last executing test programs: 1m42.493060564s ago: executing program 0 (id=1467): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000c060101000000000000000000000004050001009ec9a59322fe10d8dbb2def971540f991096f56aa22e9fd63fc945bfa6225fa333790959afccdac0b7f08fefe66c8dcf86ba6e48812902"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi0\x00', 0x40080, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) unshare(0x40000000) r3 = socket$inet(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1m40.372936383s ago: executing program 0 (id=1471): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbbb, {0x0, 0x0, 0x0, r3, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) close(r4) 1m40.202227983s ago: executing program 0 (id=1476): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=virtio,version=9p2000.u']) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0x4a8e) read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000340)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) 1m39.94737989s ago: executing program 0 (id=1477): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r6 = dup3(r5, r3, 0x80000) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r14 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r14}}, 0x20) openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m37.539511476s ago: executing program 0 (id=1488): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) writev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000280), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r5}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1m37.241408956s ago: executing program 0 (id=1491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m37.217438604s ago: executing program 32 (id=1491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m20.557885688s ago: executing program 3 (id=1584): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x16, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @empty, 0x7}, 0x1c) (fail_nth: 4) 1m20.04201044s ago: executing program 3 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) gettid() r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r7, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x28000600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) gettimeofday(0x0, &(0x7f0000000140)) r8 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r8, 0x4142, 0x0) r9 = msgget(0x3, 0x710) msgctl$IPC_RMID(r9, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f4000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRESDEC=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040040000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000a00000008000100", @ANYRES32=r3, @ANYBLOB="b800028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="5001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000d00040906000000550c020d0001000000000006090000000101037805000000a36d07040400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=r3, @ANYBLOB="2401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff08000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f13300003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000600008000100", @ANYRES32=r3, @ANYBLOB="300202803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400fe000000080006000f269c24a029a4cc1d", @ANYRES64, @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff03050705000000050005051c0b00000900057f0000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003", @ANYRES32=r3, @ANYBLOB="fc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040001000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff0000000800070000000000080001", @ANYRES32=r3, @ANYBLOB="9c0002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400080002050200000007008004190b00007adc0708ffffff7f00000301ff0300000100100f000002003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004000400080006", @ANYBLOB], 0x834}, 0x1, 0x0, 0x0, 0x20040004}, 0x800) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x2}}}, 0xfc5d}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) sendfile64(r2, r10, 0x0, 0x5) 1m19.90401928s ago: executing program 3 (id=1587): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000019080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x3000}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x4, 0x1, 0x2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0xd4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000200)={r4, r7, 0xe, 0x3, 0x1}) write$cgroup_int(r3, &(0x7f0000000040)=0x8000000001cb, 0x12) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m18.642109521s ago: executing program 3 (id=1592): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r6 = dup3(r5, r3, 0x80000) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m17.771783908s ago: executing program 3 (id=1595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) gettid() r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = syz_open_procfs$namespace(0x0, 0x0) open_by_handle_at(r7, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0x28000600) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) gettimeofday(0x0, &(0x7f0000000140)) r8 = syz_open_dev$sndpcmc(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r8, 0x4142, 0x0) r9 = msgget(0x3, 0x710) msgctl$IPC_RMID(r9, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f4000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffffffff08000600", @ANYRESDEC=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040040000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000a00000008000100", @ANYRES32=r3, @ANYBLOB="b800028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="5001028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000d00040906000000550c020d0001000000000006090000000101037805000000a36d07040400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=r3, @ANYBLOB="2401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff08000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f13300003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000600008000100", @ANYRES32=r3, @ANYBLOB="300202803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400fe000000080006000f269c24a029a4cc1d", @ANYRES64, @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r3, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff03050705000000050005051c0b00000900057f0000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003", @ANYRES32=r3, @ANYBLOB="fc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040001000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff0000000800070000000000080001", @ANYRES32=r3, @ANYBLOB="9c0002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400080002050200000007008004190b00007adc0708ffffff7f00000301ff0300000100100f000002003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004000400080006", @ANYBLOB], 