3"}, {0x50, 0x10e, 0xfffffff1, "d8e3132857243f15a953beca833525ed520c0b00ac0e424f3ee4595de23b2213b3ed1988d59b50174c4ad19b22725ec37f70036bccc7aaab195e340a7351d9cdda950679"}, {0xf4, 0x111, 0x8, "53a9dd2375ecbbda8375770deee0839938a0064fbea8034bd1e33b518824c3277dcd779e5448b3cd62d772fa55c41e6f04e867795e43d997eb309f8730a52c7d82cee7d8c7aae7065438cf18a147d46fc0d4fb6bb52dedd14ac031b0469766cf016ace21749237298039776902d9db4e2d8b19ee18ddcb02883624ceafc596aaf9e50141dd483a982ba0621e41878e0d619a88c42da46969201e0099e2c744037357a6578cb701add0921a7acbb9a5758e78601db6208194050567fb6d2c17efcd31fae1f547ad9abd12062c4d181d3555e2821745a89631fa21cf4953b86a057ba3753a460b"}], 0x2b8}, 0x20048014) 3.197745707s ago: executing program 0 (id=1470): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = epoll_create1(0x80000) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, r4, 0x0, r2, 0x1, 0x0, 0x2}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x8}, 0x10) io_uring_enter(r2, 0x3516, 0xffffffff, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @mss={0x2, 0x7fffffff}, @sack_perm, @mss={0x2, 0xfffffe00}, @window={0x3, 0x1ff, 0x4}, @sack_perm], 0x8) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 1.801225154s ago: executing program 0 (id=1471): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @pix_mp={0xfffffff8, 0x5, 0x34325241, 0x9, 0x4, [{0x9, 0x3}, {0x3, 0x1000}, {0x1, 0x451}, {0xffffff16, 0x4}, {0x6, 0x4}, {0xfffffff8, 0x3d}, {0x4, 0x5}, {0x5, 0xfffffbff}], 0x1, 0x3, 0x0, 0x0, 0x6}}) sendmsg$alg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) read(r3, &(0x7f00000009c0)=""/4096, 0x1000) 1.749201265s ago: executing program 4 (id=1472): openat$ttyprintk(0xffffff9c, 0x0, 0x20c00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="140100002700010000000000000000000101008024d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de884d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d9798ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437f01407adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a052d0000008bb982eb4ec7e08b55bbb5369dd1e04690a1267e29e89d27673dd80050419e278e6130000000000000402c59468dd9dd32a33a5e697caed95fa070b01919d7d546b9b7a9d1384881e906b465ada7c9b2330b83a50b02fa25efafdf3ceb9b750aa6756bef268b13822d6de935c00e3e4df8"], 0x114}], 0x1}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$COMEDI_INSNLIST(0xffffffffffffffff, 0x8010640b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1fffffffffffffed, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', r3, 0x7, 0x7, 0x10000, 0x317, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x13, 0x3, [{0x6, 0xd, "d14c095cfa9bbde56915b8"}]}, @timestamp_addr={0x44, 0x1c, 0xc9, 0x1, 0x8, [{@multicast2, 0x9}, {@broadcast, 0x6}, {@remote, 0x9}]}, @rr={0x7, 0x17, 0xcb, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast1]}, @lsrr={0x83, 0xb, 0x54, [@local, @empty]}, @end, @generic={0x4, 0x9, "af9fe075c2ea28"}]}}}}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000080)='stat\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 0s ago: executing program 4 (id=1473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) kernel console output (not intermixed with test programs): 233.215225][ T6853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.789096][ T6865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 235.795873][ T6865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.838619][ T6865] vhci_hcd vhci_hcd.0: Device attached [ 236.124858][ T787] vhci_hcd: vhci_device speed not set [ 236.189886][ T6867] vhci_hcd: connection closed [ 236.190165][ T297] vhci_hcd: stop threads [ 236.232356][ T787] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 236.845207][ T297] vhci_hcd: release socket [ 236.849908][ T297] vhci_hcd: disconnect device [ 237.641192][ T6883] fuse: Unknown parameter '0x0000000000000004' [ 239.436360][ T6906] virtio-fs: tag not found [ 239.907537][ T28] audit: type=1804 audit(1756851019.089:18): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.245" name="/newroot/63/bus/bus" dev="overlay" ino=394 res=1 errno=0 [ 239.995665][ T28] audit: type=1804 audit(1756851019.139:19): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.245" name="/newroot/63/bus/bus" dev="overlay" ino=394 res=1 errno=0 [ 241.297463][ T6921] fuse: Unknown parameter '0x0000000000000004' [ 241.382232][ T787] vhci_hcd: vhci_device speed not set [ 241.978621][ T6931] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 241.985395][ T6931] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.989369][ T6933] ubi: mtd0 is already attached to ubi31 [ 242.010439][ T6933] kAFS: unparsable volume name [ 242.020392][ T6931] vhci_hcd vhci_hcd.0: Device attached [ 242.322080][ T5857] vhci_hcd: vhci_device speed not set [ 242.482569][ T5857] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 242.547879][ T6934] vhci_hcd: connection closed [ 242.630929][ T297] vhci_hcd: stop threads [ 242.772791][ T297] vhci_hcd: release socket [ 242.801446][ T297] vhci_hcd: disconnect device [ 244.386475][ T6947] virtio-fs: tag not found [ 244.476555][ T6953] netlink: 256 bytes leftover after parsing attributes in process `syz.2.255'. [ 246.949766][ T6969] fuse: Unknown parameter '0x0000000000000004' [ 247.822080][ T5857] vhci_hcd: vhci_device speed not set [ 247.899219][ T6979] ubi: mtd0 is already attached to ubi31 [ 247.944202][ T6979] kAFS: unparsable volume name [ 248.987309][ T6987] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 248.994074][ T6987] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 249.038443][ T6987] vhci_hcd vhci_hcd.0: Device attached [ 249.082265][ T28] audit: type=1804 audit(1756851028.269:20): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.264" name="/newroot/62/bus/bus" dev="overlay" ino=354 res=1 errno=0 [ 249.304699][ T5899] vhci_hcd: vhci_device speed not set [ 249.372208][ T28] audit: type=1804 audit(1756851028.339:21): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.264" name="/newroot/62/bus/bus" dev="overlay" ino=354 res=1 errno=0 [ 249.392185][ T5899] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 249.575094][ T6991] vhci_hcd: connection reset by peer [ 249.608189][ T3530] vhci_hcd: stop threads [ 249.628914][ T3530] vhci_hcd: release socket [ 249.650893][ T3530] vhci_hcd: disconnect device [ 251.889262][ T7009] virtio-fs: tag not found [ 252.209140][ T7017] fuse: Unknown parameter 'fd0x0000000000000004' [ 252.592978][ T7022] ubi: mtd0 is already attached to ubi31 [ 252.662918][ T7022] kAFS: unparsable volume name [ 254.532109][ T5899] vhci_hcd: vhci_device speed not set [ 254.701154][ T7042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 254.707997][ T7042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.719267][ T7042] vhci_hcd vhci_hcd.0: Device attached [ 254.916108][ T5877] vhci_hcd: vhci_device speed not set [ 255.042132][ T5877] usb 35-1: new full-speed USB device number 6 using vhci_hcd [ 255.144822][ T7052] vhci_hcd: connection reset by peer [ 255.186219][ T3530] vhci_hcd: stop threads [ 255.209034][ T3530] vhci_hcd: release socket [ 255.242345][ T3530] vhci_hcd: disconnect device [ 256.451146][ T7061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.280'. [ 256.486069][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.492565][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.701430][ T7063] bridge_slave_0: left allmulticast mode [ 256.753092][ T7063] bridge_slave_0: left promiscuous mode [ 256.838798][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.159195][ T7072] ubi: mtd0 is already attached to ubi31 [ 257.178410][ T7068] virtio-fs: tag not found [ 257.199636][ T7072] kAFS: unparsable volume name [ 258.562872][ T7063] bridge_slave_1: left allmulticast mode [ 258.596728][ T7063] bridge_slave_1: left promiscuous mode [ 258.649364][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.779492][ T7063] bond0: (slave bond_slave_0): Releasing backup interface [ 258.927670][ T7063] bond0: (slave bond_slave_1): Releasing backup interface [ 259.088304][ T7063] team0: Port device team_slave_0 removed [ 259.315313][ T7063] team0: Port device team_slave_1 removed [ 259.327125][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.341725][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.463509][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.491429][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.628102][ T7067] team0: Mode changed to "loadbalance" [ 259.660739][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 260.172076][ T5877] vhci_hcd: vhci_device speed not set [ 261.587631][ T7105] netlink: 256 bytes leftover after parsing attributes in process `syz.0.289'. [ 265.236072][ T7124] ubi: mtd0 is already attached to ubi31 [ 265.271168][ T7124] kAFS: unparsable volume name [ 265.486924][ T7127] virtio-fs: tag not found [ 270.586230][ T7172] netlink: 256 bytes leftover after parsing attributes in process `syz.2.305'. [ 271.932833][ T7184] virtio-fs: tag not found [ 276.794105][ T7226] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 276.880891][ T7232] ubi: mtd0 is already attached to ubi31 [ 281.733009][ T7263] virtio-fs: tag not found [ 283.564636][ T7280] kAFS: unparsable volume name [ 284.562087][ T7286] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 284.568754][ T7286] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.595130][ T7286] vhci_hcd vhci_hcd.0: Device attached [ 284.792080][ T23] vhci_hcd: vhci_device speed not set [ 284.902073][ T23] usb 35-1: new full-speed USB device number 7 using vhci_hcd [ 285.208795][ T7288] vhci_hcd: connection reset by peer [ 285.224766][ T59] vhci_hcd: stop threads [ 285.239450][ T59] vhci_hcd: release socket [ 285.270020][ T59] vhci_hcd: disconnect device [ 285.746685][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.809037][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.652307][ T7301] netlink: 'syz.0.333': attribute type 16 has an invalid length. [ 286.660304][ T7301] netlink: 'syz.0.333': attribute type 17 has an invalid length. [ 286.752838][ T7301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.975752][ T7308] vivid-007: ================= START STATUS ================= [ 286.983590][ T7308] vivid-007: Enable Output Cropping: true [ 286.989551][ T7308] vivid-007: Enable Output Composing: true [ 286.995726][ T7308] vivid-007: Enable Output Scaler: true [ 287.001577][ T7308] vivid-007: Tx RGB Quantization Range: Automatic [ 287.008466][ T7308] vivid-007: Transmit Mode: HDMI [ 287.013756][ T7308] vivid-007: Display Present: true inactive [ 287.020092][ T7308] vivid-007: Hotplug Present: 0x00000001 [ 287.026056][ T7308] vivid-007: RxSense Present: 0x00000001 [ 287.031851][ T7308] vivid-007: EDID Present: 0x00000001 [ 287.037421][ T7308] vivid-007: ================== END STATUS ================== [ 289.527547][ T7317] virtio-fs: tag not found [ 290.002181][ T23] vhci_hcd: vhci_device speed not set [ 295.420384][ T7361] vivid-007: ================= START STATUS ================= [ 295.428511][ T7361] vivid-007: Enable Output Cropping: true [ 295.434614][ T7361] vivid-007: Enable Output Composing: true [ 295.440961][ T7361] vivid-007: Enable Output Scaler: true [ 295.446918][ T7361] vivid-007: Tx RGB Quantization Range: Automatic [ 295.453697][ T7361] vivid-007: Transmit Mode: HDMI [ 295.458827][ T7361] vivid-007: Display Present: true inactive [ 295.464999][ T7361] vivid-007: Hotplug Present: 0x00000001 [ 295.500191][ T7361] vivid-007: RxSense Present: 0x00000001 [ 295.506864][ T7361] vivid-007: EDID Present: 0x00000001 [ 295.513757][ T7361] vivid-007: ================== END STATUS ================== [ 297.542024][ T7365] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 297.548718][ T7365] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 297.637534][ T7365] vhci_hcd vhci_hcd.0: Device attached [ 298.062168][ T787] vhci_hcd: vhci_device speed not set [ 298.080711][ T7370] vhci_hcd: connection closed [ 298.097848][ T7382] kAFS: unparsable volume name [ 298.132168][ T787] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 298.144774][ T7371] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 298.161327][ T3530] vhci_hcd: stop threads [ 298.221786][ T3530] vhci_hcd: release socket [ 298.232297][ T3530] vhci_hcd: disconnect device [ 301.278043][ T7392] virtio-fs: tag not found [ 303.189200][ T7413] vivid-007: ================= START STATUS ================= [ 303.197331][ T7413] vivid-007: Enable Output Cropping: true [ 303.203797][ T7413] vivid-007: Enable Output Composing: true [ 303.209735][ T7413] vivid-007: Enable Output Scaler: true [ 303.216074][ T7413] vivid-007: Tx RGB Quantization Range: Automatic [ 303.222976][ T7413] vivid-007: Transmit Mode: HDMI [ 303.228264][ T7413] vivid-007: Display Present: true inactive [ 303.234525][ T7413] vivid-007: Hotplug Present: 0x00000001 [ 303.246336][ T7413] vivid-007: RxSense Present: 0x00000001 [ 303.252447][ T7413] vivid-007: EDID Present: 0x00000001 [ 303.258006][ T7413] vivid-007: ================== END STATUS ================== [ 303.992612][ T787] vhci_hcd: vhci_device speed not set [ 305.108740][ T7430] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 305.115348][ T7430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.780951][ T7430] vhci_hcd vhci_hcd.0: Device attached [ 306.513574][ T7425] kAFS: unparsable volume name [ 306.521442][ T7431] vhci_hcd: connection closed [ 306.524321][ T297] vhci_hcd: stop threads [ 306.553558][ T297] vhci_hcd: release socket [ 306.582177][ T787] vhci_hcd: vhci_device speed not set [ 306.589033][ T297] vhci_hcd: disconnect device [ 306.682056][ T787] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 306.689771][ T787] usb 37-1: enqueue for inactive port 0 [ 306.760950][ T28] audit: type=1804 audit(1756851085.949:22): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.362" name="/newroot/83/bus/bus" dev="overlay" ino=475 res=1 errno=0 [ 306.798298][ T787] vhci_hcd: vhci_device speed not set [ 306.822195][ T28] audit: type=1804 audit(1756851086.009:23): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.362" name="/newroot/83/bus/bus" dev="overlay" ino=475 res=1 errno=0 [ 308.048924][ T7450] netlink: 256 bytes leftover after parsing attributes in process `syz.2.368'. [ 308.903649][ T7454] virtio-fs: tag not found [ 312.267806][ T7486] kAFS: unparsable volume name [ 312.871159][ T7492] netlink: 256 bytes leftover after parsing attributes in process `syz.2.379'. [ 313.191830][ T7493] virtio-fs: tag not found [ 315.889767][ T28] audit: type=1804 audit(1756851095.079:24): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.382" name="/newroot/103/bus/bus" dev="overlay" ino=621 res=1 errno=0 [ 316.003871][ T28] audit: type=1804 audit(1756851095.169:25): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.382" name="/newroot/103/bus/bus" dev="overlay" ino=621 res=1 errno=0 [ 316.202460][ T7519] vivid-007: ================= START STATUS ================= [ 316.210378][ T7519] vivid-007: Enable Output Cropping: true [ 316.216965][ T7519] vivid-007: Enable Output Composing: true [ 316.224491][ T7519] vivid-007: Enable Output Scaler: true [ 316.230183][ T7519] vivid-007: Tx RGB Quantization Range: Automatic [ 316.237531][ T7519] vivid-007: Transmit Mode: HDMI [ 316.244727][ T7519] vivid-007: Display Present: true inactive [ 316.259062][ T7519] vivid-007: Hotplug Present: 0x00000001 [ 316.265161][ T7519] vivid-007: RxSense Present: 0x00000001 [ 316.271247][ T7519] vivid-007: EDID Present: 0x00000001 [ 316.276884][ T7519] vivid-007: ================== END STATUS ================== [ 317.927744][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.934478][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.079075][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 322.206592][ T7551] kAFS: unparsable volume name [ 324.892688][ T7574] netlink: 256 bytes leftover after parsing attributes in process `syz.2.398'. [ 326.555142][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'. [ 326.986119][ T7594] vivid-007: ================= START STATUS ================= [ 326.994095][ T7594] vivid-007: Enable Output Cropping: true [ 327.000019][ T7594] vivid-007: Enable Output Composing: true [ 327.006103][ T7594] vivid-007: Enable Output Scaler: true [ 327.011934][ T7594] vivid-007: Tx RGB Quantization Range: Automatic [ 327.018980][ T7594] vivid-007: Transmit Mode: HDMI [ 327.024275][ T7594] vivid-007: Display Present: true inactive [ 327.030480][ T7594] vivid-007: Hotplug Present: 0x00000001 [ 327.036487][ T7594] vivid-007: RxSense Present: 0x00000001 [ 327.042499][ T7594] vivid-007: EDID Present: 0x00000001 [ 327.048089][ T7594] vivid-007: ================== END STATUS ================== [ 330.447321][ T7602] virtio-fs: tag not found [ 331.002400][ T7609] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 331.009262][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 331.069453][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 331.272179][ T5836] vhci_hcd: vhci_device speed not set [ 331.382014][ T5836] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 331.559226][ T7612] vhci_hcd: connection reset by peer [ 331.587797][ T3530] vhci_hcd: stop threads [ 331.602254][ T3530] vhci_hcd: release socket [ 331.615974][ T3530] vhci_hcd: disconnect device [ 335.269023][ T7629] netlink: 256 bytes leftover after parsing attributes in process `syz.0.411'. [ 335.344250][ T7630] vivid-007: ================= START STATUS ================= [ 335.352316][ T7630] vivid-007: Enable Output Cropping: true [ 335.358260][ T7630] vivid-007: Enable Output Composing: true [ 335.364432][ T7630] vivid-007: Enable Output Scaler: true [ 335.370212][ T7630] vivid-007: Tx RGB Quantization Range: Automatic [ 335.376834][ T7630] vivid-007: Transmit Mode: HDMI [ 335.382391][ T7630] vivid-007: Display Present: true inactive [ 335.388555][ T7630] vivid-007: Hotplug Present: 0x00000001 [ 335.404102][ T7630] vivid-007: RxSense Present: 0x00000001 [ 335.410198][ T7630] vivid-007: EDID Present: 0x00000001 [ 335.415834][ T7630] vivid-007: ================== END STATUS ================== [ 336.762087][ T5836] vhci_hcd: vhci_device speed not set [ 338.351292][ T7649] virtio-fs: tag not found [ 341.996234][ T7675] netlink: 256 bytes leftover after parsing attributes in process `syz.1.423'. [ 342.542635][ T7682] vivid-007: ================= START STATUS ================= [ 342.551181][ T7682] vivid-007: Enable Output Cropping: true [ 342.558030][ T7682] vivid-007: Enable Output Composing: true [ 342.564437][ T7682] vivid-007: Enable Output Scaler: true [ 342.570382][ T7682] vivid-007: Tx RGB Quantization Range: Automatic [ 342.577626][ T7682] vivid-007: Transmit Mode: HDMI [ 342.639878][ T7682] vivid-007: Display Present: true inactive [ 342.646473][ T7682] vivid-007: Hotplug Present: 0x00000001 [ 342.670396][ T7682] vivid-007: RxSense Present: 0x00000001 [ 342.676929][ T7682] vivid-007: EDID Present: 0x00000001 [ 342.683373][ T7682] vivid-007: ================== END STATUS ================== [ 343.263707][ T7690] program syz.0.