last executing test programs: 11.386703141s ago: executing program 0 (id=2277): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x200202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200001d0000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xfa2a965f22f5f366, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 9.518529247s ago: executing program 1 (id=2280): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x1f, 0xe, 0x132, &(0x7f0000000580)="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"}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@userxattr}]}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000a0e000/0x1000)=nil) shmctl$SHM_LOCK(r7, 0xb) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) creat(&(0x7f0000000000)='./file1\x00', 0x4) 8.933726401s ago: executing program 3 (id=2281): syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) preadv2(r2, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1, 0x4, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) 8.781368302s ago: executing program 4 (id=2283): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @empty, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x590}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="cbeb76dd9eecf260cb2c422f4084e7", 0xf}, {&(0x7f0000000100)="9d78e9917ff961ba89b1ce79b8eab14c0f349e3df82ecbb8f16b433b6eb8d6212b95bbf1b6f59aec6e379146a79d0ecddb14ede9052b8f9d5c03515e4a7d3e4c1d27a5", 0x43}, {&(0x7f0000000180)="da19b90732e0ccfb162c3f47fb3335d0f2bf48ad99a5d105c1e87b6e11369a906f55a7b492dcc14f9110ad9a06da2c93e68c8dd268e58acb05f321a2f6c115708e5bfc4b034551c1dd71435bfed690c93254c4410df6b1b94acf394e1bee06c0229fad1042ed1f49d34ff3758db9fa744f2ab6ededabe58e1a456716b3ae48ecefce7d68b0f586e93408b16d45aed9", 0x8f}, {&(0x7f0000000240)="ecc6a05bcedca6f95543cbb57783fb127b9106bf529a0f", 0x17}], 0x4}}], 0x2, 0x28048005) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x1d, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYRES64=r4], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x6) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000340)={0x99f, "5c0700bb43670ccd12b9da40fbb4cbfb02b0b8249a58c56bdd8ea6b396f40b0c", 0x400, 0x8, 0x5, 0x1, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0xffffffff, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x40044591, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7585}]}, 0x0) writev(r0, &(0x7f00000037c0)=[{&(0x7f0000000040)="7d29dbe640bf3555555aa80057f64e3e9622f2300eaed4ac01afce2a631019da01127115908d270998ff4678014cd1daf8aab3ab14ae02b658dd69c4e331d32209a459f6bb2fa7b96542672a336f5b54a9ddfdabd1d1c17fcc040f70f23bdafc136e2a18aa8fca41fa767965b7623e6312cd0b1e020cad587fc7eba0ad7acc3a7b15da3300000000", 0x88}], 0x1) 7.819762097s ago: executing program 4 (id=2284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 7.72968492s ago: executing program 3 (id=2285): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 7.68513765s ago: executing program 2 (id=2286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 7.60809405s ago: executing program 4 (id=2287): socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffffffff630, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x42000) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0) read$msr(r2, &(0x7f0000000300)=""/136, 0x88) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) readv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) 7.487310501s ago: executing program 1 (id=2288): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x35dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xffff}, {0xd, 0xa}, {0x3, 0xf}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(0x0, 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r5, &(0x7f000000a400)={0x2020}, 0x2020) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 7.237784453s ago: executing program 0 (id=2289): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x8000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000008000"/28], 0x48) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000240)=[r6], &(0x7f0000000040)=[0x2], &(0x7f0000000200), &(0x7f0000000180)=[0x80000000], 0x0, 0x4000000000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x800, 0x121540) ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = inotify_init1(0x80800) r12 = fcntl$dupfd(r10, 0x406, r11) setsockopt$inet_mtu(r12, 0x111, 0xa, &(0x7f0000000000), 0x4) 6.310605922s ago: executing program 2 (id=2290): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000), 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x18) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x13) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000000)={{0x0, 0x0, 0x81, 0xfffffffe, 'syz0\x00', 0x5}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x8, 'syz1\x00', &(0x7f0000000140)=[':#,\x00'], 0x4}) 6.286706601s ago: executing program 4 (id=2291): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200001d0000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xfa2a965f22f5f366, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.151043813s ago: executing program 0 (id=2292): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, 0x0, 0x0) 6.150315569s ago: executing program 1 (id=2293): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r0, 0xfffffffffffffff7) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000fe8000000000000000000000000000aae0000002000000000000000000000000000000000000fffc0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000800000000000000000000000000000000011000200ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(0xffffffffffffffff, &(0x7f00000030c0), 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$nci(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.804509726s ago: executing program 2 (id=2294): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001300)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000001380)={0x60, 0x3, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffff, 0x28, 0x42, 0x1, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) sendmsg$nl_route(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=@ipv4_newaddr={0x20, 0x14, 0x2, 0x70bd25, 0x25dfdbfb, {0x2, 0x1f, 0x8, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x20}]}, 0x20}}, 0x24000040) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)={0x40, 0xc, 0xfd, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000", 0x69, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000540)={{0x1, 0x4, 0x5, 0x3, 'syz1\x00', 0x5}, 0x0, [0x7, 0x3, 0xa5, 0x3, 0xa2d3, 0x240d66e, 0x0, 0xb4c9, 0x8000, 0x7, 0x7, 0x0, 0x1000, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x180, 0x3, 0x8001, 0xff, 0x8, 0x8, 0x101, 0x8000000000000001, 0x6907, 0x1, 0x10001, 0x0, 0x5, 0x5, 0x4, 0x0, 0x80000001, 0x9, 0x9, 0x6, 0x7, 0x8, 0x6db, 0x843, 0x80000000, 0xf78, 0x5, 0xc010, 0x101, 0x8, 0x1, 0x93a4, 0xffffffff, 0x10001, 0x1, 0x7, 0x4, 0x6, 0x10001, 0x9, 0xfffffffffffff6d9, 0x8, 0x6, 0x8, 0x1, 0x2400000000, 0xfffffffffffffbff, 0x0, 0x0, 0x663, 0x2, 0xbd, 0x3ff, 0x8000000000000001, 0x7, 0x2, 0x3a, 0x8, 0x1, 0xb9, 0x5, 0x1, 0x6, 0x10005, 0xfffffffffffffff2, 0x1, 0x1, 0xfffffffffffffffc, 0x800, 0xb, 0x9d, 0x8, 0x8000, 0x1, 0x80, 0x0, 0xffffffffffff722d, 0x7, 0x100, 0x101, 0x7b, 0x5, 0x7, 0x3, 0x10000, 0xfffffffffffffffa, 0x1, 0x0, 0x4, 0x2, 0x8, 0xd, 0x0, 0x3, 0x6, 0x7, 0xfff, 0x885, 0x1, 0x9, 0x0, 0x9, 0x9, 0xffff, 0x2, 0x7, 0x8000000000000001, 0x7fffffff, 0x800, 0x8000000000000001, 0x0, 0x4f7d, 0x9]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 3.933253212s ago: executing program 1 (id=2295): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.87869195s ago: executing program 0 (id=2296): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.825908115s ago: executing program 1 (id=2297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 2.825189879s ago: executing program 2 (id=2298): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x400002, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x1, 0x1, 0x0, 0x3, 0xff, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000001240)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) 2.824797331s ago: executing program 3 (id=2299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netrom(r3, &(0x7f0000000240)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 2.54469034s ago: executing program 3 (id=2300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000121"], 0xffe) 2.368323009s ago: executing program 0 (id=2301): socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffffffff630, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x42000) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0) read$msr(r2, &(0x7f0000000300)=""/136, 0x88) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) readv(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) 2.206705057s ago: executing program 2 (id=2302): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x8000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000008000"/28], 0x48) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000240)=[r6], &(0x7f0000000040)=[0x2], &(0x7f0000000200), &(0x7f0000000180)=[0x80000000], 0x0, 0x4000000000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r9 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x800, 0x121540) ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = inotify_init1(0x80800) r12 = fcntl$dupfd(r10, 0x406, r11) setsockopt$inet_mtu(r12, 0x111, 0xa, &(0x7f0000000000), 0x4) 919.23683ms ago: executing program 4 (id=2303): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0x37}], 0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r2, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xe) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) clock_settime(0x5, 0x0) futex_waitv(&(0x7f0000001200)=[{0x1, &(0x7f0000000000)=0xfffffffffffffff9, 0x2}, {0x8, &(0x7f0000000080)=0x2, 0x2}, {0xfffffffffffffffa, &(0x7f00000000c0)=0x6, 0x82}, {0x1, &(0x7f0000000100)=0x401, 0x82}, {0x7, &(0x7f0000000140)=0x4, 0x82}, {0x9, &(0x7f0000000200)=0x4, 0x82}, {0x1, &(0x7f0000000240)=0x7d4, 0xc5}, {0x5, &(0x7f0000000280)=0x8be6, 0x2}, {0xd, &(0x7f00000002c0)=0x8, 0x2}, {0x7fffffffffffffff, &(0x7f0000000300)=0x9, 0x2}, {0xffffffffffffffb3, &(0x7f0000000340)=0x7, 0x2}, {0x2e26, &(0x7f0000000380)=0xfffffffffffffffd, 0x82}, {0x1e8, &(0x7f00000003c0)=0xec, 0x2}, {0x8, &(0x7f0000000400)=0x870, 0x82}, {0x1, &(0x7f0000000440)=0xffffffff, 0x2}, {0x1, &(0x7f0000000480)=0xff, 0x82}, {0x2, &(0x7f00000018c0)=0x3, 0x82}, {0x224, &(0x7f0000000500)=0x10000, 0x82}, {0x3, &(0x7f0000000540)=0x1, 0x82}, {0x5, &(0x7f0000000580)=0x3a61297a, 0x2}, {0x4000100000000, &(0x7f00000005c0)=0x4, 0x2}, {0x0, &(0x7f0000000600)=0xfffffffffffffff4, 0x82}, {0x2, 0x0, 0x2}, {0x1ff, &(0x7f0000000680)=0x9, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x7, &(0x7f0000000700)=0x8001, 0x82}, {0x0, &(0x7f0000000740)=0xea, 0x2}, {0x9, &(0x7f0000000780)=0x8, 0x2}, {0x9, &(0x7f00000007c0)=0x2, 0x2}, {0x6, &(0x7f0000000800)=0x100000000, 0x82}, {0x1, &(0x7f0000000840)=0x4, 0x2}, {0xe6, &(0x7f0000000880)=0x714f, 0x82}, {0xa3c6, &(0x7f00000008c0), 0x82}, {0x1, &(0x7f0000000900)=0xe0, 0x2}, {0x1, &(0x7f0000000940)=0x8, 0x2}, {0x1, &(0x7f0000000980)=0xfffffffffffffffc, 0x2}, {0x3, &(0x7f00000009c0)=0x4, 0x2}, {0x37b3, &(0x7f0000000a00)=0x3, 0x80}, {0x10001, &(0x7f0000000a40)=0x1, 0x2}, {0x5e, &(0x7f0000000a80)=0x8}, {0x9, &(0x7f0000000ac0)=0x5, 0x82}, {0x7730fd6, &(0x7f0000000b00)=0x4, 0x2}, {0xd5, &(0x7f0000000b40)=0x4c, 0x82}, {0x8, &(0x7f0000000b80)=0x5, 0x2}, {0x5, &(0x7f0000000bc0)=0x7, 0x82}, {0x0, &(0x7f0000000c40)=0xfffffffffffffffe, 0x82}, {0xfffffffffffffc01, &(0x7f0000000c80)=0x4, 0x2}, {0xeb, &(0x7f0000000cc0)=0x40000ad, 0x82}, {0x10, &(0x7f0000000d00)=0xe0, 0x2}, {0x2, &(0x7f0000000d40)=0xff, 0x2}, {0x1, &(0x7f0000000d80)=0x52e, 0x2}, {0x80, &(0x7f0000000dc0)=0x200, 0x82}, {0x9, &(0x7f0000000e00)=0x3, 0x2}, {0x9, &(0x7f0000000e40)=0x1, 0x2}, {0xfd1, &(0x7f0000000e80)=0x1c, 0x82}, {0x100000000, &(0x7f0000000ec0)=0x1, 0x2}, {0x100000000, &(0x7f0000000f00)=0xf, 0x2}, {0x7, &(0x7f0000000f40)=0xfffffffffffffff9, 0x2}, {0xffffffff, &(0x7f0000000f80)=0xfff, 0x2}, {0x2, &(0x7f0000000fc0), 0x82}, {0x1, &(0x7f0000001000)=0x40, 0x2}, {0x7fffffff, &(0x7f0000001040)=0x6, 0x2}, {0x7, &(0x7f0000001080)=0x7fff, 0x2}, {0x5, 0x0, 0x82}, {0x0, &(0x7f0000001140)=0x5, 0x2}, {0x7, &(0x7f0000001180)=0x7d, 0x2}, {0x9, &(0x7f00000011c0)=0x6, 0x2}], 0x43, 0x0, &(0x7f0000001880)={0x77359400}, 0x1) r6 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r6, &(0x7f0000000980)=ANY=[@ANYBLOB='vcan0\x00 -00-'], 0x20) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 500.179465ms ago: executing program 0 (id=2304): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000007980)=[{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000340)="3e035c8f83f8b7a743ae2e232f7b79487e23168cc312b37fe01439c01bc4b16f15f3f26158e05cfdaa1582e63a9b9b91540ce8ee717b9d2144895f7af1df949ccb0efaf04d54846da4306d6e6a4e17f1ae2ab4c41c50835334e0265488ee769310f498ff6219db7462f5fc22663c3e136ae687513745c69d9fe16ece348012a9386e2acdd06d07e0225e336be7b4dfafefeed1b836b1fc2ae1d1dbf5647a830b33548f9d5d5dd96bef7ed5865b4574d80ddcb5bd9f46585b7bdab0ba696040c3ef20c4ac0fddb54e63636d1f59bc7dc4ae094b7cea56bf52c72ca7a6d29ffc9d8fa90435dc80915bfae9d0bf4cb0d5da49ce573e", 0xf4}, {&(0x7f0000000840)="b981847b4a2cf553b6b7c3e7605a37102a6a9c5f7d6a2d032f240b44fa8682d8d9ad614a9aa879b6dbd90579c971a5bdefebaaecbb35127b97478a3af755e2c9d9db93cf1dfea8fb61c8d1c14dd2474cd0a89244893fb0e4777e31bf6ac4603170b5cce99e6f6642eef07dbddf976c016de03f38daf490ad4ce45342ec12d527c4504936be423917dda3fd3d6fcfac283d7ae1748e52eaa1b6f5091bd404438acc5f225e1ba6d2c2e2d37bcddefc330e5a32b8f3cf95e576c5b8904e16e74801e6a2287982cb38561e5ef537ac4361b5c9da2853f2ba1228735e2d3b0f784c738ddff2b0269af78312e13eda72ddcc0d824b2a3b25f8e78840641d84267179ea838eaacbac222e75766af556591e849daaf7d844c814423b07b125b5922845a31ebd8d107499a3f6b92545a96259c32a35effd40c9d60ebae63da060ad389be5a04264e0dd2172197c5ec3821492478c96b0ae5cc11188967e6b7ef7a218466e844fbb8192f103a4237bdbc042627c07741fe3f0191ae8afc012070a80f14aebe28119ff539fa600c23fd7b59bcd6fd3d1dad22f7159deca6bea8becafea6dcd6cc6d95b666de7876cc5eff9682889b02efdcc90c96abdc3710d8740ea2e7f87423a590d7cbd0b7886b9518fb02fc3bc64dc9e4bdfbf0a4cc104e5466ff20afe54aa49f68773cdbc61e288fa0c7d7f2c95eb135d97db79a67300b3f71024daf6ee532620a0a07cf3bb95f4bbe1834ae4d902643026f1970783531fb3f59f77e01984a793ae2955052b2876d1c56fde9306822bad6a301667a4c270c193b91815f16296a41368d3ab499041d53d2ec9f7df8a12242c8ef74d624bb601c3e22d000d1b2cf889b7653f4d4253df51da2970d820af38ebbff433c82ec0d547c53a55b5d66a7e9893d0c389c58bd07c25ae39d78c6ed435651a3d474d79cf0a7d9749af64a9ef2e19553f923cacd9bef6373e76fe0b629b16525e059e845abdc85af965fbe66bff30acacb4eeca67d75630ec67827233010d6b585dd9fc3ea28656870cad125d8e18d6e8efbf4254161c1a4778361fd749721484b16afd5dfe4f074c8cb84a2f04699e5b7aeece91f344323429a747f5b5851641ac4ce40ba229853186027be6fc5e48b565788accf6565540bb41d79a4dc051c9645864864a11e26b73f932524761b42849e39de39f5fc69b601c9dbc9dfaf1131067146747b6184d858955be465b036eb757a10f20477fd7f7e65ff50dcbf36cf173f8e508977d482e663123d18eb6ae580dd8222f0aef7044b2173355a74db70129263908170b4f7c3b6c4bf6a87e979b0bd08e61520a2dfa5dc16b00b6afd4ab11344ef20465bb8d31809d549fbb75dae15fc7bc39d0cf1949eb0085e8e06cbfbbf94a582242126e8081c5d3a70d2e97348f980c12592861dfdd83b66ce342d27aabf13f83ea870e5292854530f98149a16365858700364958491499c22d0f69022fb8bf73cb756e82b5c4b2c1fd9cfbfddb943a65e6e90d254d5ba606aa0ab94bbefabe0155aaea04375f0d1b7cb3abed527003ca3d78578657c92dc0082728fddaae077956b5ef863c3d5c19eeaca90522f5eb929bf250e9ba7bb0dd6287c1d70a97ae9728985c9f790d1e63d11e946745bd54e62a84ca5a139c54e7f65a71c9cf6bdb4720e1d2db562a9c2853964742ff6368d10eebd98f5f99daedf6e0e3510c93708f53184826564b2265f6fd17fef185281b753ddc3d696b5d49d283a49ab6a68cf78f85a584c8849355ab69324b8c756f075c199fdd55b72bede4557b11049915a35b088c0bcf0b9c0cac757f7f5469e877c1608519b52d9c988fff1fcdfb212edf81663230c34945466ee2fe3369060ef06032f7e1b6b6d21e195b76f83c7e1b91edf3971f83db747dee99c9fc9fd416d849cee00adc80d1229f2e1da84a51c00b17ca31a1b55b33cc1c8316f68ecef33aad7f5d377cf2c3725b9af88d10c51f71c322f4ccd0b7d9f993c8ff4ca301ee03d7e3d93339c7ce702c3576f8ee90cf37519d7dfdac5bfe0910403e0eac6fcba2e381fd7098f3258d3c63fe5baa471a811f94742e4da5f4dd5bad3884612cdbf0664bfea71b641715d2e7710fe4f91ca664a4a30e613bfa13f72b917cbde6b17c67d338bdb71d2be00dad935884948d7b56d8540b294c5fa98580604ba065eb20d156664d76d0c24ce05787b3cd466e4d334f9105b70acc570e6ae07e95b75bfeae9bb01e31493126b22d9ef77dc2295002ceb379a6895ee04cb1900591489175b94ed274a33a4857bfc11474eddf57005f5721728f22b1cba3e8cf810ed0d8c04160227ab64f1d60db858545af4e42beb01c0112fb2eb3c10f5797d4224b2b055ad048422777bd84034d13be46610243adc2e7119347e24b23d822c969f15a0cb0a923d4c6da1b0731393d19bdb4e92157d2083aaef40d143ae568205196d9b5736f7e2faafe8357641d85421b0fc40388c2ea78b53ac7e833674fb6cd39df472a2ffeb7abb623f06e68f461e8992dd15d3aaf8fe853457e7754f093bbed669c662f67b3a50339558a68d26dde11f43f38197cbd989835b849f7567839f662e48b0f8cfb7114539fdab304972522afea84541f78a2c49edd8fe5782a6dedc98569a1ab0930d1774335c7c3949fa7ebec7d465aa27f4046f4cd3f4068ded6561960e571d79f2bba40cac3b6caa23caf5a277391e6c4fb958b42d9b9ef4cbd3ea2f1a7fdb8c9ce4ccd1c8550d4533ddc18f8f1f0cb1e9cf4ac1dcc49b3935c3a4c128eccc3926469817940806d1a29fc71d6e14ad92ff9a6388a4730cbe7b0ef97a0b509842c716768ae327279e670079cd8683b4fe684f8161f646928440a139ce662f6243f84aaf41daa603d479c7031e4a72cab12a9bf3330ad77a1d0b33b10535bab47820ee181e276b09adad66e8631db5eb5599ae09503c2ed339aba015b8a37c19821afae08a0bb073a71569cc6882e1eee366b284bca6c2fc27dd69e17bebc12d795cea5ac8a233dfdbffa68205dbdadd455907bfdc3961363f98bc7bc42e493d072418c274b54f20eae4d238968f2eb28e16b82c9abab424b82fd3a5ef5d791c22ff52148b9e0d036b1750d4071a421a44127ae997eac8be11ce4b29667cb66940566f3b46e32413792eb5d9aa433005ce643300d6a49c28e3df3ea3ed2f95c00294d5a82be108cdf19296f9fb3a2c704b3e03276c0460794c41176616d20ab63c7a408fb633223b089464dc15ece73896c22cfcecc4074c92fa1a921da087cf3862eb0f06c6ec63555b9d593e35b95593c90221b664b960230b48be2f5b00a09b3dcf145b3890409435ebd8a1d74af77d2e998e26ff071d573519dc6f587e6c9a4595c96b3bfcd185baba8fc526e4bfb2ada4d1d007ab7f9ea2697cf4fc57153d88ee605669603f275eecaffd6bfa22c69a7fad61fa2cd2c051131af99f4ed5d3c340a5d7caf43676d32e8beb315503487ced3b12d320a3e247bfa77e21cae5276b86ae36042402a8808d130dcc16de5d44c5ac0f4ae9a1f0de804be7f150aa087a084fbd0201464cbed4e12b164e020fcbed99d5b7700d99c57cc6047b15a90d200ad4ffc101a5bd2a1296f535eecc9ffbb5126c8ade5b60dc4935f4f2b9205eed5a4490f4dad8ef32c13800325e2aced2c663b389d39aee644517548ecdfc1cba3f9d14ed9c47d723850644b3100f18dacf211aa1cb1481357faa4ec1499effb7dddb68ccf2eb971e483826e2133f872648d8d432b609ecc96bcfb57fdb5ce090c5c2f93b11592cf59acc8aaae7acaedb924eac753ca9dac764954369757c4dc17b09b9127dc3e82a1d7badeb7e324c9647fd5c9ac72c03e0c49a77bc6ece5022d7b5dd56b30ca388d9b583590f103e3f1b62e7974a53ab550c513157091df276174a615e6bd496d31726cb06b3dec0c0a6a2fa6136b9762054b43ea432610161e07937d2caeb14faa983d0568569bb881992cfb87f2363f8437903abaf2f22ff370bf590ae478a16a5e3793508778491ee30e93d1dbea82dd6ae57a5f260bf947af254bc57c53d855e4041810f193a2fe1ab917566d888ee999be84f695c79696a75644cdcd3b8f611959735f9d0511cb4baaf600985d5a1a055e8beb14b9262354fafb0a61b558a12a9f57ed57f15e2c27c27b2ab346465b3ba278b5b72ea6defed773cc5d0efb6a0167c9e60f2aad74fa1f8b03fc50901f68cc42c481877d25fb339497c4cd6ce6089c15c6c117c0504b7bd88c651bf0cf5ceb1da6e3ca92c9f71cc57d661a287f509bd3b79dfb8722379348e212c25a9fe00b619ec87a211768e6dfe97ad9c94bc4ff593a78aedfe9cf35c5886ad22d49227b5ab3bbcc542264fa6e3cb27a3f10b51451a89fc73e89b4646ef32af160a628de4c9ef00f19cd1ab42ea735a7d7d0f01c495a8023cad2e40a9d4c9e19aba4b52bb672a1c393504d16ca32b13f2ab858ed1d71bf9482e7bc70032984daff22c1698505658cdbb5145af7a48f8c896d9b09846d9701e68d5e8c9735b847faa917738b37af229557fd759c3fa7267e96bf86d378a745da99efa9f425157166f60fed7b62d50aa78b2a87efbabc6d3414a2d7ee75bcf4eb0bb33f5ff435916429e26099cb94ca231c80de2dee1e35749c98079a9870d083b6b4bf6f8f1a129172d387332a7b7a1338bdc9bb242195643259bec344c292dfa1ec329251aab8e513f23fc5451f7bdc5a47a4a0f652a360c8a2570c4bb69ebe0a51de6e147667cb0424ca85e388c728b330c94b2c3d9723d313d9498a8bfc1a83fdc0c79a3e98ac2314da5f706b9641d16562374bfdedc344e1ba940c0e59452c7d499ebc68f0c4624893a70f63ef88f3a7157ae7a226455d5a55b90d7daeaabec3a72bd38f126af4531568aa79914995b2aa511388909cdeae2f837dca5121af1014cb09c836101855447d693f3ddb82ef3477c160a5d27f50824d1968e7d5f2352188881717883a722dc2032ee2174005ae49c0aa8d338ec8394df0bdf2f64adffb08e1346491b03f11bc51c617af828e288bcd9e167d92da9c6d425528ef0d5749ccb775b2b4ccff9c8245cc40b8dad481c9571f179feeaf0805875de0cb27d61f3106114373bcb4c0feef154868b626165bd42f9fe71b9ff78122de10e9604778ac5eee983604de74781205ac138269dcaa427308e371236d14d71f4b8011062beaa21e2b37e6bf3b6d4fd8627ba927ec855037a70179769a3c47d7a2783c571509a4d902cc6e3ca7f3aa1d977cc473f24f617a67e35a109c70e9ce43642ea04ff6f02d3334520a64a224415da16fc6da467c49f3ee680572b53cfec22498f2f35dfb9c60c893e8d587b2a5439dea4d2dc61714a1852443f79a5a04157076cd9ce40108a5374b025471fc13524af4c07b3bb007b2fb513713896396a0b09f2b824da13e040c8c8055ff434dfcb41a9447048925a9c656a4ed113f39b74b6b193476ffe98340814e49d39a5280fc4b05030d4f3b85e00bc34e586fc099ff1c7596a576e7c111bba2d322fc9cf148a729029dcdf353ca90c3a2b93ba5e44d00b4fc2e55fa591cd6b1e9b33452fba5c7b6a7213d457ff3d93dcc8724ed976dcc889500fcb802ac2643fb7dc40fff55a806a341473bfdd6df4786317ea6371a79853a8c8ef9278bf734700ddc800f15ca90d79bf4ddf178150c9e70b07d868a1eb86497af6d0e5536fcad82192b86b6cbae6ddaff21e1be22e8a2e20561500261917900552a7e96d839aca214eb4eaa22211fb06c91a484e57a85d23b", 