last executing test programs: 8.087860633s ago: executing program 0 (id=2042): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xddcc, @empty, 0xd3}, {0xa, 0x4e22, 0x75b, @remote, 0xf13}, r2, 0x20007ee}}, 0x48) 7.988860778s ago: executing program 2 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2000}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8eef9657", @ANYRES16=r1, @ANYBLOB="010000030000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0c009900020000000300000005005300000000000800050008000000"], 0x38}}, 0xc084) 7.674705302s ago: executing program 0 (id=2045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x18, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setregid(0xee00, 0x0) syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x600}}, 0x30) 7.015924123s ago: executing program 3 (id=2049): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2000000}, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd7c2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044814}, 0x0) 7.015502583s ago: executing program 3 (id=2050): r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000080)=""/89, 0x59}, {&(0x7f0000000100)=""/204, 0xcc}], &(0x7f0000000240)=[0x9, 0x9], 0x3}, 0x20) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000002c0)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000300)=0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) linkat(r1, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x400) write$binfmt_misc(r1, &(0x7f00000003c0)="5640e10c9aa63cdd31c3c1b95c746349b8bbafd670720c1ad3794187a400f2f1b91559a722db1824404c7a178c1426e07bb36d81cf062c398ecb51a38f3a49ea493b780634661cb8b85c6abc1715af3236576ad35fa1e1bbb5f12e0e7752878e2460656f657516f9e2ae77ca77e7d401a5ff3f6a3c7e786e4705da5210030f291ce3b9f8466632a6043924993ff6ca88156b49450b09d9d9cda3bc48749b171c5d884cf79383202dbf165ed1d125794c2736", 0xb2) io_uring_enter(r1, 0xf05, 0xb9ea, 0x0, &(0x7f0000000480)={[0xffffffff]}, 0x8) accept$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @empty}, &(0x7f0000000500)=0x10) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000800)={0x4, 0x0, [{0x3000, 0x98, &(0x7f0000000540)=""/152}, {0xdddd0000, 0xb5, &(0x7f0000000600)=""/181}, {0x1, 0x93, &(0x7f00000006c0)=""/147}, {0xdddd1000, 0x75, &(0x7f0000000780)=""/117}]}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000900)={0x0, 0x0, r1}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000940), 0x290200, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000080}, 0xc5) recvmmsg(r4, &(0x7f0000000d00)=[{{&(0x7f0000000ac0)=@vsock, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/145, 0x91}], 0x1, &(0x7f0000000c40)=""/159, 0x9f}, 0x2}], 0x1, 0x0, &(0x7f0000000d40)={0x77359400}) sendmsg$NFT_BATCH(r1, &(0x7f00000012c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth1\x00'}]}]}]}, @NFT_MSG_NEWSET={0x17c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x158, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0xe4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xd4, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x6c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "f43fa559eb1edc68fe53e740f898924d1559023b1ea45f50bb4269424d9045d1af21a6df18032b116a50bae6fe7f576479cfa9714735808cf595cd008d72ec6a38f43bfc000713d5fb5b4a201b86ea03e919cf6d65dfd92dfe8a6d6c60af13714ced9fd6"}]}, @NFTA_RANGE_TO_DATA={0x4c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8ca15ed65e4aaa1e}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0xd4, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x6f, 0x8, "4b16c089d0180381d756072630c5912826c30e21cdfbd9c053d02641e5f8f740241deffd4e722a0b89dadd7b3d38068dd3d96951bfc64cd350ff8e38c300f2df489b4b3ebab92da4f1ac88db05377005d937e536fe301146047fdb3147b447d3d2f0dc30b5e1cc0d0ed766"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000000}]}, @NFT_MSG_DELFLOWTABLE={0xc0, 0x18, 0xa, 0xa00, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c0}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000001300)={0x201, @time={0xa0000}, 0x6, {0x7, 0x2}, 0x28, 0x0, 0x6}) r6 = syz_io_uring_setup(0x4d81, &(0x7f0000001340)={0x0, 0xa01b, 0x1, 0x0, 0x3e8}, &(0x7f00000013c0), &(0x7f0000001400)) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x14, &(0x7f00000071c0)=[{0x3, 0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001440)=""/175, 0xaf}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/145, 0x91}], &(0x7f0000002600)=[0x3, 0x8]}, {0x7, 0x1, 0x0, &(0x7f0000004a40)=[{&(0x7f0000002640)=""/219, 0xdb}, {&(0x7f0000002740)=""/227, 0xe3}, {&(0x7f0000002840)=""/250, 0xfa}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/58, 0x3a}, {&(0x7f0000004980)=""/130, 0x82}], &(0x7f0000004ac0)=[0x1, 0x25a4377d, 0x6, 0x2, 0x6, 0x100000001, 0x80000000, 0x8, 0xffffffffffffda2c]}, {0x9, 0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000004b40)=""/56, 0x38}, {&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/88, 0x58}, {&(0x7f0000005c00)=""/56, 0x38}, {&(0x7f0000005c40)=""/28, 0x1c}, {&(0x7f0000005c80)=""/240, 0xf0}, {&(0x7f0000005d80)=""/172, 0xac}, {&(0x7f0000005e40)=""/155, 0x9b}, {&(0x7f0000005f00)=""/129, 0x81}], &(0x7f0000006080)=[0xca, 0x2, 0x9]}, {0x2, 0x0, 0x0, &(0x7f0000007140)=[{&(0x7f00000060c0)=""/73, 0x49}, {&(0x7f0000006140)=""/4096, 0x1000}], &(0x7f0000007180)=[0xffffffffffffffff, 0x7fffffff, 0x7, 0x9]}], 0x4) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000007240)=0x5, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2c, 0x1, 0x6) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) r7 = getpid() r8 = getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007280)={r7, 0x0, r8}, 0xc) 7.015109562s ago: executing program 4 (id=2052): syz_io_uring_setup(0x6dfb, &(0x7f0000000140), 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0xc, 0x8401) fcntl$dupfd(r0, 0x406, r0) getpid() socket$igmp(0x2, 0x3, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) fcntl$setstatus(r1, 0x4, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100}, &(0x7f00000000c0), &(0x7f0000000080)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x3c, 0x1, @thr={&(0x7f0000000100), 0x0}}, 0x0) r3 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180006899c17"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$inet(0x2, 0x3, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sigaltstack(0x0, 0x0) io_uring_enter(r3, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000700)="d6b71992dff1", 0x6}], 0x1, 0x2, 0x7) 6.852946069s ago: executing program 3 (id=2054): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = accept4$tipc(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x0) connect$tipc(r4, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x18, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f00000000c0)) connect$inet(r7, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r9 = socket$inet6(0xa, 0x6, 0xb4de) recvmmsg(r9, 0x0, 0x0, 0x22, 0xfffffffffffffffd) 5.455899989s ago: executing program 3 (id=2058): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0xdb, 0x0, &(0x7f0000000700)="8eeeb06ed13d4f32ef608b72dc6a9a10eac6d26f39e0cb7894d0a43475bb9c13a1a6dc31fd7def4d608560956bb370a4819457c500bfe73225b838b95e75ffd2daa65ec479a8d7150ae306b5baa3b97e4b41ed98c2413aa562ae375e3be0a92791bbe535aa54f3937f8c3ac90aa22e4e36eaa8f6d24f9d147bd569adb7dd210f125b8320fd8ca7250707f72ab23b53acf70cc89c95b4bca5e0ce34082048cfc0fd2398d72feab15a6524c329d857a58652c355a6ff728758d099a4d29365a70950aa67e9ae96df28773f42847179d58768a4d5b982af0961debb8d", 0x0, 0x100, 0x0, 0x46, 0xc5, &(0x7f0000000600)="1fba06f7094be90420b2cced1cd382c85508de93a47af557772149d0f1577e086b86744ff992cff437ee225a22ebe73ac34df54da45ab07e82120ee7d2e245e277890682cb57", &(0x7f0000000800)="54ca5113b707d8a55918838a18c4d118eb955fdebf4eca008c5ff70b558f889630fadc1e1dee5749f346792cd1b4d757e151cfb4ddcb25343e8c05bafeef5db82e48eccf7fbcf92e0432ccd9513fcecbcb37c7bc8ecbc1feae1f55c347f92cc62283e9a4717ea1ff0802887458ebcf5555cd18ebcd6703e89fb58c0cf079244ec649b6d49069d372a1a1f3e95bd84e54f8e03864b8f1c18edf82c3bd2e664ff88d77e26cc3ad9816fa8177479f369cf060236be952ab14bae53c272ee1dd48a5c4777a7d12", 0x6, 0x0, 0xdfe}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.37642496s ago: executing program 2 (id=2059): futex(0x0, 0x83, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1378, 0x0, 0x0) 4.866501026s ago: executing program 1 (id=2060): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) 4.421990431s ago: executing program 2 (id=2061): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0xd5, 0x6f, &(0x7f0000000700)="8eeeb06ed13d4f32ef608b72dc6a9a10eac6d26f39e0cb7894d0a43475bb9c13a1a6dc31fd7def4d608560956bb370a4819457c500bfe73225b838b95e75ffd2daa65ec479a8d7150ae306b5baa3b97e4b41ed98c2413aa562ae375e3be0a92791bbe535aa54f3937f8c3ac90aa22e4e36eaa8f6d24f9d147bd569adb7dd210f125b8320fd8ca7250707f72ab23b53acf70cc89c95b4bca5e0ce34082048cfc0fd2398d72feab15a6524c329d857a58652c355a6ff728758d099a4d29365a70950aa67e9ae96df28773f42847179d58768a4d5b982", &(0x7f00000002c0)=""/111, 0x100, 0x0, 0x46, 0xc5, &(0x7f0000000600)="1fba06f7094be90420b2cced1cd382c85508de93a47af557772149d0f1577e086b86744ff992cff437ee225a22ebe73ac34df54da45ab07e82120ee7d2e245e277890682cb57", &(0x7f0000000800)="54ca5113b707d8a55918838a18c4d118eb955fdebf4eca008c5ff70b558f889630fadc1e1dee5749f346792cd1b4d757e151cfb4ddcb25343e8c05bafeef5db82e48eccf7fbcf92e0432ccd9513fcecbcb37c7bc8ecbc1feae1f55c347f92cc62283e9a4717ea1ff0802887458ebcf5555cd18ebcd6703e89fb58c0cf079244ec649b6d49069d372a1a1f3e95bd84e54f8e03864b8f1c18edf82c3bd2e664ff88d77e26cc3ad9816fa8177479f369cf060236be952ab14bae53c272ee1dd48a5c4777a7d12", 0x6, 0x0, 0xdfe}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.397767622s ago: executing program 4 (id=2062): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x6f, 0x0, &(0x7f00000002c0)=""/111, 0x100, 0x0, 0x46, 0xc5, &(0x7f0000000600)="1fba06f7094be90420b2cced1cd382c85508de93a47af557772149d0f1577e086b86744ff992cff437ee225a22ebe73ac34df54da45ab07e82120ee7d2e245e277890682cb57", &(0x7f0000000800)="54ca5113b707d8a55918838a18c4d118eb955fdebf4eca008c5ff70b558f889630fadc1e1dee5749f346792cd1b4d757e151cfb4ddcb25343e8c05bafeef5db82e48eccf7fbcf92e0432ccd9513fcecbcb37c7bc8ecbc1feae1f55c347f92cc62283e9a4717ea1ff0802887458ebcf5555cd18ebcd6703e89fb58c0cf079244ec649b6d49069d372a1a1f3e95bd84e54f8e03864b8f1c18edf82c3bd2e664ff88d77e26cc3ad9816fa8177479f369cf060236be952ab14bae53c272ee1dd48a5c4777a7d12", 0x6, 0x0, 0xdfe}, 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.358520304s ago: executing program 0 (id=2063): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x8d, 0x6f, &(0x7f0000000700)="8eeeb06ed13d4f32ef608b72dc6a9a10eac6d26f39e0cb7894d0a43475bb9c13a1a6dc31fd7def4d608560956bb370a4819457c500bfe73225b838b95e75ffd2daa65ec479a8d7150ae306b5baa3b97e4b41ed98c2413aa562ae375e3be0a92791bbe535aa54f3937f8c3ac90aa22e4e36eaa8f6d24f9d147bd569adb7dd210f125b8320fd8ca7250707f72ab2", &(0x7f00000002c0)=""/111, 0x100, 0x0, 0x46, 0xc5, &(0x7f0000000600)="1fba06f7094be90420b2cced1cd382c85508de93a47af557772149d0f1577e086b86744ff992cff437ee225a22ebe73ac34df54da45ab07e82120ee7d2e245e277890682cb57", &(0x7f0000000800)="54ca5113b707d8a55918838a18c4d118eb955fdebf4eca008c5ff70b558f889630fadc1e1dee5749f346792cd1b4d757e151cfb4ddcb25343e8c05bafeef5db82e48eccf7fbcf92e0432ccd9513fcecbcb37c7bc8ecbc1feae1f55c347f92cc62283e9a4717ea1ff0802887458ebcf5555cd18ebcd6703e89fb58c0cf079244ec649b6d49069d372a1a1f3e95bd84e54f8e03864b8f1c18edf82c3bd2e664ff88d77e26cc3ad9816fa8177479f369cf060236be952ab14bae53c272ee1dd48a5c4777a7d12", 0x6, 0x0, 0xdfe}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.272360544s ago: executing program 1 (id=2064): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 4.242024049s ago: executing program 4 (id=2065): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x6e, 0x6f, &(0x7f0000000700)="8eeeb06ed13d4f32ef608b72dc6a9a10eac6d26f39e0cb7894d0a43475bb9c13a1a6dc31fd7def4d608560956bb370a4819457c500bfe73225b838b95e75ffd2daa65ec479a8d7150ae306b5baa3b97e4b41ed98c2413aa562ae375e3be0a92791bbe535aa54f3937f8c3ac90aa2", &(0x7f00000002c0)=""/111, 0x100, 0x0, 0x46, 0xc5, &(0x7f0000000600)="1fba06f7094be90420b2cced1cd382c85508de93a47af557772149d0f1577e086b86744ff992cff437ee225a22ebe73ac34df54da45ab07e82120ee7d2e245e277890682cb57", &(0x7f0000000800)="54ca5113b707d8a55918838a18c4d118eb955fdebf4eca008c5ff70b558f889630fadc1e1dee5749f346792cd1b4d757e151cfb4ddcb25343e8c05bafeef5db82e48eccf7fbcf92e0432ccd9513fcecbcb37c7bc8ecbc1feae1f55c347f92cc62283e9a4717ea1ff0802887458ebcf5555cd18ebcd6703e89fb58c0cf079244ec649b6d49069d372a1a1f3e95bd84e54f8e03864b8f1c18edf82c3bd2e664ff88d77e26cc3ad9816fa8177479f369cf060236be952ab14bae53c272ee1dd48a5c4777a7d12", 0x6, 0x0, 0xdfe}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.134210781s ago: executing program 2 (id=2066): connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0/file0\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="020046b9c100000000bd8d06144ee1ac9d64ad4b0e0000cd0ca310a223010203840f7c0c"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fcntl$dupfd(r0, 0x0, r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180)='./file1\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0xffffff8f) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0) renameat2(r5, &(0x7f0000000040)='./bus\x00', r5, &(0x7f0000000100)='./bus\x00', 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) umount2(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) 4.127768204s ago: executing program 0 (id=2067): syz_emit_ethernet(0x49a, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0xb, 0x6, "b42a28", 0x464, 0x3a, 0xff, @local, @remote, {[@hopopts={0x2, 0x6, '\x00', [@ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x5, [0x7, 0x4, 0xe040]}}, @calipso={0x7, 0x8, {0x2, 0x0, 0xe8, 0x800}}]}, @fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x4, 0x67}, @srh={0x87, 0x4, 0x4, 0x2, 0x9, 0x10, 0x4, [@remote, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @routing={0x0, 0x6, 0x1, 0xa, 0x0, [@private2={0xfc, 0x2, '\x00', 0xb4}, @remote, @rand_addr=' \x01\x00']}, @hopopts={0x1d, 0x0, '\x00', [@pad1]}, @srh={0x1, 0x6, 0x4, 0x3, 0xff, 0x28, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}], @mlv2_report={0x8f, 0x0, 0x0, 0xff7f, 0x8, [{0x5, 0x8, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@loopback, @private1, @loopback, @empty], [0x7, 0x2, 0x1, 0x4, 0x0, 0x0, 0x6, 0x5]}, {0x8, 0x1, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, [@loopback, @private2, @empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}], [0xc]}, {0x8, 0x7, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, [@local, @dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2a}], [0x1, 0x2, 0x1ff70, 0x8, 0xc3f, 0x8, 0x6]}, {0xdd, 0x3, 0x2, @private1, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}], [0x91, 0x800, 0x3]}, {0x4, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @local}, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], [0x9, 0x3]}, {0x3, 0x1, 0x7, @mcast2, [@rand_addr=' \x01\x00', @empty, @remote, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}], [0x4]}, {0x8, 0x4, 0x6, @empty, [@remote, @private0, @empty, @empty, @loopback, @empty], [0x5, 0x2, 0x7, 0x1]}, {0x6, 0x7, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, [@local, @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], [0x9, 0x4, 0x0, 0x4ad, 0xc, 0xd47, 0x0]}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000240)={0x17, 0x14, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x6, [0x1, 0x7f, 0x9958, 0x7, 0x7, 0x86, 0x7542, 0x9]}}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x5, 0x0, [0x401, 0x1ff, 0xa, 0x10000, 0x9, 0x3, 0x5, 0xf]}}]}, 0xb0) unshare(0x20040600) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) unshare(0x40000000) setitimer(0x1, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 4.093853305s ago: executing program 1 (id=2068): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x1000}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) write$FUSE_GETXATTR(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) syz_io_uring_setup(0x4fb0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x7ffffffffffffffc, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = fcntl$dupfd(r5, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) close_range(r1, 0xffffffffffffffff, 0x0) 4.012335716s ago: executing program 4 (id=2069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x5, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x4, 0x10, 0x6, 0x0, 0x0, 0x0, 0x10, 0x6, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x4, 0x0, 0x7, 0x4, 0x0, 0x29, 0x3, 0x4b, 0x0, 0xa}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x8, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x80}, {0x8080000, 0xeeee0000, 0xa, 0x6, 0x4, 0x0, 0x68, 0x0, 0x1, 0xf9}, {0x0, 0xdddd0000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x4, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x0, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x401]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, 0x4}) close_range(r1, r0, 0x2) 2.702733247s ago: executing program 0 (id=2070): unshare(0x20000400) syz_usb_connect(0x6, 0x73e, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000000940)) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x971193ebe977fbe2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0xf1f, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040061}, 0xea09baf9e5431f5a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000064000/0x1000)=nil, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r6, r6], 