last executing test programs: 21m6.267395684s ago: executing program 3 (id=314): syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x3fef, 0x8b7) syz_emit_ethernet(0xba, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "087b1a", 0x7c, 0x6, 0xff, @private1, @loopback, {[@fragment={0x62, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x68}], {{0x4e21, 0x4e20, 0x41424344, r0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x7, {[@mss={0x2, 0x4, 0xe78}]}}, {"c3328e3a291d046f83e7e74880ba65a38819a53d880083f9db609bb0bbc891f261e37c2e90985103e99e6bb8edb6521e21ec9c625caeb0e8daa05ad291381181463d2dc03d949bb27d77470a0914745b52bdba71c99742918b159564"}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x1000, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4001, 0x41424344, r0, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x400000000}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) write$char_usb(r2, &(0x7f0000000540)="5262a1", 0x3) syz_usb_disconnect(r1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 20m59.506579932s ago: executing program 3 (id=320): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000001b80)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3e, 0xa, 0x908, 0x0, 0x100000000}) 20m57.899965825s ago: executing program 3 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f0000000900)=""/195}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r1, &(0x7f0000000b40)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000019b40)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mknod$loop(&(0x7f0000019b80)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000019c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000019c40)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000019d00)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000019d40)='./sec\x00', &(0x7f0000019d80)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000019dc0)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x0) write$P9_RREADLINK(r3, 0x0, 0x0) 20m55.118041028s ago: executing program 3 (id=328): syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x3fef, 0x8b7) syz_emit_ethernet(0xba, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "087b1a", 0x7c, 0x6, 0xff, @private1, @loopback, {[@fragment={0x62, 0x0, 0x3e, 0x0, 0x0, 0x2, 0x68}], {{0x4e21, 0x4e20, 0x41424344, r0, 0x1, 0x0, 0x6, 0x2, 0x2, 0x0, 0x7, {[@mss={0x2, 0x4, 0xe78}]}}, {"c3328e3a291d046f83e7e74880ba65a38819a53d880083f9db609bb0bbc891f261e37c2e90985103e99e6bb8edb6521e21ec9c625caeb0e8daa05ad291381181463d2dc03d949bb27d77470a0914745b52bdba71c99742918b159564"}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x1000, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4001, 0x41424344, r0, 0x0, 0x0, 0x5, 0x40}}}}}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x400000000}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) write$char_usb(r2, &(0x7f0000000540)="5262a1", 0x3) syz_usb_disconnect(r1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) 20m50.619579546s ago: executing program 3 (id=334): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x810) r0 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x40) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={0x0, 0x1, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r3, 0x0, 0x0) close(r3) 20m50.216219758s ago: executing program 3 (id=336): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syz_tun\x00', 0x1}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'syz_tun\x00', 0x101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 20m33.29271362s ago: executing program 32 (id=336): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syz_tun\x00', 0x1}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'syz_tun\x00', 0x101}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 18m41.691391371s ago: executing program 4 (id=487): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpgrp(0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, &(0x7f0000000a80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019a80)=0x7) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 18m40.675028234s ago: executing program 4 (id=488): munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x1, 0x40402) writev(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000580)}, {&(0x7f00000005c0)}], 0x3) 18m39.989263734s ago: executing program 4 (id=489): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 18m39.612382853s ago: executing program 4 (id=492): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000019640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000196c0)={0x1, r5}) 18m34.157532028s ago: executing program 4 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setns(0xc9, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYBLOB="03000000040000000500"/28], 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2020000, &(0x7f00000006c0)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_auto}, {@xino_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir_follow}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_lt}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000440)={'filter\x00', 0x0, [0x39, 0x4, 0x4, 0xffc, 0x7]}, &(0x7f00000004c0)=0x54) io_setup(0x4, &(0x7f0000000500)) 18m32.505497436s ago: executing program 4 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) syz_open_procfs$namespace(r1, &(0x7f00000196c0)='ns/uts\x00') 18m21.584835858s ago: executing program 1 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}}, 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000640)='\x00', 0x1, 0x0, &(0x7f0000000680)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 18m20.982492899s ago: executing program 1 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000006c0)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f00000196c0)=0x7) pipe(0x0) io_setup(0x3fd, &(0x7f0000019740)=0x0) io_submit(r5, 0x0, &(0x7f0000019780)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000199c0)={0x0, 0x0, &(0x7f0000019a00)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x74, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7ffc, 0x0, 0x2}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9300}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 18m17.080057736s ago: executing program 33 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8) syz_open_procfs$namespace(r1, &(0x7f00000196c0)='ns/uts\x00') 18m16.715361503s ago: executing program 1 (id=518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) connect$inet(r1, &(0x7f0000000540)={0x2, 0x15, @loopback}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r3) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4001010}, 0x40) 18m11.912800612s ago: executing program 1 (id=519): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000e00)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m5.75134318s ago: executing program 1 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setns(0xc9, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYBLOB="03000000040000000500"/28], 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2020000, &(0x7f00000006c0)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_auto}, {@xino_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir_follow}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_lt}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000440)={'filter\x00', 0x0, [0x39, 0x4, 0x4, 0xffc, 0x7]}, &(0x7f00000004c0)=0x54) io_setup(0x4, &(0x7f0000000500)) 18m3.999602688s ago: executing program 1 (id=527): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000300)={0x4, &(0x7f0000000340)=[{0x0, 0x7, 0x10, 0x7f}, {0x4, 0x8, 0x45, 0x4}, {0x1, 0x2, 0x7f, 0xc}, {0x4, 0x14, 0x2, 0xffff0000}]}) read$msr(r3, &(0x7f0000001340)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, &(0x7f000001a4c0)='./trace\x00', &(0x7f000001a500)='tracefs\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 17m48.830716772s ago: executing program 34 (id=527): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000300)={0x4, &(0x7f0000000340)=[{0x0, 0x7, 0x10, 0x7f}, {0x4, 0x8, 0x45, 0x4}, {0x1, 0x2, 0x7f, 0xc}, {0x4, 0x14, 0x2, 0xffff0000}]}) read$msr(r3, &(0x7f0000001340)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, &(0x7f000001a4c0)='./trace\x00', &(0x7f000001a500)='tracefs\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 17.521985984s ago: executing program 0 (id=2298): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@cgroup=r1, r1, 0x2f}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='fdinfo/4\x00') pread64(r2, &(0x7f00000017c0)=""/17, 0x11, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4081) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='usbip-vudc.0', 0xc) 13.782312976s ago: executing program 0 (id=2298): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@cgroup=r1, r1, 0x2f}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='fdinfo/4\x00') pread64(r2, &(0x7f00000017c0)=""/17, 0x11, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4081) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='usbip-vudc.0', 0xc) 11.28416192s ago: executing program 0 (id=2298): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@cgroup=r1, r1, 0x2f}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='fdinfo/4\x00') pread64(r2, &(0x7f00000017c0)=""/17, 0x11, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4081) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='usbip-vudc.0', 0xc) 9.283924994s ago: executing program 5 (id=2414): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f00000004c0), 0x6) 9.131813279s ago: executing program 5 (id=2415): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x50) pipe2(0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = fanotify_init(0x40, 0x80000) fchdir(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) getpid() ioctl$UBLK_U_CMD_ADD_DEV(r5, 0xc0207504, &(0x7f0000000300)={0xffffffff, 0xffff, 0x0, 0x0}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r6, 0x0) getdents64(r6, &(0x7f00000004c0)=""/79, 0x4f) 7.859208759s ago: executing program 5 (id=2417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) 7.615232224s ago: executing program 0 (id=2298): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@cgroup=r1, r1, 0x2f}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='fdinfo/4\x00') pread64(r2, &(0x7f00000017c0)=""/17, 0x11, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4081) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='usbip-vudc.0', 0xc) 5.431492836s ago: executing program 5 (id=2422): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x5, 0x0, 0x400, 0xb7, 0xc20022, r2}) sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f0000000840)={0x11, 0x9, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 5.283504102s ago: executing program 5 (id=2423): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f04000116"], 0x7) 5.241194855s ago: executing program 2 (id=2424): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004080)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004100)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000006100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000061c0)={0x20, 0x0, 0x68cc, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000006200)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000006240)=[{&(0x7f0000006280)="c6", 0x1}], 0x1) 5.180526032s ago: executing program 6 (id=2425): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x50) pipe2(0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = fanotify_init(0x40, 0x80000) fchdir(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x1ff) getpid() ioctl$UBLK_U_CMD_ADD_DEV(r5, 0xc0207504, &(0x7f0000000300)={0xffffffff, 0xffff, 0x0, 0x0}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r6, 0x0) getdents64(r6, &(0x7f00000004c0)=""/79, 0x4f) 3.905833842s ago: executing program 6 (id=2426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x5}, {0xfff1, 0xffff}, {0x300}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000800000003000000000000004559001c006500000401"], 0x2a) 3.810531432s ago: executing program 0 (id=2298): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@cgroup=r1, r1, 0x2f}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='fdinfo/4\x00') pread64(r2, &(0x7f00000017c0)=""/17, 0x11, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4081) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='usbip-vudc.0', 0xc) 1.540039703s ago: executing program 6 (id=2427): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) 1.539760413s ago: executing program 2 (id=2428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffc}, 0x2d, 0xfffffffffffffffa) add_key(&(0x7f00000005c0)='encrypted\x00', &(0x7f0000000700), &(0x7f0000000740), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='load trusted:'], 0x30, 0xfffffffffffffffa) add_key(&(0x7f00000007c0)='encrypted\x00', &(0x7f0000000800), &(0x7f0000000880), 0xca, 0xfffffffffffffffe) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000480)={r0, 0x6, 0x9, 0x5}) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000180)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400000, 0x114) move_mount(r4, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000440)='./file0\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x20008000) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x1, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0xb}, @empty}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x88, 0x5, "a30d33"}, @timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x4}]}]}}}], 0x48}, 0x20002880) r9 = syz_open_dev$vbi(&(0x7f0000000a00), 0x3, 0x2) ioctl$VIDIOC_S_STD(r9, 0x40085618, &(0x7f0000000000)=0x800) ioctl$VIDIOC_G_SLICED_VBI_CAP(r9, 0xc0745645, &(0x7f0000000100)={0xfff7, [0x7, 0x0, 0x1, 0x4, 0x1, 0x0, 0x9, 0x281, 0x2, 0x7f, 0x4, 0xf, 0x8, 0xf1, 0xd, 0xffff, 0xfbed, 0x0, 0x250, 0x9, 0x31, 0x7fff, 0xbb, 0x7ff, 0x7, 0x5, 0x0, 0x5, 0x8, 0x3, 0x1000, 0x3, 0x81, 0x8, 0x9, 0x9c6, 0x7, 0x202, 0x8, 0x4, 0x9, 0xe, 0x7, 0x6, 0x1001, 0x359, 0x8000, 0x100], 0x7}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x60, 0xa0, 0x2, 0x0, 0xee00}, {@in=@local, 0x0, 0xff}, @in=@remote, {0x3, 0x4, 0x2, 0x0, 0x80010000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@etimer_thresh={0x8, 0xc, 0x70000}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 1.538877143s ago: executing program 5 (id=2429): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) setrlimit(0xf, &(0x7f0000000040)={0x40, 0x7}) sched_setaffinity(r2, 0x47, &(0x7f0000019b40)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x403, 0xfffffffc}, 0x20}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x4, 0xfd90, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000019b80), 0x366, 0x10, &(0x7f0000019bc0), 0x1dd}, 0x48) socketpair(0x1, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019dc0)=ANY=[], 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019ec0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019f00)={{r5}, 0x0, &(0x7f0000019f80)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019fc0)={{}, &(0x7f000001a000), &(0x7f000001a040)=r4}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) mount(0x0, &(0x7f0000019c00)='./file0\x00', &(0x7f0000019c40)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000019c80)='./file0\x00', &(0x7f0000019cc0), 0x0, 0x0) setreuid(0x0, 0xee00) 581.56829ms ago: executing program 6 (id=2430): r0 = syz_open_dev$sg(&(0x7f0000019680), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 580.237721ms ago: executing program 2 (id=2431): r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000340)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x98f905, 0x10004, '\x00', @p_u16=&(0x7f0000000140)=0x9}}) 489.94696ms ago: executing program 2 (id=2432): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) ptrace(0x10, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x1, 0x0) 390.19589ms ago: executing program 2 (id=2433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000005600)={0x1, [{0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xefc, 0x0}, {0x1, 0x0, 0x29, 0x0}, {0x0, 0x0, 0xc, 0x0}, {0x2, 0x7a18, 0xfffffff7, &(0x7f00000020c0)="01653c2ea84456ca627088a35d7a0a6a1e461f77ef5eb3eb0606332f707b811ba996441336d177bf3564b5878e3fa3dc260247e0c25bdd8185cb6fa7464b47ba0a5bc11151a4d76f87b598273423c502a13beba4667e6e30b3e46993075042ea81fcc8d83a8c7c98267043fd6cc3746de72b85e0b19e88eb482c24edc8ab9c608f163292dce8ee071fde89a8a8e7e1efd0a84942e305f7a70c1801a378a33dd13d910670233066ef86ec10145471fff136ed4d6547fe191483c5a1286834c6f904cda0593e28ca2937967e3f8d2b53ca7e3b461b4207614b4c208e6af679557ef4c5627ef84bae4d2afa6eb18c93c6930d3aefc891cadd498813c626d414517a5dd981863abf0cfc450aed1a7833037acb00b98f15e5c72f74a5063f67b2a87ef0345777f431d178160ddd5f7a118c3651aec72d2a667482d619532618659c01d29856b7e76953ceaebc99fa0bc22fc605664fbd38401dbf0e4a2be90c8d68a91b7ad7160bde1c1db6bc771dd2116e1e9019395cf1a5edd681d9eda99848640fc8498814609a6f8005d3eb14d8a61d3dd3085d394f7747700175d038165e4a549112395ed21ac3ce2348ff60947e1e7df7622108e711e6d8504debe1e43d539e3ccb54dd14d27314680dd0b84af07c6bef792e899b000c013e96016d59d0869d47cd120a37bd109f451e6a156412e37085935555036a158210270c229079c5ea448b9c82f1fe3ecc2c838a67bfb24a10834ebecadde13d518ee302fcb745895ae8c270b5f69db9daa1e9213159fa1d5d2057a574430ae300a4ed7120ad91102a50ff59c2554a301c83742509868bc8c94b0a51cf42860c5f703884091d2b7a312b4195f8028f0b802f96ed896316f886ef3af2c775bec92324eaebe799542d17b5d42d702e6965223b36617ce83c258b120f294b703d1bf44c747b315f20602798951aafdd27e7cf259a9d055bdc61ec8f7cb7a0dd414a76b38ddb06b1d768a079bf3a5b9464aa0d48934b58a459ab3bcac2ac067b9dbebb418dfb9964e7510c81220b0b728a072bdfc73faa543bbf56459110f5102f641cb746c1e3b8a1e420018b03798569599b6f213c6193906bfbd792f0e4810a13c291ceabf29b86ab4fde24a8fdf2a80a74e80c238f270b0f07952fddb3bc58e906fb2f5417abaf79122282d69dbff2570efb139ffdb473251e643fc8eb8d3394b82f4a9bfa1dd70625a3cc918b8e4f8351695d53fd3c20a54532e5d0aaddc9bf7f2536d5553b0c94e8bb46b2e6f94637e030024966f9258b7fc67d0257d7a2ec3b3b8f5d7ae2853ef82368c710b5c40bcab1e56f87f38fe6658de85352f0fbe6f5195083a992c3857c666793c27ff95f01332aaaae181ff5f9bab21c2c01813b2be7363de3a10969738453d70ca0eb1ec38f2ca1d33f81242414df5c5b83b9fa08a1afff56099e8f50697ff0e20fd4fd8864b6a75661d61fdc832393eb8a6c42a9e95b02219fe72