0x1000}, {&(0x7f0000000200)='[\b', 0x2}, {&(0x7f0000001840)="e617ca5095b47cc9a17222a0d3a244ae4610835d0ecd6f672b22efea3b1ccf1ba1aee3398466f0402251f8511a63f5208d1c1209bb9c3a908d49cbdb470ee542b3cd351f1c80a01e86701b8d450164448c6453ec58101578258bffa0f1f6b9127fa820c92c46e7857c5dbf22817e544e6c9a48cbdeb67010141e237ce6e7ae3280b83ba89a3cbc9d6c554d94e2e36a309b9f1e4b1dc51e5cd4f95f9c21b20130df7101b454c099372bbaba8456307d0096dd98ae6549472c2700201cf57a79ba1f15d738517aed4913f92fb10a3eb5ce576e87cbd138f559bba4c20de1b811b402ee4ffac9dc4cff9cdd157653e1da7bbc0dd9a675aa9570574f7c4b72180fdda0c6f78e491daa1399efa4c8364f08cef6d480d0c24bf17a8cc60a1593319ee00e0ea46c32968014abc80c3d170134e4bd26d226301ec0f55592c7c5edfe64fdc6c467145e2c984de3d73d8c5682bfecf4ae1e6c32a6e437bf370f461092a2a24899f0d34257536274daa594e7f580dfbb45ffc4b73d85203dc8c8d956f77d3ed1ad1c9615b151c291106a2980f436e9b861c4fff6f2ab7c366c72c32b885a52f1ad5bc01f40c1bb4e1ca1899fbe7ff583aa02c4570dfb3e1b78ba6e8185857859b3b34997187d9a28cdc7d6c417b8bf3913ef1504d89edbe180c6b8470b3b6dd00394cbc74efc0458104dc9b123ff4db1d8ce9780fb5bf337b7579ab0e06fd4a248050d168386157f6d190c220e0dedce18db032cbacd2799240e5d2dcdfe76dc4c0b7c7e45641d004292b8826e31c0c2cc318d0f159be165ae2a9eb618575f6254ff0bd3d232ab4300b5e9e59e6bf6a24aa9e29a3068e682e5334518db86a504bfffb421ae7085a9e2d7e3e95540e9b3ccf6ffa1b1bf7e8564c4e1b0b711218d9f7f832aa77ea7723519e23c4c180b5be4b6d7334f41de0b5decb1386536eab6ee80e17f961131ed51f9b7c48fcde6b64499b3d134b8e7464dbd927f59d0ff9da3742e0a3e92789bdb9a3cedd6d3f212a17f9100082992b94c49aebd724a397875bb8951c0750b312f15a99cb13bd60dee4fb290e6abd1fdb8ad6e7bb253dfbfb38d2257193286aef13baecb2ee006b13bf66a575eb0ad15a08a0f879cc92d03a6502c7e1a04e021c9d5199ce29b56e56418dcb5739e20c2c3507371942234ae11c7fa695c1538bf7a247e809193146c3cfa74b668428afbc04b2701f47c0bbc99d8f300444301d626ae699520aa7d7a8590c2ff1229fd4bb4f76b1487364ff85739299521c66b4792a2dce3e59bcf475fc6afa2eb9dd3393afb07e1a149decfc2f91504cb9d25b648e94233f7522b98d55ab28863cdd069fc970a4a6731157fa718db0b24972dc1ece1a488ff388c459d672b6b905fcf4063b5f1336b14a5a02e38944252cbbaa32375c9a2f45c029a3c74b27cfc3dab77a4f24032f6032c8468af6ef352a1faee9e414c2dfba7d68ac178e42f53574efe6960bd3351a63ab965858e83d5f9d97bdd774e26405b0340f2bb54051cf6e561e7811d24d7506c5a792fe02bb278f7310f8c019670e1d40c7ca847f6c5504df01715d55eef66355c724911f83c7ec2f814cc6e360fe24a24989d05adcd6cdc26e484db37949686c985010f07642f293fde6d7ad94547f81b29e4483f30032b19713058f43a44fe23466b9982d597e0d4ef23e0a54c97ec2979a594456cb21f0ae98e011eb99c56eb98897c61f8e877b341e081608a51e4e276a6ba8dcba31c9286ce925b9a20c52cc42092d3e937d1055946f23d4b766f8a56066be38430d6178fd4ad2fd9de12f01a1ef3488d2e2afd705bb7d0ffdcba711e1c80a3ac3ae848ab31c1a5fefa457afeef8323c2cbf32a99a54e930744b8dc38f68697ad67b225c48b35c07079d479fc7c0c157a27271476901dcf60ae5e5ba92cc0c6d68376b0de7e08b4ea50a0879a9fff61284bfe3e2cc5e0033ef6177153dca170a8ea94638223540a003ce5f074c51b20b2ae8da5fbfe20bed2ea7beae161b782a585f1ed9051de0efc79f609e2244ea55469c3a63defb0ea874fb13a1ebb2102c56092a11f1625d521575486026ca5d8896e8846b9532321c83717db7c5a898e8af5342babacf40896d94a3c1c9f3bdc5336ebae3462b177f76a6825f274c37d70bd710c00612793872a4532836b0a3780aae71f01d208a4810577e84bcda657165e9827957ba61e01155c618afa28a53ad9fbd52950bac1de8b3fe2e2295b1383920b56df8bd8b9a8ace4e714cd39d862670bd59b8e2d291c731311edaef80953269ecb07b7c213d28d32c70a18201267d07215f22bac035cc1da61007fce52b9774a689fe9f932a979af7cf6e1607669816671dbd04a9466037cd8acc9ca3816970f74261922f70f3f44f51ac18d69fb9db6017a92e84ff0d08672b22a1a13f5a259dabb134ea050bcab23842fb35e808858a76e8e4d34b76c7bec23071a734465946dca958ab8b84f009cdd8b62edbeb435129825863a508ef5732064df6ce07f505ddf8d56ecbcf58daf908cf698155191602fe007742b7453bfd817b176e9a0b4d1ae02f1c141d7f10f71c72f9e3f8d11d90716db3070e6f7d2084488f349576c82a3bcab54e2a3b7040374fd454a5597659dd1c9242f18363aed80b1be09387f9baa48bd07082f642e2fe1f785387d240f27be87c2f08dff51e38bbbcc4c50181e46b3d1aafea13bd85183a2911daca1e30ded7d00766255e8737c780dde1ca62afc1091ba0d3b7d7954b9df45603dac860544e883a56d9aee22da8763ed714d94808246d39f90582111b18c435ef4e185a09c168d96682dfeff25a05b4914ebdbcac2994e709d5df0b23f28cc22d20b906bea535da2343ae1fe950e0872afa2c564763482b44698d8986f0a34d6a3258e4c9077dd3b6d30ac6ab28ebbf8a7f2b17755b529cc7ffa562c7ef03ae572e76e24d224b9f958b36d6afa56ba9474b8bc85fc1f710aba2313724421db2a3405a0e45434a3be4ac9aa78c6f26d02bc6197c6c565504e754abaa6f7b83268f058806db2ed3e0c7f17affcd5380de3d0a5b98bcddd89d74cef8a4b0c31f5a54825426e0175af363d841e02ac9626232903806ee5a625ac5a4969b6ac54da75e9f241b92a3aad2e214c6a284cc2326cff09b33dc858bb11d834a50642ecef345f863fc02c86a29479f258a0e00446baa85c806f99cec00646e524e0609c0addaf86c7ac15570051ed7509ba7d783e64314732a98ee2629de72a54a38bfe09a529b11c584dc524533bb94a03b282ffd6307ee1a19a31c79ae790b4dc1d110f43514e603fc5896d95486c1e5e46f135a079dfb203af8adc09f9f591f8cde8146ec98651e10c376f00002e437851b0015b7a91e52d3a41f0984cf959366e5e08be941d9078cd3991c4a23423d2586ea1d21cc106825e742f16fd8f88772b74789bf4aaadcf66fe4d70ce1ff7cfd3ff7a4d11cac8ff1a565752ed428792fff1e17bbb8ea052370ad63de29536ea676a5e13f4849d8a763142dd92507b4b1fd1fbb0900e3071c58a4848102a1830c10e39404d7dcdf391d78444d05244db437222f25b8c696eec9945225b2f58a0596d7a2684da82d73dcf643bcf66c9c299c2d87b10b84c76921188d037d54d2e2befeb7bf3be319f9e2065b4ac5ccbfc90f6e0f4b7b51e7eb828c830c8e590da7c795a242f2d1923d913fa0af3381f5d86131307ab0a4b9c560d2c1143dbf32607d55bc4118febc8158febb699d9c6b2828587a48108de76a5187c5ec8f8640cc42a57afb14694e62df60511bff860a1c2925314ba8ae6d9a7186d88ca6bfa83cde608ec53b030a9efd8090893e2913cf0af2aaf53b2af1d34bd14a11b97ba4e856df49ddc525465b888584b889d3c2ea299d24e6c75f24f78b53ec2f4414d50832db5cc554999fe4e4e6195389a752461b7b4826590ecce68400dc2c9ee55f07269954bf5dcfb4f1512469f6cc5e504f534e26419c693ad12ebfd8687398f1585cb2fd884c3f615cf4d236004dcdb8f1b1a244b01327e5e2641b4dea705fdac01d6b089503825b84c782e0f15ecc6f07686570aaaf6d92e7ad965e77ffcf29cd6c477454edeb4d97fb9aa143c977e7e24107b84762ee8388e3ae2266fe3dc7935825bb72362aa79a76db263ef7dd5821dd46ea9fe1186596f9a8c4d7edd57a793f833cdf46c8e96638321667d5b63c76be255d272a5923ce05ed90936d65ae3edf10ba44138dfea5e2456619b75ce29ad8d2b88ba6dca229f494dfb7fab6f949c446bef1073f851c3a7cc3c517db979c5fbc8aa77031900fc9cbe30b52f694923dc04c64d2e900624bf93fa04518155e253e550d9962e3359eb502934a2af4c6f5348d7e9b6500adf55c990d70285aee7817bbfe7b534bb9f1896338a1c0d9d9e555b72c9cf250f35aa868531ebe1401e23c80b16baa61252929b893e6d8d1f5ef1addbe42dce17fedf14344e48bf8b5faf4087fe9b5546eb0789e2e989c6a96e108c6e42a7cd8658f3ef8f833be06c6f1577136d42e162a16f9d7a497f5751fb78f89ed618345f6d6aa580869d3bddbaa7ffded83f09e4a39095644171826b9dc7a666625d6da8cbcc1572e3fc89dd6974968cad20ae8502da831f5aff829354043ddccf4f53f819a55a0cf4df4d3127f058257af74c9f6a312f96a84c00875fcde81c5ba7ac08d905a45212476c5af94e8c5879fc4bc4c33961af92bf9f07c2d6f1c1a32efce7bbb236d9c670d052e641a2b44ddb06c9c01e17bdd1245309db9c4ed10980b3830a00adcece00406f5553d7c003b59e8e50426c4f7386dc53aab36fbee81109bb249831074f247282544055c7a178dae003fc669b6ddd5e45578e87c54bf4b024930e678dbfc519e2c4925b8ea1c005f4c80dd2969480e7e1421f9fc74b92fa2ddbd07eb2671070cdd85382a295b047af38d252247d793911a131ed4ebc8c18889e4ea4d1fcc0efa77b184b1c944a96fbe2aef38556bf76be60c52bb9ef579a56f2b53e729c2f81a067c3ae3cee55a9c393a6f2d8ea4b86e02a5abe4c92088daf238b97adf20c136c69b4a05bc1ede38d67b20fda296d2a594b05f2cd9059e6aae91a9bfd2561e84c94ee5fac2e6e509b3009aeb68435056d965131b227452cca708c5a693b8a9d1805a446c5d42281b01fc93162fe384a644b591a24ef93bbc34de33d71a1f4dbbea68f044955164463a675c166aafe71e1d69c183e7df282b935cc8c3d9ef28c45c6d24e6e7a80b0503c2942f2aacc62b7381f04255dc7d03b9e4f92038276c105050b2bb582f2a44cc07759bd20f42fcebf852e67cf63c8458e4c06a16d3c0598c0e1b9ebea11d2048f28308e5ac36a5db807878ec462d1eeeed13e76c0362ce6d4d8d899fcd0ba3bc58f3088f2f4817d185f61845423b4162d38267975252841872938968b9bed303fb8f0d91e7577b033101a03b92e96af5a7c24f2d7b24b93cde191a0ed3fdee8856c39f6fda7f43d51d2cb2efb826669408b16a295d1672c5def77aba974e597fba02303b53c12fce6edc0a16c812b5ab6c41b43aa6a9243b2d7b193213a577ffdaf93d03040fb9e949851a87751fe0016dd4e87d77b5157237850651a84bb42d74d8a5e61f1fc68e214a457ef2e03bb51eaf710f3ea3bb70b10e007dafb55217e0b9f05895ec96cb974ca13c78cadc9e5f17fa8e19377830f144ccfdfaa44cb42f4e8747fcc815c2748a605e09b366612f7b6ef5373a52ef01496284fca5699fbc068d3f7a7186f06749f242cf6fe950c4342979863", 0x1000}, {&(0x7f0000000440)="9b02f7359bd2ede9805da3f2af36ca737478f522a4238b7ee48aed9a0e1cf2c97e2daf4d4f29785e4d017bb24e71ac59f99b81f78895d09dc3dfd6257f485b00ff0eb983a545fa10336300ee1cb291861b3b0ab336230823934e160fc9a87bb18748818f500e920dc69f44b0d4c3de49a5a542ec07e5419998acb831198d908cf3448016c8ed2e09c493d2bddce8e7a9542b78aa474e2ccf32b7c6e9ff0a010c29da787a71de2385824df6493d4f87112535cf9a96bfa305bc7c40fa651d70fbbebe1f2a0bef543ea65829a753744d20", 0xd0}, {&(0x7f0000000540)="c262637a98ce3186670b11482f75b7218591eb729054ea60bbb62bdd4df439f3f01f06f5e98dc3ea49b8ad1e7b312a2216d043bf0c6501628bc83281dfff02d25afde1603af021cae0f748f7ac2d606307f5a8b2b3ae72e4b0046cd4fa500df2121e3d184a9cc3c1b1df34468431939752b2c45b5fcd4cd2caa7fc60bb618463dd38bc733236add925175e3abbbfb1c7a5a16763c1136d6c8b867adb8bcb8a01af2500680f31b976f7fc6891c0db469382caf06aadd38ea9602656df6358213f027d322eba206729a425", 0xca}, {&(0x7f0000000640)="2100d4ec90de49ccf3356c02fbfcf1eecdcb47f9a5cb95e8a0c5f760db81025fc3b9560af215bc52988cad81f604b1084d663571280b06318c2e2fa5f9aa98c6708d6d4f7da43bc8232d93786374f45dd3cca650894c3d5c8865dd4bf76e37ee2dfc13ef4541840088934d49122467924545f1aec49a28b08b0ee3f5034c42952bcfe27c9fc923552264a09662546f40533240fe3d5cbbaa699ec55856325ce891795cbc68b839d8b26fba69ca4e3abb2356bf8e5147d09fa265e4358c00cdfcbd58bafeaf25a5f390d99f895ce1d1af34b4d46cc82c", 0xd6}, {&(0x7f0000000740)="01077ba879435ab97bd750d99e5eb510ac6bc569a8c28b5b5c3e1b189a8e2e8da9b428a88256df7212a5e5487742621e20554657b68e61122bb40b109801dd1b094436aa76ad78364e5a97", 0x4b}, {&(0x7f0000002840)="5b87e576cb24b9caa80406a55eef33af54fe51bec60e8791a54ccd7dfd5f5715cac55feb0b8ee054edf1e937b49da9746d7fe916938364811e374b47172eadd2bfa97eae1b9b7f805d23fd96a9aee946407dc88eb366832025506570fc9e18d9cf08b5b6366a506c6ae8f69144df1a61f186a9ccaca8aa83e5f775b8d2eab0ec0f94ca5a7c843480512184697cc25da1c69c9db87317e8c96ce5466c90d2105435a004f1ad680ddfcdff8fb3b7df105f95155ab997d1538efe0f97bcca147be095ba30b10ce77c749467ab8df68ef1e8fa79d25e4af9b02c", 0xd8}, {&(0x7f0000002940)="aff0df73fa5c7a60735c25093db864d5efdda1bbaa780ff7456ca491724d13dad05573745a154a8794cab08602790237fe809871470a14fedd7234b57aa5ee98896f4e59e183e3a8b2e51ceeebe9c78cd0fa308d113532ee041014d4b775edc6d6c892e77667a3eceb118f74524ee97e45ece3c4957385a0df8a9c9dde4416790789bf6b3bdecd2a4984b8188c6e8c86d69808a44a65fd385aafe10316ddf756450ee91ae2841e1a222f219d0756b29dc5411f270d7475721552eabc22ae4d3574afbd475e2a5aeae6cb987e7b0eb1d6f4302afbc1df4483faf4f9aaa20b9ce10b5380026582fab6f11beb4193e2315095fa26", 0xf3}], 0xa, &(0x7f0000002b00)=[@iv={0xa0, 0x117, 0x2, 0x89, "083e4465050dc468f6afc7ca9a6a343c2899346b504add820137af129dc15e95ff5cf306fa101ed39f0346af3a52af81a14e7540a602e847998259bca51651033c43f4e1bbf4da88d71ef62758b780c3471af641d5022cb3a10add876f2c98d05b6772cd5dfb6d71187272f0305687345bc7a236caa1a2d1e76094c49170e72296883ced899c44164d"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x10001}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}], 0x118}, {0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="86616def2303302d1bb9a0c68ea13505d1b75bd5ec98c9e876fed4ed89e4456f83ec790e872625f21115c668fd274c0c040b576a8acf44db605fd3d37dc25205e63859f3fd39ad049346a46a6198b3e5a79befce81b610", 0x57}], 0x2, &(0x7f0000003d00)=[@iv={0xe0, 0x117, 0x2, 0xca, "4b44ca7df4ab93f527870c57b17ff4e4e37ac8f28c0f53ae7159311c7c61ae3e052e82c751300e9c60d0e683e847559ce7e36a47a013fe988ac74cb6c83d06c1a4606b650fd29c791b4287fd1ba516d549f08e8b5dda5bf940e793aa759a9e6769e9855ef3b609488f5760e5f94acef0d6c024a68a99fa9e184b433abff602522563de4562743f5277afe026c997f327f2e4d4db7b0491326c1d9905acfb3e61ae942e1e460b2be14693afa60fddb353613f4a8b318fd3e97de9fbcaa7832b4dbf152f64fbb8a3a1d47a"}, @iv={0xe8, 0x117, 0x2, 0xcf, "7880e8ccc35c126031f2489f65a0bd4de09c3c7946329a476b0ab27a31b0acae11fff69284145c3f4313328f69627ffe6cb4197a756e91216144b7d3b2bd2194469f7eb03d91dbf58c220bd37b5b1e585ebfa7c7baf9eea3752d3e1c155f569693efe4351ec60879d9ec27a12ad4f9b136f7842f7e54f05e7f4cda1450eb09bb650f9fd129c65e686f053976bd4704cc878680d52f5b3dd555fff0a2ec0fde28aa3b1596f53aa254114e0fb5607d0dec0337450bb97ee01379e00776efc7d24be0a80244ea8ad7327b034edfc9aefb"}], 0x1c8, 0x24040001}, {0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003f00)="032140f796b89921b9fe9c1f54527debfd539c9cee2b5e5ae384a2a4a5e7842e1e4cead620ca16bb108615dbdb3ac0ba2c07091ef2d3f1675f5e4c3733b961d7bbdd59349a99c919a2aae90a4b2c89c134ea0a75c92e671762bd841c20", 0x5d}, {&(0x7f0000003f80)="4f7f4726ecf74edd80bb29bbf682d084c41fc07d5404144930c68d70e5c05be6f3d4be05460e00fd82f776be2a6910b2363b05fe616dd626d5a5bd1a9e1c988f381525efe02d0003ea7cb3ecced5305ae39ba6ba09", 0x55}, {&(0x7f0000004000)="c18215f884c06c69fa9e22e84d28037049d4098c3fd7e9404319bd8cd262adafe09ce4655441a01f2975011ef3", 0x2d}, {&(0x7f0000004040)="cec3a68f0f52a24c63af4f9aa9cff41e9166c7c9a0a0816c96b50db745f407c2273ec354a56700ea47887f33ad9f00297819e3966a234254ac22f92636e8ca76a627be629ba83aa992fc924c4a5f1d8d6bf0adde73cf61b39e00e2842383065d85f864f933721b106be9", 0x6a}, {&(0x7f00000040c0)="c57a0fac5151f8e8ff7feb017f753c059d17e4015e872c9f4b12b96a7ee342de8f9823580a9df833776a9d47213120af464cb3aed183db5181fcd52c256e0670", 0x40}, {&(0x7f0000004100)="2f33a424d02960a3374b974442759f668f3725bc8752351205a6a6465124e4d3b6a89e47326d53e09874769c472c0738a91ca16d5643683324f48dc55e7a661f86a92b9f1f2fbb1f5f09213665bf8a4fdab495959c4bc6d09d7d655f9e40eb27bbbacc61f41ef17376290eb80aaf096bdcd86b93512720579cf1", 0x7a}, {&(0x7f0000004180)="44e5aaae371cecffe07d96e081", 0xd}, {&(0x7f00000041c0)="fcafb689f526d09aa2684d0d2a020ca016ef40666df90a4243aa7f931cd4c4c84daefc5719eb368a95748934f86a7c92a5c4b17664022d91b4cf1e31ace19158d9e6330d48", 0x45}], 0x8, &(0x7f00000042c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x90}, {0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000004380)="23f4a0aeac12fa08b794b258b7b2855a089f39696325183def5059eb958d42c06173a98c01231453458181a885924ccc923da002658fdf6494ca02f217ff58", 0x3f}, {&(0x7f00000043c0)="5b7538ff378d862eb2295c07e2f9d3d45e78e917fc6755092fe2f25a650883a33ce65ff598cf34b134dbffe5c26d458c9e44d6a36ea69a362479d50e1ce417b56fddcaedf2d1f054bd911af5bed9400b10b52f7eb7c35cc3e920c0b09d0efe36f3ac8f526d5a7a123ac191c20e49f61db281be040cfc085de5900e2fe3b77e94bc6c3f631fe38cd70c010a3e41b0b0719967ebef39b8a895919e16a7b1e08f3159", 0xa1}, {&(0x7f0000004480)="f1dedcc98eba979f37c4524d32da9e2227069ed64ecd0c2d98a19f632a82b698574d594894a7cf9786d563a7fbfd33a476f43c29b0c3c4a1ae269acd194915b5771026eed044ed14037fc5fe8a", 0x4d}, {&(0x7f0000004500)="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", 0x1000}, {&(0x7f0000005500)="34e2c65e9c6b163d5994f3f6891d93eb039d97cf05f71daba96da74f8e87eea152f505efe69c71c43dbb469d08d8749e244c50fd7ce393ebf6c87d226cb238e2c1f8b9e6310abd06b423ca7202b944f9647e7bd57232d0674740b2cf652c93f97b60c1763c87f6c5b8ac13786d82d144dad39a915a28c48074374c749abfab771f3c395edb511aa8b589ed269ad05e3793eda342480711af84ae112d4cd06edd71aaf197ca5bcfbd1205dde108413893e48edb1538917f700ecf640348a12de2b023399168494357e3d1e4eef8de725d8fa39e6b455d859c1589120dfbfa11", 0xdf}], 0x5, &(0x7f0000007b40)=[@assoc={0x18, 0x117, 0x4, 0xfffffeff}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x198, 0x117, 0x2, 0x17e, "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"}, @assoc={0x18, 0x117, 0x4, 0x8000}, @iv={0x68, 0x117, 0x2, 0x50, "2a8551b7c9f7b80dc8282096bb77f67a08d0c32318b4c9632086a9ff67c46e1abfc71c53b791416b83b3359567b748e7986ecac4d1202ed744e2d4dec1ea2382830f49558ac69ba42f16cfc19332f325"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1278, 0x20000040}, {0x0, 0x0, &(0x7f0000006880), 0x0, &(0x7f00000068c0)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x80}, {0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006900)="881850eadc1efa31935ec754ec05bb97bca117841595fafee5b54201aa8f3113e975c2bfd102f75a7f80ae0c7db28627a731514746ad5cf655be7e7b56fa5bc65f6d81f8140586d3225254cdf6f9b89ed5c87102b7eb264cdaabc8ce088dc89f9821cd460cab493dbebc42a3841770993c8890f6de871c4dfa21", 0x7a}, {&(0x7f0000006980)="6c9eee3e8896806a990bbbb098babf56415589b2b90582c014b9911ade1cf788973aacd2249583b51e75028324f9c3b28404beee02efaaea3cc66aec0b18b866", 0x40}, {&(0x7f00000069c0)="d29c89b9724cfa18a0ad155ab69bb510ab190cf3e37a6d433cd252640d69c653ae4bdfe7b8396f3beda474c3e2fee2b4b4a8b763e15279e57e266e53bc9ac44be477673cce1551d9fc474906242e90b64c07e51e480fa487d650a071146628b9839418f00fb529f125d94b2afbd04d95f1d2dd420208c0a4d18765217b29703629bcc16fe83e8e68dd5ff4eb5564e4faf54e82b4d4799c7331e679dd2ea5382becd3497061a3ac95c0a1a12fad079b8a00245f3ece7c97f29dce4161162603c334b567e49c32b83338738f80cbc9aad38dd0218bc787da6e2a3600f0ec78e39b681a9f0d88a297f58ef9", 0xea}, {&(0x7f0000006ac0)="9a4fcdf77284c6fd2bce05290d624b2e105994af0def7d507086abc84279eca823851bdb84ce9a4eb8d2ddc5d028b9294be52ef4092f5d1e68cc240c338b5f2d35895d0e26415af088fc9353a2", 0x4d}, {&(0x7f0000006b40)="68a8e21b7917d123a86fcd9d0f67dad76fd05ab29bbf4ed53ce016aa1d76214b06026e78372b67a15858f9129ceb44a02b35e94db5873d16e6ee9ae094625d4fbbcf04e467f716364a307b4c26b7b975d7007346f94b5759de0131f32fe87fbdbddf6d1246395ed3ceab30d2f93b65e2e93df4cc04585f065ba2924a03a34cbfde1a85ffc3e43041c5d617734bdbbf149d4eabf486fdad91f8290ef2b7efe67a278f0a410fc936914d5bfdc17f04f6e9a416b864d91d56f9afef71a057c7f7f71639e7eec4b8917147698cc26bb0e7629eaa961d4003cd056cbd80cccb00b9584611c3", 0xe3}, {&(0x7f0000006c40)="38345a7383", 0x5}, {&(0x7f0000006c80)="7ffb7fd497e8fa8bf071d8f9e703292a13f767e25c81a4aaf679668b80b74d661f5ce82796e50b23010ee9135bd8b5c8cdefb059a2f63c54319bcf5480c3c0782cbc0016ae88852a0ee20f9b94cc6400f9ae667fe4342c9d3f768521dc3e5457445b317084ad9bcad869b030aea1bb7a73543922e4eaad361a6daab7fe783c350cae4d742c75f764816d7756818072", 0x8f}], 0x7, &(0x7f0000006dc0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x30, 0x117, 0x2, 0x15, "304cc86b952d9e1c0c740c58dd06e639016aa89ed8"}, @iv={0x100, 0x117, 0x2, 0xe8, "84d37868b6f5e5eb1f60066de6a2444b5e228558c3c49eaf2dc18de33a5d339c22d0028cad4a7efaa644af13428674fe93a0390c4e02860e093a075a03cdc70e6662de4c84249fffbda0f5f45c4bcc82031a9f94c4fdccc00fc89eba76707bf7de1a3cb28708149208cd87e0f29377ad4634d9ce066aa822476bb48d1a989430b67cd6a4d48874719595dc9e52a271f174cb3427c5d7a3ea6dad1a50ec79a177a12f0bb7b8e24976af33a8c857c42e2f37c48d0a75878dc77318747fac2d3bad04138bfdc46ded81d87ecdbe099551e22494d580a9fc0b564dc0621cee5e8113b1bced63a05f06d9"}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7b, "02f4f17610220b4e04ca2d5ccef37d5aec1158734ff33c31697cb6cf5592e22de9f81a71b30e4ec3ed51533656665f022acc34cb9121976c5b5e93861fa0401dd9169d06e50d51d99c388fb2b68e465319199ffdf07f434ce421ad5236c2e1645c1157654932b59829cc92ade343c6f4120e5bae5efa8e1a1b0c89"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc3, "817a6edea7e98b8de62d239e8797dcf08cd32d203d02fa33da4d9a16a7a18de02e1562a89e0cfbb702386ea62cfe0cfd5ef1239adf6c75204c39170543a854226f9637d2f26abb9511934532b56c00f353f3d0c1e5cb8a23d49bf99621c57cd79534578387d784023cc78a12d4db97dbabce8422941b1a81295f45728eaf4215755b3ecd1f656573fae7291e134f99906fe10982b4134eaeca70bff43e285ded61181e7149c8e61b50cee2c8a8ce7bf97aecca906b6315ad7656412b30138f0fc3dddf"}], 0x2f8, 0x40881}, {0x0, 0x0, &(0x7f0000007600)=[{&(0x7f00000070c0)="52c725717d03d7b844b68dbf86c08cab6638d4790d5b2e1ed5f92f3a794f278e251698661e72fcaabcdba8f0c47bf20a7cf110242c614dd7a808318db0651ce81e2e203a72a00ea5e62a932e31ed04106196b9991f3b47a14b80240abff46a8fffd1a2cc33a3f9be1bc6fdac9a0a5b63543a88eb9e0d583b5deff77629666a1801caeb624c9d5d8f475f0880eb5a7afc40a0ab3fcd1f9537116d71d2a925f8c8f9cd71ee50ea78c50588c5", 