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.760885][ T7694] virtio-fs: tag not found [ 348.690933][ T7726] netlink: 256 bytes leftover after parsing attributes in process `syz.0.436'. [ 350.308915][ T7740] 9pnet_fd: Insufficient options for proto=fd [ 350.403048][ T7743] ubi: mtd0 is already attached to ubi31 [ 350.417861][ T7743] kAFS: unparsable volume name [ 353.537908][ T7767] netlink: 256 bytes leftover after parsing attributes in process `syz.0.448'. [ 354.817306][ T7770] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 355.048015][ T7774] bond1: (slave bridge1): making interface the new active one [ 355.084951][ T7774] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 356.241336][ T7790] Bluetooth: MGMT ver 1.22 [ 356.679254][ T7798] vivid-007: ================= START STATUS ================= [ 356.687345][ T7798] vivid-007: Enable Output Cropping: true [ 356.693366][ T7798] vivid-007: Enable Output Composing: true [ 356.699420][ T7798] vivid-007: Enable Output Scaler: true [ 356.705333][ T7798] vivid-007: Tx RGB Quantization Range: Automatic [ 356.712202][ T7798] vivid-007: Transmit Mode: HDMI [ 356.717388][ T7798] vivid-007: Display Present: true inactive [ 356.726420][ T7798] vivid-007: Hotplug Present: 0x00000001 [ 356.738454][ T7798] vivid-007: RxSense Present: 0x00000001 [ 356.744378][ T7798] vivid-007: EDID Present: 0x00000001 [ 356.749966][ T7798] vivid-007: ================== END STATUS ================== [ 358.436456][ T7800] ubi: mtd0 is already attached to ubi31 [ 358.537430][ T7803] comedi comedi3: pcl730: I/O port conflict (0x40000101,4) [ 358.608148][ T7800] kAFS: unparsable volume name [ 360.124121][ T7821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 360.695145][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 363.282087][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 363.301864][ T23] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 363.330452][ T23] usb 1-1: config 0 has no interface number 0 [ 363.372024][ T23] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 363.436619][ T23] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 363.473233][ T23] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 363.532879][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 363.585870][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.623882][ T23] usb 1-1: config 0 descriptor?? [ 363.653427][ T23] usb 1-1: can't set config #0, error -71 [ 363.691637][ T23] usb 1-1: USB disconnect, device number 2 [ 363.745897][ T7843] vivid-007: ================= START STATUS ================= [ 363.762228][ T7843] vivid-007: Enable Output Cropping: true [ 363.768620][ T7843] vivid-007: Enable Output Composing: true [ 363.775257][ T7843] vivid-007: Enable Output Scaler: true [ 363.781021][ T7843] vivid-007: Tx RGB Quantization Range: Automatic [ 363.787891][ T7843] vivid-007: Transmit Mode: HDMI [ 363.793443][ T7843] vivid-007: Display Present: true inactive [ 363.809015][ T7843] vivid-007: Hotplug Present: 0x00000001 [ 363.814990][ T7843] vivid-007: RxSense Present: 0x00000001 [ 363.820915][ T7843] vivid-007: EDID Present: 0x00000001 [ 363.826528][ T7843] vivid-007: ================== END STATUS ================== [ 365.358323][ T7852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.469'. [ 366.289584][ T7862] tipc: Enabled bearer , priority 0 [ 366.368005][ T7862] tipc: Resetting bearer [ 366.679839][ T7868] ubi: mtd0 is already attached to ubi31 [ 366.691122][ T7868] kAFS: unparsable volume name [ 366.741210][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.473'. [ 367.049780][ T7859] tipc: Disabling bearer [ 368.423189][ T7879] vivid-007: ================= START STATUS ================= [ 368.431056][ T7879] vivid-007: Enable Output Cropping: true [ 368.491496][ T7879] vivid-007: Enable Output Composing: true [ 368.512445][ T7879] vivid-007: Enable Output Scaler: true [ 368.542112][ T7879] vivid-007: Tx RGB Quantization Range: Automatic [ 368.562789][ T7879] vivid-007: Transmit Mode: HDMI [ 368.569843][ T7879] vivid-007: Display Present: true inactive [ 368.702147][ T7879] vivid-007: Hotplug Present: 0x00000001 [ 368.727969][ T7879] vivid-007: RxSense Present: 0x00000001 [ 368.752227][ T7879] vivid-007: EDID Present: 0x00000001 [ 368.757888][ T7879] vivid-007: ================== END STATUS ================== [ 368.897469][ T7887] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 368.924467][ T7887] CIFS: Unable to determine destination address [ 372.705373][ T7921] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 372.712149][ T7921] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 372.733861][ T7921] vhci_hcd vhci_hcd.0: Device attached [ 373.032533][ T5876] vhci_hcd: vhci_device speed not set [ 373.152069][ T5876] usb 35-1: new full-speed USB device number 8 using vhci_hcd [ 373.381077][ T7923] vhci_hcd: connection reset by peer [ 373.397257][ T7931] vivid-007: ================= START STATUS ================= [ 373.447424][ T59] vhci_hcd: stop threads [ 373.454376][ T59] vhci_hcd: release socket [ 373.461134][ T7931] vivid-007: Enable Output Cropping: true [ 373.462113][ T59] vhci_hcd: disconnect device [ 373.476514][ T7931] vivid-007: Enable Output Composing: true [ 373.489376][ T7931] vivid-007: Enable Output Scaler: true [ 373.495967][ T7931] vivid-007: Tx RGB Quantization Range: Automatic [ 373.661539][ T7931] vivid-007: Transmit Mode: HDMI [ 373.688033][ T7931] vivid-007: Display Present: true inactive [ 373.701176][ T7931] vivid-007: Hotplug Present: 0x00000001 [ 373.745083][ T7931] vivid-007: RxSense Present: 0x00000001 [ 373.759641][ T7931] vivid-007: EDID Present: 0x00000001 [ 373.774008][ T7931] vivid-007: ================== END STATUS ================== [ 374.675004][ T7943] ubi: mtd0 is already attached to ubi31 [ 375.434038][ T7948] syz.0.490: attempt to access beyond end of device [ 375.434038][ T7948] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 375.624377][ T7947] block nbd0: shutting down sockets [ 376.636630][ T7967] binder: 7966:7967 ioctl c0306201 2000000002c0 returned -14 [ 377.019091][ T7973] vivid-007: ================= START STATUS ================= [ 377.073279][ T7973] vivid-007: Enable Output Cropping: true [ 377.136821][ T7973] vivid-007: Enable Output Composing: true [ 377.143102][ T7973] vivid-007: Enable Output Scaler: true [ 377.149148][ T7973] vivid-007: Tx RGB Quantization Range: Automatic [ 377.161792][ T7973] vivid-007: Transmit Mode: HDMI [ 377.181020][ T7973] vivid-007: Display Present: true inactive [ 377.273020][ T7973] vivid-007: Hotplug Present: 0x00000001 [ 377.312131][ T7973] vivid-007: RxSense Present: 0x00000001 [ 377.325145][ T7973] vivid-007: EDID Present: 0x00000001 [ 377.330877][ T7973] vivid-007: ================== END STATUS ================== [ 377.605114][ T7981] 9pnet_virtio: no channels available for device syz [ 378.332489][ T5876] vhci_hcd: vhci_device speed not set [ 378.388216][ T8000] CIFS: Unable to determine destination address [ 379.132090][ T8001] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 379.377666][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.385052][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.408580][ T8002] bond1: (slave bridge1): making interface the new active one [ 379.448964][ T8002] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 381.063195][ T8021] vivid-007: ================= START STATUS ================= [ 381.071078][ T8021] vivid-007: Enable Output Cropping: true [ 381.077415][ T8021] vivid-007: Enable Output Composing: true [ 381.116496][ T8021] vivid-007: Enable Output Scaler: true [ 381.252837][ T8021] vivid-007: Tx RGB Quantization Range: Automatic [ 381.269722][ T8021] vivid-007: Transmit Mode: HDMI [ 381.276254][ T8021] vivid-007: Display Present: true inactive [ 381.283405][ T8021] vivid-007: Hotplug Present: 0x00000001 [ 381.289299][ T8021] vivid-007: RxSense Present: 0x00000001 [ 381.299612][ T8021] vivid-007: EDID Present: 0x00000001 [ 381.305295][ T8021] vivid-007: ================== END STATUS ================== [ 381.589585][ T8025] hub 1-0:1.0: USB hub found [ 381.601701][ T8025] hub 1-0:1.0: 1 port detected [ 383.513498][ T8059] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 383.520218][ T8059] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 383.553881][ T8059] vhci_hcd vhci_hcd.0: Device attached [ 383.765063][ T23] vhci_hcd: vhci_device speed not set [ 383.882255][ T23] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 384.302968][ T8061] vhci_hcd: connection closed [ 384.353389][ T1309] vhci_hcd: stop threads [ 384.436787][ T1309] vhci_hcd: release socket [ 384.453984][ T1309] vhci_hcd: disconnect device [ 384.510886][ T8071] CIFS: Unable to determine destination address [ 386.261143][ T8080] vivid-007: ================= START STATUS ================= [ 386.271138][ T8080] vivid-007: Enable Output Cropping: true [ 386.371158][ T8080] vivid-007: Enable Output Composing: true [ 386.392727][ T8080] vivid-007: Enable Output Scaler: true [ 386.400226][ T8080] vivid-007: Tx RGB Quantization Range: Automatic [ 386.432038][ T8080] vivid-007: Transmit Mode: HDMI [ 386.526154][ T8080] vivid-007: Display Present: true inactive [ 386.544757][ T8080] vivid-007: Hotplug Present: 0x00000001 [ 386.550655][ T8080] vivid-007: RxSense Present: 0x00000001 [ 386.565462][ T8080] vivid-007: EDID Present: 0x00000001 [ 386.593917][ T8080] vivid-007: ================== END STATUS ================== [ 388.286718][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 389.213602][ T8099] netlink: 'syz.0.520': attribute type 5 has an invalid length. [ 389.229314][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 389.245945][ T8099] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 389.255838][ T8099] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 389.265288][ T8099] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 389.274689][ T8099] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 389.293826][ T8099] geneve2: entered promiscuous mode [ 389.299640][ T8099] geneve2: entered allmulticast mode [ 389.442028][ T23] vhci_hcd: vhci_device speed not set [ 389.882034][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 390.101957][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 390.126478][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.153030][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.167173][ T5877] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 390.181071][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.208446][ T5877] usb 3-1: config 0 descriptor?? [ 390.237517][ T8115] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 390.244578][ T8115] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 390.325198][ T8115] vhci_hcd vhci_hcd.0: Device attached [ 390.522115][ T5876] vhci_hcd: vhci_device speed not set [ 390.612376][ T5876] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 390.744345][ T5877] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 390.803058][ T8117] vhci_hcd: connection reset by peer [ 390.842051][ T3445] vhci_hcd: stop threads [ 390.871959][ T3445] vhci_hcd: release socket [ 390.890113][ T3445] vhci_hcd: disconnect device [ 390.981235][ T787] usb 3-1: USB disconnect, device number 2 [ 391.218405][ T8127] vivid-007: ================= START STATUS ================= [ 391.227022][ T8127] vivid-007: Enable Output Cropping: true [ 391.239013][ T8127] vivid-007: Enable Output Composing: true [ 391.247771][ T8127] vivid-007: Enable Output Scaler: true [ 391.259228][ T8127] vivid-007: Tx RGB Quantization Range: Automatic [ 391.268929][ T8127] vivid-007: Transmit Mode: HDMI [ 391.283183][ T8127] vivid-007: Display Present: true inactive [ 391.289979][ T8127] vivid-007: Hotplug Present: 0x00000001 [ 391.310366][ T8127] vivid-007: RxSense Present: 0x00000001 [ 391.316773][ T8127] vivid-007: EDID Present: 0x00000001 [ 391.322913][ T8127] vivid-007: ================== END STATUS ================== [ 393.352671][ T8152] netlink: 256 bytes leftover after parsing attributes in process `syz.0.534'. [ 394.263622][ T8158] virtio-fs: tag not found [ 394.691105][ T8163] vivid-007: ================= START STATUS ================= [ 394.699234][ T8163] vivid-007: Enable Output Cropping: true [ 394.705354][ T8163] vivid-007: Enable Output Composing: true [ 394.711731][ T8163] vivid-007: Enable Output Scaler: true [ 394.717368][ T8163] vivid-007: Tx RGB Quantization Range: Automatic [ 394.724205][ T8163] vivid-007: Transmit Mode: HDMI [ 394.729191][ T8163] vivid-007: Display Present: true inactive [ 394.735565][ T8163] vivid-007: Hotplug Present: 0x00000001 [ 394.741346][ T8163] vivid-007: RxSense Present: 0x00000001 [ 394.747442][ T8163] vivid-007: EDID Present: 0x00000001 [ 394.753090][ T8163] vivid-007: ================== END STATUS ================== [ 394.821690][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 394.831466][ T8164] netlink: 'syz.2.535': attribute type 5 has an invalid length. [ 394.840371][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.535'. [ 395.345659][ T8164] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 395.367446][ T8164] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 395.382618][ T8164] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 395.400198][ T8164] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 395.422754][ T8164] geneve2: entered promiscuous mode [ 395.442720][ T8164] geneve2: entered allmulticast mode [ 395.548073][ T8168] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 395.554684][ T8168] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 395.588050][ T8168] vhci_hcd vhci_hcd.0: Device attached [ 395.752003][ T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 396.466390][ T8174] vhci_hcd: connection reset by peer [ 396.572066][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 396.572675][ T48] vhci_hcd: stop threads [ 396.579613][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.610262][ T48] vhci_hcd: release socket [ 396.612163][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.643908][ T48] vhci_hcd: disconnect device [ 396.701189][ T787] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 396.728607][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.752209][ T5876] vhci_hcd: vhci_device speed not set [ 396.765533][ T787] usb 1-1: config 0 descriptor?? [ 399.007388][ T787] usbhid 1-1:0.0: can't add hid device: -71 [ 399.016776][ T787] usbhid: probe of 1-1:0.0 failed with error -71 [ 399.044028][ T787] usb 1-1: USB disconnect, device number 3 [ 400.275273][ T8201] netlink: 256 bytes leftover after parsing attributes in process `syz.3.547'. [ 400.305225][ T8199] virtio-fs: tag not found [ 401.253294][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 401.444652][ T8217] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 401.451724][ T8217] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 