fa7c72c6f05b6f51f7bd06287f5e318f19bc80dad44fdffa9490ae97a7c60ada857d5a73a1570cdf72e256644b82a8e1ffea678d8d908d574683608352f77795e69a901c2b9e9cb00c13bb9b25aad67e8897461976f6dcba111356b590b42c57a8e08a29ac74797a4606947682e4f596ab54060bbf6f0dd47dccea223f6f80a4fdb7e1f3f58a207be70b06198e305aa4e890274370997c1237c0335ef8cb26ec011a623e055e2fb7c158c06d9e7c08a4a75b7582e0881481c83eb1f1243024636abcde7234a9567a3766149b22620c6947b83ae9e474abcdf6a380b5e01f3a0a9bcba2f8e3a826a8820a23eb45b326a8a1ecd2020ce245a4bb11540bd582dc977989bbe7f284f347a8b3d34b3a77a4a22f9697433eba375b16008cbfcebdc342473bed4181fce042a88114a94cfb81f04eee9e59c4a44d5e9af74e749fc5a0faf218aaaf15d436171e4897269c9c0e27536fb9ae544c3fc8e918fe7ac4de058b7c6ae1c5e8a17773f891e58fb801651cd10bde656561f319e9f8fbe5f13dec86c8c3816fe7ae848eb42f06da0d76a1d29b41b460bcd8c37c0edba4b5bb5bb0cd0f1569400c5591a128cd956332bad58b4f2f677cebd1fa17ba24c615b15f3547205bc6a3f284fb9284d8635850b698ec5fc28d03ffaec81a3df05bfc394ab5ebeb7e44abe540b56869150a8925190d90637a50d817e366860a27126e7471fb8e7f18660e39fc7835c7edbc0eed57723c3314bb8ea80a98a6062c17a1854b0e4bea74c4180d4d6c138418daa9e3b6d015939521b2f9bd9c90dcb3810a09e6e47706d6ed9c8ac1e425d4e651c3daad379eb33451e957cca850b5b3f8c9308b0ef8a3c626ba09c39e3785ef416dd8f66d2f47fd35b615c89c1c14a7398d55b2ebfa8a2b7f8fcc723175fc306d4768aa2fec7120510ef06505cb1214a269d1750c986d3b5defff4998cf8fba76ca5081da3964453ed046d91fa2b48f8326175f127e6bd94903e1655c401e5e9b490aa6f5d09b266786030059695f7f0a92c7e16b86a431c6829e102abf153409da2c93ef9e7c12c1b5456152fd289c73f3444bf50ebad5a85626479b27eeca84b0da8d1692d9e4ab46964e8e406489ded04f11baece90186e027fe84d01c2ab73a0391a45604155eb88ca90b62c714cebab92dc16be1368e055b10662eab00aec6cd208f8663d8d8ea7ec0769f3738e22746a744a1287f1c446e5b14410488ff2330e53d3e9f4b196564411eb438129f002bac48b45b354ec7b3061b449d29408678d7b32ad91885442419c0dc6d4aa4fd1d199521f51bdf66d3368c1413b93b4ef5dfac6ff826e9a22c3f1271e88e354ba8661d4694461b2781ce5d18449a0f4b378c6bf38a4a3ebe75e47f36391a349c86e73dbea41c864f24878f0d985649080979b406d858a2735b519c299ac9e9c535dd50eeb3d562ce1ae7028bbabe0fa6be19c7442e12528438205f454ca4e046000fc446eea0889dcb91d11328c7d23f96d7fe1abf7615769ef018b2d06816e084c97d8fc448c1440942117477d19de3d3b6ce34d6320ea5f8b1a66045bd6f2338b8aefeaec9e712e6f6f63e8ce337df8ec8d377c5d3fdb45f06f11a6d2c2a847e4f2117a3635316a2c064a2cd12bc82c70bb1ec598ce838855f96e8081e334a6d5d5533d64564eeca01c6b51016183fa5c2cf0e8f9a44b84856470527338b9741c80c727bca04d840262ed0f365ca76985129fc0e4215956543da0c20e02dda61bf7e27550e1376f62ef9ca0b20b75a6b76a651ad36b6d3aeeef52b86b43a52a1124ac01a7d160221322648a1cce4112be401844a570016b533e2b5a9972a89c70b4de416f5c098331d772633f984606d93e7fdeafcf5d06f6d46269b9e150b3082235aea10f26e925c85f8a396b9af3de6da4243847467e9a2960e06a55c3f3a10ebc4e23fd8c5791a8e8834ed93e9853ada6e39a05f4b88e34a108d5165476ab85bc376e149b5bc894cc425b2d3d70d3524563e161295352cf22befcfbe233bb78bcd75b098679322d7923348eb8e41f8a6e4f07aece3b2a2eaa133d08cb776deb4f64526eef5d0b7629b637247dcabcac72fb350f733779b3f844534747ebebaf03a27aa8ac9e09a8291bf26fb62679b0ff4a03cc14e501ea44dfe14e193c7b62b937eb6cbd8c8cabe6c0ecd304e665a5d89b5fa1975fa581bc864e0ef65f9aa195d3cb06446bafb4f0a3777f432de510a992ba361b4127d5c25ac1868caa987d87484d22ab4748bf3955b232d229396db2b6413c4f936faff09540522d349f7d0af8810d5631bcf055418eda7d7f9e81092730bf71cf39b6d12b0654ce9363a1b207e3964963a397be7ec2f328860329a8b5a5eef5465329ec36315cb96a7755c04eaf793a2697dfe362521d122ab0d557fa13c7ecd4dc5318d8af4ff5bd3ff57ca2da919eb928c99fd883ad6cb346a1684751e0a56bbb4a516ea6a736249c7f55b9df2821ee6daee562705a9174bc1678301236c77136d72bb271ecde36a85ce5a520d8b8b4016d3b4640654875686b4ab3db36f142f1fcfd59f8a54821672ccc953cad269ac19390f3e2f5787c723a6179f4245c99a85076ffa654255f24c786f973f2a67d31c3757566372d4314fe975ab3ba5d99379a78a498585de44ee56e5a88a25f63b5d3390c648164ec75b8c2af688379a970e74aefb43776ee347dc378843a43a2a7ac1910c44c5ba7d1e38061d7419d40380601775f12a731a939d34ac5cbd81a0fb3b425a1cc4f97d81c79f995f5f8d44ff8bf4eb71610b4396c247af79f1f7d7dc5d767b1eee7486ae6d816a7cf4a2dedc9d175efd723183902d8d65bec3b6d00888dac9be4180a76e1e2371b087b74bd8f6ce25d538d4ded79eed33998aff99faffb604029d0fdc116abec54ee14e2e2ac81794f0cddb660b7d09d21cb93fcb91ab3357e756f04ceda2702a5afe49f4ebad7e43b2ae0632b75dcdc22a0c26641d26b686f5d7b9e10241289c588d7a76876a257c37f73a8a6cd3582c67147e9441d5a64789d3fc2892681cefc1f0104e4725a881a5ae1ff8d0a8c8db6adee295d608bc16ef7645cfedd0f7eafa07c6a776a07db9750f7f325582bcd848289e5ff715bb3aa313ce09e5bef1586155e48caff48f478cf00ef15e214fb07eb27b4c4a4394e283596af364294543a686e58334ef1ddbb7f814aea1cedbcacf133edc5ab479468185e2741e2b87ec451338f97ecbebe09554e905f373092b0562e1353a1f1bf00707e3d234473019a266d8c4cb888abaf35e60ff23db8867ef3a73cab82850426bbc02357c8ff217dc6364f470b8859ddb4990b842394072ac69e514e341d473ecd9e9c7aa3a5ef12e912f93e6d84dd544d9423fbf5ca32617d3dd915a4bce3bc0cf5dc13f18011b9b8b438e641775209c0bfa6ef56bcbd7b22bac39775663d7d93d65339ef8380b113469779d46032169457892485d68370551ead2eecdf6d12c4940bf1bcb3df88e11bc1807716f40b07168ac60cb578b7e578141c040cad76dcbb75a8d7927c7e8095979c0f93ed869f23ca2cfabb198f7d0b16054d5fb52a1627532e6a7ec5fe4a316bf3c623a7a710490760152c7d499c6c42424b12608b59ed27acd830c588a92a7d0b13efa9d61125b7aa47be6ba1b9a3ea51231f399a977e51f6cb536056c92095067df774dc4ad4fa26309f5b0eb93437d7d4b8243df5be0fed675baf0fa63a5ce0bb167b9bcb1a8b166876df87c2e2b2a93acdc506254b553aa7e21e20765f2085961d0bf099c25594e38ea2dc4cb46d539977f5c878c58d801759616d5fc2087e6e5aa1675df602c916cca6217479876ae53ccf8f913367ad360e9c0b47fd8724d143a2ec866c3bd9273e7a50cfcb5fdedadb8f924bca9fb148dbb197b9ea5d86768c270857dc49803465482a6caaf3f828d102e5ebfc22a83c786aba0be882800c28f60621094cac59380247882f31dd4f79ced9e3f1e762502ab293a8e536418a408a2f8c480209c1d337b1af5def"}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xffff, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x523, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x0, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 389.62582ms ago: executing program 6 (id=2434): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000640)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 160.035693ms ago: executing program 6 (id=2435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x5}, {0xfff1, 0xffff}, {0x300}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000800000003000000000000004559001c006500000401"], 0x2a) 156.731404ms ago: executing program 2 (id=2436): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 0s ago: executing program 0 (id=2298): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, 0x0, &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001740)={@cgroup=r1, r1, 0x2f}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001780)='fdinfo/4\x00') pread64(r2, &(0x7f00000017c0)=""/17, 0x11, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x18}}, 0x4081) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): promiscuous mode [ 561.814653][ T8201] veth1_vlan: entered promiscuous mode [ 561.827056][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 563.240785][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.248479][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.353138][ T5881] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 563.365428][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.371898][ T8201] veth0_macvtap: entered promiscuous mode [ 563.406818][ T8336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.415499][ T5881] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 563.429242][ T8201] veth1_macvtap: entered promiscuous mode [ 563.437971][ T5881] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 563.457759][ T5881] usb 1-1: Manufacturer: syz [ 563.487449][ T5881] usb 1-1: config 0 descriptor?? [ 563.500268][ T8336] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.551999][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.587434][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.626238][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.659683][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.688075][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.696933][ T5881] rc_core: IR keymap rc-hauppauge not found [ 563.709685][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.723396][ T5881] Registered IR keymap rc-empty [ 563.735551][ T5881] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 563.746424][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.746440][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.746454][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.747843][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.759518][ T5881] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 563.815742][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.825824][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.891177][ T8201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.931077][ T8201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.956308][ T8201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.965268][ T8201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.053014][ T8] usb 1-1: USB disconnect, device number 6 [ 