0xab}, {&(0x7f0000007180)="3593bbb03417fd55d825f1491d2395924d949d3788f29fa5a1170ca9e460b5afefc152c2566e83622caa366b2fd627069bab0ab0264e8cc5b425c9badc08b9eeec76c76a63b9e28b36ed55812bfb4bbdfeeb7040b110afa4069c274c53c173185daf97642098c0713f0821c16c5d1518a2b9945e53462d1ca9f20b274c6590e0af2ab8f14a64f8400969061a6f2f0f65bb0fe3938e170a39b22774", 0x9b}, {&(0x7f0000007240)="433fab6f0137ce1d2bf1e45a8a07d8e665f3cf696c73ed1fe351f1dfca1813d1ee02ba5fa10d2d502a2e3213da284f1b6b07647c71ebb99fba7c0f1cbdd75ed61d13f1f8fe2fee89eae37a4d1b1b8d28beed55add78e3ac2e66fac766627cf1a71b520afcb313c171a4ef67524f7ab5ffedd1156dff5c73a5ba5aafa958780ef16004de2a6307cbba70ca5956aff79a64581391395edbbec9049de033f6ac2b25dff8b9de7d23b3823685d8fd0973fff9cd4096e9f26afd64891cd4b62b1bff91bb12371e55769cf24ff3e970c0855d67686670c7a082315d6e8ce2d6939e0dda6defebe", 0xe4}, {&(0x7f0000007340)="1beefc98a36df7f1ddd1f3f55da10f3376940bcf182ce3f975217fd206cf7d3311", 0x21}, {&(0x7f00000073c0)="c6d8fa528c211591df753a734cc326d8eeef831914975d11e16d8210e5000854b724ee650f3b39fb10261f6a602af8896077af4abe16c3fdb644912759fd2e11f8f78b328e0edc441f816dfe6fbb130d123b21a3456a5a40659168e06648b3e007ea8dfdaa5680184fad9293c95804", 0x6f}, {&(0x7f0000007440)="72806400bf7e7ab3412d890b2681f070b13c6bd855c7856b58c08b239b2d621896b6b09bd268c51ed43eac2c20b7bf9480d5558b6846c0a86e490975c5164a40f0680b856648bacfd077a77702930498981008e44289096e30b0cee1a321615d4affaaccbe69bcc705c91501caf8259958df4532206a4247818ee2b619f4837fa29bf9d52348836257be69bc600acbeb7d75dc7648ab3395f5861a1723047bed2560e26cd04049d0bf9e6b8ccc8fdf095eb22979526cf574fc991a1eb230c999bcd3a84ee7a9fd47f53c95510f5313684f95afb2e52c692931b00babee0edc100a5d2090c83be62dafbd289ded27e73b8b3c0e4dce", 0xf5}, {&(0x7f0000007540)="4a079ae357cf9edf48631bbd4779177f9b1c7dacd252b709829b3e52556d5508ee0413f9b89ce71840ccae21f80592b7a770dbd91910515ac4f5b48dac2948bae60f9952d61a4d461570eb55d94bedf125", 0x51}, {&(0x7f00000075c0)="1a5b814aba96ae8cbf79dea78bbd07f15606d36f5b", 0x15}], 0x8, &(0x7f0000007680)=[@assoc={0x18, 0x117, 0x4, 0x401}, @iv={0x48, 0x117, 0x2, 0x33, "f1f89c499c7fd52d09e377db11a7cf165bd65951faf65692509ab151b2e2f4b0008bd57812803c30c38b866c95528b8d7305cb"}], 0x60, 0x20040051}, {0x0, 0x0, &(0x7f00000078c0)=[{0x0}], 0x1, &(0x7f0000007900)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x8090}], 0x8, 0x4084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r6, &(0x7f0000000040), &(0x7f0000000280)=@ng={0x4, 0x12}, 0x2, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 492.603649ms ago: executing program 3 (id=2305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x200}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 209.936284ms ago: executing program 1 (id=2306): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, 0x0, 0x0) 78.610677ms ago: executing program 2 (id=2307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x20000) 47.855614ms ago: executing program 3 (id=2308): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='ntfs3\x00', 0x8080, &(0x7f00000001c0)='discard') socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000006300)) unshare(0x8000600) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000300)=0x60) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x2420, 0x4) openat$cgroup_int(r2, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) dup(r0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) 0s ago: executing program 4 (id=2309): syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) preadv2(r2, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1, 0x4, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): x560 [ 547.705090][T10488] _copy_from_user+0x2d/0xb0 [ 547.705118][T10488] ___sys_recvmsg+0x12e/0x510 [ 547.705144][T10488] ? __pfx____sys_recvmsg+0x10/0x10 [ 547.705190][T10488] ? __fget_files+0x3a0/0x420 [ 547.705224][T10488] do_recvmmsg+0x307/0x770 [ 547.705253][T10488] ? __pfx_do_recvmmsg+0x10/0x10 [ 547.705285][T10488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 547.705328][T10488] __x64_sys_recvmmsg+0x190/0x240 [ 547.705351][T10488] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 547.705368][T10488] ? rcu_is_watching+0x15/0xb0 [ 547.705395][T10488] ? do_syscall_64+0xbe/0x3b0 [ 547.705420][T10488] do_syscall_64+0xfa/0x3b0 [ 547.705439][T10488] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.705459][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.705479][T10488] ? clear_bhb_loop+0x60/0xb0 [ 547.705502][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.705521][T10488] RIP: 0033:0x7fad4738e9a9 [ 547.705537][T10488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.705554][T10488] RSP: 002b:00007fad481a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 547.705574][T10488] RAX: ffffffffffffffda RBX: 00007fad475b5fa0 RCX: 00007fad4738e9a9 [ 547.705589][T10488] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000004 [ 547.705601][T10488] RBP: 00007fad481a2090 R08: 0000000000000000 R09: 0000000000000000 [ 547.705613][T10488] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 547.705625][T10488] R13: 0000000000000000 R14: 00007fad475b5fa0 R15: 00007ffe00c83e38 [ 547.705657][T10488] [ 547.997324][ T5923] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 549.082624][ T5923] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 549.091867][ T5923] usb 2-1: config 54 has no interface number 0 [ 549.112016][ T5923] usb 2-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 549.257328][ T5923] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 549.266679][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.276414][ T5923] usb 2-1: Product: syz [ 549.280630][ T5923] usb 2-1: Manufacturer: syz [ 549.285284][ T5923] usb 2-1: SerialNumber: syz [ 549.296723][T10506] FAULT_INJECTION: forcing a failure. [ 549.296723][T10506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.073356][T10506] CPU: 0 UID: 0 PID: 10506 Comm: syz.3.1241 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 550.073388][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 550.073400][T10506] Call Trace: [ 550.073408][T10506] [ 550.073424][T10506] dump_stack_lvl+0x189/0x250 [ 550.073451][T10506] ? __pfx____ratelimit+0x10/0x10 [ 550.073472][T10506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.073493][T10506] ? __pfx__printk+0x10/0x10 [ 550.073518][T10506] ? __might_fault+0xb0/0x130 [ 550.073550][T10506] should_fail_ex+0x414/0x560 [ 550.073576][T10506] _copy_from_user+0x2d/0xb0 [ 550.073603][T10506] ___sys_sendmsg+0x158/0x2a0 [ 550.073635][T10506] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.073689][T10506] ? __fget_files+0x2a/0x420 [ 550.073709][T10506] ? __fget_files+0x3a0/0x420 [ 550.073742][T10506] __x64_sys_sendmsg+0x19b/0x260 [ 550.073774][T10506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.073813][T10506] ? __pfx_ksys_write+0x10/0x10 [ 550.073829][T10506] ? rcu_is_watching+0x15/0xb0 [ 550.073856][T10506] ? do_syscall_64+0xbe/0x3b0 [ 550.073881][T10506] do_syscall_64+0xfa/0x3b0 [ 550.073901][T10506] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.073922][T10506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.073941][T10506] ? clear_bhb_loop+0x60/0xb0 [ 550.073964][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.073983][T10506] RIP: 0033:0x7fad4738e9a9 [ 550.074000][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.074018][T10506] RSP: 002b:00007fad481a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.074039][T10506] RAX: ffffffffffffffda RBX: 00007fad475b5fa0 RCX: 00007fad4738e9a9 [ 550.074053][T10506] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 550.074066][T10506] RBP: 00007fad481a2090 R08: 0000000000000000 R09: 0000000000000000 [ 550.074079][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.074091][T10506] R13: 0000000000000000 R14: 00007fad475b5fa0 R15: 00007ffe00c83e38 [ 550.074121][T10506] [ 550.281319][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.162090][ T5923] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 551.164262][ T12] usb 2-1: Failed to submit usb control message: -71 [ 551.286337][ T5923] usb 2-1: USB disconnect, device number 28 [ 551.305529][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 551.312724][ T12] usb 2-1: unable to get target info from device [ 551.345661][ T12] usb 2-1: could not get target info (-71) [ 551.357502][ T12] usb 2-1: could not probe fw (-71) [ 552.543087][T10531] binder: BINDER_SET_CONTEXT_MGR already set [ 552.549552][T10531] binder: 10520:10531 ioctl 4018620d 200000000040 returned -16 [ 552.963067][T10535] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 552.984842][T10535] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 552.993445][T10535] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 553.026135][ T5848] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 553.035934][T10535] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 553.184864][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 553.204100][ T5848] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 553.225448][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.279506][ T5848] usb 4-1: config 0 has no interface number 0 [ 553.287565][ T5848] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.303665][ T5848] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 553.313448][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 553.322178][ T5848] usb 4-1: Product: syz [ 553.327564][ T5848] usb 4-1: SerialNumber: syz [ 553.346922][ T5848] usb 4-1: config 0 descriptor?? [ 553.769964][ T5848] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 554.592156][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 556.010099][T10399] usb 4-1: USB disconnect, device number 21 [ 556.283246][T10565] netlink: 'syz.4.1256': attribute type 3 has an invalid length. [ 556.291146][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1256'. [ 556.317830][T10565] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 556.326849][T10565] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 557.954296][T10581] FAULT_INJECTION: forcing a failure. [ 557.954296][T10581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.967768][T10581] CPU: 1 UID: 0 PID: 10581 Comm: syz.4.1260 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 557.967794][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.967806][T10581] Call Trace: [ 557.967814][T10581] [ 557.967822][T10581] dump_stack_lvl+0x189/0x250 [ 557.967849][T10581] ? __pfx____ratelimit+0x10/0x10 [ 557.967869][T10581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.967890][T10581] ? __pfx__printk+0x10/0x10 [ 557.967915][T10581] ? __might_fault+0xb0/0x130 [ 557.967946][T10581] should_fail_ex+0x414/0x560 [ 557.967971][T10581] _copy_from_user+0x2d/0xb0 [ 557.967997][T10581] ___sys_sendmsg+0x158/0x2a0 [ 557.968030][T10581] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.968096][T10581] ? __fget_files+0x2a/0x420 [ 557.968117][T10581] ? __fget_files+0x3a0/0x420 [ 557.968150][T10581] __x64_sys_sendmsg+0x19b/0x260 [ 557.968181][T10581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.968236][T10581] do_syscall_64+0xfa/0x3b0 [ 557.968259][T10581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.968277][T10581] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 557.968296][T10581] ? clear_bhb_loop+0x60/0xb0 [ 557.968319][T10581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.968338][T10581] RIP: 0033:0x7face738e9a9 [ 557.968355][T10581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.968371][T10581] RSP: 002b:00007face827a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.968392][T10581] RAX: ffffffffffffffda RBX: 00007face75b6160 RCX: 00007face738e9a9 [ 557.968407][T10581] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 557.968420][T10581] RBP: 00007face827a090 R08: 0000000000000000 R09: 0000000000000000 [ 557.968432][T10581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.968444][T10581] R13: 0000000000000000 R14: 00007face75b6160 R15: 00007fffdb7cb5f8 [ 557.968475][T10581] [ 558.167800][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.414883][T10585] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.422880][T10585] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 558.436184][T10585] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 558.444136][T10585] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 558.631779][T10592] overlayfs: missing 'lowerdir' [ 558.701809][T10593] FAULT_INJECTION: forcing a failure. [ 558.701809][T10593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.845147][T10593] CPU: 0 UID: 0 PID: 10593 Comm: syz.4.1263 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 558.845172][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.845181][T10593] Call Trace: [ 558.845187][T10593] [ 558.845195][T10593] dump_stack_lvl+0x189/0x250 [ 558.845215][T10593] ? __pfx____ratelimit+0x10/0x10 [ 558.845231][T10593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.845246][T10593] ? __pfx__printk+0x10/0x10 [ 558.845265][T10593] ? __might_fault+0xb0/0x130 [ 558.845288][T10593] should_fail_ex+0x414/0x560 [ 558.845307][T10593] _copy_from_user+0x2d/0xb0 [ 558.845326][T10593] ___sys_recvmsg+0x12e/0x510 [ 558.845345][T10593] ? __pfx____sys_recvmsg+0x10/0x10 [ 558.845379][T10593] ? __fget_files+0x3a0/0x420 [ 558.845404][T10593] do_recvmmsg+0x307/0x770 [ 558.845424][T10593] ? __pfx_do_recvmmsg+0x10/0x10 [ 558.845435][T10593] ? trace_sched_exit_tp+0x38/0x120 [ 558.845457][T10593] ? __schedule+0x16c8/0x4c90 [ 558.845485][T10593] ? schedule+0x165/0x360 [ 558.845504][T10593] __x64_sys_recvmmsg+0x190/0x240 [ 558.845521][T10593] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 558.845549][T10593] ? do_syscall_64+0xbe/0x3b0 [ 558.845568][T10593] do_syscall_64+0xfa/0x3b0 [ 558.845584][T10593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.845597][T10593] ? asm_sysvec_call_function_single+0x1a/0x20 [ 558.845610][T10593] ? clear_bhb_loop+0x60/0xb0 [ 558.845627][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.845641][T10593] RIP: 0033:0x7face738e9a9 [ 558.845654][T10593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.845667][T10593] RSP: 002b:00007face829b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 558.845683][T10593] RAX: ffffffffffffffda RBX: 00007face75b6080 RCX: 00007face738e9a9 [ 558.845694][T10593] RDX: 000000000000004f RSI: 0000200000000380 RDI: 0000000000000006 [ 558.845703][T10593] RBP: 00007face829b090 R08: 0000000000000000 R09: 0000000000000000 [ 558.845712][T10593] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 558.845721][T10593] R13: 0000000000000000 R14: 00007face75b6080 R15: 00007fffdb7cb5f8 [ 558.845744][T10593] [ 562.798535][T10615] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 562.860983][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.875016][ T5846] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 565.102987][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 565.501851][ T5846] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 565.625558][ T5846] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 565.627834][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 565.637769][ T5846] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.653914][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.835425][ T5846] usb 5-1: Product: 픐ᶣꢌᢜ쮦厀헟ꑨ裲繎ᕹ녗䕬벂饩⟆絏朡늺칸䂅鱟⚒성켨ꈷ堲ᘜ鋪༹꣐ﻆ㌺늑⪃ଞ [ 565.849750][ T5846] usb 5-1: Manufacturer: 蓿頤㪩蝷쬏팩摏爯䝎碝ч깛㺤ះ䶠黋䊯摎ᑫࣘ煏淒ഭ王冀쬦描圂๝숱뿹䄘ᓶ㢏㚂⢈六匭嗎꿝ꁶ꧐䘐鈒ﻐꟻ㵥딄뮰䒿̛⬢黃璨즯鏤며偿쐻ꐿ粼⽀㓐啤ಘὟៜ䢣硇鈥ⷀ罨ﰸ⮍辿丛姾⺅鿋쌷휵ꨦ跮ㄟ [ 565.879071][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.962272][ T5846] usb 5-1: SerialNumber: Ї [ 566.652069][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.667758][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.730398][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.760067][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.871927][ T5846] cdc_ncm 5-1:1.0: bind() failure [ 567.049155][ T5846] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 567.675275][ T5846] cdc_ncm 5-1:1.1: bind() failure [ 567.698968][ T5846] usb 5-1: USB disconnect, device number 27 [ 568.246037][T10399] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 568.587105][T10399] usb 3-1: Using ep0 maxpacket: 16 [ 568.670104][T10399] usb 3-1: config 249 has an invalid interface number: 117 but max is 0 [ 568.696248][T10399] usb 3-1: config 249 has no interface number 0 [ 568.713382][T10399] usb 3-1: config 249 interface 117 has no altsetting 0 [ 568.729510][T10399] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 568.820602][T10399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.844971][T10399] usb 3-1: Product: syz [ 568.849209][T10399] usb 3-1: Manufacturer: syz [ 568.859357][T10399] usb 3-1: SerialNumber: syz [ 568.905923][T10671] FAULT_INJECTION: forcing a failure. [ 568.905923][T10671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.923196][T10671] CPU: 0 UID: 0 PID: 10671 Comm: syz.1.1285 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 568.923226][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.923238][T10671] Call Trace: [ 568.923246][T10671] [ 568.923255][T10671] dump_stack_lvl+0x189/0x250 [ 568.923282][T10671] ? __pfx____ratelimit+0x10/0x10 [ 568.923302][T10671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.923327][T10671] ? __pfx__printk+0x10/0x10 [ 568.923352][T10671] ? __might_fault+0xb0/0x130 [ 568.923382][T10671] should_fail_ex+0x414/0x560 [ 568.923408][T10671] _copy_from_user+0x2d/0xb0 [ 568.923436][T10671] __sys_bpf+0x1ed/0x860 [ 568.923466][T10671] ? __pfx___sys_bpf+0x10/0x10 [ 568.923507][T10671] ? ksys_write+0x22a/0x250 [ 568.923529][T10671] ? __pfx_ksys_write+0x10/0x10 [ 568.923544][T10671] ? rcu_is_watching+0x15/0xb0 [ 568.923570][T10671] __x64_sys_bpf+0x7c/0x90 [ 568.923596][T10671] do_syscall_64+0xfa/0x3b0 [ 568.923620][T10671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.923638][T10671] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 568.923657][T10671] ? clear_bhb_loop+0x60/0xb0 [ 568.923681][T10671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.923700][T10671] RIP: 0033:0x7f1b2818e9a9 [ 568.923717][T10671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.923734][T10671] RSP: 002b:00007f1b29061038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.923754][T10671] RAX: ffffffffffffffda RBX: 00007f1b283b5fa0 RCX: 00007f1b2818e9a9 [ 568.923768][T10671] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000009 [ 568.923781][T10671] RBP: 00007f1b29061090 R08: 0000000000000000 R09: 0000000000000000 [ 568.923793][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.923811][T10671] R13: 0000000000000000 R14: 00007f1b283b5fa0 R15: 00007ffc33890b78 [ 568.923842][T10671] [ 570.017867][T10399] ttusb_dec_send_command: command bulk message failed: error -22 [ 570.072787][T10399] ttusb-dec 3-1:249.117: probe with driver ttusb-dec failed with error -22 [ 570.084828][ T5942] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 570.103187][T10399] usb 3-1: USB disconnect, device number 22 [ 570.234870][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 570.998121][ T5942] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 571.007545][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.020659][ T5942] usb 2-1: config 0 has no interface number 0 [ 571.027572][ T5942] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 571.043526][ T5942] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 571.053030][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 571.061839][ T5942] usb 2-1: Product: syz [ 571.067288][ T5942] usb 2-1: SerialNumber: syz [ 571.079999][ T5942] usb 2-1: config 0 descriptor?? [ 571.122134][ T5942] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 571.344897][T10683] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1289'. [ 572.554652][T10698] vlan4: entered allmulticast mode [ 572.560082][T10698] team0: entered allmulticast mode [ 572.567286][T10698] team_slave_0: entered allmulticast mode [ 572.574425][T10698] team_slave_1: entered allmulticast mode [ 572.580928][T10698] team0: Device vlan4 is already an upper device of the team interface [ 573.055755][ T5846] usb 2-1: USB disconnect, device number 29 [ 575.345472][ T5942] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 575.855472][T10715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'. [ 576.050087][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.061920][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.073605][ T5942] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 576.083024][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.254085][ T5942] usb 3-1: config 0 descriptor?? [ 576.929213][T10736] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 577.006679][T10736] CIFS: Unable to determine destination address [ 577.020942][T10738] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 