401.742736][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 402.212942][ T8217] vhci_hcd vhci_hcd.0: Device attached [ 402.364129][ T8220] vhci_hcd: connection closed [ 402.376124][ T3445] vhci_hcd: stop threads [ 402.411790][ T3445] vhci_hcd: release socket [ 402.412124][ T8] vhci_hcd: vhci_device speed not set [ 402.422152][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 402.434144][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.448592][ T3445] vhci_hcd: disconnect device [ 402.468362][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.489306][ T5836] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 402.510401][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.529975][ T5836] usb 4-1: config 0 descriptor?? [ 402.535428][ T8] usb 35-1: new full-speed USB device number 9 using vhci_hcd [ 402.535497][ T8] usb 35-1: enqueue for inactive port 0 [ 402.662076][ T8] vhci_hcd: vhci_device speed not set [ 403.123915][ T5836] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 403.386623][ T5877] usb 4-1: USB disconnect, device number 3 [ 405.943697][ T8250] virtio-fs: tag not found [ 406.022702][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 406.893798][ T8259] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 406.900497][ T8259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 406.910626][ T8259] vhci_hcd vhci_hcd.0: Device attached [ 407.063019][ T8265] vhci_hcd: connection closed [ 407.100573][ T48] vhci_hcd: stop threads [ 407.120089][ T48] vhci_hcd: release socket [ 407.124829][ T5836] vhci_hcd: vhci_device speed not set [ 407.145070][ T28] audit: type=1804 audit(1756851186.329:26): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.566" name="/newroot/128/bus/bus" dev="overlay" ino=722 res=1 errno=0 [ 407.171253][ T48] vhci_hcd: disconnect device [ 407.230414][ T28] audit: type=1804 audit(1756851186.359:27): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.566" name="/newroot/128/bus/bus" dev="overlay" ino=722 res=1 errno=0 [ 407.262176][ T5836] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 407.270996][ T5836] usb 37-1: enqueue for inactive port 0 [ 407.382072][ T5836] vhci_hcd: vhci_device speed not set [ 408.381971][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 408.572481][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 408.597462][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.611262][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.633092][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 408.662794][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.718956][ T23] usb 3-1: config 0 descriptor?? [ 408.869917][ T8287] netlink: 'syz.1.570': attribute type 72 has an invalid length. [ 409.212889][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 409.362338][ T23] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 409.604673][ T969] usb 3-1: USB disconnect, device number 3 [ 409.774536][ T8298] fido_id[8298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 409.910401][ T8300] virtio-fs: tag not found [ 410.851303][ T8305] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 410.858086][ T8305] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 410.893631][ T8305] vhci_hcd vhci_hcd.0: Device attached [ 411.002527][ T8307] vhci_hcd: connection closed [ 411.017440][ T59] vhci_hcd: stop threads [ 411.057419][ T59] vhci_hcd: release socket [ 411.122126][ T5836] vhci_hcd: vhci_device speed not set [ 411.160992][ T59] vhci_hcd: disconnect device [ 411.232020][ T5836] usb 35-1: new full-speed USB device number 10 using vhci_hcd [ 411.240937][ T5836] usb 35-1: enqueue for inactive port 0 [ 411.342045][ T5836] vhci_hcd: vhci_device speed not set [ 411.460474][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 411.484948][ T8317] netlink: 'syz.2.575': attribute type 5 has an invalid length. [ 411.504793][ T8317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 411.669578][ T28] audit: type=1804 audit(1756851190.859:28): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.578" name="/newroot/138/bus/bus" dev="overlay" ino=806 res=1 errno=0 [ 411.768843][ T28] audit: type=1804 audit(1756851190.959:29): pid=8322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.578" name="/newroot/138/bus/bus" dev="overlay" ino=806 res=1 errno=0 [ 412.455141][ T8330] fuse: Bad value for 'fd' [ 412.740581][ T8332] netlink: 'syz.0.581': attribute type 72 has an invalid length. [ 412.911721][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'. [ 413.195831][ T8340] netlink: 256 bytes leftover after parsing attributes in process `syz.2.585'. [ 413.385501][ T969] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 413.749045][ T8343] virtio-fs: tag not found [ 413.831994][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 413.853097][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.895240][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.942751][ T969] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 413.952468][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.966574][ T969] usb 2-1: config 0 descriptor?? [ 414.479032][ T8348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 414.485723][ T8348] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.519020][ T8348] vhci_hcd vhci_hcd.0: Device attached [ 414.573618][ T969] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 414.660306][ T8351] vhci_hcd: connection closed [ 414.661393][ T3530] vhci_hcd: stop threads [ 414.697334][ T3530] vhci_hcd: release socket [ 414.736173][ T3530] vhci_hcd: disconnect device [ 414.759615][ T5877] vhci_hcd: vhci_device speed not set [ 414.770773][ T8354] CIFS: Unable to determine destination address [ 415.186179][ T787] usb 2-1: USB disconnect, device number 3 [ 415.225231][ T8355] fido_id[8355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 415.701053][ T8364] netlink: 'syz.3.590': attribute type 72 has an invalid length. [ 418.254864][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 418.488292][ T8379] netlink: 256 bytes leftover after parsing attributes in process `syz.1.595'. [ 419.790489][ T8393] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 419.797593][ T8393] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 419.830093][ T8393] vhci_hcd vhci_hcd.0: Device attached [ 419.885453][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'. [ 419.895016][ T8396] vhci_hcd: connection closed [ 419.898582][ T48] vhci_hcd: stop threads [ 419.908017][ T48] vhci_hcd: release socket [ 419.912997][ T8399] netlink: 'syz.2.594': attribute type 5 has an invalid length. [ 419.929762][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.594'. [ 419.939214][ T48] vhci_hcd: disconnect device [ 420.332038][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 420.521994][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 420.529569][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.562647][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.589661][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 420.618401][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.643366][ T8] usb 1-1: config 0 descriptor?? [ 420.654502][ T8406] vivid-007: ================= START STATUS ================= [ 420.662288][ T8406] vivid-007: Enable Output Cropping: true [ 420.668259][ T8406] vivid-007: Enable Output Composing: true [ 420.674314][ T8406] vivid-007: Enable Output Scaler: true [ 420.680066][ T8406] vivid-007: Tx RGB Quantization Range: Automatic [ 420.686726][ T8406] vivid-007: Transmit Mode: HDMI [ 420.691800][ T8406] vivid-007: Display Present: true inactive [ 420.697917][ T8406] vivid-007: Hotplug Present: 0x00000001 [ 420.703833][ T8406] vivid-007: RxSense Present: 0x00000001 [ 420.709601][ T8406] vivid-007: EDID Present: 0x00000001 [ 420.715145][ T8406] vivid-007: ================== END STATUS ================== [ 420.735969][ T8407] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.602'. [ 420.866081][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 423.435028][ T8] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 423.734463][ T55] usb 1-1: USB disconnect, device number 4 [ 424.030007][ T8425] netlink: 256 bytes leftover after parsing attributes in process `syz.2.608'. [ 424.047624][ T8420] fido_id[8420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 425.381384][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 425.391036][ T8436] netlink: 'syz.1.609': attribute type 5 has an invalid length. [ 425.419926][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.609'. [ 425.655848][ T8436] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 425.665109][ T8436] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 425.674686][ T8436] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 425.683888][ T8436] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 425.694380][ T8436] geneve2: entered promiscuous mode [ 425.699941][ T8436] geneve2: entered allmulticast mode [ 426.101242][ T8447] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 426.107848][ T8447] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 426.155674][ T8447] vhci_hcd vhci_hcd.0: Device attached [ 426.183487][ T8452] vivid-007: ================= START STATUS ================= [ 426.191345][ T8452] vivid-007: Enable Output Cropping: true [ 426.197470][ T8452] vivid-007: Enable Output Composing: true [ 426.203620][ T8452] vivid-007: Enable Output Scaler: true [ 426.209368][ T8452] vivid-007: Tx RGB Quantization Range: Automatic [ 426.216140][ T8452] vivid-007: Transmit Mode: HDMI [ 426.221157][ T8452] vivid-007: Display Present: true inactive [ 426.227349][ T8452] vivid-007: Hotplug Present: 0x00000001 [ 426.233497][ T8452] vivid-007: RxSense Present: 0x00000001 [ 426.239628][ T8452] vivid-007: EDID Present: 0x00000001 [ 426.245177][ T8452] vivid-007: ================== END STATUS ================== [ 426.287694][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 426.315003][ T8449] vhci_hcd: connection closed [ 426.352062][ T55] vhci_hcd: vhci_device speed not set [ 426.365135][ T59] vhci_hcd: stop threads [ 426.369543][ T59] vhci_hcd: release socket [ 426.390997][ T59] vhci_hcd: disconnect device [ 426.452111][ T55] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 426.459740][ T55] usb 37-1: enqueue for inactive port 0 [ 426.542348][ T55] vhci_hcd: vhci_device speed not set [ 426.821985][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 427.653124][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 427.768092][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.785662][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.798884][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 427.820422][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.846468][ T8] usb 4-1: config 0 descriptor?? [ 428.492600][ T8] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 428.503358][ T8476] CIFS: Unable to determine destination address [ 428.900141][ T8] usb 4-1: USB disconnect, device number 4 [ 429.042318][ T8478] fido_id[8478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 431.373089][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 439.162539][ T8540] sched: RT throttling activated [ 440.806672][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.813446][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.463060][ T8568] binder: 8567:8568 ioctl c0306201 200000000240 returned -11 [ 442.497378][ T8568] binder: 8567:8568 ioctl c0306201 2000000002c0 returned -14 [ 443.236213][ T8588] ubi: mtd0 is already attached to ubi31 [ 443.318284][ T8590] vivid-007: ================= START STATUS ================= [ 443.326453][ T8590] vivid-007: Enable Output Cropping: true [ 443.332348][ T8590] vivid-007: Enable Output Composing: true [ 443.338382][ T8590] vivid-007: Enable Output Scaler: true [ 443.344201][ T8590] vivid-007: Tx RGB Quantization Range: Automatic [ 443.350778][ T8590] vivid-007: Transmit Mode: HDMI [ 443.355798][ T8590] vivid-007: Display Present: true inactive [ 443.362270][ T8590] vivid-007: Hotplug Present: 0x00000001 [ 443.368085][ T8590] vivid-007: RxSense Present: 0x00000001 [ 443.374019][ T8590] vivid-007: EDID Present: 0x00000001 [ 443.379475][ T8590] vivid-007: ================== END STATUS ================== [ 443.996903][ T8600] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 444.003633][ T8600] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 444.097876][ T8600] vhci_hcd vhci_hcd.0: Device attached [ 444.292141][ T787] vhci_hcd: vhci_device speed not set [ 444.382876][ T787] usb 37-1: new full-speed USB device number 8 using vhci_hcd [ 444.695737][ T8602] vhci_hcd: connection reset by peer [ 444.726369][ T1309] vhci_hcd: stop threads [ 444.730772][ T1309] vhci_hcd: release socket [ 444.910767][ T1309] vhci_hcd: disconnect device [ 446.596158][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 446.632852][ T8623] netlink: 'syz.2.656': attribute type 5 has an invalid length. [ 446.666051][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'. [ 447.190070][ T8633] vivid-007: ================= START STATUS ================= [ 447.198142][ T8633] vivid-007: Enable Output Cropping: true [ 447.204199][ T8633] vivid-007: Enable Output Composing: true [ 447.210214][ T8633] vivid-007: Enable Output Scaler: true [ 447.215855][ T8633] vivid-007: Tx RGB Quantization Range: Automatic [ 447.223270][ T8633] vivid-007: Transmit Mode: HDMI [ 447.228262][ T8633] vivid-007: Display Present: true inactive [ 447.234233][ T8633] vivid-007: Hotplug Present: 0x00000001 [ 447.240078][ T8633] vivid-007: RxSense Present: 0x00000001 [ 447.245973][ T8633] vivid-007: EDID Present: 0x00000001 [ 447.251559][ T8633] vivid-007: ================== END STATUS ================== [ 449.522293][ T787] vhci_hcd: vhci_device speed not set [ 449.988215][ T8665] vivid-007: ================= START STATUS ================= [ 449.996253][ T8665] vivid-007: Enable Output Cropping: true [ 450.002494][ T8665] vivid-007: Enable Output Composing: true [ 450.008336][ T8665] vivid-007: Enable Output Scaler: true [ 450.014040][ T8665] vivid-007: Tx RGB Quantization Range: Automatic [ 450.020665][ T8665] vivid-007: Transmit Mode: HDMI [ 450.025670][ T8665] vivid-007: Display Present: true inactive [ 450.031597][ T8665] vivid-007: Hotplug Present: 0x00000001 [ 450.037357][ T8665] vivid-007: RxSense Present: 0x00000001 [ 450.043548][ T8665] vivid-007: EDID Present: 0x00000001 [ 450.048957][ T8665] vivid-007: ================== END STATUS ================== [ 450.153595][ T8669] netlink: 256 bytes leftover after parsing attributes in process `syz.3.672'. [ 451.571921][ T28] audit: type=1804 audit(1756851230.749:30): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.671" name="/newroot/190/bus/bus" dev="overlay" ino=1064 res=1 errno=0 [ 451.676396][ T28] audit: type=1804 audit(1756851230.759:31): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.671" name="/newroot/190/bus/bus" dev="overlay" ino=1064 res=1 errno=0 [ 453.248872][ T8705] netlink: 256 bytes leftover after parsing attributes in process `syz.3.682'. [ 453.457586][ T8702] vivid-007: ================= START STATUS ================= [ 453.465535][ T8702] vivid-007: Enable Output Cropping: true [ 453.471458][ T8702] vivid-007: Enable Output Composing: true [ 453.477623][ T8702] vivid-007: Enable Output Scaler: true [ 453.483307][ T8702] vivid-007: Tx RGB Quantization Range: Automatic [ 453.489774][ T8702] vivid-007: Transmit Mode: HDMI [ 453.494817][ T8702] vivid-007: Display Present: true inactive [ 453.500761][ T8702] vivid-007: Hotplug Present: 0x00000001 [ 453.506646][ T8702] vivid-007: RxSense Present: 0x00000001 [ 453.512676][ T8702] vivid-007: EDID Present: 0x00000001 [ 453.518101][ T8702] vivid-007: ================== END STATUS ================== [ 456.454525][ T8725] tipc: Started in network mode [ 456.459562][ T8725] tipc: Node identity 965f9c1d8f15, cluster identity 4711 [ 456.554436][ T8725] tipc: Enabled bearer , priority 0 [ 456.993554][ T8721] tipc: Disabling bearer [ 457.968143][ T8742] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 457.974822][ T8742] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 457.985760][ T8742] vhci_hcd vhci_hcd.0: Device attached [ 457.993228][ T8747] netlink: 256 bytes leftover after parsing attributes in process `syz.2.692'. [ 458.642332][ T5877] vhci_hcd: vhci_device speed not set [ 458.749295][ T8751] netlink: 256 bytes leftover after parsing attributes in process `syz.1.693'. [ 458.759933][ T5877] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 459.351416][ T8744] vhci_hcd: connection reset by peer [ 459.367301][ T59] vhci_hcd: stop threads [ 459.382322][ T59] vhci_hcd: release socket [ 459.407098][ T59] vhci_hcd: disconnect device [ 460.664226][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 460.723791][ T8761] netlink: 'syz.1.695': attribute type 5 has an invalid length. [ 460.778731][ T8761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.695'. [ 461.156317][ T28] audit: type=1804 