0x0, 0x10, 0x2, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000000875a0000040000000100000000000000", @ANYRES32=r6], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7, 0x0, 0x8000000}, 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = fanotify_init(0x20, 0x400) writev(r9, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.649371095s ago: executing program 1 (id=2071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), 0x0}, 0x20) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.575708361s ago: executing program 4 (id=2072): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000b000000080000000600000f020000000200000000000000020000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004977000000000000000f020000001760000000000000000061"], 0x0, 0x87, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000300)="f6ea090003000060009ba53886ddc2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) 1.804791226s ago: executing program 3 (id=2073): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x18, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f00000000c0)) connect$inet(r7, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r9 = socket$inet6(0xa, 0x6, 0xb4de) recvmmsg(r9, 0x0, 0x0, 0x22, 0xfffffffffffffffd) 1.74091833s ago: executing program 1 (id=2074): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x400000007fff, 0x3, 0x3e, 0xffffffeb, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1cc, 0xe2, 0x1, 0x3}], "acfb3f051b91849846ec830e8fc0391036d324f1a13b7574e061825a8f5cf1f6fa11aedf8441af886914f68393e338af41d98f7ed031e6346889031d5273cfa7d0ec1641e7928743622c8b7f7bd2c007b08f3f96046ba89c0777df0ae8f1284357"}, 0xd9) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000000070108000002400000000f000000030900010073797a30000000000c00034000000000000009b90d00"/56], 0x38}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000003840)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x2, 0x3, {@mac=@random="a0423ecebbbc", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x800, 0x5, 0x4, 0x7, 0x10, 'vlan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0x70d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0x0, 0x1, 0x0, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x7, 0xfffb, 0x1, 0x3, 0x5, 0x6, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="59a2f242dbf9", @mac=@random="6480059adaaa", @multicast1, @multicast1, 0xf}}}, {{@arp={@broadcast, @remote, 0xff000000, 0xff, 0xd, 0xb, {@mac=@link_local, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xeac0fa4642fd1a49]}}, 0x0, 0x6, 0x2, 0x2, 0xc, 0x1, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xde4, 0xd, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r5, &(0x7f0000004300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 504.304359ms ago: executing program 2 (id=2075): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x6f, 0x0, &(0x7f00000002c0)=""/111, 0x100, 0x0, 0x46, 0xc5, &(0x7f0000000600)="1fba06f7094be90420b2cced1cd382c85508de93a47af557772149d0f1577e086b86744ff992cff437ee225a22ebe73ac34df54da45ab07e82120ee7d2e245e277890682cb57", &(0x7f0000000800)="54ca5113b707d8a55918838a18c4d118eb955fdebf4eca008c5ff70b558f889630fadc1e1dee5749f346792cd1b4d757e151cfb4ddcb25343e8c05bafeef5db82e48eccf7fbcf92e0432ccd9513fcecbcb37c7bc8ecbc1feae1f55c347f92cc62283e9a4717ea1ff0802887458ebcf5555cd18ebcd6703e89fb58c0cf079244ec649b6d49069d372a1a1f3e95bd84e54f8e03864b8f1c18edf82c3bd2e664ff88d77e26cc3ad9816fa8177479f369cf060236be952ab14bae53c272ee1dd48a5c4777a7d12", 0x6, 0x0, 0xdfe}, 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 409.122497ms ago: executing program 1 (id=2076): io_setup(0x81, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x240, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffa03}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9edd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2800000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb5d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x80000001, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x10006, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0x800000b, 0x1, 0x9, 0x6, 0x1, 0x6, 0x909, 0x5, 0x4d, 0x5, 0x65a, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x10001, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x101, 0x8, 0x5, 0x0, 0x0, 0x34f1, 0x1ff, 0x7, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x0, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x5125, 0x1, 0x4, 0x69d, 0x8, 0x10001, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x7, 0x9, 0x2, 0x8, 0x7, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0x8, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x1, 0x60a, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x400001, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x3, 0x8, 0x7, 0x8, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 247.221891ms ago: executing program 3 (id=2077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0xd5, 0x6f, &(0x7f0000000700)="8eeeb06ed13d4f32ef608b72dc6a9a10eac6d26f39e0cb7894d0a43475bb9c13a1a6dc31fd7def4d608560956bb370a4819457c500bfe73225b838b95e75ffd2daa65ec479a8d7150ae306b5baa3b97e4b41ed98c2413aa562ae375e3be0a92791bbe535aa54f3937f8c3ac90aa22e4e36eaa8f6d24f9d147bd569adb7dd210f125b8320fd8ca7250707f72ab23b53acf70cc89c95b4bca5e0ce34082048cfc0fd2398d72feab15a6524c329d857a58652c355a6ff728758d099a4d29365a70950aa67e9ae96df28773f42847179d58768a4d5b982", &(0x7f00000002c0)=""/111, 0x100, 0x0, 0x46, 0xc5, &(0x7f0000000600)="1fba06f7094be90420b2cced1cd382c85508de93a47af557772149d0f1577e086b86744ff992cff437ee225a22ebe73ac34df54da45ab07e82120ee7d2e245e277890682cb57", &(0x7f0000000800)="54ca5113b707d8a55918838a18c4d118eb955fdebf4eca008c5ff70b558f889630fadc1e1dee5749f346792cd1b4d757e151cfb4ddcb25343e8c05bafeef5db82e48eccf7fbcf92e0432ccd9513fcecbcb37c7bc8ecbc1feae1f55c347f92cc62283e9a4717ea1ff0802887458ebcf5555cd18ebcd6703e89fb58c0cf079244ec649b6d49069d372a1a1f3e95bd84e54f8e03864b8f1c18edf82c3bd2e664ff88d77e26cc3ad9816fa8177479f369cf060236be952ab14bae53c272ee1dd48a5c4777a7d12", 0x6, 0x0, 0xdfe}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 100.258579ms ago: executing program 2 (id=2078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r1}, 0x66) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x7, 0x7218, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) (fail_nth: 6) 0s ago: executing program 0 (id=2079): newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7000) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)) r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x4) kernel console output (not intermixed with test programs): [ 399.235434][ T30] audit: type=1326 audit(2000000013.669:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.257751][ T30] audit: type=1326 audit(2000000013.699:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.282527][ T30] audit: type=1326 audit(2000000013.699:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.283103][ T9570] FAULT_INJECTION: forcing a failure. [ 399.283103][ T9570] name failslab, interval 1, probability 0, space 0, times 0 [ 399.304848][ T30] audit: type=1326 audit(2000000013.699:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.383173][ T30] audit: type=1326 audit(2000000013.699:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.408839][ T9570] CPU: 1 UID: 0 PID: 9570 Comm: syz.1.1120 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 399.408864][ T9570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.408872][ T9570] Call Trace: [ 399.408877][ T9570] [ 399.408882][ T9570] dump_stack_lvl+0x189/0x250 [ 399.408904][ T9570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.408918][ T9570] ? __pfx__printk+0x10/0x10 [ 399.408937][ T9570] ? __pfx___might_resched+0x10/0x10 [ 399.408961][ T9570] should_fail_ex+0x414/0x560 [ 399.408977][ T9570] should_failslab+0xa8/0x100 [ 399.408995][ T9570] __kmalloc_cache_noprof+0x70/0x3d0 [ 399.409023][ T9570] ? cma_alloc_port+0xb9/0x610 [ 399.409048][ T9570] cma_alloc_port+0xb9/0x610 [ 399.409075][ T9570] rdma_bind_addr_dst+0xdfc/0x3410 [ 399.409089][ T9570] ? do_raw_spin_lock+0x121/0x290 [ 399.409111][ T9570] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 399.409130][ T9570] rdma_listen+0x251/0xd30 [ 399.409139][ T9570] ? ucma_get_ctx+0x1da/0x260 [ 399.409155][ T9570] ? __pfx_rdma_listen+0x10/0x10 [ 399.409170][ T9570] ucma_listen+0x178/0x260 [ 399.409183][ T9570] ? __pfx_ucma_listen+0x10/0x10 [ 399.409201][ T9570] ucma_write+0x249/0x2e0 [ 399.409215][ T9570] ? __pfx_ucma_write+0x10/0x10 [ 399.409227][ T9570] ? security_file_permission+0x75/0x290 [ 399.409240][ T9570] ? rw_verify_area+0x258/0x650 [ 399.409254][ T9570] ? __pfx_ucma_write+0x10/0x10 [ 399.409266][ T9570] vfs_write+0x27b/0xa90 [ 399.409286][ T9570] ? __pfx_vfs_write+0x10/0x10 [ 399.409300][ T9570] ? __fget_files+0x2a/0x420 [ 399.409312][ T9570] ? __fget_files+0x2a/0x420 [ 399.409320][ T9570] ? __fget_files+0x3a0/0x420 [ 399.409328][ T9570] ? __fget_files+0x2a/0x420 [ 399.409342][ T9570] ksys_write+0x145/0x250 [ 399.409355][ T9570] ? rcu_is_watching+0x15/0xb0 [ 399.409371][ T9570] ? __pfx_ksys_write+0x10/0x10 [ 399.409388][ T9570] ? do_syscall_64+0xba/0x210 [ 399.409403][ T9570] do_syscall_64+0xf6/0x210 [ 399.409416][ T9570] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 399.409426][ T9570] ? clear_bhb_loop+0x60/0xb0 [ 399.409438][ T9570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.409448][ T9570] RIP: 0033:0x7f0f2d98e969 [ 399.409459][ T9570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.409468][ T9570] RSP: 002b:00007f0f2e7db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.409480][ T9570] RAX: ffffffffffffffda RBX: 00007f0f2dbb5fa0 RCX: 00007f0f2d98e969 [ 399.409488][ T9570] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 399.409494][ T9570] RBP: 00007f0f2e7db090 R08: 0000000000000000 R09: 0000000000000000 [ 399.409501][ T9570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.409507][ T9570] R13: 0000000000000000 R14: 00007f0f2dbb5fa0 R15: 00007ffd4a93e478 [ 399.409523][ T9570] [ 399.694502][ T30] audit: type=1326 audit(2000000013.699:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.716255][ T30] audit: type=1326 audit(2000000013.709:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.737910][ T30] audit: type=1326 audit(2000000013.709:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 399.759856][ T30] audit: type=1326 audit(2000000013.709:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9557 comm="syz.0.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 400.452895][ T977] libceph: connect (1)[c::]:6789 error -1 [ 400.538352][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 400.937263][ T9577] ceph: No mds server is up or the cluster is laggy [ 400.947310][ T977] libceph: connect (1)[c::]:6789 error -1 [ 400.953222][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 401.622574][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 401.701486][ T9592] CIFS mount error: No usable UNC path provided in device string! [ 401.701486][ T9592] [ 401.711680][ T9592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 402.368395][ T9591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1126'. [ 402.544547][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.576185][ T5875] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 402.604858][ T5875] usb 3-1: can't read configurations, error -71 [ 402.648063][ T9599] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1126'. [ 402.736286][ T59] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 402.765221][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 402.876263][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 402.885249][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 403.310547][ T59] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 403.324207][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.361053][ T59] usb 5-1: config 0 has no interface number 0 [ 403.385389][ T59] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 403.430619][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.466766][ T59] usb 5-1: config 0 descriptor?? [ 403.482587][ T59] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 403.491176][ T9611] trusted_key: encrypted_key: insufficient parameters specified [ 403.499838][ T59] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 403.736651][ T5900] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 405.513749][ T977] usb 5-1: USB disconnect, device number 4 [ 405.535906][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 405.576377][ T5900] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 405.593620][ T5900] usb 2-1: config 0 has no interface number 0 [ 405.604023][ T9630] CIFS mount error: No usable UNC path provided in device string! [ 405.604023][ T9630] [ 405.616049][ T9630] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 405.628654][ T5900] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 405.645413][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.851376][ T5900] usb 2-1: Product: syz [ 405.856489][ T5900] usb 2-1: Manufacturer: syz [ 405.861118][ T5900] usb 2-1: SerialNumber: syz [ 405.907349][ T5900] usb 2-1: config 0 descriptor?? [ 405.943586][ T5900] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 405.981815][ T5900] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 406.018021][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 406.340964][ T5900] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 406.469262][ T5900] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 406.610197][ T5900] usb 2-1: USB disconnect, device number 13 [ 406.865256][ T9649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.211193][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.855640][ T9657] trusted_key: encrypted_key: insufficient parameters specified [ 408.211865][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 408.211883][ T30] audit: type=1326 audit(2000000022.909:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.288223][ T30] audit: type=1326 audit(2000000022.909:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.366092][ T30] audit: type=1326 audit(2000000022.909:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.433297][ T30] audit: type=1326 audit(2000000022.909:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.456129][ T30] audit: type=1326 audit(2000000022.909:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.478375][ T30] audit: type=1326 audit(2000000022.919:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.499978][ T30] audit: type=1326 audit(2000000022.919:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.525917][ T30] audit: type=1326 audit(2000000022.919:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 408.594062][ T9672] CIFS mount error: No usable UNC path provided in device string! [ 408.594062][ T9672] [ 408.604244][ T9672] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 409.164645][ T30] audit: type=1326 audit(2000000022.919:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 409.194082][ T30] audit: type=1326 audit(2000000022.919:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9662 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 409.722127][ C0] vcan0: j1939_tp_rxtimer: 0xffff888073f55c00: rx timeout, send abort [ 409.750859][ T9687] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 410.223061][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807807a800: rx timeout, send abort [ 410.231551][ C0] vcan0: j1939_tp_rxtimer: 0xffff888073f55c00: abort rx timeout. Force session deactivation [ 410.359124][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 411.320160][ T9694] trusted_key: encrypted_key: insufficient parameters specified [ 411.908686][ T9712] CIFS mount error: No usable UNC path provided in device string! [ 411.908686][ T9712] [ 411.918905][ T9712] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 414.147220][ T5875] libceph: connect (1)[c::]:6789 error -1 [ 414.153190][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 414.180559][ T9725] ceph: No mds server is up or the cluster is laggy [ 414.912185][ T9747] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 414.921599][ T9747] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 414.973245][ T9748] mmap: syz.3.1171 (9748) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 415.947219][ T9762] CIFS mount error: No usable UNC path provided in device string! [ 415.947219][ T9762] [ 415.957432][ T9762] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 416.904809][ T9766] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 417.009668][ T9769] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 417.035081][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 417.035098][ T30] audit: type=1326 audit(2000000031.729:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.068047][ T30] audit: type=1326 audit(2000000031.729:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.090080][ T30] audit: type=1326 audit(2000000031.729:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.112177][ T30] audit: type=1326 audit(2000000031.729:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.133823][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.141063][ T30] audit: type=1326 audit(2000000031.739:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.188620][ T30] audit: type=1326 audit(2000000031.739:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.263269][ T30] audit: type=1326 audit(2000000031.739:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.284788][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.293422][ T30] audit: type=1326 audit(2000000031.739:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.316244][ T30] audit: type=1326 audit(2000000031.739:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 417.337712][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.344623][ T30] audit: type=1326 audit(2000000031.739:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9763 comm="syz.4.