577.203423][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.212325][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.801672][ T5942] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 577.921337][ T5942] cypress 0003:04B4:DE61.0008: unknown main item tag 0x0 [ 577.985436][ T5942] cypress 0003:04B4:DE61.0008: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 578.068479][ T5942] usb 3-1: USB disconnect, device number 23 [ 578.895761][T10744] fido_id[10744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 581.149209][T10762] vlan3: entered allmulticast mode [ 581.184985][T10762] team0: entered allmulticast mode [ 581.204359][T10762] team_slave_0: entered allmulticast mode [ 581.218671][T10762] team_slave_1: entered allmulticast mode [ 581.226937][T10762] team0: Device vlan3 is already an upper device of the team interface [ 582.554780][ T5848] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 583.454908][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 583.462108][ T5848] usb 2-1: config 148 has an invalid interface number: 144 but max is 0 [ 583.488695][ T5848] usb 2-1: config 148 has no interface number 0 [ 583.502079][ T5848] usb 2-1: config 148 interface 144 has no altsetting 0 [ 583.613884][ T5848] usb 2-1: New USB device found, idVendor=03f0, idProduct=311d, bcdDevice=4a.a4 [ 583.631969][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.678394][ T5848] usb 2-1: Product: syz [ 584.324927][ T5848] usb 2-1: Manufacturer: syz [ 584.616646][ T5848] usb 2-1: SerialNumber: syz [ 584.632033][T10802] netlink: 'syz.0.1323': attribute type 11 has an invalid length. [ 584.908484][ T5848] usb 2-1: USB disconnect, device number 30 [ 584.999277][T10810] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 585.094969][ T5942] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 585.634943][ T5942] usb 5-1: Using ep0 maxpacket: 8 [ 585.669970][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.708349][ T5942] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 585.743034][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.897810][ T5942] usb 5-1: config 0 descriptor?? [ 585.941829][ T5942] usb 5-1: bad CDC descriptors [ 585.979493][T10819] FAULT_INJECTION: forcing a failure. [ 585.979493][T10819] name failslab, interval 1, probability 0, space 0, times 0 [ 585.995195][ T5942] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 586.021757][ T5942] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 586.054810][T10819] CPU: 1 UID: 0 PID: 10819 Comm: syz.1.1330 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 586.054837][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.054855][T10819] Call Trace: [ 586.054862][T10819] [ 586.054870][T10819] dump_stack_lvl+0x189/0x250 [ 586.054900][T10819] ? __pfx____ratelimit+0x10/0x10 [ 586.054912][T10819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.054923][T10819] ? __pfx__printk+0x10/0x10 [ 586.054940][T10819] ? __pfx___might_resched+0x10/0x10 [ 586.054951][T10819] ? fs_reclaim_acquire+0x7d/0x100 [ 586.054966][T10819] should_fail_ex+0x414/0x560 [ 586.054979][T10819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 586.054992][T10819] should_failslab+0xa8/0x100 [ 586.055004][T10819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 586.055014][T10819] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 586.055024][T10819] ? sock_alloc_inode+0x28/0xc0 [ 586.055038][T10819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 586.055048][T10819] sock_alloc_inode+0x28/0xc0 [ 586.055059][T10819] alloc_inode+0x67/0x1b0 [ 586.055072][T10819] do_accept+0x111/0x680 [ 586.055089][T10819] ? __pfx_do_accept+0x10/0x10 [ 586.055113][T10819] __sys_accept4+0x11c/0x1c0 [ 586.055128][T10819] ? __pfx___sys_accept4+0x10/0x10 [ 586.055146][T10819] ? __pfx_ksys_write+0x10/0x10 [ 586.055154][T10819] ? rcu_is_watching+0x15/0xb0 [ 586.055169][T10819] __x64_sys_accept4+0x9a/0xb0 [ 586.055183][T10819] do_syscall_64+0xfa/0x3b0 [ 586.055194][T10819] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.055205][T10819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.055215][T10819] ? clear_bhb_loop+0x60/0xb0 [ 586.055227][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.055237][T10819] RIP: 0033:0x7f1b2818e9a9 [ 586.055248][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.055257][T10819] RSP: 002b:00007f1b2901f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 586.055269][T10819] RAX: ffffffffffffffda RBX: 00007f1b283b6160 RCX: 00007f1b2818e9a9 [ 586.055277][T10819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 586.055283][T10819] RBP: 00007f1b2901f090 R08: 0000000000000000 R09: 0000000000000000 [ 586.055289][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.055295][T10819] R13: 0000000000000000 R14: 00007f1b283b6160 R15: 00007ffc33890b78 [ 586.055311][T10819] [ 586.063786][ T5942] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 587.230475][ T5942] usb 5-1: USB disconnect, device number 28 [ 592.343935][T10870] overlayfs: missing 'lowerdir' [ 593.415419][T10885] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 594.071829][T10891] bond3: entered promiscuous mode [ 594.092084][T10891] bond3: entered allmulticast mode [ 594.099932][T10891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 594.126607][T10893] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 594.355361][T10889] bond3: (slave veth3): Enslaving as an active interface with a down link [ 595.893968][T10910] FAULT_INJECTION: forcing a failure. [ 595.893968][T10910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.948670][T10910] CPU: 0 UID: 0 PID: 10910 Comm: syz.2.1356 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 595.948701][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.948713][T10910] Call Trace: [ 595.948726][T10910] [ 595.948734][T10910] dump_stack_lvl+0x189/0x250 [ 595.948761][T10910] ? __pfx____ratelimit+0x10/0x10 [ 595.948783][T10910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.948805][T10910] ? __pfx__printk+0x10/0x10 [ 595.948829][T10910] ? __might_fault+0xb0/0x130 [ 595.948860][T10910] should_fail_ex+0x414/0x560 [ 595.948896][T10910] _copy_from_user+0x2d/0xb0 [ 595.948932][T10910] __sys_bpf+0x1ed/0x860 [ 595.948962][T10910] ? __pfx___sys_bpf+0x10/0x10 [ 595.949004][T10910] ? ksys_write+0x22a/0x250 [ 595.949026][T10910] ? __pfx_ksys_write+0x10/0x10 [ 595.949041][T10910] ? rcu_is_watching+0x15/0xb0 [ 595.949070][T10910] __x64_sys_bpf+0x7c/0x90 [ 595.949097][T10910] do_syscall_64+0xfa/0x3b0 [ 595.949117][T10910] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.949138][T10910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.949157][T10910] ? clear_bhb_loop+0x60/0xb0 [ 595.949179][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.949201][T10910] RIP: 0033:0x7fae0218e9a9 [ 595.949219][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.949236][T10910] RSP: 002b:00007fae02f6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 595.949257][T10910] RAX: ffffffffffffffda RBX: 00007fae023b5fa0 RCX: 00007fae0218e9a9 [ 595.949271][T10910] RDX: 000000000000003c RSI: 00002000000002c0 RDI: 000000000000000a [ 595.949284][T10910] RBP: 00007fae02f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 595.949296][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.949309][T10910] R13: 0000000000000000 R14: 00007fae023b5fa0 R15: 00007ffc1cd8d3d8 [ 595.949340][T10910] [ 596.144839][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.363394][T10930] binder: 10921:10930 ioctl 4018620d 0 returned -22 [ 597.600303][T10930] binder: 10921:10930 ioctl c018620c 0 returned -14 [ 598.055043][T10933] binder: 10921:10933 ioctl c0306201 0 returned -14 [ 598.412263][T10941] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 598.790384][T10945] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 598.817908][T10941] bond2: entered promiscuous mode [ 598.828147][T10941] bond2: entered allmulticast mode [ 598.962711][T10941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.846294][T10961] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1371'. [ 602.320157][T10980] vlan2: entered allmulticast mode [ 602.334827][T10980] team0: entered allmulticast mode [ 602.360683][T10980] team0: Device vlan2 is already an upper device of the team interface [ 603.121492][T11004] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 605.073334][T11024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.149729][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 605.955604][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 606.002242][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.049244][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.167660][T10399] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 606.263808][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.319395][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 606.335729][ T30] audit: type=1326 audit(1753496144.996:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.364986][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.378445][ T30] audit: type=1326 audit(1753496144.996:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.383728][ T9] usb 4-1: config 0 descriptor?? [ 606.422294][ T30] audit: type=1326 audit(1753496145.076:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.454797][ T30] audit: type=1326 audit(1753496145.076:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.487379][T10399] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 606.487773][ T30] audit: type=1326 audit(1753496145.076:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.496253][T10399] usb 2-1: config 54 has no interface number 0 [ 606.534960][ T30] audit: type=1326 audit(1753496145.076:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.609302][ T30] audit: type=1326 audit(1753496145.076:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.656022][ T5848] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 606.723074][T10399] usb 2-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 606.741693][ T30] audit: type=1326 audit(1753496145.076:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.774142][T10399] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 606.789537][ T30] audit: type=1326 audit(1753496145.106:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.807649][T10399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.849230][ T5848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.865960][ T5848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.877497][ T30] audit: type=1326 audit(1753496145.106:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11043 comm="syz.2.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0218e9a9 code=0x7ffc0000 [ 606.899467][T10399] usb 2-1: Product: syz [ 606.899490][T10399] usb 2-1: Manufacturer: syz [ 606.910412][ T5848] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 606.919920][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 606.942490][T10399] usb 2-1: SerialNumber: syz [ 606.952153][ T5848] usb 5-1: SerialNumber: syz [ 607.044512][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.082844][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.095210][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.104236][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.120877][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.129884][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.142574][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.151667][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.165633][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.193888][ T5848] usb 5-1: 0:2 : does not exist [ 607.207747][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.218086][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.219668][ T5848] usb 5-1: unit 255 not found! [ 607.227821][T10399] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 607.245611][ T6012] usb 2-1: Failed to submit usb control message: -71 [ 607.254986][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.263988][ T6012] usb 2-1: unable to send the bmi data to the device: -71 [ 607.273344][ T9] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 607.286830][ T5848] usb 5-1: USB disconnect, device number 29 [ 607.311117][ T6012] usb 2-1: unable to get target info from device [ 607.344387][ T6012] usb 2-1: could not get target info (-71) [ 607.352362][ T9] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 607.372338][T10399] usb 2-1: USB disconnect, device number 31 [ 607.391317][ T6012] usb 2-1: could not probe fw (-71) [ 607.437259][ T9] microsoft 0003:045E:07DA.0009: no inputs found [ 607.450853][ T6600] udevd[6600]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 607.470963][ T9] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 607.509548][ T9] usb 4-1: USB disconnect, device number 22 [ 608.356373][T11059] fido_id[11059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 608.491349][T11070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.827478][T11093] netlink: 'syz.3.1404': attribute type 3 has an invalid length. [ 609.835403][T11093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1404'. [ 609.854821][T11093] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 609.863803][T11093] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 610.346700][T11095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.543016][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 612.078622][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 612.115262][ T9] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 612.123443][ T9] usb 5-1: config 0 has no interface number 0 [ 612.149404][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 612.166483][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.174553][ T9] usb 5-1: Product: syz [ 612.188673][ T9] usb 5-1: Manufacturer: syz [ 612.193319][ T9] usb 5-1: SerialNumber: syz [ 612.208767][ T9] usb 5-1: config 0 descriptor?? [ 612.230785][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.69/input/input39 [ 612.378401][T11118] FAULT_INJECTION: forcing a failure. [ 612.378401][T11118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.397741][T11118] CPU: 0 UID: 0 PID: 11118 Comm: syz.2.1411 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 612.397770][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.397783][T11118] Call Trace: [ 612.397790][T11118] [ 612.397797][T11118] dump_stack_lvl+0x189/0x250 [ 612.397823][T11118] ? __pfx____ratelimit+0x10/0x10 [ 612.397843][T11118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.397860][T11118] ? __pfx__printk+0x10/0x10 [ 612.397883][T11118] ? __might_fault+0xb0/0x130 [ 612.397911][T11118] should_fail_ex+0x414/0x560 [ 612.397935][T11118] _copy_from_user+0x2d/0xb0 [ 612.397963][T11118] __sys_bpf+0x1ed/0x860 [ 612.397994][T11118] ? __pfx___sys_bpf+0x10/0x10 [ 612.398035][T11118] ? ksys_write+0x22a/0x250 [ 612.398057][T11118] ? __pfx_ksys_write+0x10/0x10 [ 612.398073][T11118] ? rcu_is_watching+0x15/0xb0 [ 612.398102][T11118] __x64_sys_bpf+0x7c/0x90 [ 612.398127][T11118] do_syscall_64+0xfa/0x3b0 [ 612.398150][T11118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.398169][T11118] ? asm_sysvec_call_function_single+0x1a/0x20 [ 612.398188][T11118] ? clear_bhb_loop+0x60/0xb0 [ 612.398211][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.398229][T11118] RIP: 0033:0x7fae0218e9a9 [ 612.398246][T11118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.398263][T11118] RSP: 002b:00007fae02f49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.398282][T11118] RAX: ffffffffffffffda RBX: 00007fae023b6080 RCX: 00007fae0218e9a9 [ 612.398297][T11118] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 612.398310][T11118] RBP: 00007fae02f49090 R08: 0000000000000000 R09: 0000000000000000 [ 612.398322][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.398333][T11118] R13: 0000000000000000 R14: 00007fae023b6080 R15: 00007ffc1cd8d3d8 [ 612.398365][T11118] [ 612.596304][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.187294][ T5190] bcm5974 5-1:0.69: could not read from device [ 613.236611][ T9] usb 5-1: USB disconnect, device number 30 [ 614.619022][T11130] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1412'. [ 614.994881][ T5846] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 615.526109][ T5846] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 615.549251][ T5846] usb 4-1: config 54 has no interface number 0 [ 615.557180][ T5846] usb 4-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 615.574461][ T5846] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 615.587678][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.596881][ T5846] usb 4-1: Product: syz [ 615.601324][ T5846] usb 4-1: Manufacturer: syz [ 615.610401][ T5846] usb 4-1: SerialNumber: syz [ 615.764864][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 615.853462][T11140] input: syz1 as /devices/virtual/input/input40 [ 615.878174][ T6012] usb 4-1: Failed to submit usb control message: -71 [ 615.902547][ T5846] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 615.924757][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 615.931668][ T6012] usb 4-1: unable to send the bmi data to the device: -71 [ 615.945574][ T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1024 [ 615.965031][ T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 1024 [ 615.972649][ T5846] usb 4-1: USB disconnect, device number 23 [ 615.985663][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 615.990372][ T6012] usb 4-1: unable to get target info from device [ 616.007259][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.028672][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.067992][ T6012] usb 4-1: could not get target info (-71) [ 616.083599][ T9] usb 2-1: Product: 䕘㾱舚桯嵐㯙쫶犴訊ꎾ鹅⣅Ŷꐔ給栆萌濧烺홒蚶㌕猊⁧쩵ꐘ쯖ც⟟侚竀ଫꥤ쾋ⷲ啧岱峻ဏ쒪阓死핡⛵쒦๶搦ℸ牝䥭뱁╤ﺱ놢֨ᮊሠ慶嗄솼氪߿吖晓 [ 616.086663][ T6012] usb 4-1: could not probe fw (-71) [ 616.105285][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.145698][ T9] usb 2-1: Manufacturer: 䀁 [ 616.187947][T11138] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 616.219457][T11138] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 617.067942][T11154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1422'. [ 617.139844][T11137] loop2: detected capacity change from 0 to 7 [ 617.146653][T11137] buffer_io_error: 7 callbacks suppressed [ 617.146706][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.160644][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.278135][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.286138][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.294115][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.302169][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.310134][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.318052][T11137] ldm_validate_partition_table(): Disk read failed. [ 617.324862][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.332795][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.340740][T11137] Buffer I/O error on dev loop2, logical block 0, async page read [ 617.348788][T11137] Dev loop2: unable to read RDB block 0 [ 617.354584][T11137] loop2: unable to read partition table [ 617.360425][T11137] loop2: partition table beyond EOD, truncated [ 617.366636][T11137] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 617.412335][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 617.610854][T11158] FAULT_INJECTION: forcing a failure. [ 617.610854][T11158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.624239][T11158] CPU: 0 UID: 0 PID: 11158 Comm: syz.0.1423 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 617.624265][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 617.624277][T11158] Call Trace: [ 617.624284][T11158] [ 617.624290][T11158] dump_stack_lvl+0x189/0x250 [ 617.624306][T11158] ? __pfx____ratelimit+0x10/0x10 [ 617.624317][T11158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.624328][T11158] ? __pfx__printk+0x10/0x10 [ 617.624348][T11158] should_fail_ex+0x414/0x560 [ 617.624362][T11158] _copy_to_user+0x31/0xb0 [ 617.624378][T11158] simple_read_from_buffer+0xe1/0x170 [ 617.624397][T11158] proc_fail_nth_read+0x1df/0x250 [ 617.624412][T11158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.624426][T11158] ? rw_verify_area+0x258/0x650 [ 617.624442][T11158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 617.624455][T11158] vfs_read+0x200/0x980 [ 617.624474][T11158] ? __pfx___mutex_lock+0x10/0x10 [ 617.624486][T11158] ? __pfx_vfs_read+0x10/0x10 [ 617.624502][T11158] ? __fget_files+0x2a/0x420 [ 617.624516][T11158] ? __fget_files+0x3a0/0x420 [ 