audit(1756851240.349:32): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.696" name="/newroot/174/bus/bus" dev="overlay" ino=1009 res=1 errno=0 [ 461.210932][ T28] audit: type=1804 audit(1756851240.399:33): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.696" name="/newroot/174/bus/bus" dev="overlay" ino=1009 res=1 errno=0 [ 462.945411][ T8772] vivid-007: ================= START STATUS ================= [ 462.953327][ T8772] vivid-007: Enable Output Cropping: true [ 462.959094][ T8772] vivid-007: Enable Output Composing: true [ 462.965211][ T8772] vivid-007: Enable Output Scaler: true [ 462.970804][ T8772] vivid-007: Tx RGB Quantization Range: Automatic [ 462.977473][ T8772] vivid-007: Transmit Mode: HDMI [ 462.982533][ T8772] vivid-007: Display Present: true inactive [ 462.988720][ T8772] vivid-007: Hotplug Present: 0x00000001 [ 462.994952][ T8772] vivid-007: RxSense Present: 0x00000001 [ 463.000611][ T8772] vivid-007: EDID Present: 0x00000001 [ 463.006129][ T8772] vivid-007: ================== END STATUS ================== [ 463.143082][ T8775] 9pnet_virtio: no channels available for device syz [ 463.568496][ T8787] netlink: 256 bytes leftover after parsing attributes in process `syz.3.702'. [ 464.002071][ T5877] vhci_hcd: vhci_device speed not set [ 464.109992][ T8790] netlink: 256 bytes leftover after parsing attributes in process `syz.2.703'. [ 466.037308][ T8802] binder: 8801:8802 ioctl c0306201 200000000240 returned -11 [ 466.055999][ T8802] binder: 8801:8802 ioctl c0306201 2000000002c0 returned -14 [ 466.601306][ T8810] vivid-007: ================= START STATUS ================= [ 466.609582][ T8810] vivid-007: Enable Output Cropping: true [ 466.615479][ T8810] vivid-007: Enable Output Composing: true [ 466.621507][ T8810] vivid-007: Enable Output Scaler: true [ 466.627226][ T8810] vivid-007: Tx RGB Quantization Range: Automatic [ 466.633925][ T8810] vivid-007: Transmit Mode: HDMI [ 466.638981][ T8810] vivid-007: Display Present: true inactive [ 466.645011][ T8810] vivid-007: Hotplug Present: 0x00000001 [ 466.650767][ T8810] vivid-007: RxSense Present: 0x00000001 [ 466.656523][ T8810] vivid-007: EDID Present: 0x00000001 [ 466.662080][ T8810] vivid-007: ================== END STATUS ================== [ 466.746920][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'. [ 466.757847][ T8814] netlink: 'syz.3.708': attribute type 5 has an invalid length. [ 466.766965][ T8814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.708'. [ 466.864332][ T8814] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 466.991501][ T8814] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 467.002997][ T8814] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 467.082690][ T8814] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 467.171611][ T8814] geneve2: entered promiscuous mode [ 467.272083][ T8814] geneve2: entered allmulticast mode [ 467.362030][ T28] audit: type=1804 audit(1756851246.539:34): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.711" name="/newroot/165/bus/bus" dev="overlay" ino=932 res=1 errno=0 [ 467.416445][ T28] audit: type=1804 audit(1756851246.549:35): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.711" name="/newroot/165/bus/bus" dev="overlay" ino=932 res=1 errno=0 [ 471.049950][ T8844] netlink: 256 bytes leftover after parsing attributes in process `syz.2.717'. [ 471.652253][ T8849] binder: 8845:8849 ioctl c0306201 200000000240 returned -11 [ 471.696310][ T8849] binder: 8845:8849 ioctl c0306201 2000000002c0 returned -14 [ 472.026539][ T8854] vivid-007: ================= START STATUS ================= [ 472.034635][ T8854] vivid-007: Enable Output Cropping: true [ 472.040526][ T8854] vivid-007: Enable Output Composing: true [ 472.046794][ T8854] vivid-007: Enable Output Scaler: true [ 472.052750][ T8854] vivid-007: Tx RGB Quantization Range: Automatic [ 472.059556][ T8854] vivid-007: Transmit Mode: HDMI [ 472.064643][ T8854] vivid-007: Display Present: true inactive [ 472.071107][ T8854] vivid-007: Hotplug Present: 0x00000001 [ 472.076812][ T8854] vivid-007: RxSense Present: 0x00000001 [ 472.082654][ T8854] vivid-007: EDID Present: 0x00000001 [ 472.088097][ T8854] vivid-007: ================== END STATUS ================== [ 474.967202][ T8883] 9pnet_virtio: no channels available for device syz [ 475.362234][ T8890] netlink: 256 bytes leftover after parsing attributes in process `syz.2.728'. [ 475.683728][ T8895] binder_alloc: 8892: binder_alloc_buf, no vma [ 475.699531][ T8895] binder: 8892:8895 ioctl c0306201 2000000002c0 returned -14 [ 477.977728][ T8905] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 477.984433][ T8905] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 477.999078][ T8905] vhci_hcd vhci_hcd.0: Device attached [ 478.140442][ T8908] vhci_hcd: connection closed [ 478.172352][ T1309] vhci_hcd: stop threads [ 478.208511][ T1309] vhci_hcd: release socket [ 478.220744][ T1309] vhci_hcd: disconnect device [ 478.232543][ T5876] vhci_hcd: vhci_device speed not set [ 478.334770][ T8917] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 480.557765][ T8933] netlink: 256 bytes leftover after parsing attributes in process `syz.2.739'. [ 480.689729][ T8934] binder_alloc: 8931: binder_alloc_buf, no vma [ 480.700418][ T8934] binder: 8931:8934 ioctl c0306201 2000000002c0 returned -14 [ 483.895009][ T8963] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 483.901627][ T8963] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 484.022526][ T8963] vhci_hcd vhci_hcd.0: Device attached [ 484.182063][ T8966] vhci_hcd: connection closed [ 484.205136][ T3530] vhci_hcd: stop threads [ 484.222061][ T5877] vhci_hcd: vhci_device speed not set [ 484.300550][ T3530] vhci_hcd: release socket [ 484.570015][ T5877] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 485.052146][ T3530] vhci_hcd: disconnect device [ 485.078568][ T5877] usb 37-1: enqueue for inactive port 0 [ 485.172153][ T5877] vhci_hcd: vhci_device speed not set [ 487.943989][ T9002] ptrace attach of "./syz-executor exec"[5789] was attempted by " ú“\x0c¬¹H;¤'ýëãSde/È|¥zPüÚиWåÌ\x0b”PŠ<ÇI7ô{‚ŸûWr•×¢Ó‡amL5Ûï{ô„Þ¶-Ú¨ÜøžØ¸­…›¼»E“fŽYSõ7£?šVê½sˆëŒ\x0b†MÈüÚáÐ÷Æ`ÖÓðg‰ï°Ø±/â—’ýäUéµCŽÎöOGËDn›û\x07Âæw™¹m}O²ñq¦ã¬p×]ŒðK|I(Ùïó‹9¯/èk¾ìY_¡Ö¤vqyØóÿ×rƲÈ.+/ñnîyŠ]§6ÖB\x5c*‰ÈõLo§Ÿ× …\x0a ¢BÚ\x0dáÛAnÿë¬õ\x0bptQUolLê„ÓobBàÀM¦ñÖãóȹ.š»T3#(Dª\x1bªº˜™ä?-íMóŠMÞ\x0dÅ{ÞX¯óâ˜Lhl1G‡J(°ï‰Ÿ™\x0a˜«À¹\x07ê‚b\x0cf¸Û\x5c–L™e#ç½y„wÝO%Ë0õ¥,Ž¨zÇ‚œrÏ\x5cHô\x22ý@)EâlĪoª´=æÉ0}Æ|šö¶—m ÀÉ~ŽM÷ÏUK\x0býQoDU1h$étïQf‘\x0b½;\x0bvNõT/ñörP£Àx0mþ؇dG>Ît5QêI§¡šÝ0kŸópžì”;†€Èî©tÒ>?7~ðéÕžþç8ç)>‡\x0a.Fâv\x5c0CPª{©\x07Ô­4OT)®¥ü%ù³DkfCkF ç±¥;¡Ðm\x0c•vä\x0cTʪz5©ñmÖ¢´—ïvÜÄà‰Ä«'c®üß^ت°g_\x0bÆ…8±)c,¨(qøáeäB¾ðãã‘»SPt4äo¹ ¾I„HwL#©–@mU¡pªE¢^aÒÉgh~d¬_ö­9\x07r|ÖçGJj+&Ò½k(‘\x07”êërnéE§4¼(ŸõÇó#ë×\x0b YÅβBÇäˆ\x0aЦ&ÆþRý`µ?èóL1t¸Ž÷ÎÕ«wËÑ.Mç=3ª|G‹÷ƒ“sùmƒgî4`|\x22{б춋¬½†1â[{þȯw/B‹_g»6-òqyk*™o¯’\x0d\x5cc8ÀèÌÿ\x5 [ 492.200962][ T9026] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 492.299936][ T9026] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 492.322816][ T9026] vhci_hcd vhci_hcd.0: Device attached [ 492.734962][ T969] vhci_hcd: vhci_device speed not set [ 492.763074][ T9030] vhci_hcd: connection closed [ 492.763421][ T3530] vhci_hcd: stop threads [ 492.780788][ T3530] vhci_hcd: release socket [ 492.786427][ T3530] vhci_hcd: disconnect device [ 492.852077][ T969] usb 35-1: new full-speed USB device number 12 using vhci_hcd [ 492.897003][ T969] usb 35-1: enqueue for inactive port 0 [ 493.002334][ T969] vhci_hcd: vhci_device speed not set [ 494.550107][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 500.530585][ T9082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 500.537288][ T9082] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 500.552433][ T9082] vhci_hcd vhci_hcd.0: Device attached [ 500.762427][ T787] vhci_hcd: vhci_device speed not set [ 501.531994][ T787] usb 35-1: new full-speed USB device number 13 using vhci_hcd [ 501.927293][ T9084] vhci_hcd: connection reset by peer [ 501.962933][ T3530] vhci_hcd: stop threads [ 501.972219][ T3530] vhci_hcd: release socket [ 501.979825][ T3530] vhci_hcd: disconnect device [ 502.245295][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.364922][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.186496][ T9103] netlink: 256 bytes leftover after parsing attributes in process `syz.0.782'. [ 506.722431][ T787] vhci_hcd: vhci_device speed not set [ 508.280101][ T9116] program syz.3.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.909961][ T9130] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 513.916657][ T9130] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 513.926848][ T9130] vhci_hcd vhci_hcd.0: Device attached [ 514.133789][ T9145] vhci_hcd: connection closed [ 514.135340][ T3473] vhci_hcd: stop threads [ 514.144982][ T55] vhci_hcd: vhci_device speed not set [ 514.227624][ T3473] vhci_hcd: release socket [ 514.257605][ T3473] vhci_hcd: disconnect device [ 514.282115][ T55] usb 35-1: new full-speed USB device number 14 using vhci_hcd [ 514.305692][ T55] usb 35-1: enqueue for inactive port 0 [ 514.403983][ T55] vhci_hcd: vhci_device speed not set [ 516.586370][ T9163] 9pnet_fd: Insufficient options for proto=fd [ 519.000890][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 519.024464][ T9177] netlink: 'syz.3.801': attribute type 5 has an invalid length. [ 519.039411][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.801'. [ 522.294773][ T9210] netlink: 256 bytes leftover after parsing attributes in process `syz.3.813'. [ 526.854306][ T9267] 9pnet_fd: Insufficient options for proto=fd [ 527.913341][ T9266] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 527.920054][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 527.944061][ T9266] vhci_hcd vhci_hcd.0: Device attached [ 528.054710][ T9278] vhci_hcd: connection closed [ 528.071682][ T59] vhci_hcd: stop threads [ 528.092725][ T59] vhci_hcd: release socket [ 528.117586][ T59] vhci_hcd: disconnect device [ 528.142142][ T55] vhci_hcd: vhci_device speed not set [ 530.671686][ T9304] netlink: 256 bytes leftover after parsing attributes in process `syz.1.837'. [ 531.855253][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 531.883161][ T9314] netlink: 'syz.2.838': attribute type 5 has an invalid length. [ 532.108885][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.838'. [ 534.859878][ T9340] vivid-002: disconnect [ 535.476214][ T9347] vivid-007: ================= START STATUS ================= [ 535.484232][ T9347] vivid-007: Enable Output Cropping: true [ 535.490281][ T9347] vivid-007: Enable Output Composing: true [ 535.496496][ T9347] vivid-007: Enable Output Scaler: true [ 535.502491][ T9347] vivid-007: Tx RGB Quantization Range: Automatic [ 535.509343][ T9347] vivid-007: Transmit Mode: HDMI [ 535.514538][ T9347] vivid-007: Display Present: true inactive [ 535.520704][ T9347] vivid-007: Hotplug Present: 0x00000001 [ 535.527308][ T9347] vivid-007: RxSense Present: 0x00000001 [ 535.533242][ T9347] vivid-007: EDID Present: 0x00000001 [ 535.538895][ T9347] vivid-007: ================== END STATUS ================== [ 535.597044][ T9339] vivid-002: reconnect [ 540.087407][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 542.000451][ T9397] vivid-006: disconnect [ 542.073070][ T9398] vivid-007: ================= START STATUS ================= [ 542.081288][ T9398] vivid-007: Enable Output Cropping: true [ 542.087926][ T9398] vivid-007: Enable Output Composing: true [ 542.094219][ T9398] vivid-007: Enable Output Scaler: true [ 542.100012][ T9398] vivid-007: Tx RGB Quantization Range: Automatic [ 542.106951][ T9398] vivid-007: Transmit Mode: HDMI [ 542.112395][ T9398] vivid-007: Display Present: true inactive [ 542.118555][ T9398] vivid-007: Hotplug Present: 0x00000001 [ 542.134005][ T9398] vivid-007: RxSense Present: 0x00000001 [ 542.140049][ T9398] vivid-007: EDID Present: 0x00000001 [ 542.145791][ T9398] vivid-007: ================== END STATUS ================== [ 544.258937][ T9394] vivid-006: reconnect [ 547.264076][ T9425] netlink: 256 bytes leftover after parsing attributes in process `syz.3.865'. [ 548.862143][ T9443] vivid-006: disconnect [ 548.957542][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 548.970727][ T9438] netlink: 'syz.2.866': attribute type 5 has an invalid length. [ 549.007633][ T9438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'. [ 549.516684][ T9442] vivid-006: reconnect [ 549.826205][ T9450] vivid-007: ================= START STATUS ================= [ 549.834318][ T9450] vivid-007: Enable Output Cropping: true [ 549.840323][ T9450] vivid-007: Enable Output Composing: true [ 549.846697][ T9450] vivid-007: Enable Output Scaler: true [ 549.855459][ T9450] vivid-007: Tx RGB Quantization Range: Automatic [ 549.862324][ T9450] vivid-007: Transmit Mode: HDMI [ 549.867681][ T9450] vivid-007: Display Present: true inactive [ 549.874180][ T9450] vivid-007: Hotplug Present: 0x00000001 [ 549.880084][ T9450] vivid-007: RxSense Present: 0x00000001 [ 549.886024][ T9450] vivid-007: EDID Present: 0x00000001 [ 549.891741][ T9450] vivid-007: ================== END STATUS ================== [ 556.144380][ T9493] netlink: 256 bytes leftover after parsing attributes in process `syz.1.878'. [ 557.098860][ T9505] vivid-007: ================= START STATUS ================= [ 557.106823][ T9505] vivid-007: Enable Output Cropping: true [ 557.112749][ T9505] vivid-007: Enable Output Composing: true [ 557.118871][ T9505] vivid-007: Enable Output Scaler: true [ 557.124638][ T9505] vivid-007: Tx RGB Quantization Range: Automatic [ 557.131314][ T9505] vivid-007: Transmit Mode: HDMI [ 557.136434][ T9505] vivid-007: Display Present: true inactive [ 557.142810][ T9505] vivid-007: Hotplug Present: 0x00000001 [ 557.156004][ T9505] vivid-007: RxSense Present: 0x00000001 [ 557.162300][ T9505] vivid-007: EDID Present: 0x00000001 [ 557.167979][ T9505] vivid-007: ================== END STATUS ================== [ 557.451886][ T9503] vivid-006: disconnect [ 559.286729][ T9501] vivid-006: reconnect [ 561.267551][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 561.276931][ T9532] netlink: 'syz.0.886': attribute type 5 has an invalid length. [ 561.318619][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.886'. [ 563.077983][ T9547] netlink: 256 bytes leftover after parsing attributes in process `syz.3.891'. [ 563.686169][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.692696][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.636954][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 565.165444][ T9559] vivid-004: disconnect [ 565.281249][ T9560] vivid-007: ================= START STATUS ================= [ 565.289257][ T9560] vivid-007: Enable Output Cropping: true [ 565.295266][ T9560] vivid-007: Enable Output Composing: true [ 565.301268][ T9560] vivid-007: Enable Output Scaler: true [ 565.307213][ T9560] vivid-007: Tx RGB Quantization Range: Automatic [ 565.313949][ T9560] vivid-007: Transmit Mode: HDMI [ 565.319339][ T9560] vivid-007: Display Present: true inactive [ 565.325477][ T9560] vivid-007: Hotplug Present: 0x00000001 [ 565.338343][ T9560] vivid-007: RxSense Present: 0x00000001 [ 565.344753][ T9560] vivid-007: EDID Present: 0x00000001 [ 565.350312][ T9560] vivid-007: ================== END STATUS ================== [ 567.312140][ T9556] vivid-004: reconnect [ 570.889759][ T9576] netlink: 256 bytes leftover after parsing attributes in process `syz.3.900'. [ 573.248056][ T9595] vivid-006: disconnect [ 573.908113][ T9591] vivid-006: reconnect [ 573.922518][ T9600] vivid-007: ================= START STATUS ================= [ 573.930409][ T9600] vivid-007: Enable Output Cropping: true [ 573.936815][ T9600] vivid-007: Enable Output Composing: true [ 573.943002][ T9600] vivid-007: Enable Output Scaler: true [ 573.948874][ T9600] vivid-007: Tx RGB Quantization Range: Automatic [ 573.955571][ T9600] vivid-007: Transmit Mode: HDMI [ 573.961001][ T9600] vivid-007: Display Present: true inactive [ 573.967338][ T9600] vivid-007: Hotplug Present: 0x00000001 [ 573.980512][ T9600] vivid-007: RxSense Present: 0x00000001 [ 573.986735][ T9600] vivid-007: EDID Present: 0x00000001 [ 573.992847][ T9600] vivid-007: ================== END STATUS ================== [ 579.059936][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 579.184993][ T9615] netlink: 'syz.3.907': attribute type 5 has an invalid length. [ 579.220508][ T9615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'. [ 580.766606][ T9631] netlink: 256 bytes leftover after parsing attributes in process `syz.2.912'. [ 581.944245][ T9638] vivid-007: ================= START STATUS ================= [ 581.952179][ T9638] vivid-007: Enable Output Cropping: true [ 581.958033][ T9638] vivid-007: Enable Output Composing: true [ 581.964122][ T9638] vivid-007: Enable Output Scaler: true [ 581.969808][ T9638] vivid-007: Tx RGB Quantization Range: Automatic [ 581.976615][ T9638] vivid-007: Transmit Mode: HDMI [ 581.981679][ T9638] vivid-007: Display Present: true inactive [ 581.987928][ T9638] vivid-007: Hotplug Present: 0x00000001 [ 581.993858][ T9638] vivid-007: RxSense Present: 0x00000001 [ 582.007685][ T9638] vivid-007: EDID Present: 0x00000001 [ 582.013556][ T9638] vivid-007: ================== END STATUS ================== [ 583.054490][ T9647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.110058][ T9647] 9pnet_virtio: no channels available for device syz [ 583.171113][ T9649] vivid-002: disconnect [ 585.361063][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 585.382221][ T9646] vivid-002: reconnect [ 585.457333][ T9653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.716616][ T9676] vivid-007: ================= START STATUS ================= [ 587.724709][ T9676] vivid-007: Enable Output Cropping: true [ 587.730603][ T9676] vivid-007: Enable Output Composing: true [ 587.736894][ T9676] vivid-007: Enable Output Scaler: true [ 587.742737][ T9676] vivid-007: Tx RGB Quantization Range: Automatic [ 587.749502][ T9676] vivid-007: Transmit Mode: HDMI [ 587.756579][ T9676] vivid-007: Display Present: true inactive [ 587.762953][ T9676] vivid-007: Hotplug Present: 0x00000001 [ 587.779780][ T9676] vivid-007: RxSense Present: 0x00000001 [ 587.785724][ T9676] vivid-007: EDID Present: 0x00000001 [ 587.791538][ T9676] vivid-007: ================== END STATUS ================== [ 589.550232][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 589.650069][ T9686] netlink: 'syz.0.925': attribute type 5 has an invalid length. [ 589.699320][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'. [ 591.497404][ T9701] vivid-002: disconnect [ 591.668601][ T9692] vivid-002: reconnect [ 594.756114][ T9719] vivid-007: ================= START STATUS ================= [ 594.764217][ T9719] vivid-007: Enable Output Cropping: true [ 594.770429][ T9719] vivid-007: Enable Output Composing: true [ 594.776626][ T9719] vivid-007: Enable Output Scaler: true [ 594.782502][ T9719] vivid-007: Tx RGB Quantization Range: Automatic [ 594.789161][ T9719] vivid-007: Transmit Mode: HDMI [ 594.794398][ T9719] vivid-007: Display Present: true inactive [ 594.800702][ T9719] vivid-007: Hotplug Present: 0x00000001 [ 594.816773][ T9719] vivid-007: RxSense Present: 0x00000001 [ 594.825574][ T9719] vivid-007: EDID Present: 0x00000001 [ 594.831230][ T9719] vivid-007: ================== END STATUS ================== [ 596.837876][ T9740] vivid-002: disconnect [ 597.651528][ T9738] vivid-002: reconnect [ 597.722201][ T9749] vivid-007: ================= START STATUS ================= [ 597.730000][ T9749] vivid-007: Enable Output Cropping: true [ 597.735943][ T9749] vivid-007: Enable Output Composing: true [ 597.742144][ T9749] vivid-007: Enable Output Scaler: true [ 597.747780][ T9749] vivid-007: Tx RGB Quantization Range: Automatic [ 597.754847][ T9749] vivid-007: Transmit Mode: HDMI [ 597.760008][ T9749] vivid-007: Display Present: true inactive [ 597.766151][ T9749] vivid-007: Hotplug Present: 0x00000001 [ 597.772263][ T9749] vivid-007: RxSense Present: 0x00000001 [ 597.778043][ T9749] vivid-007: EDID Present: 0x00000001 [ 597.783579][ T9749] vivid-007: ================== END STATUS ================== [ 599.301253][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 599.313988][ T9755] netlink: 'syz.3.942': attribute type 5 has an invalid length. [ 599.322252][ T9755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.942'. [ 600.376881][ T9775] binder_alloc: 9774: binder_alloc_buf, no vma [ 600.407705][ T9775] binder: 9774:9775 ioctl c0306201 200000000240 returned -11 [ 600.432284][ T9775] binder: 9774:9775 ioctl c0306201 2000000002c0 returned -14 [ 601.278683][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 603.250618][ T9790] vivid-007: ================= START STATUS ================= [ 603.258987][ T9790] vivid-007: Enable Output Cropping: true [ 603.265677][ T9790] vivid-007: Enable Output Composing: true [ 603.271941][ T9790] vivid-007: Enable Output Scaler: true [ 603.278048][ T9790] vivid-007: Tx RGB Quantization Range: Automatic [ 603.284867][ T9790] vivid-007: Transmit Mode: HDMI [ 603.290011][ T9790] vivid-007: Display Present: true inactive [ 603.296302][ T9790] vivid-007: Hotplug Present: 0x00000001 [ 603.317048][ T9790] vivid-007: RxSense Present: 0x00000001 [ 603.323062][ T9790] vivid-007: EDID Present: 0x00000001 [ 603.328628][ T9790] vivid-007: ================== END STATUS ================== [ 604.048344][ T9798] vivid-006: disconnect [ 604.843599][ T5877] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 604.855182][ T9796] vivid-006: reconnect [ 605.010797][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 605.020199][ T9816] netlink: 'syz.0.961': attribute type 5 has an invalid length. [ 605.028452][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'. [ 605.074744][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.097607][ T5877] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 605.148761][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.330973][ T5877] usb 3-1: config 0 descriptor?? [ 605.572693][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 605.577833][ T9823] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 605.585192][ T9823] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 605.606244][ T5877] usbhid: probe of 3-1:0.0 failed with error -71 [ 605.617770][ T9823] vhci_hcd vhci_hcd.0: Device attached [ 605.663205][ T5877] usb 3-1: USB disconnect, device number 4 [ 605.812046][ T969] vhci_hcd: vhci_device speed not set [ 605.892310][ T969] usb 35-1: new full-speed USB device number 15 using vhci_hcd [ 606.239479][ T5877] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 606.254909][ T9827] vhci_hcd: connection reset by peer [ 606.280219][ T3445] vhci_hcd: stop threads [ 606.292282][ T3445] vhci_hcd: release socket [ 606.341156][ T3445] vhci_hcd: disconnect device [ 606.511968][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 606.522332][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.536858][ T5877] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 606.591983][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.646019][ T5877] usb 3-1: config 0 descriptor?? [ 606.684666][ T5877] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 606.742127][ T5877] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 607.270994][ T5877] usb 3-1: USB disconnect, device number 5 [ 607.282911][ T5877] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 608.499867][ T9844] hub 1-0:1.0: USB hub found [ 608.505413][ T9844] hub 1-0:1.0: 1 port detected [ 609.768257][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 609.819470][ T9863] netlink: 'syz.1.972': attribute type 5 has an invalid length. [ 609.886408][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 610.542320][ T9868] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 610.549209][ T9868] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 610.573192][ T9868] vhci_hcd vhci_hcd.0: Device attached [ 610.772139][ T787] vhci_hcd: vhci_device speed not set [ 610.951946][ T787] usb 37-1: new full-speed USB device number 10 using vhci_hcd [ 611.052136][ T969] vhci_hcd: vhci_device speed not set [ 611.075667][ T9871] vhci_hcd: connection reset by peer [ 611.081674][ T3445] vhci_hcd: stop threads [ 611.090765][ T3445] vhci_hcd: release socket [ 611.105702][ T3445] vhci_hcd: disconnect device [ 614.017209][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.980'. [ 615.416821][ T9902] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 615.431187][ T28] audit: type=1326 audit(1756851394.609:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9892 comm="syz.3.980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff18318ebe9 code=0x0 [ 616.093174][ T787] vhci_hcd: vhci_device speed not set [ 618.291860][ T9754] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 618.551892][ T9754] usb 2-1: device descriptor read/64, error -71 [ 618.679117][ T9930] input: syz1 as /devices/virtual/input/input6 [ 619.781997][ T9754] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 620.070960][ T9754] usb 2-1: device descriptor read/64, error -71 [ 620.261737][ T9754] usb usb2-port1: attempt power cycle [ 620.742005][ T9754] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 620.810105][ T9754] usb 2-1: device descriptor read/8, error -71 [ 622.184436][ T9961] syz.1.1000[9961]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 623.196230][ T9969] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 623.238919][ T9973] vivid-007: ================= START STATUS ================= [ 623.246833][ T9973] vivid-007: Enable Output Cropping: true [ 623.252830][ T9973] vivid-007: Enable Output Composing: true [ 623.258880][ T9973] vivid-007: Enable Output Scaler: true [ 623.264808][ T9973] vivid-007: Tx RGB Quantization Range: Automatic [ 623.271524][ T9973] vivid-007: Transmit Mode: HDMI [ 623.276681][ T9973] vivid-007: Display Present: true inactive [ 623.283295][ T9973] vivid-007: Hotplug Present: 0x00000001 [ 623.296750][ T9973] vivid-007: RxSense Present: 0x00000001 [ 623.302835][ T9973] vivid-007: EDID Present: 0x00000001 [ 623.308589][ T9973] vivid-007: ================== END STATUS ================== [ 625.126416][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.151396][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.556894][ T9754] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 626.631966][ T9754] usb 2-1: device descriptor read/64, error -71 [ 626.901946][ T9754] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 627.079681][ T9754] usb 2-1: device descriptor read/64, error -71 [ 627.223540][ T9754] usb usb2-port1: attempt power cycle [ 628.311950][ T9754] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 628.361947][ T9754] usb 2-1: device descriptor read/8, error -71 [ 635.861941][ T5877] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 636.732701][ T5877] usb 1-1: device descriptor read/64, error -71 [ 636.898705][ T28] audit: type=1804 audit(1756851416.089:37): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1036" name="/newroot/268/bus/bus" dev="overlay" ino=1501 res=1 errno=0 [ 636.930382][ T28] audit: type=1804 audit(1756851416.119:38): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1036" name="/newroot/268/bus/bus" dev="overlay" ino=1501 res=1 errno=0 [ 637.011977][ T5877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 637.182879][ T5877] usb 1-1: device descriptor read/64, error -71 [ 637.323012][ T5877] usb usb1-port1: attempt power cycle [ 637.741933][ T5877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 638.541424][ T5877] usb 1-1: device descriptor read/8, error -71 [ 642.376078][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 643.011523][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'. [ 643.042020][T10119] netlink: 'syz.2.1045': attribute type 5 has an invalid length. [ 643.062081][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1045'. [ 652.481869][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 653.258775][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 653.288370][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.300675][T10182] netlink: 'syz.2.1061': attribute type 5 has an invalid length. [ 653.308869][ T5876] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 653.317390][T10182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1061'. [ 653.328342][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.358678][ T5876] usb 1-1: config 0 descriptor?? [ 653.580218][ T5876] usbhid 1-1:0.0: can't add hid device: -71 [ 653.587016][ T5876] usbhid: probe of 1-1:0.0 failed with error -71 [ 653.989986][ T5876] usb 1-1: USB disconnect, device number 9 [ 654.402573][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 654.659685][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 654.731930][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 654.759644][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.814173][ T5876] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 654.957171][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.943975][ T5876] usb 1-1: config 0 descriptor?? [ 657.304014][ T5876] usb 1-1: can't set config #0, error -71 [ 657.338236][ T5876] usb 1-1: USB disconnect, device number 10 [ 657.680826][ T28] audit: type=1804 audit(1756851436.869:39): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1067" name="/newroot/285/bus/bus" dev="overlay" ino=1570 res=1 errno=0 [ 657.742812][ T28] audit: type=1804 audit(1756851436.929:40): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1067" name="/newroot/285/bus/bus" dev="overlay" ino=1570 res=1 errno=0 [ 657.849764][T10207] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 657.856591][T10207] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 657.925597][T10207] vhci_hcd vhci_hcd.0: Device attached [ 658.835427][ T5876] vhci_hcd: vhci_device speed not set [ 658.996154][ T5876] usb 39-1: new full-speed USB device number 8 using vhci_hcd [ 659.010735][T10209] vhci_hcd: connection closed [ 659.013476][T10210] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 659.067793][ T3473] vhci_hcd: stop threads [ 659.090168][ T3473] vhci_hcd: release socket [ 659.116797][ T3473] vhci_hcd: disconnect device [ 661.011968][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 663.255848][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.287857][ T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 663.299334][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.310668][ T8] usb 2-1: config 0 descriptor?? [ 663.583681][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 663.589718][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 663.620254][ T8] usb 2-1: USB disconnect, device number 12 [ 664.171983][ T5876] vhci_hcd: vhci_device speed not set [ 664.628055][ T28] audit: type=1800 audit(1756851443.819:41): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1080" name="bus" dev="overlay" ino=1378 res=0 errno=0 [ 664.731887][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 664.952027][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 665.950030][ T8] usb 2-1: device descriptor read/all, error -71 [ 667.437350][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 667.452319][T10267] netlink: 'syz.2.1084': attribute type 5 has an invalid length. [ 667.460701][T10267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'. [ 667.497933][T10262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 667.504744][T10262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 667.555438][T10262] vhci_hcd vhci_hcd.0: Device attached [ 667.670543][T10269] vhci_hcd: connection closed [ 667.686568][ T3530] vhci_hcd: stop threads [ 667.761040][ T3530] vhci_hcd: release socket [ 667.767023][ T8] vhci_hcd: vhci_device speed not set [ 667.772744][ T3530] vhci_hcd: disconnect device [ 668.221918][ T8] usb 39-1: new full-speed USB device number 9 using vhci_hcd [ 672.819544][ T28] audit: type=1800 audit(1756851452.009:42): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1093" name="bus" dev="overlay" ino=1604 res=0 errno=0 [ 675.041880][ T8] vhci_hcd: vhci_device speed not set [ 676.883058][T10316] fuse: Bad value for 'fd' [ 678.204324][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 678.324115][T10331] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 678.330720][T10331] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 678.358691][T10331] vhci_hcd vhci_hcd.0: Device attached [ 678.554125][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.591918][ T55] vhci_hcd: vhci_device speed not set [ 678.595475][ T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 678.611680][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.834111][ T55] usb 37-1: new full-speed USB device number 11 using vhci_hcd [ 679.136446][ T8] usb 2-1: config 0 descriptor?? [ 681.098428][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 681.109239][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 681.121448][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 681.127324][ T8] usb 2-1: USB disconnect, device number 15 [ 684.088214][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 684.129420][T10335] vhci_hcd: connection reset by peer [ 684.198604][T10366] fuse: Bad value for 'fd' [ 684.314319][ T1309] vhci_hcd: stop threads [ 684.322011][ T1309] vhci_hcd: release socket [ 684.326747][ T1309] vhci_hcd: disconnect device [ 685.426357][T10382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1118'. [ 686.101976][ T55] vhci_hcd: vhci_device speed not set [ 687.595259][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.621827][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.730043][T10392] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 689.736643][T10392] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 689.846685][T10392] vhci_hcd vhci_hcd.0: Device attached [ 690.052607][ T55] vhci_hcd: vhci_device speed not set [ 690.155328][ T55] usb 39-1: new full-speed USB device number 10 using vhci_hcd [ 690.357706][T10398] vhci_hcd: connection closed [ 690.358852][ T297] vhci_hcd: stop threads [ 690.396619][ T297] vhci_hcd: release socket [ 690.438606][ T297] vhci_hcd: disconnect device [ 691.072003][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 692.045122][T10428] hub 1-0:1.0: USB hub found [ 692.078812][T10428] hub 1-0:1.0: 1 port detected [ 693.519097][T10434] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1133'. [ 695.531997][ T55] vhci_hcd: vhci_device speed not set [ 697.361147][T10454] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 697.367756][T10454] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 697.519178][T10456] vhci_hcd: connection closed [ 697.523337][T10454] vhci_hcd vhci_hcd.0: Device attached [ 697.682726][ T1309] vhci_hcd: stop threads [ 697.700653][ T1309] vhci_hcd: release socket [ 697.742715][ T55] vhci_hcd: vhci_device speed not set [ 697.758080][ T1309] vhci_hcd: disconnect device [ 698.383657][ T55] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 698.424320][ T55] usb 33-1: enqueue for inactive port 0 [ 698.592291][T10469] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1145'. [ 698.947513][ T55] vhci_hcd: vhci_device speed not set [ 701.347735][T10468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 702.735642][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 703.860285][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'. [ 704.164746][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1155'. [ 707.443747][T10523] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 707.642328][ T787] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 707.841862][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 707.855691][ T787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 707.904803][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 707.935621][T10528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 707.941964][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 707.942726][T10528] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 707.977352][T10528] vhci_hcd vhci_hcd.0: Device attached [ 707.995748][ T787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.056736][ T787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.118199][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.221898][ T5876] vhci_hcd: vhci_device speed not set [ 708.312065][ T5876] usb 37-1: new full-speed USB device number 12 using vhci_hcd [ 708.498002][ T787] usb 1-1: GET_CAPABILITIES returned 0 [ 708.524503][T10532] vhci_hcd: connection reset by peer [ 708.617419][ T59] vhci_hcd: stop threads [ 708.627570][ T59] vhci_hcd: release socket [ 708.661959][ T787] usbtmc 1-1:16.0: can't read capabilities [ 708.816066][ T59] vhci_hcd: disconnect device [ 708.826378][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 708.868730][T10521] usbtmc 1-1:16.0: Unable to send data, error -71 [ 709.946535][T10546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1165'. [ 710.515050][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1166'. [ 711.662861][T10548] bond1: (slave bridge1): Releasing active interface [ 711.938083][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 712.809703][T10548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.871825][T10548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 713.457374][T10548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.731871][ T5876] vhci_hcd: vhci_device speed not set [ 713.784666][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1170'. [ 713.794490][T10548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 713.930839][ T9610] usb 1-1: USB disconnect, device number 11 [ 714.218905][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 714.278041][T10588] virtio-fs: tag not found [ 714.295998][T10584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.524253][T10548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.568060][T10548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 714.837121][T10548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.977875][T10548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 715.181309][T10548] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 715.190586][T10548] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 715.212327][T10594] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 715.220051][T10594] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 715.232950][T10548] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 715.262096][T10548] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 715.303019][T10548] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 715.311202][T10548] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 715.340851][T10594] vhci_hcd vhci_hcd.0: Device attached [ 715.389225][T10548] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 715.444643][T10548] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 715.522090][ T9610] vhci_hcd: vhci_device speed not set [ 715.592251][ T9610] usb 35-1: new full-speed USB device number 16 using vhci_hcd [ 715.629781][T10596] vhci_hcd: connection reset by peer [ 715.658208][ T3530] vhci_hcd: stop threads [ 715.687700][ T3530] vhci_hcd: release socket [ 715.712013][ T3530] vhci_hcd: disconnect device [ 716.174863][T10609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'. [ 720.232309][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'. [ 720.386234][T10627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 720.752051][ T9610] vhci_hcd: vhci_device speed not set [ 721.112193][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 721.436946][ T5876] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 721.644067][ T5876] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 721.860760][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 721.996819][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 722.152846][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 722.850583][ T5876] usb 2-1: Product: syz [ 723.195204][ T5876] usb 2-1: Manufacturer: syz [ 723.300192][ T5876] usb 2-1: SerialNumber: syz [ 723.718663][ T5876] usb 2-1: config 0 descriptor?? [ 723.799007][ T5876] usb 2-1: can't set config #0, error -71 [ 723.997092][ T5876] usb 2-1: USB disconnect, device number 16 [ 724.517923][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 724.720786][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'. [ 728.532611][T10662] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 728.539280][T10662] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 728.717880][T10662] vhci_hcd vhci_hcd.0: Device attached [ 728.836054][T10668] vhci_hcd: connection closed [ 728.837302][ T3473] vhci_hcd: stop threads [ 728.869253][ T3473] vhci_hcd: release socket [ 728.880808][ T3473] vhci_hcd: disconnect device [ 728.912220][ T9754] vhci_hcd: vhci_device speed not set [ 729.719402][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 729.776256][T10681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.061847][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 734.535252][T10706] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 734.541848][T10706] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 734.572190][T10706] vhci_hcd vhci_hcd.0: Device attached [ 734.645203][T10712] vhci_hcd: connection closed [ 734.688519][ T59] vhci_hcd: stop threads [ 734.736206][ T59] vhci_hcd: release socket [ 734.740737][ T59] vhci_hcd: disconnect device [ 735.670283][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 737.377011][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'. [ 737.542434][T10743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 739.491513][T10755] input: syz1 as /devices/virtual/input/input7 [ 743.095202][T10778] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 743.101786][T10778] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 743.118706][T10778] vhci_hcd vhci_hcd.0: Device attached [ 743.167047][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 743.351929][ T9610] vhci_hcd: vhci_device speed not set [ 743.543863][ T9610] usb 33-1: new full-speed USB device number 8 using vhci_hcd [ 743.579469][T10787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.704478][T10788] vhci_hcd: connection reset by peer [ 743.710872][ T3473] vhci_hcd: stop threads [ 743.724501][ T3473] vhci_hcd: release socket [ 743.738428][ T3473] vhci_hcd: disconnect device [ 744.021322][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 748.005709][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.037720][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.444043][T10828] overlayfs: failed to resolve './file1': -2 [ 748.508740][T10830] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1234'. [ 749.070693][ T9610] vhci_hcd: vhci_device speed not set [ 752.998692][T10840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 753.005354][T10840] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 753.023793][T10840] vhci_hcd vhci_hcd.0: Device attached [ 753.116498][T10844] vhci_hcd: connection closed [ 753.164196][ T297] vhci_hcd: stop threads [ 753.221917][ T5877] vhci_hcd: vhci_device speed not set [ 753.532264][ T5877] usb 37-1: new full-speed USB device number 13 using vhci_hcd [ 753.544738][ T297] vhci_hcd: release socket [ 753.590898][ T297] vhci_hcd: disconnect device [ 755.506903][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 758.721993][ T5877] vhci_hcd: vhci_device speed not set [ 759.975113][T10894] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 759.981801][T10894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 759.991407][T10894] vhci_hcd vhci_hcd.0: Device attached [ 760.221963][ T9] vhci_hcd: vhci_device speed not set [ 760.293008][ T9] usb 39-1: new full-speed USB device number 11 using vhci_hcd [ 760.335499][T10901] vhci_hcd: connection reset by peer [ 760.358204][ T59] vhci_hcd: stop threads [ 760.377224][ T59] vhci_hcd: release socket [ 760.385881][ T59] vhci_hcd: disconnect device [ 765.464261][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 765.512175][ T9] vhci_hcd: vhci_device speed not set [ 773.117356][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 779.335238][T11019] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 780.462161][T11026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.475252][T11026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.484810][T11026] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.494895][T11026] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.503024][T11026] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 780.510510][T11026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.524059][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.546884][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.557026][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.562058][ T9610] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 780.566856][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.583642][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 780.602292][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.751906][ T9610] usb 1-1: device descriptor read/64, error -71 [ 781.061930][ T9610] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 781.272108][ T9610] usb 1-1: device descriptor read/64, error -71 [ 781.392484][ T9610] usb usb1-port1: attempt power cycle [ 781.671184][T11024] chnl_net:caif_netlink_parms(): no params data found [ 782.275716][ T9610] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 782.457312][ T9610] usb 1-1: device descriptor read/8, error -71 [ 782.506769][ T3445] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 782.518077][ T3445] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 782.642254][ T50] Bluetooth: hci4: command tx timeout [ 782.664940][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.692032][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.706810][T11024] bridge_slave_0: entered allmulticast mode [ 782.742119][ T9610] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 782.792690][T11024] bridge_slave_0: entered promiscuous mode [ 782.866208][ T9610] usb 1-1: device descriptor read/8, error -71 [ 782.996897][ T3445] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 783.483274][ T3445] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 783.503425][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.510969][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.518559][ T9610] usb usb1-port1: unable to enumerate USB device [ 783.525691][T11024] bridge_slave_1: entered allmulticast mode [ 783.543956][T11024] bridge_slave_1: entered promiscuous mode [ 783.670517][ T3445] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 783.692233][ T3445] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 783.774529][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.799231][ T3445] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 783.824006][ T3445] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 783.849368][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.020581][T11024] team0: Port device team_slave_0 added [ 784.067001][T11024] team0: Port device team_slave_1 added [ 784.132636][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.140180][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.175731][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.221335][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.228856][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.258739][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.393382][T11024] hsr_slave_0: entered promiscuous mode [ 784.415478][T11024] hsr_slave_1: entered promiscuous mode [ 784.424580][T11024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.434207][T11024] Cannot create hsr debugfs directory [ 784.721880][ T50] Bluetooth: hci4: command tx timeout [ 785.338671][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 785.843445][T11024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 785.950717][T11024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.052696][T11024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.090577][T11024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 786.602945][T11092] tipc: Can't bind to reserved service type 0 [ 787.139874][ T50] Bluetooth: hci4: command tx timeout [ 788.220227][ T5877] Process accounting resumed [ 788.290334][T11106] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 788.297034][T11106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 788.369197][T11106] vhci_hcd vhci_hcd.0: Device attached [ 788.772250][ T5877] vhci_hcd: vhci_device speed not set [ 788.774057][T11024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.864304][ T5877] usb 33-1: new full-speed USB device number 9 using vhci_hcd [ 788.979581][ T3445] hsr_slave_0: left promiscuous mode [ 789.023339][ T3445] hsr_slave_1: left promiscuous mode [ 789.044162][T11108] vhci_hcd: connection reset by peer [ 789.051200][T10636] vhci_hcd: stop threads [ 789.079722][T10636] vhci_hcd: release socket [ 789.209073][ T50] Bluetooth: hci4: command tx timeout [ 789.269101][T11118] vivid-007: ================= START STATUS ================= [ 789.277234][T11118] vivid-007: Enable Output Cropping: true [ 789.288036][T11118] vivid-007: Enable Output Composing: true [ 789.294316][T11118] vivid-007: Enable Output Scaler: true [ 789.300772][T11118] vivid-007: Tx RGB Quantization Range: Automatic [ 789.307799][T11118] vivid-007: Transmit Mode: HDMI [ 789.312962][T11118] vivid-007: Display Present: true inactive [ 789.354847][T11118] vivid-007: Hotplug Present: 0x00000001 [ 789.360919][T11118] vivid-007: RxSense Present: 0x00000001 [ 789.367225][T11118] vivid-007: EDID Present: 0x00000001 [ 789.373044][T11118] vivid-007: ================== END STATUS ================== [ 789.931263][T10636] vhci_hcd: disconnect device [ 789.962927][ T3445] veth1_macvtap: left promiscuous mode [ 789.969573][ T3445] veth0_macvtap: left promiscuous mode [ 789.978006][ T3445] veth1_vlan: left promiscuous mode [ 789.987767][ T3445] veth0_vlan: left promiscuous mode [ 790.445473][T11124] input: syz1 as /devices/virtual/input/input8 [ 791.456863][ T3445] bond1 (unregistering): Released all slaves [ 794.002099][ T5877] vhci_hcd: vhci_device speed not set [ 794.085014][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 794.465779][ T3445] bond0 (unregistering): Released all slaves [ 795.077342][T11024] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.208578][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.216498][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.292134][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.299580][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.752686][T11024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 796.700929][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 796.802885][T11162] dummy0: entered promiscuous mode [ 