564.092105][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.099751][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.263703][ T8336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.288522][ T8336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.395185][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.423040][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.509086][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.530513][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.910230][ T8526] overlayfs: failed to resolve './bus': -2 [ 565.754018][ T8336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.730548][ T8336] veth0_vlan: entered promiscuous mode [ 570.795793][ T8336] veth1_vlan: entered promiscuous mode [ 570.922451][ T8336] veth0_macvtap: entered promiscuous mode [ 570.967869][ T8336] veth1_macvtap: entered promiscuous mode [ 571.042481][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.087078][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.127133][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.176384][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.206397][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.246245][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.279441][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.328832][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.386235][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.436318][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.486328][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.516309][ T8336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.551396][ T8336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.853969][ T8336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.008462][ T8336] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.047850][ T8336] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.086241][ T8336] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.935759][ T8336] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.954153][ T8583] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 573.985966][ T8583] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 574.307824][ T2181] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 574.350919][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.389655][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.453864][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.468896][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.531569][ T2181] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 574.551673][ T2181] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.575411][ T2181] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 574.616292][ T2181] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 574.646266][ T2181] usb 6-1: Manufacturer: syz [ 574.666913][ T2181] usb 6-1: config 0 descriptor?? [ 574.796360][ T2181] rc_core: IR keymap rc-hauppauge not found [ 574.820797][ T2181] Registered IR keymap rc-empty [ 576.255272][ T2181] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 576.270902][ T2181] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 576.544573][ T9] usb 6-1: USB disconnect, device number 2 [ 577.212113][ T8619] overlayfs: failed to resolve './bus': -2 [ 581.615768][ T8640] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 581.667569][ T8640] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 584.176291][ T5916] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 584.370196][ T5916] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 584.394602][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.423613][ T5916] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 584.449832][ T5916] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 584.490618][ T5916] usb 7-1: Manufacturer: syz [ 584.512987][ T5916] usb 7-1: config 0 descriptor?? [ 584.686777][ T5916] rc_core: IR keymap rc-hauppauge not found [ 584.717296][ T5916] Registered IR keymap rc-empty [ 584.741962][ T5916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 584.784875][ T5916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 585.777395][ T8673] FAULT_INJECTION: forcing a failure. [ 585.777395][ T8673] name fail_futex, interval 1, probability 0, space 0, times 1 [ 585.836619][ T8673] CPU: 1 PID: 8673 Comm: syz.0.588 Not tainted syzkaller #0 [ 585.844063][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 585.854192][ T8673] Call Trace: [ 585.858278][ T8673] [ 585.861432][ T8673] dump_stack_lvl+0x18c/0x250 [ 585.866640][ T8673] ? show_regs_print_info+0x20/0x20 [ 585.872609][ T8673] ? load_image+0x420/0x420 [ 585.877245][ T8673] ? get_user_pages_fast_only+0xa0/0xa0 [ 585.883284][ T8673] should_fail_ex+0x394/0x4c0 [ 585.888185][ T8673] get_futex_key+0x857/0x1030 [ 585.893239][ T8673] ? futex_setup_timer+0xc0/0xc0 [ 585.898409][ T8673] futex_wake+0x127/0x4f0 [ 585.902789][ T8673] ? futex_wake_mark+0x150/0x150 [ 585.907786][ T8673] do_futex+0x35d/0x3e0 [ 585.912073][ T8673] ? __might_fault+0xaa/0x120 [ 585.916789][ T8673] ? __ia32_sys_get_robust_list+0x110/0x110 [ 585.923246][ T8673] ? __might_fault+0xc6/0x120 [ 585.928288][ T8673] mm_release+0x184/0x3a0 [ 585.931107][ T5858] usb 7-1: USB disconnect, device number 2 [ 585.932886][ T8673] ? exit_mm_release+0x30/0x30 [ 585.943600][ T8673] ? lockdep_hardirqs_on+0x98/0x150 [ 585.948866][ T8673] exit_mm+0xa4/0x340 [ 585.952978][ T8673] ? sysctl_delayacct+0x220/0x220 [ 585.958122][ T8673] ? do_exit+0x2530/0x2530 [ 585.962848][ T8673] do_exit+0x909/0x2530 [ 585.967059][ T8673] ? put_task_struct+0xc0/0xc0 [ 585.972756][ T8673] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 585.979257][ T8673] ? get_signal+0x100e/0x1390 [ 585.984083][ T8673] ? lock_chain_count+0x20/0x20 [ 585.989530][ T8673] ? _raw_spin_lock_irq+0xbb/0xf0 [ 585.995290][ T8673] do_group_exit+0x22d/0x2f0 [ 585.999913][ T8673] ? lockdep_hardirqs_on+0x98/0x150 [ 586.005966][ T8673] get_signal+0x12a6/0x1390 [ 586.012433][ T8673] arch_do_signal_or_restart+0xc2/0x7b0 [ 586.018106][ T8673] ? get_sigframe_size+0x20/0x20 [ 586.023085][ T8673] ? get_timespec64+0x11a/0x1b0 [ 586.028078][ T8673] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 586.034988][ T8673] ? exit_to_user_mode_loop+0x3b/0x110 [ 586.041791][ T8673] exit_to_user_mode_loop+0x70/0x110 [ 586.049727][ T8673] exit_to_user_mode_prepare+0xee/0x180 [ 586.057410][ T8673] syscall_exit_to_user_mode+0x1a/0x50 [ 586.063175][ T8673] do_syscall_64+0x61/0xb0 [ 586.068671][ T8673] ? clear_bhb_loop+0x40/0x90 [ 586.073936][ T8673] ? clear_bhb_loop+0x40/0x90 [ 586.079274][ T8673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.085377][ T8673] RIP: 0033:0x7f70c4d9f559 [ 586.089833][ T8673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.113066][ T8673] RSP: 002b:00007f70c5cca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 586.124971][ T8673] RAX: fffffffffffffdfc RBX: 00007f70c5025fa0 RCX: 00007f70c4d9f559 [ 586.137288][ T8673] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 586.146005][ T8673] RBP: 00007f70c4e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 586.155311][ T8673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.163643][ T8673] R13: 00007f70c5026038 R14: 00007f70c5025fa0 R15: 00007ffd3c1b10e8 [ 586.172286][ T8673] [ 588.610531][ T8699] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 590.126848][ T8699] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 596.599514][ T8762] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 597.423992][ T8762] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 599.953355][ T8774] FAULT_INJECTION: forcing a failure. [ 599.953355][ T8774] name fail_futex, interval 1, probability 0, space 0, times 0 [ 599.996632][ T8774] CPU: 0 PID: 8774 Comm: syz.5.603 Not tainted syzkaller #0 [ 600.005747][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 600.018709][ T8774] Call Trace: [ 600.023773][ T8774] [ 600.028068][ T8774] dump_stack_lvl+0x18c/0x250 [ 600.033413][ T8774] ? show_regs_print_info+0x20/0x20 [ 600.040331][ T8774] ? load_image+0x420/0x420 [ 600.047851][ T8774] ? get_user_pages_fast_only+0xa0/0xa0 [ 600.055503][ T8774] should_fail_ex+0x394/0x4c0 [ 600.063511][ T8774] get_futex_key+0x857/0x1030 [ 600.070510][ T8774] ? futex_setup_timer+0xc0/0xc0 [ 600.078234][ T8774] futex_wake+0x127/0x4f0 [ 600.083429][ T8774] ? futex_wake_mark+0x150/0x150 [ 600.088792][ T8774] do_futex+0x35d/0x3e0 [ 600.094318][ T8774] ? __might_fault+0xaa/0x120 [ 600.100616][ T8774] ? __ia32_sys_get_robust_list+0x110/0x110 [ 600.109416][ T8774] ? __might_fault+0xc6/0x120 [ 600.114995][ T8774] mm_release+0x184/0x3a0 [ 600.120142][ T8774] ? exit_mm_release+0x30/0x30 [ 600.125812][ T8774] ? lockdep_hardirqs_on+0x98/0x150 [ 600.133777][ T8774] exit_mm+0xa4/0x340 [ 600.139037][ T8774] ? sysctl_delayacct+0x220/0x220 [ 600.146099][ T8774] ? do_exit+0x2530/0x2530 [ 600.153122][ T8774] do_exit+0x909/0x2530 [ 600.158758][ T8774] ? put_task_struct+0xc0/0xc0 [ 600.165575][ T8774] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 600.173161][ T8774] ? get_signal+0x100e/0x1390 [ 600.179502][ T8774] ? lock_chain_count+0x20/0x20 [ 600.185049][ T8774] ? _raw_spin_lock_irq+0xbb/0xf0 [ 600.191152][ T8774] do_group_exit+0x22d/0x2f0 [ 600.196665][ T8774] ? lockdep_hardirqs_on+0x98/0x150 [ 600.203499][ T8774] get_signal+0x12a6/0x1390 [ 600.210141][ T8774] arch_do_signal_or_restart+0xc2/0x7b0 [ 600.216201][ T8774] ? get_sigframe_size+0x20/0x20 [ 600.223263][ T8774] ? get_timespec64+0x11a/0x1b0 [ 600.229178][ T8774] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 600.235485][ T8774] ? exit_to_user_mode_loop+0x3b/0x110 [ 600.241429][ T8774] exit_to_user_mode_loop+0x70/0x110 [ 600.247980][ T8774] exit_to_user_mode_prepare+0xee/0x180 [ 600.254430][ T8774] syscall_exit_to_user_mode+0x1a/0x50 [ 600.260971][ T8774] do_syscall_64+0x61/0xb0 [ 600.266042][ T8774] ? clear_bhb_loop+0x40/0x90 [ 600.272083][ T8774] ? clear_bhb_loop+0x40/0x90 [ 600.278158][ T8774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.284796][ T8774] RIP: 0033:0x7f60d7d9f559 [ 600.290167][ T8774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.314935][ T8774] RSP: 002b:00007f60d8caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 600.325236][ T8774] RAX: fffffffffffffdfc RBX: 00007f60d8025fa0 RCX: 00007f60d7d9f559 [ 600.334286][ T8774] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 600.344444][ T8774] RBP: 00007f60d7e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 600.355489][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.366444][ T8774] R13: 00007f60d8026038 R14: 00007f60d8025fa0 R15: 00007ffdef08e608 [ 600.377544][ T8774] [ 605.575895][ T8819] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 606.622643][ T8819] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 609.753088][ T8844] FAULT_INJECTION: forcing a failure. [ 609.753088][ T8844] name fail_futex, interval 1, probability 0, space 0, times 0 [ 609.768903][ T8844] CPU: 0 PID: 8844 Comm: syz.6.617 Not tainted syzkaller #0 [ 609.776335][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 609.786785][ T8844] Call Trace: [ 609.790084][ T8844] [ 609.793030][ T8844] dump_stack_lvl+0x18c/0x250 [ 609.797759][ T8844] ? show_regs_print_info+0x20/0x20 [ 609.803003][ T8844] ? load_image+0x420/0x420 [ 609.808513][ T8844] ? get_user_pages_fast_only+0xa0/0xa0 [ 609.814651][ T8844] should_fail_ex+0x394/0x4c0 [ 609.819369][ T8844] get_futex_key+0x857/0x1030 [ 609.825159][ T8844] ? futex_setup_timer+0xc0/0xc0 [ 609.830216][ T8844] futex_wake+0x127/0x4f0 [ 609.834845][ T8844] ? futex_wake_mark+0x150/0x150 [ 609.841476][ T8844] do_futex+0x35d/0x3e0 [ 609.845839][ T8844] ? __might_fault+0xaa/0x120 [ 609.850817][ T8844] ? __ia32_sys_get_robust_list+0x110/0x110 [ 609.858850][ T8844] ? __might_fault+0xc6/0x120 [ 609.865744][ T8844] mm_release+0x184/0x3a0 [ 609.871765][ T8844] ? exit_mm_release+0x30/0x30 [ 609.876630][ T8844] ? lockdep_hardirqs_on+0x98/0x150 [ 609.882733][ T8844] exit_mm+0xa4/0x340 [ 609.887621][ T8844] ? sysctl_delayacct+0x220/0x220 [ 609.893897][ T8844] ? do_exit+0x2530/0x2530 [ 609.898588][ T8844] do_exit+0x909/0x2530 [ 609.903495][ T8844] ? put_task_struct+0xc0/0xc0 [ 609.908922][ T8844] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 609.915335][ T8844] ? get_signal+0x100e/0x1390 [ 609.920418][ T8844] ? lock_chain_count+0x20/0x20 [ 609.925290][ T8844] ? _raw_spin_lock_irq+0xbb/0xf0 [ 609.931439][ T8844] do_group_exit+0x22d/0x2f0 [ 609.937534][ T8844] ? lockdep_hardirqs_on+0x98/0x150 [ 609.943402][ T8844] get_signal+0x12a6/0x1390 [ 609.948607][ T8844] arch_do_signal_or_restart+0xc2/0x7b0 [ 609.955849][ T8844] ? get_sigframe_size+0x20/0x20 [ 609.961603][ T8844] ? get_timespec64+0x11a/0x1b0 [ 609.966938][ T8844] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 609.974027][ T8844] ? exit_to_user_mode_loop+0x3b/0x110 [ 609.981427][ T8844] exit_to_user_mode_loop+0x70/0x110 [ 609.988376][ T8844] exit_to_user_mode_prepare+0xee/0x180 [ 609.995846][ T8844] syscall_exit_to_user_mode+0x1a/0x50 [ 610.002406][ T8844] do_syscall_64+0x61/0xb0 [ 610.007661][ T8844] ? clear_bhb_loop+0x40/0x90 [ 610.016357][ T8844] ? clear_bhb_loop+0x40/0x90 [ 610.023200][ T8844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.030899][ T8844] RIP: 0033:0x7f6c4619f559 [ 610.039617][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.068133][ T8844] RSP: 002b:00007f6c4703b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 610.080830][ T8844] RAX: fffffffffffffdfc RBX: 00007f6c46425fa0 RCX: 00007f6c4619f559 [ 610.093650][ T8844] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 610.106996][ T8844] RBP: 00007f6c46236b20 R08: 0000000000000000 R09: 0000000000000000 [ 610.120500][ T8844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.133414][ T8844] R13: 00007f6c46426038 R14: 00007f6c46425fa0 R15: 00007ffe507d0e68 [ 610.143698][ T8844] [ 610.186377][ T5858] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 611.194588][ T5858] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 611.216288][ T5858] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 611.256249][ T5858] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 611.346287][ T5858] usb 6-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 611.361363][ T5858] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 611.416238][ T5858] usb 6-1: config 168 interface 0 has no altsetting 0 [ 611.446582][ T5858] usb 6-1: unable to read config index 1 descriptor/start: -71 [ 611.498489][ T5858] usb 6-1: can't read configurations, error -71 [ 613.533120][ T8877] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 614.350058][ T8877] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 620.600673][ T8928] FAULT_INJECTION: forcing a failure. [ 620.600673][ T8928] name fail_futex, interval 1, probability 0, space 0, times 0 [ 620.616829][ T8928] CPU: 0 PID: 8928 Comm: syz.2.636 Not tainted syzkaller #0 [ 620.624542][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 620.635321][ T8928] Call Trace: [ 620.639204][ T8928] [ 620.642430][ T8928] dump_stack_lvl+0x18c/0x250 [ 620.647532][ T8928] ? show_regs_print_info+0x20/0x20 [ 620.654087][ T8928] ? load_image+0x420/0x420 [ 620.658901][ T8928] ? get_user_pages_fast_only+0xa0/0xa0 [ 620.666030][ T8928] should_fail_ex+0x394/0x4c0 [ 620.672602][ T8928] get_futex_key+0x857/0x1030 [ 620.677503][ T8928] ? futex_setup_timer+0xc0/0xc0 [ 620.683794][ T8928] futex_wake+0x127/0x4f0 [ 620.688815][ T8928] ? futex_wake_mark+0x150/0x150 [ 620.694427][ T8928] do_futex+0x35d/0x3e0 [ 620.700488][ T8928] ? __might_fault+0xaa/0x120 [ 620.706012][ T8928] ? __ia32_sys_get_robust_list+0x110/0x110 [ 620.713435][ T8928] ? __might_fault+0xc6/0x120 [ 620.718901][ T8928] mm_release+0x184/0x3a0 [ 620.724264][ T8928] ? exit_mm_release+0x30/0x30 [ 620.729272][ T8928] ? lockdep_hardirqs_on+0x98/0x150 [ 620.734623][ T8928] exit_mm+0xa4/0x340 [ 620.738916][ T8928] ? sysctl_delayacct+0x220/0x220 [ 620.744492][ T8928] ? do_exit+0x2530/0x2530 [ 620.749402][ T8928] do_exit+0x909/0x2530 [ 620.753923][ T8928] ? put_task_struct+0xc0/0xc0 [ 620.759271][ T8928] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 620.765756][ T8928] ? get_signal+0x100e/0x1390 [ 620.770484][ T8928] ? lock_chain_count+0x20/0x20 [ 620.777510][ T8928] ? _raw_spin_lock_irq+0xbb/0xf0 [ 620.783341][ T8928] do_group_exit+0x22d/0x2f0 [ 620.788100][ T8928] ? lockdep_hardirqs_on+0x98/0x150 [ 620.793380][ T8928] get_signal+0x12a6/0x1390 [ 620.797944][ T8928] arch_do_signal_or_restart+0xc2/0x7b0 [ 620.804350][ T8928] ? get_sigframe_size+0x20/0x20 [ 620.809495][ T8928] ? get_timespec64+0x11a/0x1b0 [ 620.814460][ T8928] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 620.820185][ T8928] ? exit_to_user_mode_loop+0x3b/0x110 [ 620.825680][ T8928] exit_to_user_mode_loop+0x70/0x110 [ 620.832962][ T8928] exit_to_user_mode_prepare+0xee/0x180 [ 620.838724][ T8928] syscall_exit_to_user_mode+0x1a/0x50 [ 620.844517][ T8928] do_syscall_64+0x61/0xb0 [ 620.848952][ T8928] ? clear_bhb_loop+0x40/0x90 [ 620.853751][ T8928] ? clear_bhb_loop+0x40/0x90 [ 620.858896][ T8928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.865101][ T8928] RIP: 0033:0x7fb758b9f559 [ 620.869522][ T8928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.890388][ T8928] RSP: 002b:00007fb759a16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 620.899002][ T8928] RAX: fffffffffffffdfc RBX: 00007fb758e25fa0 RCX: 00007fb758b9f559 [ 620.907556][ T8928] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 620.915839][ T8928] RBP: 00007fb758c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 620.924351][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.932348][ T8928] R13: 00007fb758e26038 R14: 00007fb758e25fa0 R15: 00007fff96172058 [ 620.940359][ T8928] [ 625.106799][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.114382][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.147210][ T9002] FAULT_INJECTION: forcing a failure. [ 630.147210][ T9002] name fail_futex, interval 1, probability 0, space 0, times 0 [ 630.289219][ T9002] CPU: 0 PID: 9002 Comm: syz.0.650 Not tainted syzkaller #0 [ 630.296746][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 630.306990][ T9002] Call Trace: [ 630.310632][ T9002] [ 630.313577][ T9002] dump_stack_lvl+0x18c/0x250 [ 630.318399][ T9002] ? show_regs_print_info+0x20/0x20 [ 630.323711][ T9002] ? load_image+0x420/0x420 [ 630.328318][ T9002] ? get_user_pages_fast_only+0xa0/0xa0 [ 630.333940][ T9002] should_fail_ex+0x394/0x4c0 [ 630.338632][ T9002] get_futex_key+0x857/0x1030 [ 630.343316][ T9002] ? futex_setup_timer+0xc0/0xc0 [ 630.348257][ T9002] futex_wake+0x127/0x4f0 [ 630.352587][ T9002] ? futex_wake_mark+0x150/0x150 [ 630.357912][ T9002] do_futex+0x35d/0x3e0 [ 630.362098][ T9002] ? __might_fault+0xaa/0x120 [ 630.367420][ T9002] ? __ia32_sys_get_robust_list+0x110/0x110 [ 630.373597][ T9002] ? __might_fault+0xc6/0x120 [ 630.378372][ T9002] mm_release+0x184/0x3a0 [ 630.382816][ T9002] ? exit_mm_release+0x30/0x30 [ 630.387612][ T9002] ? lockdep_hardirqs_on+0x98/0x150 [ 630.394033][ T9002] exit_mm+0xa4/0x340 [ 630.399260][ T9002] ? sysctl_delayacct+0x220/0x220 [ 630.405289][ T9002] ? do_exit+0x2530/0x2530 [ 630.411073][ T9002] do_exit+0x909/0x2530 [ 630.415465][ T9002] ? put_task_struct+0xc0/0xc0 [ 630.421402][ T9002] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 630.427845][ T9002] ? get_signal+0x100e/0x1390 [ 630.434576][ T9002] ? lock_chain_count+0x20/0x20 [ 630.440311][ T9002] ? _raw_spin_lock_irq+0xbb/0xf0 [ 630.445611][ T9002] do_group_exit+0x22d/0x2f0 [ 630.450232][ T9002] ? lockdep_hardirqs_on+0x98/0x150 [ 630.455436][ T9002] get_signal+0x12a6/0x1390 [ 630.459949][ T9002] arch_do_signal_or_restart+0xc2/0x7b0 [ 630.465533][ T9002] ? get_sigframe_size+0x20/0x20 [ 630.470533][ T9002] ? get_timespec64+0x11a/0x1b0 [ 630.475530][ T9002] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 630.481731][ T9002] ? exit_to_user_mode_loop+0x3b/0x110 [ 630.487217][ T9002] exit_to_user_mode_loop+0x70/0x110 [ 630.492825][ T9002] exit_to_user_mode_prepare+0xee/0x180 [ 630.499835][ T9002] syscall_exit_to_user_mode+0x1a/0x50 [ 630.505517][ T9002] do_syscall_64+0x61/0xb0 [ 630.510221][ T9002] ? clear_bhb_loop+0x40/0x90 [ 630.515102][ T9002] ? clear_bhb_loop+0x40/0x90 [ 630.519922][ T9002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.526624][ T9002] RIP: 0033:0x7f70c4d9f559 [ 630.531226][ T9002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.551276][ T9002] RSP: 002b:00007f70c5cca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 630.559955][ T9002] RAX: fffffffffffffdfc RBX: 00007f70c5025fa0 RCX: 00007f70c4d9f559 [ 630.568096][ T9002] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 630.576166][ T9002] RBP: 00007f70c4e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 630.584600][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.592598][ T9002] R13: 00007f70c5026038 R14: 00007f70c5025fa0 R15: 00007ffd3c1b10e8 [ 630.600705][ T9002] [ 632.219647][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 635.600048][ T9069] overlayfs: failed to resolve './bus': -2 [ 646.373405][ T9158] overlayfs: failed to resolve './bus': -2 [ 647.201848][ T9165] syz.5.679[9165]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 657.736715][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 658.361866][ T9255] netlink: 14 bytes leftover after parsing attributes in process `syz.6.693'. [ 658.884727][ T27] audit: type=1800 audit(1793111849.950:3): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.693" name="file0" dev="overlay" ino=219 res=0 errno=0 [ 659.279009][ T9255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.359488][ T9255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.423218][ T9255] bond0 (unregistering): Released all slaves [ 676.816476][ T42] IPVS: starting estimator thread 0... [ 676.926504][ T9382] IPVS: using max 19 ests per chain, 45600 per kthread [ 676.949630][ T9384] autofs4:pid:9384:autofs_fill_super: called with bogus options [ 686.078980][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.087458][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.351828][ T9458] trusted_key: encrypted_key: insufficient parameters specified [ 688.380711][ T9458] trusted_key: encrypted_key: insufficient parameters specified [ 698.400182][ T9517] binder: 9516:9517 ioctl c00c6211 0 returned -14 [ 716.338968][ T9658] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 720.832102][ T9688] ALSA: mixer_oss: invalid OSS volume '' [ 720.865303][ T9688] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 720.916373][ T9688] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 720.925120][ T9688] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 720.960114][ T9688] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 720.980908][ T9688] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 721.011157][ T9688] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 721.032155][ T9688] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 721.096297][ T9688] ALSA: mixer_oss: invalid OSS volume 'î[' [ 721.103877][ T9688] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 721.126401][ T9688] ALSA: mixer_oss: invalid OSS volume '·$ [ 860.585975][T10326] dump_stack_lvl+0x18c/0x250 [ 860.591375][T10326] ? show_regs_print_info+0x20/0x20 [ 860.597281][T10326] ? load_image+0x420/0x420 [ 860.602978][T10326] ? get_user_pages_fast_only+0xa0/0xa0 [ 860.609008][T10326] should_fail_ex+0x394/0x4c0 [ 860.614182][T10326] get_futex_key+0x857/0x1030 [ 860.619067][T10326] ? futex_setup_timer+0xc0/0xc0 [ 860.624635][T10326] futex_wake+0x127/0x4f0 [ 860.629066][T10326] ? futex_wake_mark+0x150/0x150 [ 860.635038][T10326] do_futex+0x35d/0x3e0 [ 860.639781][T10326] ? __might_fault+0xaa/0x120 [ 860.646388][T10326] ? __ia32_sys_get_robust_list+0x110/0x110 [ 860.654460][T10326] ? __might_fault+0xc6/0x120 [ 860.660941][T10326] mm_release+0x184/0x3a0 [ 860.665660][T10326] ? exit_mm_release+0x30/0x30 [ 860.671767][T10326] ? lockdep_hardirqs_on+0x98/0x150 [ 860.677088][T10326] exit_mm+0xa4/0x340 [ 860.681251][T10326] ? sysctl_delayacct+0x220/0x220 [ 860.687100][T10326] ? do_exit+0x2530/0x2530 [ 860.691684][T10326] do_exit+0x909/0x2530 [ 860.696247][T10326] ? put_task_struct+0xc0/0xc0 [ 860.701324][T10326] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 860.707531][T10326] ? get_signal+0x100e/0x1390 [ 860.712765][T10326] ? lock_chain_count+0x20/0x20 [ 860.717937][T10326] ? _raw_spin_lock_irq+0xbb/0xf0 [ 860.725049][T10326] do_group_exit+0x22d/0x2f0 [ 860.731542][T10326] ? lockdep_hardirqs_on+0x98/0x150 [ 860.738154][T10326] get_signal+0x12a6/0x1390 [ 860.743501][T10326] arch_do_signal_or_restart+0xc2/0x7b0 [ 860.749453][T10326] ? get_sigframe_size+0x20/0x20 [ 860.756313][T10326] ? get_timespec64+0x11a/0x1b0 [ 860.762009][T10326] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 860.769725][T10326] ? exit_to_user_mode_loop+0x3b/0x110 [ 860.777025][T10326] exit_to_user_mode_loop+0x70/0x110 [ 860.784126][T10326] exit_to_user_mode_prepare+0xee/0x180 [ 860.789901][T10326] syscall_exit_to_user_mode+0x1a/0x50 [ 860.795926][T10326] do_syscall_64+0x61/0xb0 [ 860.800370][T10326] ? clear_bhb_loop+0x40/0x90 [ 860.805170][T10326] ? clear_bhb_loop+0x40/0x90 [ 860.809905][T10326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 860.816115][T10326] RIP: 0033:0x7f60d7d9f559 [ 860.821208][T10326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.841634][T10326] RSP: 002b:00007f60d8caf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 860.850177][T10326] RAX: fffffffffffffdfc RBX: 00007f60d8025fa0 RCX: 00007f60d7d9f559 [ 860.858269][T10326] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 860.866263][T10326] RBP: 00007f60d7e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 860.874650][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.883095][T10326] R13: 00007f60d8026038 R14: 00007f60d8025fa0 R15: 00007ffdef08e608 [ 860.892609][T10326] [ 860.956318][T10341] trusted_key: encrypted_key: insufficient parameters specified [ 860.966782][T10341] trusted_key: encrypted_key: insufficient parameters specified [ 862.138940][T10344] overlayfs: missing 'lowerdir' [ 864.901894][T10354] syz.0.950 uses obsolete (PF_INET,SOCK_PACKET) [ 867.956449][ T5916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 869.529971][ T5916] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 869.546718][T10374] FAULT_INJECTION: forcing a failure. [ 869.546718][T10374] name fail_futex, interval 1, probability 0, space 0, times 0 [ 869.562559][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 869.575908][T10374] CPU: 1 PID: 10374 Comm: syz.2.963 Not tainted syzkaller #0 [ 869.583599][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 869.594651][T10374] Call Trace: [ 869.598427][T10374] [ 869.601397][T10374] dump_stack_lvl+0x18c/0x250 [ 869.606354][T10374] ? show_regs_print_info+0x20/0x20 [ 869.611856][T10374] ? load_image+0x420/0x420 [ 869.618661][T10374] ? __lock_acquire+0x1431/0x7eb0 [ 869.623883][T10374] should_fail_ex+0x394/0x4c0 [ 869.628607][T10374] get_futex_key+0x16f/0x1030 [ 869.633422][T10374] ? futex_setup_timer+0xc0/0xc0 [ 869.638659][T10374] futex_wake+0x127/0x4f0 [ 869.643375][T10374] ? futex_wake_mark+0x150/0x150 [ 869.649483][T10374] do_futex+0x35d/0x3e0 [ 869.655607][T10374] ? __might_fault+0xaa/0x120 [ 869.660998][T10374] ? __ia32_sys_get_robust_list+0x110/0x110 [ 869.667803][T10374] ? __might_fault+0xc6/0x120 [ 869.672667][T10374] mm_release+0x184/0x3a0 [ 869.678002][T10374] ? exit_mm_release+0x30/0x30 [ 869.683321][T10374] ? lockdep_hardirqs_on+0x98/0x150 [ 869.688654][T10374] exit_mm+0xa4/0x340 [ 869.693565][T10374] ? sysctl_delayacct+0x220/0x220 [ 869.699424][T10374] ? do_exit+0x2530/0x2530 [ 869.704056][T10374] do_exit+0x909/0x2530 [ 869.708529][T10374] ? put_task_struct+0xc0/0xc0 [ 869.716197][T10374] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 869.722871][T10374] ? get_signal+0x100e/0x1390 [ 869.728671][T10374] ? lock_chain_count+0x20/0x20 [ 869.735554][T10374] ? _raw_spin_lock_irq+0xbb/0xf0 [ 869.741394][T10374] do_group_exit+0x22d/0x2f0 [ 869.746535][T10374] ? lockdep_hardirqs_on+0x98/0x150 [ 869.752194][T10374] get_signal+0x12a6/0x1390 [ 869.757518][T10374] arch_do_signal_or_restart+0xc2/0x7b0 [ 869.764926][T10374] ? get_sigframe_size+0x20/0x20 [ 869.771457][T10374] ? get_timespec64+0x11a/0x1b0 [ 869.776713][T10374] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 869.783090][T10374] ? exit_to_user_mode_loop+0x3b/0x110 [ 869.789617][T10374] exit_to_user_mode_loop+0x70/0x110 [ 869.795826][T10374] exit_to_user_mode_prepare+0xee/0x180 [ 869.802025][T10374] syscall_exit_to_user_mode+0x1a/0x50 [ 869.807784][T10374] do_syscall_64+0x61/0xb0 [ 869.812537][T10374] ? clear_bhb_loop+0x40/0x90 [ 869.817355][T10374] ? clear_bhb_loop+0x40/0x90 [ 869.822281][T10374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.828481][T10374] RIP: 0033:0x7fb758b9f559 [ 869.834416][T10374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.857234][T10374] RSP: 002b:00007fb759a16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 869.866187][T10374] RAX: fffffffffffffdfc RBX: 00007fb758e25fa0 RCX: 00007fb758b9f559 [ 869.874548][T10374] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 869.883794][T10374] RBP: 00007fb758c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 869.893826][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 869.902263][T10374] R13: 00007fb758e26038 R14: 00007fb758e25fa0 R15: 00007fff96172058 [ 869.911334][T10374] [ 869.956686][ T5916] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 869.986157][ T5916] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 870.029405][ T5916] usb 1-1: Manufacturer: syz [ 870.047966][ T5916] usb 1-1: config 0 descriptor?? [ 870.088772][ T5916] usbtest 1-1:0.0: Interface 0 is not authorized for usage [ 870.116564][ T5916] igorplugusb 1-1:0.0: Interface 0 is not authorized for usage [ 870.342527][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.354195][T10387] netlink: 44 bytes leftover after parsing attributes in process `syz.2.966'. [ 870.443066][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.189593][ T8407] usb 1-1: USB disconnect, device number 7 [ 873.151806][T10409] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 875.637815][T10414] FAULT_INJECTION: forcing a failure. [ 875.637815][T10414] name fail_futex, interval 1, probability 0, space 0, times 0 [ 875.737653][T10414] CPU: 1 PID: 10414 Comm: syz.2.973 Not tainted syzkaller #0 [ 875.747582][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 875.761589][T10414] Call Trace: [ 875.765311][T10414] [ 875.770161][T10414] dump_stack_lvl+0x18c/0x250 [ 875.777053][T10414] ? show_regs_print_info+0x20/0x20 [ 875.783303][T10414] ? load_image+0x420/0x420 [ 875.789457][T10414] ? __lock_acquire+0x1431/0x7eb0 [ 875.797246][T10414] should_fail_ex+0x394/0x4c0 [ 875.805095][T10414] get_futex_key+0x16f/0x1030 [ 875.811739][T10414] ? futex_setup_timer+0xc0/0xc0 [ 875.819125][T10414] futex_wake+0x127/0x4f0 [ 875.826555][T10414] ? futex_wake_mark+0x150/0x150 [ 875.837293][T10414] do_futex+0x35d/0x3e0 [ 875.843142][T10414] ? __might_fault+0xaa/0x120 [ 875.849873][T10414] ? __ia32_sys_get_robust_list+0x110/0x110 [ 875.859220][T10414] ? __might_fault+0xc6/0x120 [ 875.864776][T10414] mm_release+0x184/0x3a0 [ 875.869730][T10414] ? exit_mm_release+0x30/0x30 [ 875.877721][T10414] ? lockdep_hardirqs_on+0x98/0x150 [ 875.884187][T10414] exit_mm+0xa4/0x340 [ 875.890393][T10414] ? sysctl_delayacct+0x220/0x220 [ 875.898044][T10414] ? do_exit+0x2530/0x2530 [ 875.902597][T10414] do_exit+0x909/0x2530 [ 875.907254][T10414] ? put_task_struct+0xc0/0xc0 [ 875.913195][T10414] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 875.922437][T10414] ? get_signal+0x100e/0x1390 [ 875.928131][T10414] ? lock_chain_count+0x20/0x20 [ 875.933902][T10414] ? _raw_spin_lock_irq+0xbb/0xf0 [ 875.942182][T10414] do_group_exit+0x22d/0x2f0 [ 875.948124][T10414] ? lockdep_hardirqs_on+0x98/0x150 [ 875.956512][T10414] get_signal+0x12a6/0x1390 [ 875.962197][T10414] arch_do_signal_or_restart+0xc2/0x7b0 [ 875.971888][T10414] ? get_sigframe_size+0x20/0x20 [ 875.979580][T10414] ? get_timespec64+0x11a/0x1b0 [ 875.988305][T10414] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 875.996056][T10414] ? exit_to_user_mode_loop+0x3b/0x110 [ 876.002543][T10414] exit_to_user_mode_loop+0x70/0x110 [ 876.008469][T10414] exit_to_user_mode_prepare+0xee/0x180 [ 876.016625][T10414] syscall_exit_to_user_mode+0x1a/0x50 [ 876.023577][T10414] do_syscall_64+0x61/0xb0 [ 876.030162][T10414] ? clear_bhb_loop+0x40/0x90 [ 876.039126][T10414] ? clear_bhb_loop+0x40/0x90 [ 876.044308][T10414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.051883][T10414] RIP: 0033:0x7fb758b9f559 [ 876.057213][T10414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.079560][T10414] RSP: 002b:00007fb759a16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 876.093245][T10414] RAX: fffffffffffffdfc RBX: 00007fb758e25fa0 RCX: 00007fb758b9f559 [ 876.105782][T10414] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 876.118191][T10414] RBP: 00007fb758c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 876.128662][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.143647][T10414] R13: 00007fb758e26038 R14: 00007fb758e25fa0 R15: 00007fff96172058 [ 876.154427][T10414] [ 876.337233][T10419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.975'. [ 884.455985][T10460] ======================================================= [ 884.455985][T10460] WARNING: The mand mount option has been deprecated and [ 884.455985][T10460] and is ignored by this kernel. Remove the mand [ 884.455985][T10460] option from the mount to silence this warning. [ 884.455985][T10460] ======================================================= [ 884.757193][T10455] FAULT_INJECTION: forcing a failure. [ 884.757193][T10455] name fail_futex, interval 1, probability 0, space 0, times 0 [ 884.850020][T10455] CPU: 1 PID: 10455 Comm: syz.6.983 Not tainted syzkaller #0 [ 884.859381][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 884.870258][T10455] Call Trace: [ 884.874605][T10455] [ 884.878337][T10455] dump_stack_lvl+0x18c/0x250 [ 884.883742][T10455] ? show_regs_print_info+0x20/0x20 [ 884.889861][T10455] ? load_image+0x420/0x420 [ 884.895979][T10455] ? get_user_pages_fast_only+0xa0/0xa0 [ 884.902840][T10455] should_fail_ex+0x394/0x4c0 [ 884.907912][T10455] get_futex_key+0x857/0x1030 [ 884.912636][T10455] ? futex_setup_timer+0xc0/0xc0 [ 884.918393][T10455] futex_wake+0x127/0x4f0 [ 884.923659][T10455] ? futex_wake_mark+0x150/0x150 [ 884.929280][T10455] do_futex+0x35d/0x3e0 [ 884.935126][T10455] ? __might_fault+0xaa/0x120 [ 884.941688][T10455] ? __ia32_sys_get_robust_list+0x110/0x110 [ 884.949132][T10455] ? __might_fault+0xc6/0x120 [ 884.954150][T10455] mm_release+0x184/0x3a0 [ 884.960468][T10455] ? exit_mm_release+0x30/0x30 [ 884.965981][T10455] ? lockdep_hardirqs_on+0x98/0x150 [ 884.972887][T10455] exit_mm+0xa4/0x340 [ 884.981739][T10455] ? sysctl_delayacct+0x220/0x220 [ 884.987041][T10455] ? do_exit+0x2530/0x2530 [ 884.993502][T10455] do_exit+0x909/0x2530 [ 885.000993][T10455] ? put_task_struct+0xc0/0xc0 [ 885.006631][T10455] ? preempt_schedule_common+0x82/0xc0 [ 885.014648][T10455] ? preempt_schedule+0xc0/0xd0 [ 885.021082][T10455] ? schedule_preempt_disabled+0x20/0x20 [ 885.031605][T10455] do_group_exit+0x22d/0x2f0 [ 885.037650][T10455] get_signal+0x12a6/0x1390 [ 885.043967][T10455] arch_do_signal_or_restart+0xc2/0x7b0 [ 885.050345][T10455] ? get_sigframe_size+0x20/0x20 [ 885.061315][T10455] ? get_timespec64+0x11a/0x1b0 [ 885.068301][T10455] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 885.075960][T10455] ? exit_to_user_mode_loop+0x3b/0x110 [ 885.083178][T10455] exit_to_user_mode_loop+0x70/0x110 [ 885.090733][T10455] exit_to_user_mode_prepare+0xee/0x180 [ 885.098923][T10455] syscall_exit_to_user_mode+0x1a/0x50 [ 885.104941][T10455] do_syscall_64+0x61/0xb0 [ 885.110331][T10455] ? clear_bhb_loop+0x40/0x90 [ 885.115850][T10455] ? clear_bhb_loop+0x40/0x90 [ 885.121929][T10455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.129399][T10455] RIP: 0033:0x7f6c4619f559 [ 885.135297][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.158302][T10455] RSP: 002b:00007f6c4703b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 885.167004][T10455] RAX: fffffffffffffdfc RBX: 00007f6c46425fa0 RCX: 00007f6c4619f559 [ 885.176743][T10455] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 885.184719][T10455] RBP: 00007f6c46236b20 R08: 0000000000000000 R09: 0000000000000000 [ 885.192752][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.202860][T10455] R13: 