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 418.591245][ T9802] capability: warning: `syz.1.1192' uses deprecated v2 capabilities in a way that may be insecure [ 418.887526][ T5875] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 419.006008][ T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 419.073543][ T5875] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.112918][ T5875] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 419.130206][ T5875] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 419.140128][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.157823][ T9802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.372778][ T5875] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.380728][ T47] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 419.393498][ T47] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 419.407105][ T47] usb 3-1: config 0 has no interface number 0 [ 419.413363][ T47] usb 3-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.434227][ T47] usb 3-1: config 0 interface 30 has no altsetting 0 [ 419.444449][ T47] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 419.454234][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.481681][ T47] usb 3-1: config 0 descriptor?? [ 419.569931][ T47] usb 3-1: unknown interface protocol 0x41, assuming v1 [ 419.601125][ T5875] usb 2-1: USB disconnect, device number 14 [ 419.620306][ T47] usb 3-1: 30:2 : does not exist [ 419.704391][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'. [ 420.434344][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 420.675017][ T47] usb 3-1: USB disconnect, device number 10 [ 422.329307][ T9853] CIFS mount error: No usable UNC path provided in device string! [ 422.329307][ T9853] [ 422.339447][ T9853] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 422.803688][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 422.803706][ T30] audit: type=1326 audit(2000000037.499:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 422.895529][ T30] audit: type=1326 audit(2000000037.499:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 422.940140][ T30] audit: type=1326 audit(2000000037.499:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 422.996279][ T30] audit: type=1326 audit(2000000037.499:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 423.045077][ T30] audit: type=1326 audit(2000000037.499:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 423.086076][ T5825] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 423.105492][ T30] audit: type=1326 audit(2000000037.499:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 423.127892][ T30] audit: type=1326 audit(2000000037.499:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 423.150638][ T30] audit: type=1326 audit(2000000037.499:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 423.178718][ T30] audit: type=1326 audit(2000000037.499:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 423.202973][ T30] audit: type=1326 audit(2000000037.499:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9855 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 423.264982][ T5825] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 423.273930][ T5825] usb 2-1: config 0 has no interface number 0 [ 423.280679][ T5825] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 423.305259][ T5825] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 423.514262][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.523369][ T5825] usb 2-1: Product: syz [ 423.527849][ T5825] usb 2-1: Manufacturer: syz [ 423.532482][ T5825] usb 2-1: SerialNumber: syz [ 423.586096][ T5825] usb 2-1: config 0 descriptor?? [ 424.110981][ T977] libceph: connect (1)[c::]:6789 error -1 [ 424.138009][ T5825] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 424.170246][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 424.200954][ T9876] ceph: No mds server is up or the cluster is laggy [ 424.211659][ T5825] keyspan 2-1:0.133: unsupported endpoint type 0 [ 424.239401][ T5825] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 424.369824][ T5825] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 424.387129][ T5825] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 424.436334][ T5825] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 424.503120][ T5825] usb 2-1: USB disconnect, device number 15 [ 424.804542][ T5825] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 424.920645][ T9897] CIFS mount error: No usable UNC path provided in device string! [ 424.920645][ T9897] [ 424.931300][ T9897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 425.367443][ T9898] input: syz1 as /devices/virtual/input/input18 [ 426.062545][ T5825] keyspan 2-1:0.133: device disconnected [ 427.359520][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 428.146452][ T9929] overlayfs: failed to resolve './file0': -2 [ 428.196863][ T9929] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.1231'. [ 429.724576][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 430.120741][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 430.163891][ T9945] ceph: No mds server is up or the cluster is laggy [ 430.182671][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 430.182688][ T30] audit: type=1800 audit(2000000044.869:208): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1236" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 errno=0 [ 431.295397][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 431.608744][ T30] audit: type=1326 audit(2000000046.309:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 431.653407][ T30] audit: type=1326 audit(2000000046.329:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 431.686423][ T30] audit: type=1326 audit(2000000046.329:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 431.725036][ T30] audit: type=1326 audit(2000000046.339:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 431.895721][ T30] audit: type=1326 audit(2000000046.339:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 431.918215][ T30] audit: type=1326 audit(2000000046.339:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 431.955918][ T30] audit: type=1326 audit(2000000046.339:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 431.981602][ T9976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1245'. [ 431.994916][ T30] audit: type=1326 audit(2000000046.339:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 432.034360][ T30] audit: type=1326 audit(2000000046.339:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9963 comm="syz.1.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 432.158985][ T9991] FAULT_INJECTION: forcing a failure. [ 432.158985][ T9991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.178203][ T9991] CPU: 0 UID: 0 PID: 9991 Comm: syz.2.1251 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 432.178219][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.178227][ T9991] Call Trace: [ 432.178232][ T9991] [ 432.178236][ T9991] dump_stack_lvl+0x189/0x250 [ 432.178258][ T9991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.178272][ T9991] ? __pfx__printk+0x10/0x10 [ 432.178295][ T9991] should_fail_ex+0x414/0x560 [ 432.178309][ T9991] _copy_to_user+0x31/0xb0 [ 432.178326][ T9991] drm_ioctl+0x6a4/0xb10 [ 432.178343][ T9991] ? __pfx_vgem_fence_signal_ioctl+0x10/0x10 [ 432.178357][ T9991] ? __pfx_drm_ioctl+0x10/0x10 [ 432.178377][ T9991] ? __fget_files+0x3a0/0x420 [ 432.178386][ T9991] ? __fget_files+0x2a/0x420 [ 432.178397][ T9991] ? bpf_lsm_file_ioctl+0x9/0x20 [ 432.178410][ T9991] ? __pfx_drm_ioctl+0x10/0x10 [ 432.178423][ T9991] __se_sys_ioctl+0xfc/0x170 [ 432.178437][ T9991] do_syscall_64+0xf6/0x210 [ 432.178452][ T9991] ? clear_bhb_loop+0x60/0xb0 [ 432.178464][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.178474][ T9991] RIP: 0033:0x7f0033f8e969 [ 432.178484][ T9991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.178493][ T9991] RSP: 002b:00007f0034e49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.178505][ T9991] RAX: ffffffffffffffda RBX: 00007f00341b5fa0 RCX: 00007f0033f8e969 [ 432.178512][ T9991] RDX: 0000200000000080 RSI: 00000000c0106442 RDI: 0000000000000003 [ 432.178519][ T9991] RBP: 00007f0034e49090 R08: 0000000000000000 R09: 0000000000000000 [ 432.178525][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.178531][ T9991] R13: 0000000000000000 R14: 00007f00341b5fa0 R15: 00007ffceab63ab8 [ 432.178547][ T9991] [ 433.487157][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1259'. [ 434.381230][T10023] new mount options do not match the existing superblock, will be ignored [ 434.436496][T10023] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 435.883297][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 436.015102][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 436.169237][T10054] ceph: No mds server is up or the cluster is laggy [ 436.962301][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 437.074581][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 437.370046][T10075] ceph: No mds server is up or the cluster is laggy [ 437.876852][T10090] ubi31: attaching mtd0 [ 437.892713][T10090] ubi31: scanning is finished [ 437.897557][T10090] ubi31: empty MTD device detected [ 438.440347][ T5875] IPVS: starting estimator thread 0... [ 438.477603][T10090] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 438.596079][T10094] IPVS: using max 51 ests per chain, 122400 per kthread [ 438.844491][T10106] xt_bpf: check failed: parse error [ 439.523970][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 440.116348][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.122702][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.466283][T10122] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1282'. [ 441.556895][T10128] ceph: No mds server is up or the cluster is laggy [ 441.565149][ T977] libceph: connect (1)[c::]:6789 error -101 [ 441.580082][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 442.289132][ T977] libceph: connect (1)[c::]:6789 error -101 [ 442.594348][T10140] ceph: No mds server is up or the cluster is laggy [ 442.615977][ T5877] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 442.616170][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 443.436169][ T5877] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 444.386734][ T5877] usb 5-1: string descriptor 0 read error: -71 [ 444.413432][ T5877] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 444.435450][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.471860][ T5877] usb 5-1: can't set config #1, error -71 [ 444.494645][T10169] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1294'. [ 444.512504][ T5877] usb 5-1: USB disconnect, device number 5 [ 445.180644][ T5877] libceph: connect (1)[c::]:6789 error -1 [ 445.190884][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 445.635547][ T5877] libceph: connect (1)[c::]:6789 error -1 [ 445.641485][T10181] ceph: No mds server is up or the cluster is laggy [ 445.646009][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 445.811944][T10192] 9pnet_fd: Insufficient options for proto=fd [ 445.823544][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 445.823562][ T30] audit: type=1326 audit(2000000573.508:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 445.854075][T10173] input: syz0 as /devices/virtual/input/input19 [ 445.915923][ T30] audit: type=1326 audit(2000000573.508:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 445.944510][ T30] audit: type=1326 audit(2000000573.508:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 445.978057][ T30] audit: type=1326 audit(2000000573.518:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 446.002590][ T30] audit: type=1326 audit(2000000573.518:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 446.038157][ T30] audit: type=1326 audit(2000000573.518:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 446.090367][ T30] audit: type=1326 audit(2000000573.518:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 446.113710][ T30] audit: type=1326 audit(2000000573.518:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 446.142395][ T30] audit: type=1326 audit(2000000573.518:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 446.175571][ T30] audit: type=1326 audit(2000000573.528:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10186 comm="syz.4.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fea8eb8e969 code=0x7ffc0000 [ 446.981743][T10210] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1307'. [ 447.417682][T10224] CIFS mount error: No usable UNC path provided in device string! [ 447.417682][T10224] [ 447.428167][T10224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.533094][T10227] ceph: No mds server is up or the cluster is laggy [ 448.548121][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 448.554238][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 449.244988][T10258] input: syz0 as /devices/virtual/input/input20 [ 449.455170][T10261] fuse: Unknown parameter '00000000000000000000' [ 450.570671][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1323'. [ 450.579924][T10264] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 451.688086][T10273] CIFS mount error: No usable UNC path provided in device string! [ 451.688086][T10273] [ 451.698256][T10273] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 452.546005][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 452.546024][ T30] audit: type=1800 audit(2000000580.218:245): pid=10283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1330" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 454.043082][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 455.685774][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.986260][ T47] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 456.121471][ T30] audit: type=1800 audit(2000000583.818:246): pid=10325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1342" name="SYSV00000000" dev="hugetlbfs" ino=21 res=0 errno=0 [ 456.166747][ T47] usb 3-1: device descriptor read/64, error -71 [ 457.215936][ T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 457.406862][T10342] input: syz1 as /devices/virtual/input/input21 [ 457.907465][ T47] usb 3-1: device descriptor read/64, error -71 [ 458.039042][ T47] usb usb3-port1: attempt power cycle [ 458.306473][T10333] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1348'. [ 459.750150][ T30] audit: type=1800 audit(2000000587.428:247): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1357" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 [ 459.769989][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.816462][ T5875] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 460.906480][T10398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1366'. [ 460.992791][ T5875] usb 3-1: unable to get BOS descriptor or descriptor too short [ 461.015150][ T5875] usb 3-1: not running at top speed; connect to a high speed hub [ 461.048360][ T5875] usb 3-1: config 221 has an invalid descriptor of length 0, skipping remainder of the config [ 461.094438][ T5875] usb 3-1: config 221 has 0 interfaces, different from the descriptor's value: 7 [ 461.137944][ T5875] usb 3-1: New USB device found, idVendor=1608, idProduct=020d, bcdDevice=e7.07 [ 461.161817][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.182553][ T5875] usb 3-1: Product: syz [ 461.191866][ T5875] usb 3-1: Manufacturer: syz [ 461.205876][ T5875] usb 3-1: SerialNumber: syz [ 461.495708][T10413] CIFS mount error: No usable UNC path provided in device string! [ 461.495708][T10413] [ 461.506141][T10413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 461.801658][ T5875] usb 3-1: USB disconnect, device number 14 [ 466.182560][ T59] libceph: connect (1)[c::]:6789 error -101 [ 466.206833][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 466.698773][T10456] ceph: No mds server is up or the cluster is laggy [ 466.721721][ T59] libceph: connect (1)[c::]:6789 error -101 [ 466.740899][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 467.926226][ T30] audit: type=1800 audit(2000000595.608:248): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1391" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 468.240608][T10481] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.1392'. [ 469.138190][T10464] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1388'. [ 469.536382][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 470.798402][ T5900] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 470.812029][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.862969][ T5900] usb 5-1: config 0 descriptor?? [ 471.612534][ T5900] ath6kl: Failed to submit usb control message: -71 [ 471.631544][ T5900] ath6kl: unable to send the bmi data to the device: -71 [ 471.650843][ T5900] ath6kl: Unable to send get target info: -71 [ 471.692020][ T5900] ath6kl: Failed to init ath6kl core: -71 [ 471.780453][ T5900] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 471.805371][ T977] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 471.897172][ T5900] usb 5-1: USB disconnect, device number 6 [ 472.166078][ T977] usb 2-1: device descriptor read/64, error -71 [ 472.665991][ T977] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 473.108088][T10527] input: syz1 as /devices/virtual/input/input22 [ 473.556621][ T977] usb 2-1: device descriptor read/64, error -71 [ 473.695004][ T977] usb usb2-port1: attempt power cycle [ 474.189609][ T977] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 474.216987][ T977] usb 2-1: device descriptor read/8, error -71 [ 474.246160][ T5825] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 474.518689][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 474.577361][ T977] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 474.632138][ T5825] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 474.952583][ T977] usb 2-1: device descriptor read/8, error -71 [ 474.968891][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.004312][ T5825] usb 5-1: config 0 descriptor?? [ 475.087276][ T977] usb usb2-port1: unable to enumerate USB device [ 475.240247][T10547] tipc: Started in network mode [ 475.249803][T10547] tipc: Node identity 7, cluster identity 4711 [ 475.264763][T10547] tipc: Node number set to 7 [ 475.520117][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.695294][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.140942][ T5825] usbhid 5-1:0.0: can't add hid device: -71 [ 476.150220][ T5825] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 476.177815][ T5825] usb 5-1: USB disconnect, device number 7 [ 477.325476][T10574] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 477.845651][T10592] input: syz1 as /devices/virtual/input/input23 [ 478.653157][T10602] ubi31: attaching mtd0 [ 478.694399][T10602] ubi31: scanning is finished [ 479.509983][T10602] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 479.586015][T10602] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 479.593451][T10602] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 479.726638][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 479.766524][T10602] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 479.774054][T10602] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 479.858377][T10602] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 479.894780][T10602] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2621832761 [ 479.969120][T10602] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 480.188065][T10610] ubi31: background thread "ubi_bgt31d" started, PID 10610 [ 480.204392][T10620] input: syz0 as /devices/virtual/input/input24 [ 481.656062][ T977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 481.876517][T10652] input: syz1 as /devices/virtual/input/input25 [ 482.335950][ T977] usb 5-1: device descriptor read/64, error -71 [ 482.716206][ T977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 483.460483][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 483.476221][ T977] usb 5-1: device descriptor read/64, error -71 [ 483.529548][T10675] overlayfs: failed to clone upperpath [ 483.543142][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 483.555221][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'. [ 483.596446][ T977] usb usb5-port1: attempt power cycle [ 484.239073][ T5819] Bluetooth: hci3: Malformed Event: 0x13 [ 484.302188][ T30] audit: type=1326 audit(2000000611.998:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10688 comm="syz.4.1451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea8eb8e969 code=0x0 [ 485.161024][T10707] netlink: 1608 bytes leftover after parsing attributes in process `syz.2.1458'. [ 486.191242][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 486.257596][T10725] netlink: 'syz.4.1464': attribute type 2 has an invalid length. [ 486.324760][T10725] netlink: 784 bytes leftover after parsing attributes in process `syz.4.1464'. [ 496.898852][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 497.037718][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 497.228889][T10803] ceph: No mds server is up or the cluster is laggy [ 498.502039][T10828] CIFS mount error: No usable UNC path provided in device string! [ 498.502039][T10828] [ 498.512399][T10828] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 499.461300][T10839] input: syz1 as /devices/virtual/input/input26 [ 500.930483][T10847] input: syz0 as /devices/virtual/input/input27 [ 501.743735][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.750495][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.699233][T10872] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 503.048987][T10878] new mount options do not match the existing superblock, will be ignored [ 503.073710][T10878] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 504.380818][T10894] CIFS mount error: No usable UNC path provided in device string! [ 504.380818][T10894] [ 504.391001][T10894] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 504.590274][T10897] CIFS mount error: No usable UNC path provided in device string! [ 504.590274][T10897] [ 504.601436][T10897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 505.420021][T10908] input: syz1 as /devices/virtual/input/input28 [ 509.168216][T10921] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 509.177955][T10920] ceph: No mds server is up or the cluster is laggy [ 509.287318][ T59] libceph: connect (1)[c::]:6789 error -101 [ 509.293546][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 510.085725][ T59] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 510.753534][T10953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1515'. [ 510.766307][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 510.769020][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1515'. [ 510.798811][T10953] ip6gretap1: entered allmulticast mode [ 510.836653][ T59] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 510.869489][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.905995][ T59] usb 3-1: Product: syz [ 510.910216][ T59] usb 3-1: Manufacturer: syz [ 510.914830][ T59] usb 3-1: SerialNumber: syz [ 510.955665][ T59] usb 3-1: config 0 descriptor?? [ 510.983133][ T59] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 511.046219][ T59] usb 3-1: Detected FT232H [ 511.192852][ T59] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 511.768174][ T59] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 511.796805][T10964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'. [ 511.834812][ T59] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 511.893016][ T59] usb 3-1: USB disconnect, device number 15 [ 512.127058][ T59] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 512.149003][ T59] ftdi_sio 3-1:0.0: device disconnected [ 513.390881][T10977] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 513.592875][T10983] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1522'. [ 514.225482][T10992] fuse: Unknown parameter '0x0000000000000007' [ 515.328229][T11000] ubi: mtd0 is already attached to ubi31 [ 515.943582][ T47] IPVS: starting estimator thread 0... [ 516.035941][T11003] IPVS: using max 32 ests per chain, 76800 per kthread [ 520.446917][ T47] libceph: connect (1)[c::]:6789 error -101 [ 520.453186][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 520.586255][T11038] input: syz1 as /devices/virtual/input/input29 [ 520.641123][T11031] ceph: No mds server is up or the cluster is laggy [ 520.831208][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 521.071165][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 521.082562][ T5876] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 521.100358][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.330335][ T5876] usb 5-1: Product: syz [ 521.334657][ T5876] usb 5-1: Manufacturer: syz [ 521.340185][ T5876] usb 5-1: SerialNumber: syz [ 521.348015][ T5876] usb 5-1: config 0 descriptor?? [ 521.549721][ T5876] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 521.559781][ T5876] usb 5-1: Detected FT232H [ 521.566041][ T5876] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 521.586783][T11041] fuse: Unknown parameter '0x0000000000000005' [ 522.530051][T10757] IPVS: starting estimator thread 0... [ 522.626421][T11058] IPVS: using max 29 ests per chain, 69600 per kthread [ 522.718194][ T5876] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 522.729291][ T5876] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 522.740034][ T5876] usb 5-1: USB disconnect, device number 11 [ 522.749505][ T5876] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 522.759596][ T5876] ftdi_sio 5-1:0.0: device disconnected [ 524.785883][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 524.849683][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1545'. [ 525.348595][T11062] Illegal XDP return value 4294967274 on prog (id 302) dev N/A, expect packet loss! [ 525.368243][T11081] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 525.726107][ T977] libceph: connect (1)[c::]:6789 error -101 [ 525.733311][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 526.123552][T11088] ceph: No mds server is up or the cluster is laggy [ 526.131353][ T977] libceph: connect (1)[c::]:6789 error -101 [ 526.150435][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 527.520997][T11099] fuse: Unknown parameter '0x0000000000000007' [ 527.991394][T11112] ceph: No mds server is up or the cluster is laggy [ 528.172893][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 528.190617][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 529.487994][T10980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 530.030729][T10980] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 530.487129][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 530.510183][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 530.588690][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 530.597736][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 530.607660][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 530.627538][T11146] 9pnet_fd: Insufficient options for proto=fd [ 530.634511][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 530.647731][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 530.675053][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 530.702483][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 530.714187][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 530.781087][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 530.850285][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 530.883331][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.197075][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.209386][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 531.222896][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.362765][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.374229][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 531.399432][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.436108][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.473345][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 531.488593][T10980] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 531.699876][T11161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.725965][T10980] usb 3-1: config 0 interface 0 altsetting 187 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 531.747417][T10980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 531.767415][T10980] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 532.755270][T10980] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 532.972557][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 533.150023][T10980] usb 3-1: Product: syz [ 533.172084][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 533.295439][T11165] ceph: No mds server is up or the cluster is laggy [ 533.327724][T10980] usb 3-1: Manufacturer: syz [ 533.332377][T10980] usb 3-1: SerialNumber: syz [ 533.570028][T10980] usb 3-1: config 0 descriptor?? [ 533.596670][T10980] usb 3-1: can't set config #0, error -71 [ 533.655490][T10980] usb 3-1: USB disconnect, device number 16 [ 535.126364][T11191] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 535.513693][T11208] netlink: 'syz.2.1577': attribute type 2 has an invalid length. [ 536.438721][T11218] new mount options do not match the existing superblock, will be ignored [ 536.448928][T11218] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 539.748691][T11248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.219089][ T59] libceph: connect (1)[c::]:6789 error -101 [ 540.235600][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 540.447126][T11264] fuse: Unknown parameter 'fd0x0000000000000007' [ 540.882110][T11257] ceph: No mds server is up or the cluster is laggy [ 540.884316][ T59] libceph: connect (1)[c::]:6789 error -101 [ 541.021173][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 542.918974][T11296] ubi: mtd0 is already attached to ubi31 [ 543.509921][T11301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1594'. [ 545.373293][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'. [ 545.538380][T11320] fuse: Unknown parameter 'fd0x0000000000000005' [ 545.953784][T11327] batadv1: entered promiscuous mode [ 547.489933][T11343] ubi: mtd0 is already attached to ubi31 [ 548.480377][T11360] CIFS mount error: No usable UNC path provided in device string! [ 548.480377][T11360] [ 548.490477][T11360] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 548.726116][T11366] CIFS mount error: No usable UNC path provided in device string! [ 548.726116][T11366] [ 548.736809][T11366] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 550.404977][T11363] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 554.496157][T11412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.670966][T11416] ubi: mtd0 is already attached to ubi31 [ 556.345944][T11422] CIFS mount error: No usable UNC path provided in device string! [ 556.345944][T11422] [ 556.356105][T11422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 557.393658][T11427] ceph: No mds server is up or the cluster is laggy [ 557.406212][T10980] libceph: connect (1)[c::]:6789 error -101 [ 557.412300][T10980] libceph: mon0 (1)[c::]:6789 connect error [ 558.572824][T11445] CIFS mount error: No usable UNC path provided in device string! [ 558.572824][T11445] [ 558.582974][T11445] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.961067][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 560.970950][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 562.603758][T11490] CIFS mount error: No usable UNC path provided in device string! [ 562.603758][T11490] [ 562.613927][T11490] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 562.998155][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.006575][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.842612][ T5900] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 565.030221][ T5900] usb 3-1: config 0 has an invalid interface number: 30 but max is 0 [ 565.065908][ T5900] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 565.100754][ T5900] usb 3-1: config 0 has no interface number 0 [ 565.123658][ T5900] usb 3-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.154561][ T5900] usb 3-1: config 0 interface 30 has no altsetting 0 [ 565.175900][ T5900] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 565.214705][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.244325][ T5900] usb 3-1: config 0 descriptor?? [ 565.280118][ T5900] usb 3-1: unknown interface protocol 0x41, assuming v1 [ 565.289475][ T5900] usb 3-1: 30:2 : does not exist [ 565.295330][T11528] netlink: 4260 bytes leftover after parsing attributes in process `syz.1.1651'. [ 565.417734][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1651'. [ 565.478688][T11538] new mount options do not match the existing superblock, will be ignored [ 565.514754][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 565.789847][T11544] CIFS mount error: No usable UNC path provided in device string! [ 565.789847][T11544] [ 565.800463][T11544] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 567.428002][T11561] input: syz1 as /devices/virtual/input/input34 [ 567.819589][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 567.838857][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 567.848059][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 567.900558][ T47] usb 3-1: USB disconnect, device number 17 [ 569.165390][T11591] CIFS mount error: No usable UNC path provided in device string! [ 569.165390][T11591] [ 569.175684][T11591] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 569.586326][ T30] audit: type=1326 audit(2000000697.278:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 569.740151][ T30] audit: type=1326 audit(2000000697.278:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 569.836541][ T30] audit: type=1326 audit(2000000697.278:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 569.916685][ T30] audit: type=1326 audit(2000000697.288:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 569.938205][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.991051][ T30] audit: type=1326 audit(2000000697.288:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 570.084281][T11603] netlink: 'syz.0.1671': attribute type 1 has an invalid length. [ 570.087092][ T30] audit: type=1326 audit(2000000697.288:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 570.120050][ T30] audit: type=1326 audit(2000000697.288:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 570.143634][ T30] audit: type=1326 audit(2000000697.288:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 570.170145][ T30] audit: type=1326 audit(2000000697.288:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 570.253479][ T30] audit: type=1326 audit(2000000697.288:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11592 comm="syz.1.