796.818012][T11162] macvtap1: entered promiscuous mode [ 796.828885][T11162] macvtap1: entered allmulticast mode [ 796.838348][T11162] dummy0: entered allmulticast mode [ 796.930319][T11024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.835460][T11024] veth0_vlan: entered promiscuous mode [ 799.989396][T11024] veth1_vlan: entered promiscuous mode [ 800.200622][T11024] veth0_macvtap: entered promiscuous mode [ 800.259177][T11024] veth1_macvtap: entered promiscuous mode [ 800.264925][T11190] overlayfs: failed to resolve './file1': -2 [ 800.374472][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.412935][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.448592][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.656109][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.690228][T11024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.766364][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.807875][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.844293][T11201] binder: 11200:11201 ioctl c0306201 0 returned -14 [ 800.859109][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.919449][T11201] binder: 11200:11201 ioctl c0306201 200000000240 returned -11 [ 800.936199][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.955152][T11201] binder: 11200:11201 ioctl c0306201 2000000002c0 returned -14 [ 801.030859][T11024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.140295][T11024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.213482][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'. [ 801.235236][T11024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.245733][T11024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.254617][ T5877] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 801.262482][T11024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.421925][ T5877] usb 4-1: device descriptor read/64, error -71 [ 802.340007][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.351887][ T5877] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 802.367742][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.486233][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.512048][ T5877] usb 4-1: device descriptor read/64, error -71 [ 802.539876][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.647997][ T5877] usb usb4-port1: attempt power cycle [ 802.960479][T11228] fuse: Bad value for 'fd' [ 803.101870][ T5877] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 803.162748][ T5877] usb 4-1: device descriptor read/8, error -71 [ 803.443623][ T5877] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 803.502748][ T5877] usb 4-1: device descriptor read/8, error -71 [ 803.622133][ T5877] usb usb4-port1: unable to enumerate USB device [ 806.198751][T11260] 9pnet_virtio: no channels available for device syz [ 807.736271][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1331'. [ 809.261945][T10567] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 809.421811][T10567] usb 1-1: device descriptor read/64, error -71 [ 809.448665][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.456144][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.702829][T10567] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 809.905905][T10567] usb 1-1: device descriptor read/64, error -71 [ 810.032212][T10567] usb usb1-port1: attempt power cycle [ 810.364543][T11319] 9pnet_virtio: no channels available for device syz [ 810.451995][T10567] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 810.533189][T10567] usb 1-1: device descriptor read/8, error -71 [ 810.662973][T11323] virtio-fs: tag not found [ 810.812094][T10567] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 810.939960][T10567] usb 1-1: device descriptor read/8, error -71 [ 811.111966][T10567] usb usb1-port1: unable to enumerate USB device [ 816.580996][T11380] virtio-fs: tag not found [ 818.848348][T11400] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1357'. [ 820.713426][T11412] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 822.457726][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 822.497267][T11438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 822.559848][T11440] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1369'. [ 822.612572][ T5876] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 823.383429][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.396120][ T5876] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 823.453260][ T5876] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.475235][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.501667][ T5876] usb 1-1: config 0 descriptor?? [ 823.832321][ T9610] usb 1-1: USB disconnect, device number 20 [ 824.551845][ T9610] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 824.971958][ T9610] usb 1-1: Using ep0 maxpacket: 32 [ 825.060273][ T9610] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.173236][ T9610] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.411893][ T9610] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 825.440370][ T9610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.493776][ T9610] usb 1-1: config 0 descriptor?? [ 825.540011][ T9610] usb 1-1: can't set config #0, error -71 [ 825.572180][ T9610] usb 1-1: USB disconnect, device number 21 [ 826.070776][T11484] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 826.931978][T11484] macvlan1: entered allmulticast mode [ 826.956951][T11484] veth1_vlan: entered allmulticast mode [ 827.036283][T11484] team0: Port device macvlan1 added [ 827.632895][T11498] 9pnet_virtio: no channels available for device syz [ 827.731273][T11498] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 827.750716][T11498] overlayfs: missing 'lowerdir' [ 828.063739][T11504] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 828.070609][T11504] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 828.179785][T11504] vhci_hcd vhci_hcd.0: Device attached [ 828.341953][T11506] vhci_hcd: connection closed [ 828.349617][ T3473] vhci_hcd: stop threads [ 828.369456][ T3473] vhci_hcd: release socket [ 828.379062][ T3473] vhci_hcd: disconnect device [ 828.384437][ T5876] vhci_hcd: vhci_device speed not set [ 829.537187][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1383'. [ 829.855618][T11537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 832.439910][T11571] hub 1-0:1.0: USB hub found [ 832.449864][T11571] hub 1-0:1.0: 1 port detected [ 833.181108][T11577] syz.3.1394: attempt to access beyond end of device [ 833.181108][T11577] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 833.681582][T11584] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 834.785583][T11593] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 834.792189][T11593] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 834.848459][T11593] vhci_hcd vhci_hcd.0: Device attached [ 835.049041][ T5877] vhci_hcd: vhci_device speed not set [ 835.201848][ T5877] usb 35-1: new full-speed USB device number 18 using vhci_hcd [ 835.211872][T11596] vhci_hcd: connection closed [ 835.228168][ T1328] vhci_hcd: stop threads [ 835.243606][T11607] 9pnet_virtio: no channels available for device syz [ 835.272256][ T1328] vhci_hcd: release socket [ 835.286830][ T1328] vhci_hcd: disconnect device [ 838.719099][T11637] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1401'. [ 838.732313][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 838.740617][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 838.758856][T11637] batadv1: entered allmulticast mode [ 838.988583][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.021911][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.040535][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.058737][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.073426][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.082474][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.101871][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.124615][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.180213][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.226568][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.261663][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.289736][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.357522][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.483275][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.559875][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.591920][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.600172][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.710968][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 839.888039][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.005620][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.132637][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.226504][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.265687][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.342156][ T5877] vhci_hcd: vhci_device speed not set [ 840.376876][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.466068][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.511462][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.696869][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.751189][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.825660][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.898417][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.927134][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.950063][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.970810][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 840.999084][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.019304][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.040475][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.061794][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.069888][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.088429][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.103129][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.122913][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.130892][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.150824][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.179027][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.224215][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.265340][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.301773][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.320204][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.352252][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.378000][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.421768][ T55] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0 [ 841.494704][ T55] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 841.782600][T11683] fido_id[11683]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 842.249161][T11688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 842.255911][T11688] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 842.272472][T11688] vhci_hcd vhci_hcd.0: Device attached [ 842.481911][ T5877] vhci_hcd: vhci_device speed not set [ 842.530139][T11693] vhci_hcd: connection closed [ 842.531153][ T59] vhci_hcd: stop threads [ 842.547269][ T59] vhci_hcd: release socket [ 842.561986][ T5877] usb 33-1: new full-speed USB device number 10 using vhci_hcd [ 842.562261][ T59] vhci_hcd: disconnect device [ 842.755251][T11703] 9pnet_virtio: no channels available for device syz [ 847.502785][T11732] hub 1-0:1.0: USB hub found [ 847.543714][T11732] hub 1-0:1.0: 1 port detected [ 847.682021][ T5877] vhci_hcd: vhci_device speed not set [ 847.822945][T11742] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1416'. [ 850.037653][T11762] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 850.044663][T11762] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 850.062006][T11762] vhci_hcd vhci_hcd.0: Device attached [ 850.291965][ T969] vhci_hcd: vhci_device speed not set [ 850.511816][ T969] usb 35-1: new full-speed USB device number 19 using vhci_hcd [ 850.521856][T11764] vhci_hcd: connection closed [ 850.529665][ T3473] vhci_hcd: stop threads [ 850.587378][ T3473] vhci_hcd: release socket [ 850.611982][ T3473] vhci_hcd: disconnect device [ 851.837467][T11781] 9pnet_virtio: no channels available for device syz [ 852.350024][T11798] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1427'. [ 855.701987][ T969] vhci_hcd: vhci_device speed not set [ 855.968075][T11851] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1438'. [ 857.926777][T11863] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 857.933479][T11863] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 857.985578][T11863] vhci_hcd vhci_hcd.0: Device attached [ 858.096794][T11872] vhci_hcd: connection closed [ 858.105204][ T1328] vhci_hcd: stop threads [ 858.139754][ T1328] vhci_hcd: release socket [ 858.150016][ T1328] vhci_hcd: disconnect device [ 858.192505][ T8] vhci_hcd: vhci_device speed not set [ 859.988334][T11893] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1450'. [ 860.456994][ T969] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 860.849582][ T969] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 860.860857][ T969] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 860.882358][ T969] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 860.901803][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.958874][T11887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 861.000725][ T969] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 861.512088][ T5877] usb 5-1: USB disconnect, device number 2 [ 864.835574][T11930] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1461'. [ 864.857992][T11932] syz.0.1460: attempt to access beyond end of device [ 864.857992][T11932] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 865.479456][T11927] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 865.486175][T11927] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 865.618015][T11927] vhci_hcd vhci_hcd.0: Device attached [ 865.835318][ T969] vhci_hcd: vhci_device speed not set [ 865.862023][T11935] vhci_hcd: connection closed [ 865.871173][ T59] vhci_hcd: stop threads [ 865.881580][ T59] vhci_hcd: release socket [ 865.963560][ T969] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 865.966409][ T59] vhci_hcd: disconnect device [ 869.544580][T11976] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1472'. [ 870.041415][T11977] loop7: detected capacity change from 0 to 7 [ 871.056950][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.099407][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.142649][T11981] [ 871.145066][T11981] ================================================ [ 871.151823][T11981] WARNING: lock held when returning to user space! [ 871.158373][T11981] syzkaller #0 Not tainted [ 871.162870][T11981] ------------------------------------------------ [ 871.169611][T11981] syz.0.1471/11981 is leaving the kernel with locks still held! [ 871.177375][T11981] 1 lock held by syz.0.1471/11981: [ 871.182608][T11981] #0: ffff888021843b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 871.193273][ T969] vhci_hcd: vhci_device speed not set [ 871.194450][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.208667][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.219611][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.229214][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.238459][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.248091][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.257411][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.266720][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.278160][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.280601][T11985] trusted_key: syz.0.1471 sent an empty control message without MSG_MORE. [ 871.287516][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.310128][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.319624][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.333634][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.343230][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.352665][T10349] ldm_validate_partition_table(): Disk read failed. [ 871.373476][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.382868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.393390][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.403021][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.421966][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 871.431157][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.439346][T10349] Dev loop7: unable to read RDB block 0 [ 871.452177][T10349] loop7: unable to read partition table [ 871.470137][T10349] loop7: partition table beyond EOD, truncated [ 871.509803][T10349] ================================================================== [ 871.518032][T10349] BUG: KASAN: slab-use-after-free