00007f6c46426038 R14: 00007f6c46425fa0 R15: 00007ffe507d0e68 [ 885.211301][T10455] [ 890.126297][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 890.852727][T10488] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 892.156303][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 892.166931][ T23] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 892.175739][ T23] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 892.236273][ T23] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 892.266551][ T23] usb 7-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 892.296181][ T23] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 892.343796][ T23] usb 7-1: config 168 interface 0 has no altsetting 0 [ 892.371373][ T23] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 892.384298][ T23] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 892.436181][ T23] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 892.466377][ T23] usb 7-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 892.502598][ T23] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 892.730402][ T23] usb 7-1: config 168 interface 0 has no altsetting 0 [ 894.216846][ T23] usb 7-1: unable to read config index 2 descriptor/start: -71 [ 894.225416][ T23] usb 7-1: can't read configurations, error -71 [ 895.414663][ T27] audit: type=1800 audit(1793112087.190:9): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.991" name="file0" dev="overlay" ino=658 res=0 errno=0 [ 895.453877][T10502] netlink: 14 bytes leftover after parsing attributes in process `syz.5.991'. [ 898.716713][T10509] FAULT_INJECTION: forcing a failure. [ 898.716713][T10509] name fail_futex, interval 1, probability 0, space 0, times 0 [ 898.796929][T10509] CPU: 1 PID: 10509 Comm: syz.6.997 Not tainted syzkaller #0 [ 898.804761][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 898.816584][T10509] Call Trace: [ 898.820367][T10509] [ 898.823846][T10509] dump_stack_lvl+0x18c/0x250 [ 898.828934][T10509] ? show_regs_print_info+0x20/0x20 [ 898.834440][T10509] ? load_image+0x420/0x420 [ 898.840761][T10509] ? get_user_pages_fast_only+0xa0/0xa0 [ 898.846886][T10509] should_fail_ex+0x394/0x4c0 [ 898.853262][T10509] get_futex_key+0x857/0x1030 [ 898.859411][T10509] ? futex_setup_timer+0xc0/0xc0 [ 898.864905][T10509] futex_wake+0x127/0x4f0 [ 898.869996][T10509] ? futex_wake_mark+0x150/0x150 [ 898.875433][T10509] do_futex+0x35d/0x3e0 [ 898.879793][T10509] ? __might_fault+0xaa/0x120 [ 898.884719][T10509] ? __ia32_sys_get_robust_list+0x110/0x110 [ 898.891610][T10509] ? __might_fault+0xc6/0x120 [ 898.897288][T10509] mm_release+0x184/0x3a0 [ 898.903979][T10509] ? exit_mm_release+0x30/0x30 [ 898.909732][T10509] ? lockdep_hardirqs_on+0x98/0x150 [ 898.918735][T10509] exit_mm+0xa4/0x340 [ 898.923300][T10509] ? sysctl_delayacct+0x220/0x220 [ 898.928542][T10509] ? do_exit+0x2530/0x2530 [ 898.933201][T10509] do_exit+0x909/0x2530 [ 898.937969][T10509] ? put_task_struct+0xc0/0xc0 [ 898.943849][T10509] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 898.954056][T10509] ? get_signal+0x100e/0x1390 [ 898.959270][T10509] ? lock_chain_count+0x20/0x20 [ 898.965388][T10509] ? _raw_spin_lock_irq+0xbb/0xf0 [ 898.971063][T10509] do_group_exit+0x22d/0x2f0 [ 898.977739][T10509] ? lockdep_hardirqs_on+0x98/0x150 [ 898.983608][T10509] get_signal+0x12a6/0x1390 [ 898.989155][T10509] arch_do_signal_or_restart+0xc2/0x7b0 [ 898.995184][T10509] ? get_sigframe_size+0x20/0x20 [ 899.001572][T10509] ? get_timespec64+0x11a/0x1b0 [ 899.007916][T10509] ? __se_sys_clock_nanosleep+0x30f/0x3a0 [ 899.015427][T10509] ? exit_to_user_mode_loop+0x3b/0x110 [ 899.022962][T10509] exit_to_user_mode_loop+0x70/0x110 [ 899.028642][T10509] exit_to_user_mode_prepare+0xee/0x180 [ 899.035012][T10509] syscall_exit_to_user_mode+0x1a/0x50 [ 899.041122][T10509] do_syscall_64+0x61/0xb0 [ 899.046126][T10509] ? clear_bhb_loop+0x40/0x90 [ 899.052671][T10509] ? clear_bhb_loop+0x40/0x90 [ 899.057368][T10509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.064010][T10509] RIP: 0033:0x7f6c4619f559 [ 899.068759][T10509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.092261][T10509] RSP: 002b:00007f6c4703b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 899.101930][T10509] RAX: fffffffffffffdfc RBX: 00007f6c46425fa0 RCX: 00007f6c4619f559 [ 899.110377][T10509] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000000000002 [ 899.119186][T10509] RBP: 00007f6c46236b20 R08: 0000000000000000 R09: 0000000000000000 [ 899.127581][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.135922][T10509] R13: 00007f6c46426038 R14: 00007f6c46425fa0 R15: 00007ffe507d0e68 [ 899.145081][T10509] [ 901.680438][T10529] overlayfs: failed to resolve './file1': -2 [ 906.203190][T10554] overlayfs: missing 'lowerdir' [ 912.766562][T10579] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1009'. [ 915.573414][T10592] si4713 0-0006: IRQ not configured. Using timeouts. [ 915.596961][T10592] si4713 0-0006: Error while sending command 0x01 [ 915.604072][T10592] si4713 0-0006: Failed to probe device information. [ 915.649224][T10592] si4713: probe of 0-0006 failed with error -5 [ 915.670387][T10592] i2c i2c-0: new_device: Instantiated device si4713 at 0x06 [ 919.346226][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 919.366360][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1025'. [ 919.554703][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 919.574194][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.614610][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 919.631902][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 920.605547][ T9] usb 7-1: Manufacturer: syz [ 920.636695][ T9] usb 7-1: config 0 descriptor?? [ 920.816901][ T9] rc_core: IR keymap rc-hauppauge not found [ 920.823930][ T9] Registered IR keymap rc-empty [ 922.220835][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 922.234050][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 923.957683][ T9] usb 7-1: USB disconnect, device number 6 [ 927.275635][ T27] audit: type=1800 audit(1793112118.290:10): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1031" name="file0" dev="overlay" ino=1646 res=0 errno=0 [ 930.344015][ T5858] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 930.541739][ T5858] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 930.574454][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.621499][ T5858] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 930.647410][ T5858] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 930.692759][ T5858] usb 3-1: Manufacturer: syz [ 930.728077][ T5858] usb 3-1: config 0 descriptor?? [ 931.076393][ T5858] rc_core: IR keymap rc-hauppauge not found [ 931.106106][ T5858] Registered IR keymap rc-empty [ 931.112737][ T5858] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 931.147845][ T5858] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 931.190481][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 931.444661][ T5858] usb 3-1: USB disconnect, device number 9 [ 931.792775][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.801125][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.130675][ T27] audit: type=1800 audit(1793112124.910:11): pid=10696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1047" name="file0" dev="overlay" ino=1577 res=0 errno=0 [ 936.849518][T10727] overlayfs: missing 'lowerdir' [ 937.880883][T10732] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1071'. [ 941.026495][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 941.263148][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 941.284619][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.303888][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 944.639106][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 944.639135][ T9] usb 1-1: Manufacturer: syz [ 944.672878][ T9] usb 1-1: config 0 descriptor?? [ 944.851846][ T9] usb 1-1: can't set config #0, error -71 [ 944.860807][ T9] usb 1-1: USB disconnect, device number 8 [ 959.381335][T10814] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1083'. [ 959.536365][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 959.767600][ T23] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 959.796331][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.817170][ T23] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 959.834891][ T23] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 959.864834][ T23] usb 3-1: Manufacturer: syz [ 961.317233][ T23] usb 3-1: config 0 descriptor?? [ 961.546347][ T23] rc_core: IR keymap rc-hauppauge not found [ 961.564314][ T23] Registered IR keymap rc-empty [ 961.585664][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 961.634414][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 961.676091][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 961.932919][ T9] usb 3-1: USB disconnect, device number 10 [ 967.442910][T10861] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1094'. [ 988.219122][T10937] overlayfs: failed to resolve './bus': -2                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=2298 state=3 status=67 (errno 9: Bad file descriptor)