617.624527][T11158] ? __fget_files+0x2a/0x420 [ 617.624542][T11158] ksys_read+0x145/0x250 [ 617.624550][T11158] ? __pfx_filldir+0x10/0x10 [ 617.624561][T11158] ? __pfx_ksys_read+0x10/0x10 [ 617.624573][T11158] ? do_syscall_64+0xbe/0x3b0 [ 617.624586][T11158] do_syscall_64+0xfa/0x3b0 [ 617.624598][T11158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.624608][T11158] ? asm_sysvec_call_function_single+0x1a/0x20 [ 617.624618][T11158] ? clear_bhb_loop+0x60/0xb0 [ 617.624631][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.624641][T11158] RIP: 0033:0x7f34f4b8d3bc [ 617.624651][T11158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 617.624669][T11158] RSP: 002b:00007f34f59f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 617.624688][T11158] RAX: ffffffffffffffda RBX: 00007f34f4db6160 RCX: 00007f34f4b8d3bc [ 617.624702][T11158] RDX: 000000000000000f RSI: 00007f34f59f60a0 RDI: 0000000000000004 [ 617.624710][T11158] RBP: 00007f34f59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 617.624717][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.624723][T11158] R13: 0000000000000000 R14: 00007f34f4db6160 R15: 00007ffff80059a8 [ 617.624740][T11158] [ 618.085676][ T9] usb 2-1: USB disconnect, device number 32 [ 619.084239][T11168] FAULT_INJECTION: forcing a failure. [ 619.084239][T11168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.114273][T11168] CPU: 0 UID: 0 PID: 11168 Comm: syz.0.1426 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 619.114305][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.114317][T11168] Call Trace: [ 619.114324][T11168] [ 619.114333][T11168] dump_stack_lvl+0x189/0x250 [ 619.114359][T11168] ? __pfx____ratelimit+0x10/0x10 [ 619.114379][T11168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.114401][T11168] ? __pfx__printk+0x10/0x10 [ 619.114425][T11168] ? __might_fault+0xb0/0x130 [ 619.114456][T11168] should_fail_ex+0x414/0x560 [ 619.114481][T11168] _copy_from_user+0x2d/0xb0 [ 619.114508][T11168] __sys_bpf+0x1ed/0x860 [ 619.114538][T11168] ? __pfx___sys_bpf+0x10/0x10 [ 619.114598][T11168] ? ksys_write+0x22a/0x250 [ 619.114619][T11168] ? __pfx_ksys_write+0x10/0x10 [ 619.114634][T11168] ? rcu_is_watching+0x15/0xb0 [ 619.114669][T11168] __x64_sys_bpf+0x7c/0x90 [ 619.114693][T11168] do_syscall_64+0xfa/0x3b0 [ 619.114713][T11168] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.114733][T11168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.114752][T11168] ? clear_bhb_loop+0x60/0xb0 [ 619.114776][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.114794][T11168] RIP: 0033:0x7f34f4b8e9a9 [ 619.114812][T11168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.114829][T11168] RSP: 002b:00007f34f5a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.114850][T11168] RAX: ffffffffffffffda RBX: 00007f34f4db5fa0 RCX: 00007f34f4b8e9a9 [ 619.114864][T11168] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000009 [ 619.114877][T11168] RBP: 00007f34f5a38090 R08: 0000000000000000 R09: 0000000000000000 [ 619.114889][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.114901][T11168] R13: 0000000000000000 R14: 00007f34f4db5fa0 R15: 00007ffff80059a8 [ 619.114931][T11168] [ 619.534261][T11170] netlink: 'syz.3.1427': attribute type 3 has an invalid length. [ 619.542428][T11170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1427'. [ 619.563310][T11170] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 619.572358][T11170] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 620.161830][T11178] FAULT_INJECTION: forcing a failure. [ 620.161830][T11178] name failslab, interval 1, probability 0, space 0, times 0 [ 620.195152][T11178] CPU: 0 UID: 0 PID: 11178 Comm: syz.0.1430 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 620.195179][T11178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.195192][T11178] Call Trace: [ 620.195199][T11178] [ 620.195207][T11178] dump_stack_lvl+0x189/0x250 [ 620.195234][T11178] ? __pfx____ratelimit+0x10/0x10 [ 620.195252][T11178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.195273][T11178] ? __pfx__printk+0x10/0x10 [ 620.195301][T11178] ? __pfx___might_resched+0x10/0x10 [ 620.195319][T11178] ? fs_reclaim_acquire+0x7d/0x100 [ 620.195348][T11178] should_fail_ex+0x414/0x560 [ 620.195373][T11178] should_failslab+0xa8/0x100 [ 620.195397][T11178] __kmalloc_noprof+0xcb/0x4f0 [ 620.195414][T11178] ? kfree+0x4d/0x440 [ 620.195439][T11178] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 620.195470][T11178] tomoyo_realpath_from_path+0xe3/0x5d0 [ 620.195492][T11178] ? tomoyo_domain+0xda/0x130 [ 620.195517][T11178] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 620.195533][T11178] tomoyo_path_number_perm+0x1e8/0x5a0 [ 620.195555][T11178] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.195595][T11178] ? __lock_acquire+0xab9/0xd20 [ 620.195636][T11178] ? __fget_files+0x2a/0x420 [ 620.195661][T11178] ? __fget_files+0x2a/0x420 [ 620.195680][T11178] ? __fget_files+0x3a0/0x420 [ 620.195699][T11178] ? __fget_files+0x2a/0x420 [ 620.195732][T11178] security_file_ioctl+0xcb/0x2d0 [ 620.195754][T11178] __se_sys_ioctl+0x47/0x170 [ 620.195783][T11178] do_syscall_64+0xfa/0x3b0 [ 620.195803][T11178] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.195823][T11178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.195842][T11178] ? clear_bhb_loop+0x60/0xb0 [ 620.195864][T11178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.195881][T11178] RIP: 0033:0x7f34f4b8e9a9 [ 620.195898][T11178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.195914][T11178] RSP: 002b:00007f34f5a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.195934][T11178] RAX: ffffffffffffffda RBX: 00007f34f4db5fa0 RCX: 00007f34f4b8e9a9 [ 620.195949][T11178] RDX: 0000000000000000 RSI: 0000000080049370 RDI: 0000000000000003 [ 620.195961][T11178] RBP: 00007f34f5a38090 R08: 0000000000000000 R09: 0000000000000000 [ 620.195973][T11178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.195984][T11178] R13: 0000000000000000 R14: 00007f34f4db5fa0 R15: 00007ffff80059a8 [ 620.196017][T11178] [ 620.196025][T11178] ERROR: Out of memory at tomoyo_realpath_from_path. [ 623.021841][T11192] overlayfs: failed to resolve './file1': -2 [ 624.299465][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.983627][T11238] overlayfs: failed to resolve './file1': -2 [ 636.640361][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 638.384565][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 639.528795][T11301] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 639.654943][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 640.636434][T11323] loop6: detected capacity change from 0 to 524287999 [ 640.646267][T11323] buffer_io_error: 4 callbacks suppressed [ 640.646302][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.670884][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.682250][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.697968][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.712070][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.733601][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.745284][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.765757][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.774602][T11323] ldm_validate_partition_table(): Disk read failed. [ 640.783212][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.793334][T11323] Buffer I/O error on dev loop6, logical block 0, async page read [ 640.803727][T11323] Dev loop6: unable to read RDB block 0 [ 640.837843][T11323] loop6: unable to read partition table [ 640.866055][T11323] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 641.274243][T11326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.193456][T11338] FAULT_INJECTION: forcing a failure. [ 643.193456][T11338] name failslab, interval 1, probability 0, space 0, times 0 [ 643.207411][T11338] CPU: 0 UID: 0 PID: 11338 Comm: syz.2.1483 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 643.207438][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 643.207448][T11338] Call Trace: [ 643.207456][T11338] [ 643.207464][T11338] dump_stack_lvl+0x189/0x250 [ 643.207487][T11338] ? __pfx____ratelimit+0x10/0x10 [ 643.207508][T11338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.207525][T11338] ? __pfx__printk+0x10/0x10 [ 643.207548][T11338] ? __pfx___might_resched+0x10/0x10 [ 643.207568][T11338] ? fs_reclaim_acquire+0x7d/0x100 [ 643.207594][T11338] should_fail_ex+0x414/0x560 [ 643.207617][T11338] should_failslab+0xa8/0x100 [ 643.207639][T11338] __kmalloc_noprof+0xcb/0x4f0 [ 643.207655][T11338] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.207671][T11338] ? l2tp_session_create+0x44/0xd60 [ 643.207693][T11338] ? l2tp_v3_session_get+0x91/0x770 [ 643.207720][T11338] l2tp_session_create+0x44/0xd60 [ 643.207753][T11338] pppol2tp_connect+0xc2e/0x1750 [ 643.207788][T11338] ? __pfx_pppol2tp_connect+0x10/0x10 [ 643.207814][T11338] ? __might_fault+0xb0/0x130 [ 643.207846][T11338] ? bpf_lsm_socket_connect+0x9/0x20 [ 643.207866][T11338] __sys_connect+0x313/0x440 [ 643.207893][T11338] ? __pfx___sys_connect+0x10/0x10 [ 643.207940][T11338] __x64_sys_connect+0x7a/0x90 [ 643.207965][T11338] do_syscall_64+0xfa/0x3b0 [ 643.207985][T11338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.208002][T11338] ? asm_sysvec_call_function_single+0x1a/0x20 [ 643.208019][T11338] ? clear_bhb_loop+0x60/0xb0 [ 643.208040][T11338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.208055][T11338] RIP: 0033:0x7fae0218e9a9 [ 643.208071][T11338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.208086][T11338] RSP: 002b:00007fae02f49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 643.208105][T11338] RAX: ffffffffffffffda RBX: 00007fae023b6080 RCX: 00007fae0218e9a9 [ 643.208119][T11338] RDX: 000000000000003a RSI: 0000200000000040 RDI: 0000000000000007 [ 643.208131][T11338] RBP: 00007fae02f49090 R08: 0000000000000000 R09: 0000000000000000 [ 643.208144][T11338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.208155][T11338] R13: 0000000000000000 R14: 00007fae023b6080 R15: 00007ffc1cd8d3d8 [ 643.208187][T11338] [ 643.452752][ C0] vkms_vblank_simulate: vblank timer overrun [ 643.459183][ T5848] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 643.795697][ T5848] usb 5-1: Using ep0 maxpacket: 16 [ 643.975328][ T5848] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 644.004354][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.035132][ T5848] usb 5-1: Product: syz [ 644.734463][ T5848] usb 5-1: Manufacturer: syz [ 644.783825][ T5848] usb 5-1: SerialNumber: syz [ 644.825192][ T5848] usb 5-1: config 0 descriptor?? [ 645.006831][ T5848] usb-storage 5-1:0.0: USB Mass Storage device detected [ 645.052045][ T5848] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 645.089847][ T5848] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc7-syzkaller-00114-g327579671a9b) [ 645.089847][ T5848] Please send a copy of this message to and [ 645.416333][T11369] netlink: 'syz.3.1485': attribute type 3 has an invalid length. [ 645.424201][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1485'. [ 645.447992][T11369] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 645.457092][T11369] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 646.304000][T10399] usb 5-1: USB disconnect, device number 31 [ 646.823089][T11382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1491'. [ 647.388238][T11375] fuse: Bad value for 'group_id' [ 647.461816][T11375] fuse: Bad value for 'group_id' [ 647.938294][T11396] overlayfs: missing 'lowerdir' [ 649.000652][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 649.000670][ T30] audit: type=1326 audit(1753496187.656:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.057726][ T30] audit: type=1326 audit(1753496187.656:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.284361][ T30] audit: type=1326 audit(1753496187.656:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.333814][ T30] audit: type=1326 audit(1753496187.656:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.359959][ T30] audit: type=1326 audit(1753496187.656:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.414914][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 649.545993][ T30] audit: type=1326 audit(1753496187.656:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.883351][ T30] audit: type=1326 audit(1753496187.666:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.906386][ T30] audit: type=1326 audit(1753496187.666:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 649.951866][ T30] audit: type=1326 audit(1753496187.666:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 650.845455][ T30] audit: type=1326 audit(1753496187.666:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11393 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2818e9a9 code=0x7ffc0000 [ 651.381796][T11427] netlink: 'syz.1.1500': attribute type 3 has an invalid length. [ 651.390007][T11427] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 651.397966][T11427] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1500'. [ 652.239115][T11432] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 652.356524][T11434] FAULT_INJECTION: forcing a failure. [ 652.356524][T11434] name failslab, interval 1, probability 0, space 0, times 0 [ 652.419694][T11434] CPU: 1 UID: 0 PID: 11434 Comm: syz.4.1503 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 652.419723][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 652.419735][T11434] Call Trace: [ 652.419744][T11434] [ 652.419752][T11434] dump_stack_lvl+0x189/0x250 [ 652.419780][T11434] ? __pfx____ratelimit+0x10/0x10 [ 652.419802][T11434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.419823][T11434] ? __pfx__printk+0x10/0x10 [ 652.419854][T11434] ? __pfx___might_resched+0x10/0x10 [ 652.419881][T11434] should_fail_ex+0x414/0x560 [ 652.419907][T11434] should_failslab+0xa8/0x100 [ 652.419930][T11434] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 652.419950][T11434] ? __alloc_skb+0x112/0x2d0 [ 652.419981][T11434] __alloc_skb+0x112/0x2d0 [ 652.420011][T11434] netlink_sendmsg+0x5c6/0xb30 [ 652.420048][T11434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.420083][T11434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 652.420101][T11434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 652.420130][T11434] __sock_sendmsg+0x219/0x270 [ 652.420155][T11434] ____sys_sendmsg+0x505/0x830 [ 652.420190][T11434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 652.420228][T11434] ? import_iovec+0x74/0xa0 [ 652.420258][T11434] ___sys_sendmsg+0x21f/0x2a0 [ 652.420288][T11434] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.420356][T11434] ? __fget_files+0x2a/0x420 [ 652.420376][T11434] ? __fget_files+0x3a0/0x420 [ 652.420412][T11434] __x64_sys_sendmsg+0x19b/0x260 [ 652.420444][T11434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 652.420484][T11434] ? __pfx_ksys_write+0x10/0x10 [ 652.420500][T11434] ? rcu_is_watching+0x15/0xb0 [ 652.420526][T11434] ? do_syscall_64+0xbe/0x3b0 [ 652.420552][T11434] do_syscall_64+0xfa/0x3b0 [ 652.420572][T11434] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.420592][T11434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.420611][T11434] ? clear_bhb_loop+0x60/0xb0 [ 652.420635][T11434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.420653][T11434] RIP: 0033:0x7face738e9a9 [ 652.420670][T11434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.420687][T11434] RSP: 002b:00007face82bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.420708][T11434] RAX: ffffffffffffffda RBX: 00007face75b5fa0 RCX: 00007face738e9a9 [ 652.420723][T11434] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 652.420736][T11434] RBP: 00007face82bc090 R08: 0000000000000000 R09: 0000000000000000 [ 652.420748][T11434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.420764][T11434] R13: 0000000000000000 R14: 00007face75b5fa0 R15: 00007fffdb7cb5f8 [ 652.420795][T11434] [ 653.755539][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 653.847762][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1509'. [ 655.009205][T11464] IPv6: Can't replace route, no match found [ 655.852618][T11474] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 656.172813][T11477] netlink: 'syz.1.1515': attribute type 3 has an invalid length. [ 656.182605][T11477] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1515'. [ 657.106681][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 657.357509][T11496] netlink: 'syz.0.1520': attribute type 10 has an invalid length. [ 657.453902][T11496] macvlan0: entered promiscuous mode [ 657.774323][T11496] macvlan0: entered allmulticast mode [ 657.810937][T11496] veth1_vlan: entered allmulticast mode [ 657.826703][T11501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1523'. [ 657.850399][T11496] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 658.187146][T11509] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 659.264551][T11516] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 659.621987][T11522] netlink: 'syz.3.1529': attribute type 3 has an invalid length. [ 659.698687][T11522] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1529'. [ 660.388071][T11533] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 661.585139][T11541] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1536'. [ 662.262578][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 664.594994][T11577] netlink: 'syz.4.1545': attribute type 3 has an invalid length. [ 664.636247][T11577] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1545'. [ 666.012148][T11592] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 666.021896][T11592] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 666.844922][T11598] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 667.580540][T11598] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 668.397329][T11606] vlan2: entered promiscuous mode [ 668.402697][T11606] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 668.410547][T11606] vlan2: entered allmulticast mode [ 668.415691][T11606] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 669.421676][T11624] overlayfs: failed to resolve './file1': -2 [ 669.474795][ T5925] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 669.688478][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 670.066126][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1555'. [ 670.441552][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 670.564581][ T5925] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 670.635054][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.657689][ T5925] usb 2-1: config 0 descriptor?? [ 670.695024][ T5925] usb 2-1: can't set config #0, error -71 [ 670.704971][ T5925] usb 2-1: USB disconnect, device number 33 [ 672.847153][T11646] delete_channel: no stack [ 673.371979][T11656] netlink: 'syz.1.1562': attribute type 3 has an invalid length. [ 673.379944][T11656] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 673.388102][T11656] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1562'. [ 674.465000][ T5923] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 674.814927][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 675.433248][ T5923] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 675.455068][ T5923] usb 3-1: config 54 has no interface number 0 [ 675.470429][ T5923] usb 3-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 675.500356][ T5923] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 675.517696][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.543969][ T5923] usb 3-1: Product: syz [ 675.554839][ T5923] usb 3-1: Manufacturer: syz [ 675.565282][ T5923] usb 3-1: SerialNumber: syz [ 676.101216][ T5923] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 676.117318][ T6760] usb 3-1: Failed to submit usb control message: -71 [ 676.124245][ T6760] usb 3-1: unable to send the bmi data to the device: -71 [ 676.246941][T11681] overlayfs: missing 'lowerdir' [ 676.280090][ T5923] usb 3-1: USB disconnect, device number 24 [ 676.293087][ T6760] usb 3-1: unable to get target info from device [ 676.451289][ T6760] usb 3-1: could not get target info (-71) [ 676.515396][ T6760] usb 3-1: could not probe fw (-71) [ 677.259166][T11698] vlan3: entered allmulticast mode [ 677.265863][T11698] team0: Device vlan3 is already an upper device of the team interface [ 677.506567][T11700] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 677.521926][T11700] openvswitch: netlink: Flow key attr not present in new flow. [ 678.069431][T11706] vlan2: entered allmulticast mode [ 678.075899][T11706] team0: entered allmulticast mode [ 678.158200][T11706] team_slave_0: entered allmulticast mode [ 678.184947][T11706] team_slave_1: entered allmulticast mode [ 678.191148][T11706] team0: Device vlan2 is already an upper device of the team interface [ 678.468222][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 678.698064][T11717] netlink: 'syz.1.1577': attribute type 3 has an invalid length. [ 678.706666][T11717] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 678.715378][T11717] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1577'. [ 681.781683][T11733] overlayfs: missing 'lowerdir' [ 681.958142][T11740] FAULT_INJECTION: forcing a failure. [ 681.958142][T11740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.572350][T11740] CPU: 0 UID: 0 PID: 11740 Comm: syz.3.1584 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 682.572517][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.572536][T11740] Call Trace: [ 682.572547][T11740] [ 682.572557][T11740] dump_stack_lvl+0x189/0x250 [ 682.572586][T11740] ? __pfx____ratelimit+0x10/0x10 [ 682.572615][T11740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.572638][T11740] ? __pfx__printk+0x10/0x10 [ 682.572663][T11740] ? __might_fault+0xb0/0x130 [ 682.572696][T11740] should_fail_ex+0x414/0x560 [ 682.572723][T11740] _copy_from_user+0x2d/0xb0 [ 682.572751][T11740] kstrtouint_from_user+0xc4/0x170 [ 682.572778][T11740] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 682.572821][T11740] proc_fail_nth_write+0x88/0x240 [ 682.572846][T11740] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 682.572877][T11740] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 682.572903][T11740] vfs_write+0x27e/0xa90 [ 682.572932][T11740] ? __pfx_vfs_write+0x10/0x10 [ 682.572953][T11740] ? __fget_files+0x2a/0x420 [ 682.572981][T11740] ? __fget_files+0x3a0/0x420 [ 682.573001][T11740] ? __fget_files+0x2a/0x420 [ 682.573039][T11740] ksys_write+0x145/0x250 [ 682.573062][T11740] ? __pfx_ksys_write+0x10/0x10 [ 682.573087][T11740] ? do_syscall_64+0xbe/0x3b0 [ 682.573114][T11740] do_syscall_64+0xfa/0x3b0 [ 682.573134][T11740] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.573155][T11740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.573174][T11740] ? clear_bhb_loop+0x60/0xb0 [ 682.573201][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.573220][T11740] RIP: 0033:0x7fad4738d45f [ 682.573239][T11740] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 682.573257][T11740] RSP: 002b:00007fad481a2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 682.573278][T11740] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad4738d45f [ 682.573293][T11740] RDX: 0000000000000001 RSI: 00007fad481a20a0 RDI: 0000000000000003 [ 682.573306][T11740] RBP: 00007fad481a2090 R08: 0000000000000000 R09: 0000000000000000 [ 682.573318][T11740] R10: 0000000000000016 R11: 0000000000000293 R12: 0000000000000001 [ 682.573330][T11740] R13: 0000000000000001 R14: 00007fad475b5fa0 R15: 00007ffe00c83e38 [ 682.573361][T11740] [ 684.634974][ T5848] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 684.960566][T11767] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 685.059536][ T5848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.196663][ T5848] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 685.263421][T11773] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 685.273989][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.352457][ T5848] usb 5-1: config 0 descriptor?? [ 685.429257][T11778] FAULT_INJECTION: forcing a failure. [ 685.429257][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 685.444082][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.0.1596 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 685.444110][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.444122][T11778] Call Trace: [ 685.444139][T11778] [ 685.444147][T11778] dump_stack_lvl+0x189/0x250 [ 685.444174][T11778] ? __pfx____ratelimit+0x10/0x10 [ 685.444188][T11778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.444200][T11778] ? __pfx__printk+0x10/0x10 [ 685.444217][T11778] ? __pfx___might_resched+0x10/0x10 [ 685.444228][T11778] ? fs_reclaim_acquire+0x7d/0x100 [ 685.444244][T11778] should_fail_ex+0x414/0x560 [ 685.444257][T11778] ? file_tty_write+0x2a8/0x990 [ 685.444270][T11778] should_failslab+0xa8/0x100 [ 685.444283][T11778] __kvmalloc_node_noprof+0x161/0x5f0 [ 685.444294][T11778] ? file_tty_write+0x2a8/0x990 [ 685.444310][T11778] file_tty_write+0x2a8/0x990 [ 685.444328][T11778] vfs_write+0x54b/0xa90 [ 685.444341][T11778] ? __pfx_tty_write+0x10/0x10 [ 685.444354][T11778] ? __pfx_vfs_write+0x10/0x10 [ 685.444370][T11778] ? __fget_files+0x2a/0x420 [ 685.444389][T11778] ksys_write+0x145/0x250 [ 685.444401][T11778] ? __pfx_ksys_write+0x10/0x10 [ 685.444413][T11778] ? do_syscall_64+0xbe/0x3b0 [ 685.444427][T11778] do_syscall_64+0xfa/0x3b0 [ 685.444439][T11778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.444449][T11778] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 685.444459][T11778] ? clear_bhb_loop+0x60/0xb0 [ 685.444471][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.444481][T11778] RIP: 0033:0x7f34f4b8e9a9 [ 685.444491][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.444500][T11778] RSP: 002b:00007f34f5a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 685.444512][T11778] RAX: ffffffffffffffda RBX: 00007f34f4db6080 RCX: 00007f34f4b8e9a9 [ 685.444519][T11778] RDX: 0000000000001006 RSI: 0000200000002b40 RDI: 0000000000000006 [ 685.444526][T11778] RBP: 00007f34f5a17090 R08: 0000000000000000 R09: 0000000000000000 [ 685.444532][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.444538][T11778] R13: 0000000000000000 R14: 00007f34f4db6080 R15: 00007ffff80059a8 [ 685.444555][T11778] [ 685.771355][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.457192][ T5848] elecom 0003:056E:00FC.000A: unknown main item tag 0x0 [ 686.464635][ T5848] elecom 0003:056E:00FC.000A: unknown main item tag 0x0 [ 686.472889][ T5848] elecom 0003:056E:00FC.000A: unknown main item tag 0x0 [ 686.488153][T11783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1598'. [ 686.489150][ T5848] elecom 0003:056E:00FC.000A: unknown main item tag 0x0 [ 686.527030][ T5848] elecom 0003:056E:00FC.000A: unknown main item tag 0x0 [ 686.537541][ T5848] elecom 0003:056E:00FC.000A: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0 [ 686.675586][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 688.821579][ T9] usb 5-1: USB disconnect, device number 32 [ 689.731382][T11814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.722358][T11832] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 690.732133][T11832] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 693.345677][T11836] netlink: 'syz.3.1613': attribute type 3 has an invalid length. [ 693.389514][T11836] netlink: 'syz.3.1613': attribute type 3 has an invalid length. [ 693.574567][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 693.800014][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 695.644385][T11865] FAULT_INJECTION: forcing a failure. [ 695.644385][T11865] name failslab, interval 1, probability 0, space 0, times 0 [ 695.705295][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.3.1624 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 695.705325][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 695.705338][T11865] Call Trace: [ 695.705345][T11865] [ 695.705354][T11865] dump_stack_lvl+0x189/0x250 [ 695.705380][T11865] ? __pfx____ratelimit+0x10/0x10 [ 695.705402][T11865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.705423][T11865] ? __pfx__printk+0x10/0x10 [ 695.705454][T11865] ? __pfx___might_resched+0x10/0x10 [ 695.705480][T11865] should_fail_ex+0x414/0x560 [ 695.705506][T11865] should_failslab+0xa8/0x100 [ 695.705529][T11865] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 695.705550][T11865] ? __alloc_skb+0x112/0x2d0 [ 695.705580][T11865] __alloc_skb+0x112/0x2d0 [ 695.705643][T11865] netlink_sendmsg+0x5c6/0xb30 [ 695.705682][T11865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.705718][T11865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.705737][T11865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.705765][T11865] __sock_sendmsg+0x219/0x270 [ 695.705791][T11865] ____sys_sendmsg+0x505/0x830 [ 695.705827][T11865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.705865][T11865] ? import_iovec+0x74/0xa0 [ 695.705907][T11865] ___sys_sendmsg+0x21f/0x2a0 [ 695.705939][T11865] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.706005][T11865] ? __fget_files+0x2a/0x420 [ 695.706026][T11865] ? __fget_files+0x3a0/0x420 [ 695.706060][T11865] __x64_sys_sendmsg+0x19b/0x260 [ 695.706099][T11865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.706142][T11865] ? rcu_is_watching+0x15/0xb0 [ 695.706164][T11865] ? trace_sys_enter+0x25/0x120 [ 695.706188][T11865] do_syscall_64+0xfa/0x3b0 [ 695.706209][T11865] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.706228][T11865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.706244][T11865] ? clear_bhb_loop+0x60/0xb0 [ 695.706267][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.706285][T11865] RIP: 0033:0x7fad4738e9a9 [ 695.706301][T11865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.706317][T11865] RSP: 002b:00007fad481a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.706337][T11865] RAX: ffffffffffffffda RBX: 00007fad475b5fa0 RCX: 00007fad4738e9a9 [ 695.706351][T11865] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 695.706363][T11865] RBP: 00007fad481a2090 R08: 0000000000000000 R09: 0000000000000000 [ 695.706373][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.706385][T11865] R13: 0000000000000000 R14: 00007fad475b5fa0 R15: 00007ffe00c83e38 [ 695.706416][T11865] [ 695.972556][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.231816][T11874] netlink: 'syz.1.1621': attribute type 3 has an invalid length. [ 696.239694][T11874] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 696.247727][T11874] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1621'. [ 697.015130][T11883] netlink: 'syz.1.1627': attribute type 3 has an invalid length. [ 697.037150][T11886] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 697.045269][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 697.065529][T11886] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 697.074612][T11886] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 697.674928][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 697.994822][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 698.002611][ T9] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 698.018097][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 698.898321][T11898] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 698.934827][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.134827][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 700.340257][T11913] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 700.479448][T11920] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 700.647037][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 700.843991][T11926] netlink: 'syz.4.1635': attribute type 3 has an invalid length. [ 700.851985][T11926] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 700.859848][T11926] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1635'. [ 701.399576][T10399] usb 3-1: USB disconnect, device number 25 [ 702.311588][T11938] netlink: 'syz.2.1638': attribute type 3 has an invalid length. [ 702.319482][T11938] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 702.327393][T11938] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1638'. [ 703.138879][T11947] netlink: 'syz.1.1640': attribute type 3 has an invalid length. [ 703.146984][T11947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1640'. [ 703.166408][T11947] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 703.175395][T11947] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 704.024080][T11951] overlayfs: missing 'lowerdir' [ 706.101224][T11978] overlayfs: missing 'lowerdir' [ 706.291749][T10399] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 706.309703][ T5846] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 706.855228][T11982] netlink: 'syz.4.1649': attribute type 3 has an invalid length. [ 706.862999][T11982] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 706.871916][T11982] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1649'. [ 707.259393][T10399] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 707.429150][T10399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.471181][T10399] usb 2-1: config 0 descriptor?? [ 707.569347][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 707.591946][ T5846] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 707.605678][ T5846] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 707.633220][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.289242][T10399] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 708.297550][T10399] [drm:udl_init] *ERROR* Selecting channel failed [ 708.343078][T10399] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 708.358081][T10399] [drm] Initialized udl on minor 2 [ 708.374561][T10399] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 708.389820][T10399] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 708.421461][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 708.444863][T10399] usb 2-1: USB disconnect, device number 34 [ 708.479080][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 708.647631][T12004] FAULT_INJECTION: forcing a failure. [ 708.647631][T12004] name failslab, interval 1, probability 0, space 0, times 0 [ 708.661475][T12004] CPU: 0 UID: 0 PID: 12004 Comm: syz.2.1658 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 708.661512][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 708.661524][T12004] Call Trace: [ 708.661532][T12004] [ 708.661540][T12004] dump_stack_lvl+0x189/0x250 [ 708.661568][T12004] ? __pfx____ratelimit+0x10/0x10 [ 708.661589][T12004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.661611][T12004] ? __pfx__printk+0x10/0x10 [ 708.661642][T12004] ? __pfx___might_resched+0x10/0x10 [ 708.661668][T12004] should_fail_ex+0x414/0x560 [ 708.661694][T12004] should_failslab+0xa8/0x100 [ 708.661717][T12004] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 708.661738][T12004] ? __alloc_skb+0x112/0x2d0 [ 708.661779][T12004] __alloc_skb+0x112/0x2d0 [ 708.661810][T12004] netlink_sendmsg+0x5c6/0xb30 [ 708.661847][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.661883][T12004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 708.661900][T12004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.661927][T12004] __sock_sendmsg+0x219/0x270 [ 708.661954][T12004] ____sys_sendmsg+0x505/0x830 [ 708.661989][T12004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.662026][T12004] ? import_iovec+0x74/0xa0 [ 708.662056][T12004] ___sys_sendmsg+0x21f/0x2a0 [ 708.662087][T12004] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.662151][T12004] ? __fget_files+0x2a/0x420 [ 708.662171][T12004] ? __fget_files+0x3a0/0x420 [ 708.662201][T12004] __x64_sys_sendmsg+0x19b/0x260 [ 708.662231][T12004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.662270][T12004] ? __pfx_ksys_write+0x10/0x10 [ 708.662294][T12004] ? do_syscall_64+0xbe/0x3b0 [ 708.662320][T12004] do_syscall_64+0xfa/0x3b0 [ 708.662342][T12004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.662360][T12004] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.662379][T12004] ? clear_bhb_loop+0x60/0xb0 [ 708.662402][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.662421][T12004] RIP: 0033:0x7fae0218e9a9 [ 708.662438][T12004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.662454][T12004] RSP: 002b:00007fae02f6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.662474][T12004] RAX: ffffffffffffffda RBX: 00007fae023b5fa0 RCX: 00007fae0218e9a9 [ 708.662489][T12004] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 708.662501][T12004] RBP: 00007fae02f6a090 R08: 0000000000000000 R09: 0000000000000000 [ 708.662514][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.662525][T12004] R13: 0000000000000000 R14: 00007fae023b5fa0 R15: 00007ffc1cd8d3d8 [ 708.662556][T12004] [ 709.939443][T12012] netlink: 'syz.4.1659': attribute type 3 has an invalid length. [ 709.948035][T12012] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 709.955917][T12012] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1659'. [ 710.003848][ T9] usb 4-1: USB disconnect, device number 24 [ 710.627121][T12021] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1661'. [ 711.044180][T12027] overlayfs: missing 'lowerdir' [ 711.064164][T12029] FAULT_INJECTION: forcing a failure. [ 711.064164][T12029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.215011][T12029] CPU: 1 UID: 0 PID: 12029 Comm: syz.1.1665 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 711.215041][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.215054][T12029] Call Trace: [ 711.215062][T12029] [ 711.215070][T12029] dump_stack_lvl+0x189/0x250 [ 711.215098][T12029] ? __pfx____ratelimit+0x10/0x10 [ 711.215119][T12029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.215141][T12029] ? __pfx__printk+0x10/0x10 [ 711.215166][T12029] ? __might_fault+0xb0/0x130 [ 711.215198][T12029] should_fail_ex+0x414/0x560 [ 711.215225][T12029] _copy_from_user+0x2d/0xb0 [ 711.215253][T12029] kstrtouint_from_user+0xc4/0x170 [ 711.215279][T12029] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 711.215320][T12029] proc_fail_nth_write+0x88/0x240 [ 711.215344][T12029] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 711.215375][T12029] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 711.215400][T12029] vfs_write+0x27e/0xa90 [ 711.215430][T12029] ? __pfx_vfs_write+0x10/0x10 [ 711.215450][T12029] ? __fget_files+0x2a/0x420 [ 711.215476][T12029] ? __fget_files+0x3a0/0x420 [ 711.215496][T12029] ? __fget_files+0x2a/0x420 [ 711.215527][T12029] ksys_write+0x145/0x250 [ 711.215548][T12029] ? __pfx_ksys_write+0x10/0x10 [ 711.215563][T12029] ? rcu_is_watching+0x15/0xb0 [ 711.215590][T12029] ? do_syscall_64+0xbe/0x3b0 [ 711.215615][T12029] do_syscall_64+0xfa/0x3b0 [ 711.215635][T12029] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.215656][T12029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.215675][T12029] ? clear_bhb_loop+0x60/0xb0 [ 711.215698][T12029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.215717][T12029] RIP: 0033:0x7f1b2818d45f [ 711.215734][T12029] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 711.215751][T12029] RSP: 002b:00007f1b29061030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 711.215772][T12029] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b2818d45f [ 711.215791][T12029] RDX: 0000000000000001 RSI: 00007f1b290610a0 RDI: 0000000000000004 [ 711.215803][T12029] RBP: 00007f1b29061090 R08: 0000000000000000 R09: 0000000000000000 [ 711.215815][T12029] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 711.215827][T12029] R13: 0000000000000000 R14: 00007f1b283b5fa0 R15: 00007ffc33890b78 [ 711.215858][T12029] [ 716.735091][T10399] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 717.005114][T12072] netlink: 'syz.2.1674': attribute type 3 has an invalid length. [ 717.013192][T12072] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 717.021527][T12072] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1674'. [ 717.548748][T10399] usb 2-1: Using ep0 maxpacket: 8 [ 717.566059][T10399] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 717.615786][T10399] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 717.755827][T10399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.687766][T12084] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1678'. [ 718.814281][T12085] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1677'. [ 719.710234][ T9] usb 2-1: USB disconnect, device number 35 [ 720.535448][T12106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 721.321891][T12115] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 721.862341][T12126] ceph: No mds server is up or the cluster is laggy [ 722.445723][T12115] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 725.194452][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 725.194481][ T30] audit: type=1800 audit(1753496263.846:141): pid=12164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1703" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 727.516842][T12179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.965172][T12197] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 729.971745][T12197] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 