0x834}, 0x1, 0x0, 0x0, 0x20040004}, 0x800) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x2}}}, 0xfc5d}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) sendfile64(r2, r10, 0x0, 0x5) 1m17.15050709s ago: executing program 3 (id=1597): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r6 = dup3(r5, r3, 0x80000) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1m17.150218855s ago: executing program 33 (id=1597): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r6 = dup3(r5, r3, 0x80000) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 23.084242532s ago: executing program 2 (id=1868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 21.591106714s ago: executing program 2 (id=1874): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 20.004567702s ago: executing program 2 (id=1880): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 18.976053942s ago: executing program 2 (id=1884): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) r5 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 18.08912265s ago: executing program 2 (id=1886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 17.662174638s ago: executing program 2 (id=1889): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) close(r3) 17.622251576s ago: executing program 34 (id=1889): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) close(r3) 6.520676731s ago: executing program 6 (id=1932): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.592175709s ago: executing program 6 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 5.441907969s ago: executing program 6 (id=1939): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) 5.321812592s ago: executing program 6 (id=1941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$WPAN_SECURITY(r3, 0x0, 0x17, &(0x7f0000000000)=0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1101, 0x1, 0x58}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 5.196574849s ago: executing program 4 (id=1944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x1, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1101, 0x1, 0x58}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='./binderfs/binder0\x00', &(0x7f0000000140)='./binderfs/binder0\x00', 0x0) 5.194267228s ago: executing program 1 (id=1945): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 5.048659636s ago: executing program 6 (id=1946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xef) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) 4.901788275s ago: executing program 1 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 3.848301466s ago: executing program 1 (id=1948): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r2, 0x0, 0x4000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r6 = dup3(r5, r3, 0x80000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3.847982639s ago: executing program 4 (id=1949): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) 3.711189572s ago: executing program 4 (id=1950): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000019080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x3000}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x4, 0x1, 0x2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0xd4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000200)={r4, r7, 0xe, 0x3, 0x1}) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.467110543s ago: executing program 1 (id=1951): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 2.842020581s ago: executing program 5 (id=1955): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r4, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(r2) 2.780083066s ago: executing program 4 (id=1956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 2.339094774s ago: executing program 1 (id=1957): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=virtio,version=9p2000.u']) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0x4a8e) read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={&(0x7f0000000280)="3e6bf1da917b", &(0x7f00000002c0)=""/114, &(0x7f00000003c0)="9438f17c997cc122824012c5241a1331da027e133cb6b64bea25a1e2a543bf20fdad290fca9e60c4616a7641e3160a5af6acb2a0452d36a73602c0602fd933512d37c708ec6b23b37f1b0ca2cba4c01a3acdd4c32f3ead27498d63fe6215fb840b4485", &(0x7f0000000580)="4a93713bfe500b7b10faa9920399d5e8a63e1fc6ecaceec4ace3a7aedc635728d8184a395d38cb343013cf086624aae888a98aa20706be5a0c465feeb77c08b1ac7018f6da3983ba60332b9b8685751800a72ad5c60a09c100635014759123c25e7752b46a55b01d1b8e3d31d82d083ac34f5b6a94c8a67bfc3dc359e8ada2763716579a2621a4550b5ff5bff2e357da7d6db7367f89cf68e03b034fb6ce90b8d6c85c975d66f2f82834ee4528e8e5f654c523223f9d255c111f7990971cb25c9af0c528358ed657b78c9b60dd15e28f880687db4d4b6ccdfae0279f6f3dbd", 0x3, r1}, 0x38) r2 = openat$dir(0xffffff9c, &(0x7f0000000180)='./bus\x00', 0x226082, 0x178) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x0, @auto="5a3120963505204f"}) 2.040228966s ago: executing program 5 (id=1958): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x1100, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) 1.941907294s ago: executing program 1 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xef) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) 1.941473908s ago: executing program 6 (id=1960): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000180), 0x900c2, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x200040d0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) 1.850623547s ago: executing program 35 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008890}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xef) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) 1.801606907s ago: executing program 5 (id=1962): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$WPAN_SECURITY(r3, 0x0, 0x17, &(0x7f0000000000)=0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socket(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1101, 0x1, 