in __mutex_lock+0xc47/0xcc0 [ 871.525994][T10349] Read of size 4 at addr ffff888022425a34 by task udevd/10349 [ 871.533741][T10349] [ 871.536294][T10349] CPU: 1 PID: 10349 Comm: udevd Not tainted syzkaller #0 [ 871.544074][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 871.554638][T10349] Call Trace: [ 871.558030][T10349] [ 871.561008][T10349] dump_stack_lvl+0x16c/0x230 [ 871.565728][T10349] ? __lock_acquire+0x7c80/0x7c80 [ 871.570784][T10349] ? show_regs_print_info+0x20/0x20 [ 871.576135][T10349] ? load_image+0x3b0/0x3b0 [ 871.580838][T10349] ? __virt_addr_valid+0x469/0x540 [ 871.586094][T10349] print_report+0xac/0x220 [ 871.590795][T10349] ? __mutex_lock+0xc47/0xcc0 [ 871.595502][T10349] kasan_report+0x117/0x150 [ 871.600322][T10349] ? __mutex_lock+0xc47/0xcc0 [ 871.605124][T10349] __mutex_lock+0xc47/0xcc0 [ 871.609664][T10349] ? stack_trace_save+0xe0/0xe0 [ 871.614711][T10349] ? arch_stack_walk+0x160/0x190 [ 871.619843][T10349] ? lo_ioctl+0x62f/0x19f0 [ 871.624391][T10349] ? mutex_lock_nested+0x20/0x20 [ 871.629368][T10349] ? stack_trace_snprint+0xf0/0xf0 [ 871.634595][T10349] ? path_openat+0x274b/0x3190 [ 871.639480][T10349] lo_ioctl+0x62f/0x19f0 [ 871.643805][T10349] ? kasan_set_track+0x4e/0x70 [ 871.648930][T10349] ? kasan_save_free_info+0x2e/0x50 [ 871.654236][T10349] ? tomoyo_check_open_permission+0x2d3/0x3c0 [ 871.660410][T10349] ? security_file_open+0x62/0xa0 [ 871.665461][T10349] ? do_dentry_open+0x380/0x1500 [ 871.670427][T10349] ? path_openat+0x274b/0x3190 [ 871.675230][T10349] ? do_filp_open+0x1c5/0x3d0 [ 871.679940][T10349] ? do_sys_openat2+0x12c/0x1c0 [ 871.684810][T10349] ? __x64_sys_openat+0x139/0x160 [ 871.689939][T10349] ? do_syscall_64+0x55/0xb0 [ 871.694898][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.701308][T10349] ? lo_release+0x200/0x200 [ 871.706193][T10349] ? rcu_is_watching+0x15/0xb0 [ 871.711087][T10349] ? lock_release+0xba/0x8b0 [ 871.715902][T10349] ? rcu_is_watching+0x15/0xb0 [ 871.720782][T10349] ? lock_release+0xba/0x8b0 [ 871.725697][T10349] ? rcu_is_watching+0x15/0xb0 [ 871.730703][T10349] ? lock_release+0xba/0x8b0 [ 871.735355][T10349] ? rcu_is_watching+0x15/0xb0 [ 871.740244][T10349] ? lock_release+0xba/0x8b0 [ 871.744876][T10349] ? __lock_acquire+0x7c80/0x7c80 [ 871.750021][T10349] ? __read_once_word_nocheck+0x9/0x10 [ 871.755773][T10349] ? deref_stack_reg+0x1bd/0x240 [ 871.760743][T10349] ? is_bpf_text_address+0x28f/0x2a0 [ 871.766134][T10349] ? is_bpf_text_address+0x26/0x2a0 [ 871.771439][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.777731][T10349] ? kernel_text_address+0xa0/0xd0 [ 871.783037][T10349] ? __kernel_text_address+0xd/0x30 [ 871.788252][T10349] ? unwind_get_return_address+0x91/0xc0 [ 871.794277][T10349] ? stack_trace_save+0xe0/0xe0 [ 871.799352][T10349] ? arch_stack_walk+0x160/0x190 [ 871.804495][T10349] ? stack_trace_save+0x9c/0xe0 [ 871.809561][T10349] ? stack_trace_snprint+0xf0/0xf0 [ 871.814969][T10349] ? __stack_depot_save+0x1f/0x630 [ 871.820274][T10349] ? do_syscall_64+0x55/0xb0 [ 871.824994][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.831266][T10349] ? kasan_set_track+0x5f/0x70 [ 871.836131][T10349] ? kasan_set_track+0x4e/0x70 [ 871.841008][T10349] ? kasan_save_free_info+0x2e/0x50 [ 871.846403][T10349] ? ____kasan_slab_free+0x126/0x1e0 [ 871.851707][T10349] ? slab_free_freelist_hook+0x130/0x1b0 [ 871.857564][T10349] ? __kmem_cache_free+0xba/0x1f0 [ 871.862640][T10349] ? tomoyo_path_number_perm+0x477/0x590 [ 871.868612][T10349] ? security_file_ioctl+0x70/0xa0 [ 871.873941][T10349] ? __se_sys_ioctl+0x48/0x170 [ 871.879300][T10349] ? do_syscall_64+0x55/0xb0 [ 871.884079][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.890367][T10349] ? do_vfs_ioctl+0xd31/0x1bb0 [ 871.895334][T10349] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 871.901245][T10349] ? lock_release+0xba/0x8b0 [ 871.906207][T10349] ? rcu_is_watching+0x15/0xb0 [ 871.911147][T10349] ? __lock_acquire+0x7c80/0x7c80 [ 871.916291][T10349] ? slab_free_freelist_hook+0x130/0x1b0 [ 871.921996][T10349] ? tomoyo_path_number_perm+0x477/0x590 [ 871.928054][T10349] ? __kmem_cache_free+0xba/0x1f0 [ 871.933243][T10349] ? blkdev_common_ioctl+0x105b/0x23d0 [ 871.938920][T10349] ? tomoyo_path_number_perm+0x4dc/0x590 [ 871.944853][T10349] ? blkdev_bszset+0x1f0/0x1f0 [ 871.949770][T10349] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 871.955286][T10349] ? __might_sleep+0xe0/0xe0 [ 871.959911][T10349] ? __might_fault+0xaa/0x120 [ 871.964606][T10349] ? lo_release+0x200/0x200 [ 871.969131][T10349] blkdev_ioctl+0x58b/0x6f0 [ 871.973788][T10349] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 871.979453][T10349] ? bpf_lsm_file_ioctl+0x9/0x10 [ 871.984812][T10349] ? security_file_ioctl+0x80/0xa0 [ 871.990941][T10349] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 871.996632][T10349] __se_sys_ioctl+0xfd/0x170 [ 872.001636][T10349] do_syscall_64+0x55/0xb0 [ 872.006510][T10349] ? clear_bhb_loop+0x40/0x90 [ 872.011499][T10349] ? clear_bhb_loop+0x40/0x90 [ 872.016417][T10349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.022439][T10349] RIP: 0033:0x7f1bdbb1d378 [ 872.027155][T10349] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 872.047862][T10349] RSP: 002b:00007ffce1027e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.056345][T10349] RAX: ffffffffffffffda RBX: 000055ea34709050 RCX: 00007f1bdbb1d378 [ 872.064657][T10349] RDX: 00007ffce1027ec0 RSI: 0000000080280215 RDI: 0000000000000009 [ 872.072770][T10349] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 872.081217][T10349] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 872.089301][T10349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 872.097603][T10349] [ 872.100820][T10349] [ 872.103258][T10349] Allocated by task 11974: [ 872.107851][T10349] kasan_set_track+0x4e/0x70 [ 872.112478][T10349] __kasan_slab_alloc+0x6c/0x80 [ 872.117362][T10349] slab_post_alloc_hook+0x6e/0x4d0 [ 872.122583][T10349] kmem_cache_alloc_node+0x150/0x330 [ 872.127930][T10349] dup_task_struct+0x57/0x7c0 [ 872.132735][T10349] copy_process+0x549/0x3d70 [ 872.137335][T10349] kernel_clone+0x21b/0x840 [ 872.141885][T10349] __se_sys_clone3+0x252/0x2c0 [ 872.146831][T10349] do_syscall_64+0x55/0xb0 [ 872.151523][T10349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.157676][T10349] [ 872.160097][T10349] Freed by task 10349: [ 872.164171][T10349] kasan_set_track+0x4e/0x70 [ 872.168883][T10349] kasan_save_free_info+0x2e/0x50 [ 872.173929][T10349] ____kasan_slab_free+0x126/0x1e0 [ 872.179092][T10349] slab_free_freelist_hook+0x130/0x1b0 [ 872.184570][T10349] kmem_cache_free+0xf8/0x280 [ 872.189549][T10349] delayed_put_task_struct+0x10f/0x2b0 [ 872.195141][T10349] rcu_core+0xcc4/0x1720 [ 872.199488][T10349] handle_softirqs+0x280/0x820 [ 872.204271][T10349] __irq_exit_rcu+0xc7/0x190 [ 872.208979][T10349] irq_exit_rcu+0x9/0x20 [ 872.213532][T10349] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 872.219185][T10349] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.225279][T10349] [ 872.227707][T10349] Last potentially related work creation: [ 872.233647][T10349] kasan_save_stack+0x3e/0x60 [ 872.238428][T10349] __kasan_record_aux_stack+0xaf/0xc0 [ 872.243811][T10349] call_rcu+0x158/0x930 [ 872.248006][T10349] __schedule+0x14da/0x44d0 [ 872.252537][T10349] schedule+0xbd/0x170 [ 872.256626][T10349] futex_wait_queue+0x138/0x1b0 [ 872.261484][T10349] futex_wait+0x19f/0x530 [ 872.265916][T10349] do_futex+0x2ff/0x3e0 [ 872.270172][T10349] __se_sys_futex+0x36f/0x3f0 [ 872.274866][T10349] do_syscall_64+0x55/0xb0 [ 872.279388][T10349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.285394][T10349] [ 872.287734][T10349] Second to last potentially related work creation: [ 872.294339][T10349] kasan_save_stack+0x3e/0x60 [ 872.299043][T10349] __kasan_record_aux_stack+0xaf/0xc0 [ 872.304723][T10349] task_work_add+0xe4/0x440 [ 872.309436][T10349] scheduler_tick+0x2c9/0x6a0 [ 872.314239][T10349] update_process_times+0x17b/0x1b0 [ 872.319476][T10349] tick_sched_timer+0x3a2/0x580 [ 872.324746][T10349] __hrtimer_run_queues+0x4df/0xc40 [ 872.330149][T10349] hrtimer_interrupt+0x3c9/0x9c0 [ 872.335183][T10349] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 872.341359][T10349] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 872.347452][T10349] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.353794][T10349] [ 872.356125][T10349] The buggy address belongs to the object at ffff888022425a00 [ 872.356125][T10349] which belongs to the cache task_struct of size 7424 [ 872.370546][T10349] The buggy address is located 52 bytes inside of [ 872.370546][T10349] freed 7424-byte region [ffff888022425a00, ffff888022427700) [ 872.384890][T10349] [ 872.387231][T10349] The buggy address belongs to the physical page: [ 872.393846][T10349] page:ffffea0000890800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22420 [ 872.404451][T10349] head:ffffea0000890800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 872.413586][T10349] memcg:ffff88805f3a1601 [ 872.417853][T10349] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 872.425848][T10349] page_type: 0xffffffff() [ 872.430192][T10349] raw: 00fff00000000840 ffff888019a4c500 ffffea000062be00 dead000000000002 [ 872.439760][T10349] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88805f3a1601 [ 872.448539][T10349] page dumped because: kasan: bad access detected [ 872.454974][T10349] page_owner tracks the page as allocated [ 872.460778][T10349] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 9659041053, free_ts 0 [ 872.480597][T10349] post_alloc_hook+0x1cd/0x210 [ 872.485415][T10349] get_page_from_freelist+0x195c/0x19f0 [ 872.490985][T10349] __alloc_pages+0x1e3/0x460 [ 872.495701][T10349] alloc_slab_page+0x5d/0x170 [ 872.500495][T10349] new_slab+0x87/0x2e0 [ 872.504714][T10349] ___slab_alloc+0xc6d/0x12f0 [ 872.509423][T10349] kmem_cache_alloc_node+0x1ea/0x330 [ 872.514815][T10349] dup_task_struct+0x57/0x7c0 [ 872.519508][T10349] copy_process+0x549/0x3d70 [ 872.524216][T10349] kernel_clone+0x21b/0x840 [ 872.528991][T10349] kernel_thread+0x10d/0x160 [ 872.533858][T10349] kthreadd+0x560/0x730 [ 872.538234][T10349] ret_from_fork+0x48/0x80 [ 872.542763][T10349] ret_from_fork_asm+0x11/0x20 [ 872.547583][T10349] page_owner free stack trace missing [ 872.552965][T10349] [ 872.555306][T10349] Memory state around the buggy address: [ 872.561222][T10349] ffff888022425900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 872.570167][T10349] ffff888022425980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 872.579124][T10349] >ffff888022425a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 872.587371][T10349] ^ [ 872.593103][T10349] ffff888022425a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 872.601283][T10349] ffff888022425b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 872.609373][T10349] ================================================================== [ 872.618593][T10349] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 872.625913][T10349] CPU: 1 PID: 10349 Comm: udevd Not tainted syzkaller #0 [ 872.633028][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 872.643210][T10349] Call Trace: [ 872.646710][T10349] [ 872.649913][T10349] dump_stack_lvl+0x16c/0x230 [ 872.654726][T10349] ? show_regs_print_info+0x20/0x20 [ 872.659967][T10349] ? load_image+0x3b0/0x3b0 [ 872.664509][T10349] panic+0x2c0/0x710 [ 872.668431][T10349] ? bpf_jit_dump+0xd0/0xd0 [ 872.673221][T10349] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 872.679403][T10349] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 872.685414][T10349] ? _raw_spin_unlock+0x40/0x40 [ 872.690554][T10349] ? print_memory_metadata+0x314/0x400 [ 872.696130][T10349] ? __mutex_lock+0xc47/0xcc0 [ 872.700824][T10349] check_panic_on_warn+0x84/0xa0 [ 872.705871][T10349] ? __mutex_lock+0xc47/0xcc0 [ 872.710569][T10349] end_report+0x6f/0x140 [ 872.714860][T10349] kasan_report+0x128/0x150 [ 872.719379][T10349] ? __mutex_lock+0xc47/0xcc0 [ 872.724178][T10349] __mutex_lock+0xc47/0xcc0 [ 872.728857][T10349] ? stack_trace_save+0xe0/0xe0 [ 872.733811][T10349] ? arch_stack_walk+0x160/0x190 [ 872.738771][T10349] ? lo_ioctl+0x62f/0x19f0 [ 872.743314][T10349] ? mutex_lock_nested+0x20/0x20 [ 872.748283][T10349] ? stack_trace_snprint+0xf0/0xf0 [ 872.753608][T10349] ? path_openat+0x274b/0x3190 [ 872.758533][T10349] lo_ioctl+0x62f/0x19f0 [ 872.762836][T10349] ? kasan_set_track+0x4e/0x70 [ 872.767703][T10349] ? kasan_save_free_info+0x2e/0x50 [ 872.773106][T10349] ? tomoyo_check_open_permission+0x2d3/0x3c0 [ 872.779390][T10349] ? security_file_open+0x62/0xa0 [ 872.784713][T10349] ? do_dentry_open+0x380/0x1500 [ 872.789757][T10349] ? path_openat+0x274b/0x3190 [ 872.794744][T10349] ? do_filp_open+0x1c5/0x3d0 [ 872.799559][T10349] ? do_sys_openat2+0x12c/0x1c0 [ 872.804562][T10349] ? __x64_sys_openat+0x139/0x160 [ 872.809614][T10349] ? do_syscall_64+0x55/0xb0 [ 872.814485][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.820695][T10349] ? lo_release+0x200/0x200 [ 872.825317][T10349] ? rcu_is_watching+0x15/0xb0 [ 872.830185][T10349] ? lock_release+0xba/0x8b0 [ 872.834820][T10349] ? rcu_is_watching+0x15/0xb0 [ 872.839709][T10349] ? lock_release+0xba/0x8b0 [ 872.844402][T10349] ? rcu_is_watching+0x15/0xb0 [ 872.849355][T10349] ? lock_release+0xba/0x8b0 [ 872.854054][T10349] ? rcu_is_watching+0x15/0xb0 [ 872.858920][T10349] ? lock_release+0xba/0x8b0 [ 872.863703][T10349] ? __lock_acquire+0x7c80/0x7c80 [ 872.868838][T10349] ? __read_once_word_nocheck+0x9/0x10 [ 872.874758][T10349] ? deref_stack_reg+0x1bd/0x240 [ 872.879727][T10349] ? is_bpf_text_address+0x28f/0x2a0 [ 872.885042][T10349] ? is_bpf_text_address+0x26/0x2a0 [ 872.890275][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.896636][T10349] ? kernel_text_address+0xa0/0xd0 [ 872.901864][T10349] ? __kernel_text_address+0xd/0x30 [ 872.907112][T10349] ? unwind_get_return_address+0x91/0xc0 [ 872.912871][T10349] ? stack_trace_save+0xe0/0xe0 [ 872.918107][T10349] ? arch_stack_walk+0x160/0x190 [ 872.923283][T10349] ? stack_trace_save+0x9c/0xe0 [ 872.928269][T10349] ? stack_trace_snprint+0xf0/0xf0 [ 872.933436][T10349] ? __stack_depot_save+0x1f/0x630 [ 872.938559][T10349] ? do_syscall_64+0x55/0xb0 [ 872.943353][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.949636][T10349] ? kasan_set_track+0x5f/0x70 [ 872.954629][T10349] ? kasan_set_track+0x4e/0x70 [ 872.959430][T10349] ? kasan_save_free_info+0x2e/0x50 [ 872.964745][T10349] ? ____kasan_slab_free+0x126/0x1e0 [ 872.970137][T10349] ? slab_free_freelist_hook+0x130/0x1b0 [ 872.975978][T10349] ? __kmem_cache_free+0xba/0x1f0 [ 872.981025][T10349] ? tomoyo_path_number_perm+0x477/0x590 [ 872.986678][T10349] ? security_file_ioctl+0x70/0xa0 [ 872.991818][T10349] ? __se_sys_ioctl+0x48/0x170 [ 872.996605][T10349] ? do_syscall_64+0x55/0xb0 [ 873.001309][T10349] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.007416][T10349] ? do_vfs_ioctl+0xd31/0x1bb0 [ 873.012232][T10349] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 873.018020][T10349] ? lock_release+0xba/0x8b0 [ 873.022740][T10349] ? rcu_is_watching+0x15/0xb0 [ 873.027768][T10349] ? __lock_acquire+0x7c80/0x7c80 [ 873.032994][T10349] ? slab_free_freelist_hook+0x130/0x1b0 [ 873.038761][T10349] ? tomoyo_path_number_perm+0x477/0x590 [ 873.044701][T10349] ? __kmem_cache_free+0xba/0x1f0 [ 873.049852][T10349] ? blkdev_common_ioctl+0x105b/0x23d0 [ 873.055881][T10349] ? tomoyo_path_number_perm+0x4dc/0x590 [ 873.062188][T10349] ? blkdev_bszset+0x1f0/0x1f0 [ 873.067081][T10349] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 873.072584][T10349] ? __might_sleep+0xe0/0xe0 [ 873.077208][T10349] ? __might_fault+0xaa/0x120 [ 873.081920][T10349] ? lo_release+0x200/0x200 [ 873.086467][T10349] blkdev_ioctl+0x58b/0x6f0 [ 873.091006][T10349] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 873.096597][T10349] ? bpf_lsm_file_ioctl+0x9/0x10 [ 873.101576][T10349] ? security_file_ioctl+0x80/0xa0 [ 873.106803][T10349] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 873.112460][T10349] __se_sys_ioctl+0xfd/0x170 [ 873.117068][T10349] do_syscall_64+0x55/0xb0 [ 873.121499][T10349] ? clear_bhb_loop+0x40/0x90 [ 873.126191][T10349] ? clear_bhb_loop+0x40/0x90 [ 873.130887][T10349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.136891][T10349] RIP: 0033:0x7f1bdbb1d378 [ 873.141407][T10349] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 873.161308][T10349] RSP: 002b:00007ffce1027e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.169859][T10349] RAX: ffffffffffffffda RBX: 000055ea34709050 RCX: 00007f1bdbb1d378 [ 873.178056][T10349] RDX: 00007ffce1027ec0 RSI: 0000000080280215 RDI: 0000000000000009 [ 873.186322][T10349] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 873.194456][T10349] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 873.202512][T10349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 873.210601][T10349] [ 873.214075][T10349] Kernel Offset: disabled [ 873.218591][T10349] Rebooting in 86400 seconds..