730.119193][T12197] vhci_hcd vhci_hcd.0: Device attached [ 730.166819][T12193] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 730.173469][T12193] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 730.631892][T12193] vhci_hcd vhci_hcd.0: Device attached [ 730.726399][T12197] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 730.817078][ T24] vhci_hcd: vhci_device speed not set [ 731.588169][ T24] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 731.782384][T12193] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 731.782436][T12193] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 731.782629][T12193] vhci_hcd vhci_hcd.0: Device attached [ 731.805943][T12217] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 731.805972][T12217] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 731.806088][T12217] vhci_hcd vhci_hcd.0: Device attached [ 731.960004][T12193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 731.994735][T12193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 731.995594][T12193] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 732.005804][T12197] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 732.005822][T12197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 732.005885][T12197] vhci_hcd vhci_hcd.0: Device attached [ 732.008129][T12200] vhci_hcd: connection closed [ 732.008360][T12213] vhci_hcd: connection closed [ 732.008476][T12219] vhci_hcd: connection closed [ 732.008580][T12204] vhci_hcd: connection closed [ 732.416051][T12221] vhci_hcd: connection closed [ 732.419246][ T9054] vhci_hcd: stop threads [ 732.419275][ T9054] vhci_hcd: release socket [ 732.419758][ T9054] vhci_hcd: disconnect device [ 732.419976][ T9054] vhci_hcd: stop threads [ 732.419986][ T9054] vhci_hcd: release socket [ 732.420053][ T9054] vhci_hcd: disconnect device [ 732.420248][ T9054] vhci_hcd: stop threads [ 732.420256][ T9054] vhci_hcd: release socket [ 732.420322][ T9054] vhci_hcd: disconnect device [ 732.420524][ T9054] vhci_hcd: stop threads [ 732.420533][ T9054] vhci_hcd: release socket [ 732.420599][ T9054] vhci_hcd: disconnect device [ 732.443880][ T24] usb 41-1: enqueue for inactive port 0 [ 732.448142][ T9054] vhci_hcd: stop threads [ 732.448162][ T9054] vhci_hcd: release socket [ 732.448212][ T9054] vhci_hcd: disconnect device [ 732.579973][ T24] vhci_hcd: vhci_device speed not set [ 734.872522][T12242] sit1: entered allmulticast mode [ 735.089367][T10399] usb usb42-port1: attempt power cycle [ 735.743086][T10399] usb usb42-port1: unable to enumerate USB device [ 738.512716][T12279] block device autoloading is deprecated and will be removed. [ 739.819447][T12284] Illegal XDP return value 2052955648 on prog (id 243) dev N/A, expect packet loss! [ 739.952130][T12292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1741'. [ 741.966460][T12312] binder: 12311:12312 ioctl c00c620f 0 returned -14 [ 743.116204][T12333] tipc: Started in network mode [ 743.122882][T12330] netlink: 'syz.2.1752': attribute type 10 has an invalid length. [ 743.124805][T12333] tipc: Node identity ea7f7b979aea, cluster identity 4711 [ 743.138621][T12333] tipc: Enabled bearer , priority 9 [ 743.346634][ T5846] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 743.728839][T12338] netlink: 'syz.0.1756': attribute type 4 has an invalid length. [ 743.762522][T12338] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1756'. [ 743.812529][ T5846] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 743.900952][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 743.914955][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 743.947486][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 743.977667][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 743.992863][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.017349][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.070325][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.080445][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.091925][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.102936][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.112792][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.124238][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.135551][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.168092][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.241628][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.265869][ T5942] tipc: Node number set to 1888844695 [ 744.321159][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.398301][T12338] : renamed from bond0 (while UP) [ 744.426471][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.460462][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.471935][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.481290][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.528465][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.539105][ T5846] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 744.551545][ T5846] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 744.565962][ T5846] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.576859][ T5846] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 744.593083][ T5846] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 744.605494][ T5846] usb 4-1: Product: syz [ 744.629332][ T5846] usb 4-1: Manufacturer: syz [ 744.633983][ T5846] usb 4-1: SerialNumber: syz [ 744.775724][ T5942] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 744.786985][ T5846] usb 4-1: config 0 descriptor?? [ 745.146670][ T5846] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 745.202812][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.905180][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 745.916801][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 745.927995][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 745.937979][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 746.017783][ T5923] usb 4-1: USB disconnect, device number 25 [ 746.112309][ T5923] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 746.119028][ T5942] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 746.165308][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 746.173439][ T5942] usb 2-1: Product: syz [ 746.527624][ T5942] usb 2-1: Manufacturer: syz [ 746.534990][ T5942] usb 2-1: SerialNumber: syz [ 746.537312][ T24] IPVS: starting estimator thread 0... [ 746.557895][ T5942] usb 2-1: config 0 descriptor?? [ 746.756115][T12368] sit1: entered allmulticast mode [ 746.843407][T12363] IPVS: using max 27 ests per chain, 64800 per kthread [ 747.185487][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.400013][ T5942] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 747.407743][ T5942] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 747.516852][ T5942] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 747.564800][ T5942] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 747.615284][ T5942] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 747.717715][ T5942] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 748.797776][ T5942] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 748.823345][ T5942] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 749.026571][ T5942] usb 2-1: USB disconnect, device number 36 [ 750.864364][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 751.096771][T12406] /dev/nullb0: Can't open blockdev [ 751.418178][ T30] audit: type=1326 audit(1753496290.076:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12409 comm="syz.1.1778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b2818e9a9 code=0x0 [ 752.060300][T12418] netlink: 'syz.3.1780': attribute type 1 has an invalid length. [ 752.394772][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 753.178528][T12418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 753.336543][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 753.352177][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 753.387904][T12421] bond4: (slave gretap1): making interface the new active one [ 753.397808][T12421] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 753.440651][T12434] evm: overlay not supported [ 754.204750][ T24] usb 3-1: config 0 has no interface number 0 [ 754.210930][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 754.228763][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 754.244707][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 754.264736][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 754.274603][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 754.294737][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 754.304015][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.354045][ T24] usb 3-1: config 0 descriptor?? [ 754.398377][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 754.635345][T12423] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 755.999849][T10460] usb 3-1: USB disconnect, device number 26 [ 756.027734][T10460] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 757.061324][T12462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 759.644928][T10460] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 759.782987][ T5923] kernel write not supported for file /input/event2 (pid: 5923 comm: kworker/0:4) [ 759.824756][T10460] usb 4-1: Using ep0 maxpacket: 16 [ 759.839191][T10460] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 759.856580][T10460] usb 4-1: config 1 has no interface number 0 [ 759.883802][T10460] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 759.934537][T10460] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 759.969984][T10460] usb 4-1: config 1 interface 105 has no altsetting 0 [ 759.992777][T10460] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 760.002906][T12485] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 760.015780][T10460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.024096][T10460] usb 4-1: Product: syz [ 760.029111][T10460] usb 4-1: Manufacturer: syz [ 760.033743][T10460] usb 4-1: SerialNumber: syz [ 760.054001][T12475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.065248][T12475] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.820075][T10460] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 761.014925][T10460] usb 4-1: USB disconnect, device number 26 [ 762.264530][T12504] vivid-000: disconnect [ 763.878860][T12523] netlink: 'syz.0.1813': attribute type 4 has an invalid length. [ 763.887242][T12523] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1813'. [ 764.409062][T12529] binder: 12527:12529 ioctl c0306201 0 returned -14 [ 764.457591][T12529] binder: 12527:12529 ioctl c0306201 0 returned -14 [ 766.657983][T12544] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1820'. [ 766.668005][T12499] vivid-000: reconnect [ 770.757329][T12569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 770.763522][T12569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 770.775514][T12569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 770.997573][T12569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 771.364537][T12585] pim6reg: entered allmulticast mode [ 771.378246][T12585] pim6reg: left allmulticast mode [ 772.854852][T12580] Bluetooth: hci3: command 0x0406 tx timeout [ 772.861098][T12580] Bluetooth: hci2: command 0x0406 tx timeout [ 772.867209][T12582] Bluetooth: hci1: command 0x0406 tx timeout [ 772.873240][T12582] Bluetooth: hci0: command 0x0406 tx timeout [ 773.423815][T12602] netlink: 'syz.2.1837': attribute type 2 has an invalid length. [ 773.434833][T12602] netlink: 'syz.2.1837': attribute type 4 has an invalid length. [ 773.840690][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 774.967279][T12580] Bluetooth: hci3: command 0x0406 tx timeout [ 777.008087][T12627] overlay: Unknown parameter '/' [ 782.708203][T12677] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 786.351690][T12694] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 788.240762][T12693] delete_channel: no stack [ 791.553951][T12729] 9pnet: Could not find request transport: fd [ 792.968751][T12749] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 796.419641][T12765] overlayfs: failed to resolve './file0/../file0': -2 [ 796.649286][T12766] overlayfs: missing 'lowerdir' [ 800.150062][T12788] /dev/nullb0: Can't open blockdev [ 801.914342][T12806] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 803.838438][T12812] mkiss: ax0: crc mode is auto. [ 805.694959][T10460] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 805.836974][T12836] sit1: entered allmulticast mode [ 805.892728][T10460] usb 4-1: Using ep0 maxpacket: 8 [ 806.119141][T10460] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.145144][T10460] usb 4-1: config 0 has no interfaces? [ 806.152406][T10460] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 806.174754][T10460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.199280][T10460] usb 4-1: config 0 descriptor?? [ 807.181050][ T5846] usb 4-1: USB disconnect, device number 27 [ 807.295156][T12857] fuse: Bad value for 'group_id' [ 807.300263][T12857] fuse: Bad value for 'group_id' [ 807.494745][T12861] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 807.669979][T12864] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1902'. [ 808.617442][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.754450][T12869] overlayfs: missing 'lowerdir' [ 812.192388][T10460] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 812.291342][T12897] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 812.492102][T10460] usb 3-1: Using ep0 maxpacket: 8 [ 812.509108][T10460] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.524196][T10460] usb 3-1: config 0 has no interfaces? [ 812.530158][T10460] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 812.539984][T10460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.551599][T10460] usb 3-1: config 0 descriptor?? [ 812.557069][T12904] netlink: 'syz.3.1923': attribute type 3 has an invalid length. [ 812.564888][T12904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1923'. [ 812.576696][T12904] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 812.585687][T12904] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 812.639627][T12909] overlayfs: missing 'lowerdir' [ 813.578710][T10460] usb 3-1: USB disconnect, device number 27 [ 814.867257][T12934] loop6: detected capacity change from 0 to 63 [ 815.172167][T12834] buffer_io_error: 7 callbacks suppressed [ 815.172185][T12834] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.264954][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 815.277362][T12834] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.289917][T12834] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.302532][T12834] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.315857][T12834] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.330681][T12943] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 815.339829][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 815.463021][T12933] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.472844][T12933] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.481516][T12933] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.489574][T12933] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.660892][T12933] Buffer I/O error on dev loop6, logical block 0, async page read [ 818.628637][T12955] syz_tun: entered allmulticast mode [ 819.029949][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 819.065875][T12954] syz_tun: left allmulticast mode [ 819.525245][T12972] binder: 12970:12972 ioctl c00c620f 0 returned -14 [ 819.562902][T12974] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 823.156714][T13021] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1960'. [ 823.328938][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'. [ 824.280236][T13043] netlink: 'syz.0.1967': attribute type 4 has an invalid length. [ 824.288225][T13043] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1967'. [ 824.968235][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 825.588917][T13064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1976'. [ 826.927790][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1981'. [ 826.974777][ T5846] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 827.177263][ T5846] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 828.142468][ T5846] usb 5-1: config 54 has no interface number 0 [ 828.158825][ T5846] usb 5-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 828.212937][ T5846] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 828.278748][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.349741][ T5846] usb 5-1: Product: syz [ 828.353927][ T5846] usb 5-1: Manufacturer: syz [ 828.407185][ T5846] usb 5-1: SerialNumber: syz [ 828.802153][ T5846] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 828.804297][ T6364] usb 5-1: Failed to submit usb control message: -71 [ 828.826044][ T6364] usb 5-1: unable to send the bmi data to the device: -71 [ 828.835818][ T6364] usb 5-1: unable to get target info from device [ 828.845028][ T6364] usb 5-1: could not get target info (-71) [ 828.851005][ T6364] usb 5-1: could not probe fw (-71) [ 828.890039][ T5846] usb 5-1: USB disconnect, device number 33 [ 828.993709][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1987'. [ 831.253587][T13127] /dev/nullb0: Can't open blockdev [ 831.350923][T13126] overlayfs: missing 'lowerdir' [ 831.916100][T13132] binder: 13129:13132 ioctl c00c620f 0 returned -14 [ 832.018528][T13135] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 832.463256][T13146] netlink: 'syz.0.2003': attribute type 3 has an invalid length. [ 832.471325][T13146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2003'. [ 832.482478][T13146] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 832.491481][T13146] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 837.680462][T13161] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 837.831919][T13170] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 838.119139][T13176] /dev/nullb0: Can't open blockdev [ 841.906094][T13194] netlink: 'syz.1.2022': attribute type 2 has an invalid length. [ 841.914181][T13194] netlink: 'syz.1.2022': attribute type 4 has an invalid length. [ 842.216077][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 843.398200][T13207] netlink: 'syz.0.2026': attribute type 4 has an invalid length. [ 843.406288][T13207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2026'. [ 845.270758][T13220] netlink: 'syz.4.2031': attribute type 2 has an invalid length. [ 845.279222][T13220] netlink: 'syz.4.2031': attribute type 4 has an invalid length. [ 846.097654][T13232] syz_tun: entered allmulticast mode [ 846.712124][T13231] syz_tun: left allmulticast mode [ 847.160166][T13248] netlink: 'syz.4.2039': attribute type 2 has an invalid length. [ 847.168254][T13248] netlink: 'syz.4.2039': attribute type 4 has an invalid length. [ 850.255648][T13265] netlink: 'syz.4.2046': attribute type 16 has an invalid length. [ 850.331176][T13265] netlink: 37850 bytes leftover after parsing attributes in process `syz.4.2046'. [ 850.587122][T13272] netlink: 'syz.2.2048': attribute type 4 has an invalid length. [ 850.595463][T13272] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2048'. [ 850.902400][T13272] : renamed from bond0 (while UP) [ 851.841771][T13295] netlink: 'syz.1.2054': attribute type 3 has an invalid length. [ 851.850030][T13295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2054'. [ 851.869242][T13295] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 851.878425][T13295] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 852.806517][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 853.990413][T13321] lo: entered allmulticast mode [ 854.004990][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 854.184970][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 855.065956][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.085029][ T9] usb 2-1: config 0 has no interfaces? [ 855.085510][T13320] lo: left allmulticast mode [ 855.090535][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 855.117177][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.249191][ T9] usb 2-1: config 0 descriptor?? [ 856.521630][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 856.614394][T13349] vlan2: entered allmulticast mode [ 856.619909][T13349] team0: Device vlan2 is already an upper device of the team interface [ 856.802132][T10460] usb 2-1: USB disconnect, device number 37 [ 857.827670][T13369] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2072'. [ 