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 570.473184][T11611] new mount options do not match the existing superblock, will be ignored [ 570.599605][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 570.675738][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 570.799310][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1672'. [ 570.830628][T11616] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 572.435095][T11634] CIFS mount error: No usable UNC path provided in device string! [ 572.435095][T11634] [ 572.445279][T11634] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 574.857520][T11637] syz.2.1680: attempt to access beyond end of device [ 574.857520][T11637] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 574.871887][T11637] syz.2.1680: attempt to access beyond end of device [ 574.871887][T11637] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 574.896899][T11637] Mount JFS Failure: -5 [ 574.901072][T11637] jfs_mount failed w/return code = -5 [ 574.925990][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 574.926006][ T30] audit: type=1326 audit(2000000702.588:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.106065][ T30] audit: type=1326 audit(2000000702.598:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.128002][ T30] audit: type=1326 audit(2000000702.598:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.158594][ T30] audit: type=1326 audit(2000000702.598:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.183066][ T30] audit: type=1326 audit(2000000702.598:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.229014][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 575.461201][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 575.467029][ T30] audit: type=1326 audit(2000000702.608:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.492368][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'. [ 575.499188][ T30] audit: type=1326 audit(2000000702.608:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.662118][T11660] netlink: 'syz.3.1686': attribute type 10 has an invalid length. [ 575.737051][T11660] veth0_macvtap: left promiscuous mode [ 575.785669][ T30] audit: type=1326 audit(2000000702.608:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.791396][T11660] batman_adv: batadv0: Adding interface: macvtap0 [ 575.870320][ T30] audit: type=1326 audit(2000000702.608:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.896238][T11660] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.947025][ T30] audit: type=1326 audit(2000000702.608:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11648 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 575.975450][T11660] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 576.896077][ T47] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 576.959369][T11684] CIFS mount error: No usable UNC path provided in device string! [ 576.959369][T11684] [ 576.969586][T11684] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 577.643890][ T47] usb 5-1: config 48 has an invalid interface number: 4 but max is 0 [ 577.653779][ T47] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 577.671637][ T47] usb 5-1: config 48 has no interface number 0 [ 577.678324][ T47] usb 5-1: config 48 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 577.696048][ T47] usb 5-1: config 48 interface 4 has no altsetting 0 [ 577.707589][ T47] usb 5-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= b.d4 [ 577.718396][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.726837][ T47] usb 5-1: Product: syz [ 577.731124][ T47] usb 5-1: Manufacturer: syz [ 577.740767][ T47] usb 5-1: SerialNumber: syz [ 577.964149][T11676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1692'. [ 578.010120][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.064988][ T47] snd-usb-audio 5-1:48.4: probe with driver snd-usb-audio failed with error -2 [ 578.108367][ T47] usb 5-1: USB disconnect, device number 12 [ 578.149760][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:48.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.802588][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 578.829311][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 578.838931][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 580.827181][T11725] input: syz1 as /devices/virtual/input/input36 [ 581.017606][T10757] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 581.434904][T11726] ubi: mtd0 is already attached to ubi31 [ 581.488965][T10757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.543028][T10757] usb 3-1: config 0 has no interfaces? [ 581.687725][T10757] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 581.716464][T10757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.783953][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 581.802182][T10757] usb 3-1: Product: syz [ 581.909686][T10757] usb 3-1: Manufacturer: syz [ 581.914334][T10757] usb 3-1: SerialNumber: syz [ 582.011890][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 582.021553][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 582.046697][T10757] usb 3-1: config 0 descriptor?? [ 582.546893][T10757] usb 3-1: USB disconnect, device number 18 [ 582.643819][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 582.643837][ T30] audit: type=1326 audit(2000000710.338:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 582.759904][ T30] audit: type=1326 audit(2000000710.388:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 582.834273][ T30] audit: type=1326 audit(2000000710.388:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 582.946310][ T30] audit: type=1326 audit(2000000710.388:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 582.977541][ T30] audit: type=1326 audit(2000000710.388:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 583.022156][ T30] audit: type=1326 audit(2000000710.388:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 583.100821][ T30] audit: type=1326 audit(2000000710.388:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 583.128714][ T30] audit: type=1326 audit(2000000710.388:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 583.216285][ T30] audit: type=1326 audit(2000000710.388:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 583.264699][ T30] audit: type=1326 audit(2000000710.388:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11736 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 583.446840][T11753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 583.926203][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 584.611129][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 584.620385][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1724'. [ 585.110029][T11780] CIFS mount error: No usable UNC path provided in device string! [ 585.110029][T11780] [ 585.120205][T11780] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 585.954148][T11785] CIFS mount error: No usable UNC path provided in device string! [ 585.954148][T11785] [ 585.964309][T11785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 587.326581][T11804] netlink: 'syz.2.1738': attribute type 72 has an invalid length. [ 587.938751][T10980] libceph: connect (1)[c::]:6789 error -1 [ 587.945728][T10980] libceph: mon0 (1)[c::]:6789 connect error [ 588.315695][T11816] ceph: No mds server is up or the cluster is laggy [ 588.416682][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 588.740152][T11822] capability: warning: `syz.1.1742' uses 32-bit capabilities (legacy support in use) [ 588.878876][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 588.888052][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1741'. [ 589.006022][T10980] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 589.044400][T11830] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.1744'. [ 589.662655][T10980] usb 3-1: not running at top speed; connect to a high speed hub [ 589.776295][T10980] usb 3-1: config 255 has an invalid interface number: 15 but max is 1 [ 589.784589][T10980] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 589.861887][T10980] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 589.911988][T11836] overlayfs: failed to clone upperpath [ 589.928323][T10980] usb 3-1: config 255 has no interface number 0 [ 589.939851][T11836] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.1746'. [ 589.955013][T10980] usb 3-1: config 255 interface 15 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 590.027404][T10980] usb 3-1: config 255 interface 15 has no altsetting 0 [ 590.049428][T10980] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a3e, bcdDevice=39.5e [ 590.062113][T10980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.073084][T10980] usb 3-1: Product: ጠ[ 590.080561][T10980] usb 3-1: Manufacturer: 給뛃莿䭖ä±íŠ‡éŽŒï¬·î˜šé“éŸï™˜à°»èŠŒî¡¹å„Šîˆ¢ç…½åšì¦—騔帎豃蕲뫾톥苖Ἵ샷㒠餔亴ﮈ綽缾æ©ì‹®ì¨§î¼î‚„૩ɫ惥ç°å¢ä»€è‰ƒâ® î‹¾è–ƒá–˜ì™¶è”±ã«­é„Ÿæ—¬é—œä¾¯â•¾é”®â‹»é—谧➚è©à¼±á¢ºâ¶¶ã¢Žæ´£á€­á¥žï°³æ¢Ÿë ƒë¡–먽 [ 590.122293][T10980] usb 3-1: SerialNumber: syz [ 590.312000][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 590.312017][ T30] audit: type=1326 audit(2000000718.008:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 590.346455][T10757] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 590.353222][ T30] audit: type=1326 audit(2000000718.008:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 590.504092][T10980] usb 3-1: USB disconnect, device number 19 [ 590.534401][ T30] audit: type=1326 audit(2000000718.048:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 590.610846][T10757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.613208][ T30] audit: type=1326 audit(2000000718.048:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 590.644995][ T30] audit: type=1326 audit(2000000718.048:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 590.780380][T10757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.807144][T10757] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 590.841635][ T30] audit: type=1326 audit(2000000718.048:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 590.845906][T10757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 591.384852][ T30] audit: type=1326 audit(2000000718.048:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 591.431092][ T30] audit: type=1326 audit(2000000718.048:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 591.563518][T10757] usb 5-1: SerialNumber: syz [ 591.569963][ T30] audit: type=1326 audit(2000000718.048:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 591.593579][ T30] audit: type=1326 audit(2000000718.048:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11845 comm="syz.0.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 591.866539][T11859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.878467][T11860] netlink: 'syz.2.1753': attribute type 72 has an invalid length. [ 591.943902][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 591.989281][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 591.998503][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 592.418131][T11841] misc userio: Invalid payload size [ 592.442301][T10757] usb 5-1: 0:2 : does not exist [ 592.488824][T10757] usb 5-1: USB disconnect, device number 13 [ 592.593490][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.767218][T11866] CIFS mount error: No usable UNC path provided in device string! [ 592.767218][T11866] [ 592.777303][T11866] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 593.643156][T11854] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1751'. [ 593.929247][T11880] FAULT_INJECTION: forcing a failure. [ 593.929247][T11880] name failslab, interval 1, probability 0, space 0, times 0 [ 593.942214][T11880] CPU: 1 UID: 0 PID: 11880 Comm: syz.0.1759 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 593.942241][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 593.942254][T11880] Call Trace: [ 593.942262][T11880] [ 593.942270][T11880] dump_stack_lvl+0x189/0x250 [ 593.942306][T11880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.942332][T11880] ? __pfx__printk+0x10/0x10 [ 593.942363][T11880] ? fs_reclaim_acquire+0x7d/0x100 [ 593.942397][T11880] should_fail_ex+0x414/0x560 [ 593.942423][T11880] should_failslab+0xa8/0x100 [ 593.942444][T11880] kmem_cache_alloc_noprof+0x73/0x3c0 [ 593.942472][T11880] ? skb_clone+0x212/0x3a0 [ 593.942504][T11880] skb_clone+0x212/0x3a0 [ 593.942535][T11880] pfkey_sendmsg+0x44b/0x1090 [ 593.942572][T11880] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 593.942619][T11880] ? trace_irq_disable+0x37/0x110 [ 593.942645][T11880] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.942666][T11880] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 593.942686][T11880] __sock_sendmsg+0x21c/0x270 [ 593.942709][T11880] ____sys_sendmsg+0x505/0x830 [ 593.942741][T11880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.942777][T11880] ? import_iovec+0x74/0xa0 [ 593.942808][T11880] ___sys_sendmsg+0x21f/0x2a0 [ 593.942836][T11880] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.942903][T11880] ? __fget_files+0x2a/0x420 [ 593.942926][T11880] ? __fget_files+0x3a0/0x420 [ 593.942957][T11880] __x64_sys_sendmsg+0x19b/0x260 [ 593.942986][T11880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.943030][T11880] ? do_syscall_64+0xba/0x210 [ 593.943060][T11880] do_syscall_64+0xf6/0x210 [ 593.943084][T11880] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 593.943102][T11880] ? clear_bhb_loop+0x60/0xb0 [ 593.943126][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.943144][T11880] RIP: 0033:0x7fd52438e969 [ 593.943162][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.943179][T11880] RSP: 002b:00007fd52526a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.943201][T11880] RAX: ffffffffffffffda RBX: 00007fd5245b6160 RCX: 00007fd52438e969 [ 593.943215][T11880] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 593.943228][T11880] RBP: 00007fd52526a090 R08: 0000000000000000 R09: 0000000000000000 [ 593.943240][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.943251][T11880] R13: 0000000000000000 R14: 00007fd5245b6160 R15: 00007ffc56d9cd78 [ 593.943284][T11880] [ 594.191566][ C1] vkms_vblank_simulate: vblank timer overrun [ 594.741827][T11891] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1766'. [ 595.406073][T11901] CIFS mount error: No usable UNC path provided in device string! [ 595.406073][T11901] [ 595.416221][T11901] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 596.143900][T11910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.746103][T11920] FAULT_INJECTION: forcing a failure. [ 596.746103][T11920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.760024][T11920] CPU: 1 UID: 0 PID: 11920 Comm: syz.1.1772 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 596.760048][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.760060][T11920] Call Trace: [ 596.760068][T11920] [ 596.760076][T11920] dump_stack_lvl+0x189/0x250 [ 596.760105][T11920] ? __lock_acquire+0xaac/0xd20 [ 596.760134][T11920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.760159][T11920] ? __pfx__printk+0x10/0x10 [ 596.760189][T11920] ? __might_fault+0xb0/0x130 [ 596.760229][T11920] should_fail_ex+0x414/0x560 [ 596.760254][T11920] _copy_from_user+0x2d/0xb0 [ 596.760282][T11920] do_fcntl+0x9a4/0x1910 [ 596.760308][T11920] ? smack_file_fcntl+0x137/0x2f0 [ 596.760328][T11920] ? __pfx_do_fcntl+0x10/0x10 [ 596.760350][T11920] ? __pfx_smack_file_fcntl+0x10/0x10 [ 596.760382][T11920] ? tomoyo_file_fcntl+0x78/0x210 [ 596.760413][T11920] ? bpf_lsm_file_fcntl+0x9/0x20 [ 596.760441][T11920] __se_sys_fcntl+0xc8/0x150 [ 596.760465][T11920] do_syscall_64+0xf6/0x210 [ 596.760490][T11920] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 596.760509][T11920] ? clear_bhb_loop+0x60/0xb0 [ 596.760533][T11920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.760552][T11920] RIP: 0033:0x7f0f2d98e969 [ 596.760569][T11920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.760586][T11920] RSP: 002b:00007f0f2e799038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 596.760605][T11920] RAX: ffffffffffffffda RBX: 00007f0f2dbb6160 RCX: 00007f0f2d98e969 [ 596.760620][T11920] RDX: 00002000000007c0 RSI: 0000000000000005 RDI: 0000000000000009 [ 596.760641][T11920] RBP: 00007f0f2e799090 R08: 0000000000000000 R09: 0000000000000000 [ 596.760653][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.760664][T11920] R13: 0000000000000000 R14: 00007f0f2dbb6160 R15: 00007ffd4a93e478 [ 596.760696][T11920] [ 597.504550][T11907] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1769'. [ 597.690112][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'. [ 597.848193][T11936] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1778'. [ 597.937978][T11924] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1774'. [ 598.506106][T11947] CIFS mount error: No usable UNC path provided in device string! [ 598.506106][T11947] [ 598.516352][T11947] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 598.928589][T11943] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1781'. [ 599.421464][T11955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.651115][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 599.651133][ T30] audit: type=1326 audit(2000000727.348:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 599.729245][ T30] audit: type=1326 audit(2000000727.428:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 599.760898][ T30] audit: type=1326 audit(2000000727.428:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 599.879890][T11965] input: syz1 as /devices/virtual/input/input38 [ 600.417508][ T30] audit: type=1326 audit(2000000727.428:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 600.454668][ T30] audit: type=1326 audit(2000000727.458:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 600.547560][ T30] audit: type=1326 audit(2000000727.458:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 600.601485][T10757] hid-generic 0000:0003:0000.0002: item fetching failed at offset 0/2 [ 600.627756][ T30] audit: type=1326 audit(2000000727.458:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 600.762196][T10757] hid-generic 0000:0003:0000.0002: probe with driver hid-generic failed with error -22 [ 600.773109][ T30] audit: type=1326 audit(2000000727.458:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 600.795724][ T30] audit: type=1326 audit(2000000727.788:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 600.839049][ T30] audit: type=1326 audit(2000000727.788:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11959 comm="syz.2.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 601.087004][T11978] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1792'. [ 601.698094][T11991] CIFS mount error: No usable UNC path provided in device string! [ 601.698094][T11991] [ 601.708251][T11991] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 603.435096][T12007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.192654][T12019] CIFS mount error: No usable UNC path provided in device string! [ 604.192654][T12019] [ 604.203269][T12019] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 604.784178][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 604.784227][ T30] audit: type=1800 audit(2000000732.478:364): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1807" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 605.256363][ T977] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 605.530591][T12041] ubi: mtd0 is already attached to ubi31 [ 606.786194][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 606.793892][ T977] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 606.811299][ T977] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 606.831281][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 606.850605][ T977] usb 3-1: config 1 has no interface number 0 [ 606.885964][ T977] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.932937][ T977] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 606.987477][ T977] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 607.054453][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.417588][T12059] new mount options do not match the existing superblock, will be ignored [ 607.436297][T12059] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 607.482223][ T977] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 607.808107][ T977] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 608.708440][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.026808][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.060340][ T977] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 609.503893][ T30] audit: type=1800 audit(2000000737.198:365): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1821" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 609.523641][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.652533][ T977] usb 3-1: USB disconnect, device number 20 [ 609.660791][ T977] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 611.542221][T12100] new mount options do not match the existing superblock, will be ignored [ 611.561515][T12100] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 613.028121][T12121] new mount options do not match the existing superblock, will be ignored [ 613.038526][T12121] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 613.851622][T12095] netlink: 'syz.2.1826': attribute type 72 has an invalid length. [ 614.707227][T12139] ipt_REJECT: TCP_RESET invalid for non-tcp [ 614.968341][T12148] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1843'. [ 615.237990][T12160] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 615.290665][T12158] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 617.395771][T12172] netlink: 'syz.4.1852': attribute type 72 has an invalid length. [ 617.407542][T12192] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1857'. [ 617.588825][T12197] FAULT_INJECTION: forcing a failure. [ 617.588825][T12197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.602976][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.4.1859 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 617.602996][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 617.603003][T12197] Call Trace: [ 617.603008][T12197] [ 617.603013][T12197] dump_stack_lvl+0x189/0x250 [ 617.603032][T12197] ? __lock_acquire+0xaac/0xd20 [ 617.603048][T12197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.603062][T12197] ? __pfx__printk+0x10/0x10 [ 617.603077][T12197] ? __might_fault+0xb0/0x130 [ 617.603100][T12197] should_fail_ex+0x414/0x560 [ 617.603113][T12197] _copy_from_user+0x2d/0xb0 [ 617.603134][T12197] get_timespec64+0x8e/0x1a0 [ 617.603147][T12197] ? __pfx_get_timespec64+0x10/0x10 [ 617.603165][T12197] __se_sys_clock_nanosleep+0x1af/0x380 [ 617.603180][T12197] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 617.603196][T12197] ? do_syscall_64+0xba/0x210 [ 617.603212][T12197] do_syscall_64+0xf6/0x210 [ 617.603225][T12197] ? clear_bhb_loop+0x60/0xb0 [ 617.603238][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.603248][T12197] RIP: 0033:0x7fea8eb8e969 [ 617.603258][T12197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.603267][T12197] RSP: 002b:00007fea8faac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 617.603278][T12197] RAX: ffffffffffffffda RBX: 00007fea8edb5fa0 RCX: 00007fea8eb8e969 [ 617.603286][T12197] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000002 [ 617.603292][T12197] RBP: 00007fea8faac090 R08: 0000000000000000 R09: 0000000000000000 [ 617.603299][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.603304][T12197] R13: 0000000000000000 R14: 00007fea8edb5fa0 R15: 00007ffff094b858 [ 617.603320][T12197] [ 624.075129][T12240] ubi: mtd0 is already attached to ubi31 [ 624.456554][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.462902][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.944269][T12252] input: syz1 as /devices/virtual/input/input39 [ 625.247431][ T5831] udevd[5831]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 625.286614][T12242] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1869'. [ 625.538175][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 626.690518][T12271] ceph: No mds server is up or the cluster is laggy [ 626.697500][ T59] libceph: connect (1)[c::]:6789 error -101 [ 626.716979][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 627.274440][T12291] afs: Unknown parameter 'dynY_APPEND' [ 627.521796][T11724] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 627.596876][T12300] overlayfs: failed to resolve '/ïî': -2 [ 627.620702][T12300] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 627.658157][T12300] evm: overlay not supported [ 627.798690][T11724] usb 3-1: Using ep0 maxpacket: 8 [ 627.809643][T11724] usb 3-1: config 0 has no interfaces? [ 627.821314][T11724] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.835149][T11724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.852757][T11724] usb 3-1: Product: syz [ 627.859212][T12306] CIFS mount error: No usable UNC path provided in device string! [ 627.859212][T12306] [ 627.869420][T12306] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 627.919695][T11724] usb 3-1: Manufacturer: syz [ 627.987794][T11724] usb 3-1: SerialNumber: syz [ 627.999036][T11724] usb 3-1: config 0 descriptor?? [ 628.210024][ T30] audit: type=1326 audit(2000000755.908:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 628.233259][T11724] usb 3-1: USB disconnect, device number 21 [ 628.262763][ T30] audit: type=1326 audit(2000000755.908:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 628.396820][ T30] audit: type=1326 audit(2000000755.938:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 628.419579][ T30] audit: type=1326 audit(2000000755.938:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 628.442017][ T30] audit: type=1326 audit(2000000755.938:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 628.478870][ T30] audit: type=1326 audit(2000000755.938:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 628.511475][ T30] audit: type=1326 audit(2000000755.938:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 628.538189][ T30] audit: type=1326 audit(2000000755.938:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 629.155333][T12320] batadv1: entered promiscuous mode [ 629.643940][ T30] audit: type=1326 audit(2000000755.938:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 629.761110][ T30] audit: type=1326 audit(2000000755.938:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12311 comm="syz.1.1890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 630.325984][ T5839] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 630.334879][T12344] overlayfs: failed to clone upperpath [ 630.396788][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 630.639303][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.662595][ T5839] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 630.672779][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.681935][ T5839] usb 3-1: Product: syz [ 630.687858][T12352] input: syz1 as /devices/virtual/input/input40 [ 630.696645][ T5839] usb 3-1: Manufacturer: syz [ 630.707492][ T5839] usb 3-1: SerialNumber: syz [ 630.719594][ T5839] usb 3-1: config 0 descriptor?? [ 630.739299][ T5839] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 630.755656][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 630.785188][ T5839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 630.796065][ T5839] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 630.808728][ T5839] usb 3-1: media controller created [ 630.817295][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.838460][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 630.845609][ T5839] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 630.861135][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 630.879528][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 630.886717][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 630.908566][ T5839] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 631.048144][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 631.064869][ T5839] dvb-usb: error while querying for an remote control event. [ 631.079705][T12356] dvb-usb: bulk message failed: -22 (2/0) [ 631.260508][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 631.270501][ T5839] dvb-usb: error while querying for an remote control event. [ 631.398463][T12360] CIFS mount error: No usable UNC path provided in device string! [ 631.398463][T12360] [ 631.409460][T12360] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 631.524924][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 631.536696][ T5839] dvb-usb: error while querying for an remote control event. [ 631.696634][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 631.860304][ T5839] dvb-usb: error while querying for an remote control event. [ 632.050484][T12376] lo speed is unknown, defaulting to 1000 [ 632.056979][T12376] lo speed is unknown, defaulting to 1000 [ 632.070993][T12376] lo speed is unknown, defaulting to 1000 [ 632.107213][T12376] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 632.175763][T12376] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 632.358621][T12376] lo speed is unknown, defaulting to 1000 [ 632.377577][T12376] lo speed is unknown, defaulting to 1000 [ 632.396544][T12376] lo speed is unknown, defaulting to 1000 [ 632.415330][T12376] lo speed is unknown, defaulting to 1000 [ 632.433677][T12376] lo speed is unknown, defaulting to 1000 [ 632.547812][T12378] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 632.588876][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 632.594667][ T5839] dvb-usb: error while querying for an remote control event. [ 632.839744][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 632.845571][ T5839] dvb-usb: error while querying for an remote control event. [ 633.016046][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 633.034012][ T5839] dvb-usb: error while querying for an remote control event. [ 633.085284][ T5839] usb 3-1: USB disconnect, device number 22 [ 633.169326][ T5839] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 633.456399][T10980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 633.672167][T10980] usb 5-1: config 0 has an invalid interface number: 30 but max is 0 [ 634.202084][T10980] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 634.218877][T10980] usb 5-1: config 0 has no interface number 0 [ 634.225019][T10980] usb 5-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.239565][T10980] usb 5-1: config 0 interface 30 has no altsetting 0 [ 634.246359][T10980] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 634.255381][T10980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.264906][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 634.300461][T10980] usb 5-1: config 0 descriptor?? [ 634.309651][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 634.318692][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 634.369877][T10980] usb 5-1: unknown interface protocol 0x41, assuming v1 [ 634.406842][T10980] usb 5-1: 30:2 : does not exist [ 634.612531][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 634.919419][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 634.920094][ T30] audit: type=1800 audit(2000000762.618:388): pid=12417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1925" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 [ 635.291029][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 635.303467][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 635.315392][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 635.918437][ T5839] usb 5-1: USB disconnect, device number 14 [ 636.270850][ T30] audit: type=1326 audit(2000000763.968:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.294269][ T30] audit: type=1326 audit(2000000763.968:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.325053][ T30] audit: type=1326 audit(2000000763.968:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.348487][ T30] audit: type=1326 audit(2000000763.968:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.370547][ T30] audit: type=1326 audit(2000000763.968:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.402054][ T30] audit: type=1326 audit(2000000763.968:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.424152][ T30] audit: type=1326 audit(2000000763.968:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.468502][ T30] audit: type=1326 audit(2000000763.968:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 636.755168][ T30] audit: type=1326 audit(2000000763.968:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0033f8e969 code=0x7ffc0000 [ 637.474706][T12456] CIFS mount error: No usable UNC path provided in device string! [ 637.474706][T12456] [ 637.484993][T12456] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 638.700390][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 639.005063][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 639.011144][T12464] ceph: No mds server is up or the cluster is laggy [ 641.847603][T12481] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 642.463720][T12505] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.1953'. [ 643.588172][T12521] netlink: 'syz.2.1955': attribute type 97 has an invalid length. [ 646.276214][T12538] FAULT_INJECTION: forcing a failure. [ 646.276214][T12538] name failslab, interval 1, probability 0, space 0, times 0 [ 646.298342][T12538] CPU: 0 UID: 0 PID: 12538 Comm: syz.0.1961 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 646.298372][T12538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.298384][T12538] Call Trace: [ 646.298392][T12538] [ 646.298401][T12538] dump_stack_lvl+0x189/0x250 [ 646.298437][T12538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.298464][T12538] ? __pfx__printk+0x10/0x10 [ 646.298498][T12538] ? __pfx___might_resched+0x10/0x10 [ 646.298524][T12538] ? fs_reclaim_acquire+0x7d/0x100 [ 646.298548][T12538] should_fail_ex+0x414/0x560 [ 646.298574][T12538] should_failslab+0xa8/0x100 [ 646.298593][T12538] kmem_cache_alloc_noprof+0x73/0x3c0 [ 646.298620][T12538] ? fuse_get_req+0x7b9/0x10b0 [ 646.298642][T12538] fuse_get_req+0x7b9/0x10b0 [ 646.298659][T12538] ? stack_depot_save_flags+0x42b/0x910 [ 646.298692][T12538] ? __pfx_fuse_get_req+0x10/0x10 [ 646.298707][T12538] ? fuse_lookup_name+0x1b5/0x860 [ 646.298730][T12538] ? __pfx_autoremove_wake_function+0x10/0x10 [ 646.298753][T12538] ? do_syscall_64+0xf6/0x210 [ 646.298774][T12538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.298804][T12538] __fuse_simple_request+0x2aa/0x18d0 [ 646.298833][T12538] ? __pfx___fuse_simple_request+0x10/0x10 [ 646.298867][T12538] ? __kasan_kmalloc+0x93/0xb0 [ 646.298889][T12538] fuse_lookup_name+0x34c/0x860 [ 646.298910][T12538] ? __pfx_fuse_lookup_name+0x10/0x10 [ 646.298920][T12538] ? lockdep_unlock+0x89/0x120 [ 646.298933][T12538] ? validate_chain+0x897/0x2140 [ 646.298947][T12538] ? fuse_lock_inode+0xd3/0x120 [ 646.298978][T12538] fuse_lookup+0x13e/0x5a0 [ 646.298993][T12538] ? __pfx_fuse_lookup+0x10/0x10 [ 646.299016][T12538] ? _raw_spin_unlock+0x28/0x50 [ 646.299034][T12538] ? d_alloc+0x144/0x190 [ 646.299048][T12538] lookup_one_qstr_excl_raw+0x115/0x280 [ 646.299062][T12538] filename_create+0x225/0x470 [ 646.299079][T12538] ? __pfx_filename_create+0x10/0x10 [ 646.299100][T12538] do_mknodat+0x184/0x4d0 [ 646.299115][T12538] ? __pfx_do_mknodat+0x10/0x10 [ 646.299128][T12538] ? getname_flags+0x1e5/0x540 [ 646.299141][T12538] __x64_sys_mknod+0x8c/0xa0 [ 646.299155][T12538] do_syscall_64+0xf6/0x210 [ 646.299168][T12538] ? clear_bhb_loop+0x60/0xb0 [ 646.299185][T12538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.299195][T12538] RIP: 0033:0x7fd52438e969 [ 646.299205][T12538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.299215][T12538] RSP: 002b:00007fd5252ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 646.299228][T12538] RAX: ffffffffffffffda RBX: 00007fd5245b5fa0 RCX: 00007fd52438e969 [ 646.299235][T12538] RDX: 0000000000000700 RSI: 0000000000000040 RDI: 00002000000002c0 [ 646.299242][T12538] RBP: 00007fd5252ac090 R08: 0000000000000000 R09: 0000000000000000 [ 646.299248][T12538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.299254][T12538] R13: 0000000000000000 R14: 00007fd5245b5fa0 R15: 00007ffc56d9cd78 [ 646.299272][T12538] [ 646.963857][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 646.972137][ T30] audit: type=1800 audit(2000000774.658:401): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1965" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [ 647.082345][T12549] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1964'. [ 647.140309][ T30] audit: type=1800 audit(2000000774.808:402): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1963" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 647.921681][T12559] overlayfs: failed to resolve './file0': -2 [ 648.991198][T12575] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1974'. [ 649.245468][ T30] audit: type=1326 audit(2000000776.938:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 649.663638][ T30] audit: type=1326 audit(2000000776.938:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 649.800464][ T30] audit: type=1326 audit(2000000776.938:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 649.846592][ T30] audit: type=1326 audit(2000000776.938:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 649.869541][ T30] audit: type=1326 audit(2000000776.938:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 649.891471][ T30] audit: type=1326 audit(2000000776.938:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 649.913012][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.984447][ T30] audit: type=1326 audit(2000000776.938:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 650.057264][ T30] audit: type=1326 audit(2000000776.938:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12578 comm="syz.1.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2d98e969 code=0x7ffc0000 [ 650.215165][T12585] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1978'. [ 654.602822][T12615] new mount options do not match the existing superblock, will be ignored [ 654.623059][T12615] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 654.733437][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 654.733449][ T30] audit: type=1800 audit(2000000782.428:440): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1981" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 655.851786][ T30] audit: type=1326 audit(2000000783.548:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 655.892749][ T30] audit: type=1326 audit(2000000783.578:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 655.927202][ T30] audit: type=1326 audit(2000000783.578:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 655.953941][ T30] audit: type=1326 audit(2000000783.578:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 656.025580][ T30] audit: type=1326 audit(2000000783.578:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 656.108794][ T30] audit: type=1326 audit(2000000783.578:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 656.164112][ T30] audit: type=1326 audit(2000000783.578:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 656.199659][ T30] audit: type=1326 audit(2000000783.578:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 656.222178][T10980] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 656.236581][ T30] audit: type=1326 audit(2000000783.578:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12626 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52438e969 code=0x7ffc0000 [ 656.444122][T10980] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 657.028408][T10980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.044823][T10980] usb 5-1: Product: syz [ 657.049314][T10980] usb 5-1: Manufacturer: syz [ 657.053926][T10980] usb 5-1: SerialNumber: syz [ 657.082059][T10980] usb 5-1: config 0 descriptor?? [ 657.122788][T10980] pwc: Logitech/Cisco VT Camera webcam detected. [ 657.297858][T12652] netlink: 'syz.3.1996': attribute type 72 has an invalid length. [ 657.497510][T10980] pwc: Failed to set LED on/off time (-71) [ 657.507229][T10980] pwc: send_video_command error -71 [ 657.512508][T10980] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 657.520169][T10980] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 657.536140][T10980] usb 5-1: USB disconnect, device number 15 [ 658.801287][T12675] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2001'. [ 659.608296][T12683] netlink: 'syz.3.2009': attribute type 72 has an invalid length. [ 660.097228][T12695] lo speed is unknown, defaulting to 1000 [ 661.670931][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 661.670950][ T30] audit: type=1326 audit(2000000789.368:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 661.774564][ T30] audit: type=1326 audit(2000000789.398:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 661.809612][ T30] audit: type=1326 audit(2000000789.408:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 661.863341][T12710] new mount options do not match the existing superblock, will be ignored [ 661.873822][T12710] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 661.926341][ T30] audit: type=1326 audit(2000000789.408:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 661.951199][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 661.965970][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 661.972307][ T30] audit: type=1326 audit(2000000789.408:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 661.996678][ T30] audit: type=1326 audit(2000000789.408:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 662.035290][ T30] audit: type=1326 audit(2000000789.408:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 662.084144][ T30] audit: type=1326 audit(2000000789.418:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 662.144274][T12709] ceph: No mds server is up or the cluster is laggy [ 662.191259][ T30] audit: type=1326 audit(2000000789.418:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 662.288932][ T30] audit: type=1326 audit(2000000789.418:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12705 comm="syz.3.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 663.060064][T12734] netlink: 'syz.0.2022': attribute type 72 has an invalid length. [ 663.601445][ T5825] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 663.966588][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 664.004426][ T5825] usb 3-1: config 5 has an invalid interface number: 35 but max is 1 [ 664.012831][ T5825] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 664.045323][ T5825] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 664.060958][ T5825] usb 3-1: config 5 has no interface number 0 [ 664.067162][ T5825] usb 3-1: config 5 has no interface number 1 [ 664.216535][ T5825] usb 3-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 664.329186][ T5825] usb 3-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 664.452921][ T5825] usb 3-1: config 5 interface 35 has no altsetting 0 [ 664.512615][ T5825] usb 3-1: config 5 interface 4 has no altsetting 0 [ 664.572119][ T5825] usb 3-1: config 5 interface 4 has no altsetting 1 [ 665.806166][ T5825] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 665.815275][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.843363][ T5825] usb 3-1: Product: syz [ 665.850046][ T5825] usb 3-1: Manufacturer: syz [ 665.854683][ T5825] usb 3-1: SerialNumber: syz [ 666.092644][T12766] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2034'. [ 666.707806][ T5825] ttusbir 3-1:5.35: cannot find expected altsetting [ 666.722881][ T5825] ttusbir 3-1:5.4: cannot find expected altsetting [ 666.859450][ T5825] usb 3-1: USB disconnect, device number 23 [ 667.425415][T12779] fuse: Unknown parameter 'QO V¢òÿ' [ 667.807589][T12791] FAULT_INJECTION: forcing a failure. [ 667.807589][T12791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.828664][T12791] CPU: 0 UID: 0 PID: 12791 Comm: syz.4.2043 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 667.828693][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 667.828706][T12791] Call Trace: [ 667.828714][T12791] [ 667.828722][T12791] dump_stack_lvl+0x189/0x250 [ 667.828751][T12791] ? __lock_acquire+0xaac/0xd20 [ 667.828780][T12791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.828820][T12791] ? __pfx__printk+0x10/0x10 [ 667.828855][T12791] ? __might_fault+0xb0/0x130 [ 667.828896][T12791] should_fail_ex+0x414/0x560 [ 667.828922][T12791] _copy_from_user+0x2d/0xb0 [ 667.828950][T12791] ucma_write+0x158/0x2e0 [ 667.828977][T12791] ? __pfx_ucma_write+0x10/0x10 [ 667.828999][T12791] ? security_file_permission+0x75/0x290 [ 667.829024][T12791] ? rw_verify_area+0x258/0x650 [ 667.829050][T12791] ? __pfx_ucma_write+0x10/0x10 [ 667.829075][T12791] vfs_write+0x27b/0xa90 [ 667.829110][T12791] ? __pfx_vfs_write+0x10/0x10 [ 667.829138][T12791] ? __fget_files+0x2a/0x420 [ 667.829159][T12791] ? __fget_files+0x2a/0x420 [ 667.829176][T12791] ? __fget_files+0x3a0/0x420 [ 667.829192][T12791] ? __fget_files+0x2a/0x420 [ 667.829220][T12791] ksys_write+0x145/0x250 [ 667.829245][T12791] ? rcu_is_watching+0x15/0xb0 [ 667.829274][T12791] ? __pfx_ksys_write+0x10/0x10 [ 667.829303][T12791] ? do_syscall_64+0xba/0x210 [ 667.829330][T12791] do_syscall_64+0xf6/0x210 [ 667.829354][T12791] ? clear_bhb_loop+0x60/0xb0 [ 667.829378][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.829396][T12791] RIP: 0033:0x7fea8eb8e969 [ 667.829413][T12791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.829430][T12791] RSP: 002b:00007fea8faac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 667.829450][T12791] RAX: ffffffffffffffda RBX: 00007fea8edb5fa0 RCX: 00007fea8eb8e969 [ 667.829465][T12791] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000003 [ 667.829477][T12791] RBP: 00007fea8faac090 R08: 0000000000000000 R09: 0000000000000000 [ 667.829490][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.829501][T12791] R13: 0000000000000000 R14: 00007fea8edb5fa0 R15: 00007ffff094b858 [ 667.829537][T12791] [ 668.351881][ T5839] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 668.488862][T12805] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2048'. [ 668.491248][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 668.491266][ T30] audit: type=1326 audit(2000000796.188:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 668.514370][ T5839] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 668.541411][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.561478][ T5839] usb 3-1: config 0 descriptor?? [ 668.586826][ T5839] cp210x 3-1:0.0: cp210x converter detected [ 668.607337][ T30] audit: type=1326 audit(2000000796.188:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 668.709107][ T30] audit: type=1326 audit(2000000796.238:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 668.783658][ T30] audit: type=1326 audit(2000000796.238:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 668.861475][ T30] audit: type=1326 audit(2000000796.238:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 669.049185][ T5839] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 669.066280][ T30] audit: type=1326 audit(2000000796.238:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 669.104852][ T5839] cp210x 3-1:0.0: querying part number failed [ 669.127006][ T5839] usb 3-1: cp210x converter now attached to ttyUSB0 [ 669.146511][ T5839] usb 3-1: USB disconnect, device number 24 [ 669.217181][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 669.389969][ T30] audit: type=1326 audit(2000000796.238:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 669.412921][ T5839] cp210x 3-1:0.0: device disconnected [ 669.478697][T12826] overlayfs: failed to resolve './file1/file0': -2 [ 669.927693][T12828] ceph: No mds server is up or the cluster is laggy [ 669.932364][ T30] audit: type=1326 audit(2000000796.238:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 669.945965][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 669.974650][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 669.994923][ T30] audit: type=1326 audit(2000000796.238:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 670.017609][ T30] audit: type=1326 audit(2000000796.238:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12804 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead0f8e969 code=0x7ffc0000 [ 670.756805][T12840] batadv1: entered promiscuous mode [ 671.529109][T12847] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2061'. [ 671.986478][ T5825] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 672.098206][T12864] lo speed is unknown, defaulting to 1000 [ 672.914673][ T5825] usb 3-1: device descriptor read/64, error -71 [ 673.097334][T12869] netlink: 'syz.0.2070': attribute type 10 has an invalid length. [ 673.198579][T12869] veth0_macvtap: left promiscuous mode [ 673.225910][ T5825] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 673.622035][ T5825] usb 3-1: device descriptor read/64, error -71 [ 673.633598][T12869] batman_adv: batadv0: Adding interface: macvtap0 [ 673.656461][T12869] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.689204][T12869] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 673.746620][ T5825] usb usb3-port1: attempt power cycle [ 673.934228][T12877] lo speed is unknown, defaulting to 1000 [ 674.367349][ T5825] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 674.914850][T12887] CIFS mount error: No usable UNC path provided in device string! [ 674.914850][T12887] [ 674.925025][T12887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 675.114849][T12885] batadv2: entered promiscuous mode [ 675.435965][ T5825] usb 3-1: device not accepting address 27, error -71 [ 675.893761][T12899] FAULT_INJECTION: forcing a failure. [ 675.893761][T12899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.895208][T12899] [ 675.895218][T12899] ====================================================== [ 675.895226][T12899] WARNING: possible circular locking dependency detected [ 675.895240][T12899] 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 Not tainted [ 675.895251][T12899] ------------------------------------------------------ [ 675.895259][T12899] syz.2.2078/12899 is trying to acquire lock: [ 675.895270][T12899] ffffffff8df31ea0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 675.895318][T12899] [ 675.895318][T12899] but task is already holding lock: [ 675.895324][T12899] ffff8880b89399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 675.895373][T12899] [ 675.895373][T12899] which lock already depends on the new lock. [ 675.895373][T12899] [ 675.895380][T12899] [ 675.895380][T12899] the existing dependency chain (in reverse order) is: [ 675.895387][T12899] [ 675.895387][T12899] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 675.895411][T12899] lock_acquire+0x120/0x360 [ 675.895434][T12899] _raw_spin_lock_nested+0x32/0x50 [ 675.895454][T12899] raw_spin_rq_lock_nested+0x2a/0x140 [ 675.895478][T12899] task_rq_lock+0xbc/0x470 [ 675.895502][T12899] cgroup_move_task+0x9a/0x590 [ 675.895519][T12899] css_set_move_task+0x658/0x9e0 [ 675.895534][T12899] cgroup_post_fork+0x1ef/0x790 [ 675.895565][T12899] copy_process+0x37e6/0x3b80 [ 675.895581][T12899] kernel_clone+0x224/0x7f0 [ 675.895598][T12899] user_mode_thread+0xdd/0x140 [ 675.895615][T12899] rest_init+0x23/0x300 [ 675.895639][T12899] start_kernel+0x470/0x4f0 [ 675.895657][T12899] x86_64_start_reservations+0x2a/0x30 [ 675.895681][T12899] x86_64_start_kernel+0x66/0x70 [ 675.895703][T12899] common_startup_64+0x13e/0x147 [ 675.895726][T12899] [ 675.895726][T12899] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 675.895750][T12899] lock_acquire+0x120/0x360 [ 675.895772][T12899] _raw_spin_lock_irqsave+0xa7/0xf0 [ 675.895793][T12899] try_to_wake_up+0x6e/0x1290 [ 675.895808][T12899] __wake_up_common_lock+0x134/0x1f0 [ 675.895825][T12899] tty_port_default_wakeup+0xa2/0xf0 [ 675.895846][T12899] serial8250_tx_chars+0x72e/0x970 [ 