860.481236][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 861.012211][T13403] netlink: 'syz.4.2083': attribute type 3 has an invalid length. [ 861.020096][T13403] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 861.027950][T13403] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2083'. [ 861.702628][T13409] binder: 13407:13409 ioctl c00c620f 0 returned -14 [ 861.806754][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2086'. [ 863.531868][T13421] lo: entered allmulticast mode [ 864.763637][T13420] lo: left allmulticast mode [ 866.565644][T13446] netlink: 'syz.0.2099': attribute type 4 has an invalid length. [ 866.573408][T13446] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2099'. [ 868.094814][ T5923] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 869.316443][ T5923] usb 3-1: config 54 has an invalid interface number: 154 but max is 0 [ 869.325102][ T5923] usb 3-1: config 54 has no interface number 0 [ 869.331472][ T5923] usb 3-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 869.347084][ T5923] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 869.356675][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.370088][ T5923] usb 3-1: Product: syz [ 869.388114][ T5923] usb 3-1: Manufacturer: syz [ 869.403278][ T5923] usb 3-1: SerialNumber: syz [ 870.072573][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.217099][ T5923] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 870.238344][ T1145] usb 3-1: Failed to submit usb control message: -71 [ 870.258548][ T5923] usb 3-1: USB disconnect, device number 28 [ 870.264184][ T1145] usb 3-1: unable to send the bmi data to the device: -71 [ 870.293265][ T1145] usb 3-1: unable to get target info from device [ 870.309070][ T1145] usb 3-1: could not get target info (-71) [ 870.315444][ T1145] usb 3-1: could not probe fw (-71) [ 871.881312][T13492] netlink: 'syz.2.2111': attribute type 4 has an invalid length. [ 871.889239][T13492] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2111'. [ 874.742115][T13519] overlayfs: missing 'lowerdir' [ 876.624819][ T5925] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 876.872828][T13527] netlink: 'syz.1.2122': attribute type 3 has an invalid length. [ 876.880600][T13527] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2122'. [ 876.946945][ T5925] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 876.976937][ T5925] usb 5-1: config 54 has no interface number 0 [ 876.983169][ T5925] usb 5-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 877.026617][ T5925] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 877.044994][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.055118][ T5925] usb 5-1: Product: syz [ 877.064891][ T5925] usb 5-1: Manufacturer: syz [ 877.077256][ T5925] usb 5-1: SerialNumber: syz [ 877.219823][T13537] netlink: 'syz.3.2123': attribute type 2 has an invalid length. [ 877.227838][T13537] netlink: 'syz.3.2123': attribute type 4 has an invalid length. [ 878.010605][ T2906] usb 5-1: Failed to submit usb control message: -71 [ 878.026614][ T5925] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 878.036602][ T2906] usb 5-1: unable to send the bmi data to the device: -71 [ 878.043766][ T2906] usb 5-1: unable to get target info from device [ 878.051834][ T2906] usb 5-1: could not get target info (-71) [ 878.061836][ T5925] usb 5-1: USB disconnect, device number 34 [ 878.071306][ T2906] usb 5-1: could not probe fw (-71) [ 878.120711][T13543] netlink: 'syz.4.2126': attribute type 4 has an invalid length. [ 878.128567][T13543] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2126'. [ 878.145257][T13543] : renamed from bond0 (while UP) [ 881.984322][T13579] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 882.020910][T13582] overlayfs: missing 'lowerdir' [ 882.094801][T13579] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 883.219486][T13591] netlink: 'syz.1.2138': attribute type 2 has an invalid length. [ 883.227795][T13591] netlink: 'syz.1.2138': attribute type 4 has an invalid length. [ 883.378079][T13592] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 884.220504][T13599] netlink: 'syz.3.2141': attribute type 2 has an invalid length. [ 884.231368][T13599] netlink: 'syz.3.2141': attribute type 4 has an invalid length. [ 890.781123][T13666] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2161'. [ 891.169391][T13670] netlink: 'syz.1.2159': attribute type 3 has an invalid length. [ 891.177414][T13670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2159'. [ 892.015384][T13679] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 892.195308][T13681] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 895.472909][T13685] fuse: Bad value for 'fd' [ 895.636562][T13688] netlink: 'syz.3.2165': attribute type 2 has an invalid length. [ 895.644550][T13688] netlink: 'syz.3.2165': attribute type 4 has an invalid length. [ 895.654920][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.481385][T13727] netlink: 'syz.1.2175': attribute type 3 has an invalid length. [ 901.489258][T13727] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2175'. [ 902.031346][T13734] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2180'. [ 903.315611][T13748] netlink: 'syz.3.2182': attribute type 2 has an invalid length. [ 903.323632][T13748] netlink: 'syz.3.2182': attribute type 4 has an invalid length. [ 911.324757][ T5942] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 911.630867][ T5942] usb 5-1: config 54 has an invalid interface number: 154 but max is 0 [ 911.643490][ T5942] usb 5-1: config 54 has no interface number 0 [ 911.652966][ T5942] usb 5-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 912.352102][ T5942] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 912.361556][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.380166][ T5942] usb 5-1: Product: syz [ 912.401145][ T5942] usb 5-1: Manufacturer: syz [ 912.407441][ T5942] usb 5-1: SerialNumber: syz [ 912.471624][T13827] netlink: 'syz.2.2204': attribute type 4 has an invalid length. [ 912.479623][T13827] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2204'. [ 912.684558][ T5942] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 912.695374][ T9052] usb 5-1: Failed to submit usb control message: -71 [ 912.707316][ T9052] usb 5-1: unable to send the bmi data to the device: -71 [ 913.272264][ T5942] usb 5-1: USB disconnect, device number 35 [ 913.282394][ T9052] usb 5-1: unable to get target info from device [ 913.344110][ T9052] usb 5-1: could not get target info (-71) [ 913.350860][ T9052] usb 5-1: could not probe fw (-71) [ 913.635939][T13839] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 914.420933][T13842] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 914.628189][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 915.326659][T13851] overlayfs: missing 'lowerdir' [ 915.737109][T13856] vivid-004: disconnect [ 915.742412][T13855] vivid-004: reconnect [ 917.652375][T13871] netlink: 'syz.0.2217': attribute type 4 has an invalid length. [ 917.660457][T13871] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2217'. [ 918.275374][T13881] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 918.676470][T13890] /dev/nullb0: Can't open blockdev [ 918.811244][T13892] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2221'. [ 919.576926][T13896] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 920.085801][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'. [ 921.453135][T13921] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 923.037340][T13925] netlink: 'syz.3.2236': attribute type 2 has an invalid length. [ 923.047874][T13925] netlink: 'syz.3.2236': attribute type 4 has an invalid length. [ 923.745761][T13933] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2237'. [ 924.782950][T13943] vivid-001: disconnect [ 924.790541][T13942] fuse: Bad value for 'fd' [ 930.523064][T13939] vivid-001: reconnect [ 930.650012][T13968] binder: 13966:13968 ioctl c00c620f 0 returned -14 [ 930.857540][T13973] fuse: Bad value for 'fd' [ 931.005553][T13976] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 931.497263][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.720422][ T5942] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 933.760995][T14001] syz_tun: entered allmulticast mode [ 933.880504][ T5942] usb 2-1: config 54 has an invalid interface number: 154 but max is 0 [ 933.897638][ T5942] usb 2-1: config 54 has no interface number 0 [ 933.914184][ T5942] usb 2-1: config 54 interface 154 altsetting 0 endpoint 0x2 has invalid maxpacket 47325, setting to 64 [ 934.111724][T14000] syz_tun: left allmulticast mode [ 934.115444][ T5942] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 934.150710][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.760699][ T5942] usb 2-1: Product: syz [ 934.765090][ T5942] usb 2-1: Manufacturer: syz [ 934.769706][ T5942] usb 2-1: SerialNumber: syz [ 935.116178][T14016] fuse: Bad value for 'fd' [ 935.131954][ T5942] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 935.149504][ T9052] usb 2-1: Failed to submit usb control message: -71 [ 935.163796][ T5942] usb 2-1: USB disconnect, device number 38 [ 935.172828][ T9052] usb 2-1: unable to send the bmi data to the device: -71 [ 935.210236][ T9052] usb 2-1: unable to get target info from device [ 935.218462][ T9052] usb 2-1: could not get target info (-71) [ 935.225904][ T9052] usb 2-1: could not probe fw (-71) [ 935.460025][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 938.410703][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'. [ 939.158084][T14066] overlayfs: missing 'lowerdir' [ 940.869505][T14081] netlink: 'syz.2.2282': attribute type 4 has an invalid length. [ 940.877292][T14081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2282'. [ 942.566976][T14108] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 943.562629][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2291'. [ 946.266036][T14134] fuse: Unknown parameter 'use00000000000000000000' [ 948.312492][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 948.627267][T14163] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 948.693014][T14163] ================================================================== [ 948.701122][T14163] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 948.709118][T14163] Read of size 8 at addr ffff888034658630 by task syz.3.2308/14163 [ 948.717018][T14163] [ 948.719355][T14163] CPU: 0 UID: 0 PID: 14163 Comm: syz.3.2308 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 948.719387][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 948.719409][T14163] Call Trace: [ 948.719419][T14163] [ 948.719429][T14163] dump_stack_lvl+0x189/0x250 [ 948.719457][T14163] ? __virt_addr_valid+0x1c8/0x5c0 [ 948.719483][T14163] ? rcu_is_watching+0x15/0xb0 [ 948.719506][T14163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.719530][T14163] ? rcu_is_watching+0x15/0xb0 [ 948.719553][T14163] ? lock_release+0x4b/0x3e0 [ 948.719572][T14163] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 948.719607][T14163] ? __virt_addr_valid+0x1c8/0x5c0 [ 948.719632][T14163] ? __virt_addr_valid+0x4a5/0x5c0 [ 948.719658][T14163] print_report+0xca/0x240 [ 948.719687][T14163] ? sysfs_remove_file_ns+0x3d/0x70 [ 948.719708][T14163] kasan_report+0x118/0x150 [ 948.719732][T14163] ? sysfs_remove_file_ns+0x3d/0x70 [ 948.719758][T14163] sysfs_remove_file_ns+0x3d/0x70 [ 948.719780][T14163] bus_remove_driver+0x198/0x2f0 [ 948.719809][T14163] comedi_device_detach+0x134/0x720 [ 948.719839][T14163] comedi_unlocked_ioctl+0xbd2/0xfc0 [ 948.719865][T14163] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 948.719895][T14163] ? __pfx_smack_log+0x10/0x10 [ 948.719923][T14163] ? smk_access+0x14c/0x4e0 [ 948.719954][T14163] ? smk_tskacc+0x2fc/0x370 [ 948.719984][T14163] ? smack_file_ioctl+0x24a/0x340 [ 948.720006][T14163] ? __pfx_smack_file_ioctl+0x10/0x10 [ 948.720037][T14163] ? bpf_lsm_file_ioctl+0x9/0x20 [ 948.720061][T14163] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 948.720082][T14163] __se_sys_ioctl+0xfc/0x170 [ 948.720114][T14163] do_syscall_64+0xfa/0x3b0 [ 948.720137][T14163] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.720157][T14163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.720177][T14163] ? clear_bhb_loop+0x60/0xb0 [ 948.720200][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.720219][T14163] RIP: 0033:0x7fad4738e9a9 [ 948.720239][T14163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.720259][T14163] RSP: 002b:00007fad481a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 948.720283][T14163] RAX: ffffffffffffffda RBX: 00007fad475b5fa0 RCX: 00007fad4738e9a9 [ 948.720301][T14163] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000d [ 948.720315][T14163] RBP: 00007fad47410d69 R08: 0000000000000000 R09: 0000000000000000 [ 948.720330][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.720344][T14163] R13: 0000000000000000 R14: 00007fad475b5fa0 R15: 00007ffe00c83e38 [ 948.720369][T14163] [ 948.720378][T14163] [ 948.981654][T14163] Allocated by task 13939: [ 948.986065][T14163] kasan_save_track+0x3e/0x80 [ 948.990750][T14163] __kasan_kmalloc+0x93/0xb0 [ 948.995334][T14163] __kmalloc_noprof+0x27a/0x4f0 [ 949.000196][T14163] io_cache_alloc_new+0x40/0x100 [ 949.005133][T14163] __io_prep_rw+0x23f/0xd80 [ 949.009626][T14163] io_prep_rwv+0x8c/0x3d0 [ 949.013944][T14163] io_submit_sqes+0x90c/0x1c50 [ 949.018708][T14163] __se_sys_io_uring_enter+0x2df/0x2b20 [ 949.024245][T14163] do_syscall_64+0xfa/0x3b0 [ 949.028745][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.034632][T14163] [ 949.036950][T14163] Freed by task 13939: [ 949.041004][T14163] kasan_save_track+0x3e/0x80 [ 949.045684][T14163] kasan_save_free_info+0x46/0x50 [ 949.050706][T14163] __kasan_slab_free+0x62/0x70 [ 949.055462][T14163] kfree+0x18e/0x440 [ 949.059355][T14163] io_clean_op+0x386/0x400 [ 949.063779][T14163] __io_submit_flush_completions+0xc20/0xe40 [ 949.069757][T14163] io_handle_tw_list+0x44e/0x4c0 [ 949.074694][T14163] tctx_task_work_run+0x99/0x370 [ 949.079634][T14163] tctx_task_work+0x3f/0x90 [ 949.084142][T14163] task_work_run+0x1d1/0x260 [ 949.088730][T14163] get_signal+0x11c5/0x1310 [ 949.093224][T14163] arch_do_signal_or_restart+0x9a/0x750 [ 949.098771][T14163] exit_to_user_mode_loop+0x75/0x110 [ 949.104052][T14163] do_syscall_64+0x2bd/0x3b0 [ 949.108645][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.114528][T14163] [ 949.116844][T14163] The buggy address belongs to the object at ffff888034658600 [ 949.116844][T14163] which belongs to the cache kmalloc-256 of size 256 [ 949.130909][T14163] The buggy address is located 48 bytes inside of [ 949.130909][T14163] freed 256-byte region [ffff888034658600, ffff888034658700) [ 949.144687][T14163] [ 949.147017][T14163] The buggy address belongs to the physical page: [ 949.153426][T14163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34658 [ 949.162200][T14163] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 949.170700][T14163] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 949.178250][T14163] page_type: f5(slab) [ 949.182227][T14163] raw: 00fff00000000040 ffff88801a441b40 ffffea0000c35e80 dead000000000004 [ 949.190806][T14163] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 949.199387][T14163] head: 00fff00000000040 ffff88801a441b40 ffffea0000c35e80 dead000000000004 [ 949.208049][T14163] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 949.216713][T14163] head: 00fff00000000001 ffffea0000d19601 00000000ffffffff 00000000ffffffff [ 949.225379][T14163] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 949.234037][T14163] page dumped because: kasan: bad access detected [ 949.240438][T14163] page_owner tracks the page as allocated [ 949.246152][T14163] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7009, tgid 7009 (syz-executor), ts 213719068698, free_ts 213677657306 [ 949.266904][T14163] post_alloc_hook+0x240/0x2a0 [ 949.271670][T14163] get_page_from_freelist+0x21d5/0x22b0 [ 949.277215][T14163] __alloc_frozen_pages_noprof+0x181/0x370 [ 949.283017][T14163] alloc_pages_mpol+0x232/0x4a0 [ 949.287859][T14163] allocate_slab+0x8a/0x3b0 [ 949.292363][T14163] ___slab_alloc+0xbfc/0x1480 [ 949.297033][T14163] __kmalloc_noprof+0x305/0x4f0 [ 949.301874][T14163] security_inode_init_security+0x107/0x3f0 [ 949.307768][T14163] shmem_symlink+0xd9/0x510 [ 949.312267][T14163] vfs_symlink+0x143/0x2f0 [ 949.316674][T14163] do_symlinkat+0x1b1/0x3f0 [ 949.321168][T14163] __x64_sys_symlinkat+0x95/0xb0 [ 949.326105][T14163] do_syscall_64+0xfa/0x3b0 [ 949.330603][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.336490][T14163] page last free pid 6999 tgid 6999 stack trace: [ 949.342804][T14163] __free_frozen_pages+0xc65/0xe60 [ 949.347913][T14163] pagetable_dtor_free+0x2d2/0x3b0 [ 949.353025][T14163] __mmdrop+0xb5/0x460 [ 949.357097][T14163] exit_mm+0x1da/0x2c0 [ 949.361167][T14163] do_exit+0x648/0x22e0 [ 949.365322][T14163] do_group_exit+0x21c/0x2d0 [ 949.369912][T14163] __x64_sys_exit_group+0x3f/0x40 [ 949.374938][T14163] x64_sys_call+0x21ba/0x21c0 [ 949.379610][T14163] do_syscall_64+0xfa/0x3b0 [ 949.384107][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.389996][T14163] [ 949.392313][T14163] Memory state around the buggy address: [ 949.397934][T14163] ffff888034658500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 949.405990][T14163] ffff888034658580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 949.414041][T14163] >ffff888034658600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.422100][T14163] ^ [ 949.427721][T14163] ffff888034658680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.435773][T14163] ffff888034658700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 949.443823][T14163] ================================================================== [ 949.465012][T14163] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 949.472256][T14163] CPU: 1 UID: 0 PID: 14163 Comm: syz.3.2308 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 949.484304][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 949.494347][T14163] Call Trace: [ 949.497614][T14163] [ 949.500533][T14163] dump_stack_lvl+0x99/0x250 [ 949.505111][T14163] ? __asan_memcpy+0x40/0x70 [ 949.509685][T14163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 949.514902][T14163] ? __pfx__printk+0x10/0x10 [ 949.519480][T14163] panic+0x2db/0x790 [ 949.523362][T14163] ? __pfx_preempt_schedule+0x10/0x10 [ 949.528714][T14163] ? __pfx_panic+0x10/0x10 [ 949.533110][T14163] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 949.538988][T14163] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 949.545304][T14163] ? sysfs_remove_file_ns+0x3d/0x70 [ 949.550483][T14163] check_panic_on_warn+0x89/0xb0 [ 949.555404][T14163] ? sysfs_remove_file_ns+0x3d/0x70 [ 949.560583][T14163] end_report+0x78/0x160 [ 949.564823][T14163] kasan_report+0x129/0x150 [ 949.569325][T14163] ? sysfs_remove_file_ns+0x3d/0x70 [ 949.574508][T14163] sysfs_remove_file_ns+0x3d/0x70 [ 949.579516][T14163] bus_remove_driver+0x198/0x2f0 [ 949.584440][T14163] comedi_device_detach+0x134/0x720 [ 949.589642][T14163] comedi_unlocked_ioctl+0xbd2/0xfc0 [ 949.594910][T14163] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 949.600697][T14163] ? __pfx_smack_log+0x10/0x10 [ 949.605462][T14163] ? smk_access+0x14c/0x4e0 [ 949.609965][T14163] ? smk_tskacc+0x2fc/0x370 [ 949.614450][T14163] ? smack_file_ioctl+0x24a/0x340 [ 949.619452][T14163] ? __pfx_smack_file_ioctl+0x10/0x10 [ 949.624804][T14163] ? bpf_lsm_file_ioctl+0x9/0x20 [ 949.629721][T14163] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 949.635502][T14163] __se_sys_ioctl+0xfc/0x170 [ 949.640081][T14163] do_syscall_64+0xfa/0x3b0 [ 949.644569][T14163] ? lockdep_hardirqs_on+0x9c/0x150 [ 949.649747][T14163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.655793][T14163] ? clear_bhb_loop+0x60/0xb0 [ 949.660457][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.666343][T14163] RIP: 0033:0x7fad4738e9a9 [ 949.670744][T14163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.690338][T14163] RSP: 002b:00007fad481a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 949.698737][T14163] RAX: ffffffffffffffda RBX: 00007fad475b5fa0 RCX: 00007fad4738e9a9 [ 949.706695][T14163] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000d [ 949.714653][T14163] RBP: 00007fad47410d69 R08: 0000000000000000 R09: 0000000000000000 [ 949.722619][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.730588][T14163] R13: 0000000000000000 R14: 00007fad475b5fa0 R15: 00007ffe00c83e38 [ 949.738564][T14163] [ 949.741836][T14163] Kernel Offset: disabled [ 949.746166][T14163] Rebooting in 86400 seconds..