675.895864][T12899] serial8250_handle_irq+0x633/0xbb0 [ 675.895882][T12899] serial8250_default_handle_irq+0xbf/0x1b0 [ 675.895904][T12899] serial8250_interrupt+0xa2/0x1d0 [ 675.895929][T12899] __handle_irq_event_percpu+0x28c/0x980 [ 675.895947][T12899] handle_irq_event+0x8b/0x1e0 [ 675.895965][T12899] handle_edge_irq+0x24d/0xb60 [ 675.895980][T12899] __common_interrupt+0x143/0x250 [ 675.896006][T12899] common_interrupt+0xb6/0xe0 [ 675.896031][T12899] asm_common_interrupt+0x26/0x40 [ 675.896047][T12899] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 675.896066][T12899] __wake_up_common_lock+0x190/0x1f0 [ 675.896086][T12899] sock_def_readable+0x1fb/0x550 [ 675.896103][T12899] unix_dgram_sendmsg+0xe3e/0x17c0 [ 675.896123][T12899] __sock_sendmsg+0x21c/0x270 [ 675.896139][T12899] sock_write_iter+0x258/0x330 [ 675.896164][T12899] do_iter_readv_writev+0x56e/0x7f0 [ 675.896189][T12899] vfs_writev+0x306/0x9a0 [ 675.896205][T12899] do_writev+0x14d/0x2d0 [ 675.896221][T12899] do_syscall_64+0xf6/0x210 [ 675.896243][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.896260][T12899] [ 675.896260][T12899] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 675.896284][T12899] lock_acquire+0x120/0x360 [ 675.896302][T12899] _raw_spin_lock_irqsave+0xa7/0xf0 [ 675.896315][T12899] __wake_up_common_lock+0x2f/0x1f0 [ 675.896329][T12899] tty_port_default_wakeup+0xa2/0xf0 [ 675.896348][T12899] serial8250_tx_chars+0x72e/0x970 [ 675.896366][T12899] serial8250_handle_irq+0x633/0xbb0 [ 675.896383][T12899] serial8250_default_handle_irq+0xbf/0x1b0 [ 675.896406][T12899] serial8250_interrupt+0xa2/0x1d0 [ 675.896430][T12899] __handle_irq_event_percpu+0x28c/0x980 [ 675.896448][T12899] handle_irq_event+0x8b/0x1e0 [ 675.896466][T12899] handle_edge_irq+0x24d/0xb60 [ 675.896481][T12899] __common_interrupt+0x143/0x250 [ 675.896505][T12899] common_interrupt+0xb6/0xe0 [ 675.896530][T12899] asm_common_interrupt+0x26/0x40 [ 675.896555][T12899] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 675.896573][T12899] uart_write+0x3ba/0xa40 [ 675.896588][T12899] n_tty_write+0xd32/0x11d0 [ 675.896610][T12899] file_tty_write+0x4fe/0x990 [ 675.896626][T12899] vfs_write+0x548/0xa90 [ 675.896648][T12899] ksys_write+0x145/0x250 [ 675.896670][T12899] do_syscall_64+0xf6/0x210 [ 675.896690][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.896707][T12899] [ 675.896707][T12899] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 675.896732][T12899] lock_acquire+0x120/0x360 [ 675.896753][T12899] _raw_spin_lock_irqsave+0xa7/0xf0 [ 675.896771][T12899] serial8250_console_write+0x17e/0x1ba0 [ 675.896791][T12899] console_flush_all+0x728/0xc40 [ 675.896808][T12899] console_unlock+0xc4/0x270 [ 675.896822][T12899] vprintk_emit+0x5b7/0x7a0 [ 675.896836][T12899] _printk+0xcf/0x120 [ 675.896860][T12899] register_console+0xa8b/0xf90 [ 675.896877][T12899] univ8250_console_init+0x52/0x90 [ 675.896894][T12899] console_init+0x1a1/0x670 [ 675.896912][T12899] start_kernel+0x2cb/0x4f0 [ 675.896928][T12899] x86_64_start_reservations+0x2a/0x30 [ 675.896951][T12899] x86_64_start_kernel+0x66/0x70 [ 675.896973][T12899] common_startup_64+0x13e/0x147 [ 675.896995][T12899] [ 675.896995][T12899] -> #0 (console_owner){-.-.}-{0:0}: [ 675.897019][T12899] validate_chain+0xb9b/0x2140 [ 675.897044][T12899] __lock_acquire+0xaac/0xd20 [ 675.897065][T12899] lock_acquire+0x120/0x360 [ 675.897087][T12899] console_flush_all+0x6d2/0xc40 [ 675.897103][T12899] console_unlock+0xc4/0x270 [ 675.897117][T12899] vprintk_emit+0x5b7/0x7a0 [ 675.897132][T12899] _printk+0xcf/0x120 [ 675.897155][T12899] should_fail_ex+0x3f5/0x560 [ 675.897171][T12899] strncpy_from_user+0x36/0x290 [ 675.897197][T12899] strncpy_from_user_nofault+0x72/0x140 [ 675.897216][T12899] bpf_probe_read_compat_str+0xe2/0x180 [ 675.897239][T12899] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 675.897254][T12899] bpf_trace_run4+0x28e/0x4a0 [ 675.897271][T12899] __bpf_trace_sched_switch+0x17a/0x1e0 [ 675.897290][T12899] __traceiter_sched_switch+0x9d/0xd0 [ 675.897309][T12899] __schedule+0x22b0/0x4c70 [ 675.897326][T12899] preempt_schedule_irq+0xb5/0x150 [ 675.897345][T12899] irqentry_exit+0x6f/0x90 [ 675.897364][T12899] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 675.897381][T12899] netlink_sendmsg+0x3dc/0xb30 [ 675.897401][T12899] __sock_sendmsg+0x21c/0x270 [ 675.897416][T12899] ____sys_sendmsg+0x505/0x830 [ 675.897437][T12899] ___sys_sendmsg+0x21f/0x2a0 [ 675.897458][T12899] __x64_sys_sendmsg+0x19b/0x260 [ 675.897481][T12899] do_syscall_64+0xf6/0x210 [ 675.897501][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.897518][T12899] [ 675.897518][T12899] other info that might help us debug this: [ 675.897518][T12899] [ 675.897525][T12899] Chain exists of: [ 675.897525][T12899] console_owner --> &p->pi_lock --> &rq->__lock [ 675.897525][T12899] [ 675.897559][T12899] Possible unsafe locking scenario: [ 675.897559][T12899] [ 675.897565][T12899] CPU0 CPU1 [ 675.897571][T12899] ---- ---- [ 675.897576][T12899] lock(&rq->__lock); [ 675.897588][T12899] lock(&p->pi_lock); [ 675.897601][T12899] lock(&rq->__lock); [ 675.897615][T12899] lock(console_owner); [ 675.897627][T12899] [ 675.897627][T12899] *** DEADLOCK *** [ 675.897627][T12899] [ 675.897632][T12899] 4 locks held by syz.2.2078/12899: [ 675.897643][T12899] #0: ffff8880b89399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 675.897695][T12899] #1: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 675.897737][T12899] #2: ffffffff8df31f00 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 675.897787][T12899] #3: ffffffff8de197d0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 675.897830][T12899] [ 675.897830][T12899] stack backtrace: [ 675.897840][T12899] CPU: 1 UID: 0 PID: 12899 Comm: syz.2.2078 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 675.897863][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.897875][T12899] Call Trace: [ 675.897882][T12899] [ 675.897890][T12899] dump_stack_lvl+0x189/0x250 [ 675.897917][T12899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.897941][T12899] ? __pfx__printk+0x10/0x10 [ 675.897970][T12899] ? print_lock_name+0xde/0x100 [ 675.897998][T12899] print_circular_bug+0x2ee/0x310 [ 675.898019][T12899] check_noncircular+0x134/0x160 [ 675.898039][T12899] validate_chain+0xb9b/0x2140 [ 675.898079][T12899] __lock_acquire+0xaac/0xd20 [ 675.898105][T12899] ? console_flush_all+0x13a/0xc40 [ 675.898123][T12899] lock_acquire+0x120/0x360 [ 675.898146][T12899] ? console_flush_all+0x13a/0xc40 [ 675.898168][T12899] ? do_raw_spin_unlock+0x122/0x240 [ 675.898188][T12899] ? console_flush_all+0x13a/0xc40 [ 675.898207][T12899] console_flush_all+0x6d2/0xc40 [ 675.898225][T12899] ? console_flush_all+0x13a/0xc40 [ 675.898245][T12899] ? console_flush_all+0x13a/0xc40 [ 675.898267][T12899] ? __pfx_console_flush_all+0x10/0x10 [ 675.898287][T12899] ? bsearch+0x95/0xc0 [ 675.898311][T12899] ? strncpy_from_user+0x1bc/0x290 [ 675.898341][T12899] ? is_printk_cpu_sync_owner+0x32/0x40 [ 675.898364][T12899] console_unlock+0xc4/0x270 [ 675.898382][T12899] ? __pfx_console_unlock+0x10/0x10 [ 675.898411][T12899] ? is_printk_cpu_sync_owner+0x32/0x40 [ 675.898435][T12899] vprintk_emit+0x5b7/0x7a0 [ 675.898452][T12899] ? __pfx_vprintk_emit+0x10/0x10 [ 675.898468][T12899] ? bsearch+0x95/0xc0 [ 675.898491][T12899] ? __pfx_cmp_ex_search+0x10/0x10 [ 675.898514][T12899] ? strncpy_from_user+0x1bc/0x290 [ 675.898547][T12899] ? search_extable+0x8f/0xd0 [ 675.898574][T12899] ? __pfx_search_extable+0x10/0x10 [ 675.898596][T12899] ? search_extable+0x8f/0xd0 [ 675.898618][T12899] ? __pfx_search_extable+0x10/0x10 [ 675.898644][T12899] _printk+0xcf/0x120 [ 675.898673][T12899] ? __pfx__printk+0x10/0x10 [ 675.898701][T12899] ? cmp_ex_search+0x1e/0x80 [ 675.898722][T12899] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 675.898743][T12899] should_fail_ex+0x3f5/0x560 [ 675.898763][T12899] strncpy_from_user+0x36/0x290 [ 675.898792][T12899] strncpy_from_user_nofault+0x72/0x140 [ 675.898813][T12899] bpf_probe_read_compat_str+0xe2/0x180 [ 675.898840][T12899] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 675.898855][T12899] bpf_trace_run4+0x28e/0x4a0 [ 675.898875][T12899] ? bpf_trace_run4+0x19c/0x4a0 [ 675.898894][T12899] ? __pfx_bpf_trace_run4+0x10/0x10 [ 675.898911][T12899] ? kvm_sched_clock_read+0x11/0x20 [ 675.898932][T12899] ? sched_clock_cpu+0x74/0x430 [ 675.898960][T12899] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 675.898983][T12899] __bpf_trace_sched_switch+0x17a/0x1e0 [ 675.899005][T12899] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 675.899025][T12899] ? psi_group_change+0xbc7/0x1210 [ 675.899043][T12899] ? rcu_read_lock_sched_held+0x89/0x100 [ 675.899071][T12899] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 675.899100][T12899] ? psi_task_switch+0x318/0x6d0 [ 675.899120][T12899] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 675.899140][T12899] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 675.899161][T12899] __traceiter_sched_switch+0x9d/0xd0 [ 675.899185][T12899] __schedule+0x22b0/0x4c70 [ 675.899210][T12899] ? rcu_is_watching+0x15/0xb0 [ 675.899236][T12899] ? trace_sched_exit_tp+0x38/0x120 [ 675.899258][T12899] ? preempt_schedule_irq+0xb5/0x150 [ 675.899278][T12899] ? __schedule+0x16ad/0x4c70 [ 675.899297][T12899] ? __pfx___schedule+0x10/0x10 [ 675.899321][T12899] ? preempt_schedule_irq+0xb5/0x150 [ 675.899343][T12899] ? preempt_schedule_irq+0xaa/0x150 [ 675.899365][T12899] preempt_schedule_irq+0xb5/0x150 [ 675.899385][T12899] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 675.899404][T12899] ? rcu_is_watching+0x15/0xb0 [ 675.899434][T12899] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 675.899461][T12899] irqentry_exit+0x6f/0x90 [ 675.899481][T12899] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 675.899500][T12899] RIP: 0010:netlink_sendmsg+0x3dc/0xb30 [ 675.899523][T12899] Code: ac 48 f8 48 8b 5c 24 18 48 8d bb 64 05 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 de 05 00 00 44 8b bb 64 05 00 00 <4c> 8d b3 68 05 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f [ 675.899540][T12899] RSP: 0018:ffffc9001c2f78e0 EFLAGS: 00000246 [ 675.899562][T12899] RAX: 0000000000000000 RBX: ffff88805998f000 RCX: ffff888030ba3c00 [ 675.899576][T12899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805998f564 [ 675.899588][T12899] RBP: ffffc9001c2f79f0 R08: ffff888030ba3c00 R09: 0000000000000003 [ 675.899602][T12899] R10: 000000000000000a R11: 0000000000000000 R12: 1ffff9200385ef28 [ 675.899614][T12899] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 675.899635][T12899] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.899659][T12899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.899684][T12899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.899703][T12899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.899725][T12899] __sock_sendmsg+0x21c/0x270 [ 675.899743][T12899] ____sys_sendmsg+0x505/0x830 [ 675.899769][T12899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.899798][T12899] ? import_iovec+0x74/0xa0 [ 675.899823][T12899] ___sys_sendmsg+0x21f/0x2a0 [ 675.899847][T12899] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.899887][T12899] ? __fget_files+0x2a/0x420 [ 675.899904][T12899] ? __fget_files+0x3a0/0x420 [ 675.899929][T12899] __x64_sys_sendmsg+0x19b/0x260 [ 675.899955][T12899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.899978][T12899] ? irqentry_exit+0x74/0x90 [ 675.900010][T12899] do_syscall_64+0xf6/0x210 [ 675.900033][T12899] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 675.900051][T12899] ? clear_bhb_loop+0x60/0xb0 [ 675.900076][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.900094][T12899] RIP: 0033:0x7f0033f8e969 [ 675.900110][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.900126][T12899] RSP: 002b:00007f0034e49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.900145][T12899] RAX: ffffffffffffffda RBX: 00007f00341b5fa0 RCX: 00007f0033f8e969 [ 675.900159][T12899] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 675.900171][T12899] RBP: 00007f0034e49090 R08: 0000000000000000 R09: 0000000000000000 [ 675.900183][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.900195][T12899] R13: 0000000000000000 R14: 00007f00341b5fa0 R15: 00007ffceab63ab8 [ 675.900216][T12899] [ 677.330460][T12899] CPU: 1 UID: 0 PID: 12899 Comm: syz.2.2078 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 677.330476][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.330483][T12899] Call Trace: [ 677.330490][T12899] [ 677.330497][T12899] dump_stack_lvl+0x189/0x250 [ 677.330516][T12899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.330529][T12899] ? __pfx__printk+0x10/0x10 [ 677.330545][T12899] ? cmp_ex_search+0x1e/0x80 [ 677.330557][T12899] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 677.330569][T12899] should_fail_ex+0x414/0x560 [ 677.330580][T12899] strncpy_from_user+0x36/0x290 [ 677.330596][T12899] strncpy_from_user_nofault+0x72/0x140 [ 677.330608][T12899] bpf_probe_read_compat_str+0xe2/0x180 [ 677.330623][T12899] bpf_prog_c1796171ffc7efef+0x3e/0x44 [ 677.330632][T12899] bpf_trace_run4+0x28e/0x4a0 [ 677.330642][T12899] ? bpf_trace_run4+0x19c/0x4a0 [ 677.330652][T12899] ? __pfx_bpf_trace_run4+0x10/0x10 [ 677.330661][T12899] ? kvm_sched_clock_read+0x11/0x20 [ 677.330673][T12899] ? sched_clock_cpu+0x74/0x430 [ 677.330688][T12899] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 677.330701][T12899] __bpf_trace_sched_switch+0x17a/0x1e0 [ 677.330712][T12899] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 677.330723][T12899] ? psi_group_change+0xbc7/0x1210 [ 677.330732][T12899] ? rcu_read_lock_sched_held+0x89/0x100 [ 677.330747][T12899] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 677.330763][T12899] ? psi_task_switch+0x318/0x6d0 [ 677.330773][T12899] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 677.330783][T12899] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 677.330794][T12899] __traceiter_sched_switch+0x9d/0xd0 [ 677.330807][T12899] __schedule+0x22b0/0x4c70 [ 677.330821][T12899] ? rcu_is_watching+0x15/0xb0 [ 677.330835][T12899] ? trace_sched_exit_tp+0x38/0x120 [ 677.330846][T12899] ? preempt_schedule_irq+0xb5/0x150 [ 677.330856][T12899] ? __schedule+0x16ad/0x4c70 [ 677.330867][T12899] ? __pfx___schedule+0x10/0x10 [ 677.330879][T12899] ? preempt_schedule_irq+0xb5/0x150 [ 677.330890][T12899] ? preempt_schedule_irq+0xaa/0x150 [ 677.330901][T12899] preempt_schedule_irq+0xb5/0x150 [ 677.330912][T12899] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 677.330922][T12899] ? rcu_is_watching+0x15/0xb0 [ 677.330936][T12899] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 677.330951][T12899] irqentry_exit+0x6f/0x90 [ 677.330962][T12899] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 677.330973][T12899] RIP: 0010:netlink_sendmsg+0x3dc/0xb30 [ 677.330987][T12899] Code: ac 48 f8 48 8b 5c 24 18 48 8d bb 64 05 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 de 05 00 00 44 8b bb 64 05 00 00 <4c> 8d b3 68 05 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f [ 677.330996][T12899] RSP: 0018:ffffc9001c2f78e0 EFLAGS: 00000246 [ 677.331005][T12899] RAX: 0000000000000000 RBX: ffff88805998f000 RCX: ffff888030ba3c00 [ 677.331013][T12899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805998f564 [ 677.331019][T12899] RBP: ffffc9001c2f79f0 R08: ffff888030ba3c00 R09: 0000000000000003 [ 677.331026][T12899] R10: 000000000000000a R11: 0000000000000000 R12: 1ffff9200385ef28 [ 677.331032][T12899] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.331043][T12899] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.331056][T12899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.331069][T12899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.331080][T12899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.331091][T12899] __sock_sendmsg+0x21c/0x270 [ 677.331101][T12899] ____sys_sendmsg+0x505/0x830 [ 677.331116][T12899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.331130][T12899] ? import_iovec+0x74/0xa0 [ 677.331144][T12899] ___sys_sendmsg+0x21f/0x2a0 [ 677.331157][T12899] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.331182][T12899] ? __fget_files+0x2a/0x420 [ 677.331191][T12899] ? __fget_files+0x3a0/0x420 [ 677.331202][T12899] __x64_sys_sendmsg+0x19b/0x260 [ 677.331215][T12899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.331227][T12899] ? irqentry_exit+0x74/0x90 [ 677.331243][T12899] do_syscall_64+0xf6/0x210 [ 677.331256][T12899] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 677.331265][T12899] ? clear_bhb_loop+0x60/0xb0 [ 677.331276][T12899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.331285][T12899] RIP: 0033:0x7f0033f8e969 [ 677.331295][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.331303][T12899] RSP: 002b:00007f0034e49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.331313][T12899] RAX: ffffffffffffffda RBX: 00007f00341b5fa0 RCX: 00007f0033f8e969 [ 677.331320][T12899] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 677.331326][T12899] RBP: 00007f0034e49090 R08: 0000000000000000 R09: 0000000000000000 [ 677.331333][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.331338][T12899] R13: 0000000000000000 R14: 00007f00341b5fa0 R15: 00007ffceab63ab8 [ 677.331349][T12899] [ 677.355482][T12901] input: syz1 as /devices/virtual/input/input44 [ 677.822011][T12901] input: failed to attach handler evdev to device input44, error: -4 [ 685.868417][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.874736][ T1303] ieee802154 phy1 wpan1: encryption failed: -22