0x58}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.801128877s ago: executing program 4 (id=1963): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=virtio,ve']) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ftruncate(r0, 0x4a8e) 1.571790408s ago: executing program 5 (id=1964): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x8, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$WPAN_SECURITY(r3, 0x0, 0x17, &(0x7f0000000000)=0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1101, 0x1, 0x58}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='./binderfs/binder0\x00', &(0x7f0000000140)='./binderfs/binder0\x00', 0x0) 1.566781594s ago: executing program 4 (id=1971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) unshare(0x40000000) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 881.853605ms ago: executing program 5 (id=1965): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 5 (id=1966): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) kernel console output (not intermixed with test programs): 0000000000000127 [ 515.849287][T12561] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 515.849294][T12561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.849301][T12561] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.849308][T12561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.849315][T12561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.849329][T12561] [ 515.952507][T12462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.219835][T12462] veth0_vlan: entered promiscuous mode [ 516.229297][T12462] veth1_vlan: entered promiscuous mode [ 516.297739][T12462] veth0_macvtap: entered promiscuous mode [ 516.299885][T12462] veth1_macvtap: entered promiscuous mode [ 516.325116][T12462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.327260][T12462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.405135][ T5784] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.405183][ T5784] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.405213][ T5784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.405243][ T5784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.520983][T12579] random: crng reseeded on system resumption [ 516.623360][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.623381][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.666970][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.666993][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.854129][ T5817] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 516.916743][T12587] [U] ¹ÉMÙ­ÕÁQ& [ 516.916776][T12587] [U] [ 516.916802][T12587] [U] [ 516.916838][T12587] [U] [ 516.917258][T12587] [U] [ 516.917285][T12587] [U] [ 516.917308][T12587] [U] [ 516.917326][T12587] [U] [ 516.917558][T12587] [U] [ 516.917586][T12587] [U] [ 516.917608][T12587] [U] [ 516.917633][T12587] [U] [ 516.917739][T12587] [U] [ 516.917764][T12587] [U] [ 516.917784][T12587] [U] [ 516.917805][T12587] [U] [ 516.917919][T12587] [U] [ 516.917944][T12587] [U] [ 516.917969][T12587] [U] [ 516.917989][T12587] [U] [ 516.918110][T12587] [U] [ 516.918135][T12587] [U] [ 516.918161][T12587] [U] [ 516.918179][T12587] [U] [ 516.918317][T12587] [U] [ 516.918344][T12587] [U] [ 516.918366][T12587] [U] [ 516.918394][T12587] [U] [ 516.918521][T12587] [U] [ 516.918550][T12587] [U] [ 516.918572][T12587] [U] [ 516.918597][T12587] [U] [ 516.918754][T12587] [U] [ 516.918789][T12587] [U] [ 516.918814][T12587] [U] [ 516.918837][T12587] [U] [ 516.918982][T12587] [U] [ 516.919004][T12587] [U] [ 516.919029][T12587] [U] [ 516.919055][T12587] [U] [ 516.919160][T12587] [U] [ 516.919181][T12587] [U] [ 516.919202][T12587] [U] [ 516.919226][T12587] [U] [ 516.919341][T12587] [U] [ 516.919365][T12587] [U] [ 516.919385][T12587] [U] [ 516.919409][T12587] [U] [ 516.919511][T12587] [U] [ 516.919569][T12587] [U] [ 516.919599][T12587] [U] [ 516.919627][T12587] [U] [ 516.919780][T12587] [U] [ 516.919799][T12587] [U] [ 516.919817][T12587] [U] [ 516.919835][T12587] [U] [ 516.919937][T12587] [U] [ 516.919958][T12587] [U] [ 516.919986][T12587] [U] [ 516.920011][T12587] [U] [ 516.920124][T12587] [U] [ 516.920150][T12587] [U] [ 516.920168][T12587] [U] [ 516.920192][T12587] [U] [ 516.920301][T12587] [U] [ 516.920324][T12587] [U] [ 516.920352][T12587] [U] [ 516.920377][T12587] [U] [ 516.920491][T12587] [U] [ 516.920516][T12587] [U] [ 516.920539][T12587] [U] [ 516.920559][T12587] [U] [ 516.920663][T12587] [U] [ 516.920688][T12587] [U] [ 516.920713][T12587] [U] [ 516.920732][T12587] [U] [ 516.920843][T12587] [U] [ 516.920867][T12587] [U] [ 516.920892][T12587] [U] [ 516.920917][T12587] [U] [ 516.921033][T12587] [U] [ 516.921059][T12587] [U] [ 516.921085][T12587] [U] [ 516.921108][T12587] [U] [ 516.921218][T12587] [U] [ 516.921242][T12587] [U] [ 516.921267][T12587] [U] [ 516.921292][T12587] [U] [ 516.921398][T12587] [U] [ 516.921416][T12587] [U] [ 516.921440][T12587] [U] [ 516.921465][T12587] [U] [ 516.921577][T12587] [U] [ 516.921603][T12587] [U] [ 516.921627][T12587] [U] [ 516.921646][T12587] [U] [ 516.921753][T12587] [U] [ 516.921777][T12587] [U] [ 516.921802][T12587] [U] [ 516.921827][T12587] [U] [ 516.921943][T12587] [U] [ 516.921988][T12587] [U] [ 516.922018][T12587] [U] [ 516.922044][T12587] [U] [ 516.922299][T12587] [U] [ 516.922327][T12587] [U] [ 516.922352][T12587] [U] [ 516.922371][T12587] [U] [ 516.922489][T12587] [U] [ 516.922519][T12587] [U] [ 516.922545][T12587] [U] [ 516.922567][T12587] [U] [ 516.922671][T12587] [U] [ 516.922696][T12587] [U] [ 516.922721][T12587] [U] [ 516.922747][T12587] [U] [ 516.922868][T12587] [U] [ 516.922890][T12587] [U] [ 516.922911][T12587] [U] [ 516.922940][T12587] [U] [ 516.923057][T12587] [U] [ 516.923086][T12587] [U] [ 516.923113][T12587] [U] [ 516.923140][T12587] [U] [ 516.923241][T12587] [U] [ 516.923269][T12587] [U] [ 516.923295][T12587] [U] [ 516.930664][T12586] [U] [ 516.970549][T12589] gadgetfs: bound to dummy_udc driver [ 517.010264][ T5817] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 517.011535][ T5817] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 517.011557][ T5817] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 517.011589][ T5817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.025023][ T5817] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 517.028399][ T5817] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 517.316982][T12594] binder: 12593:12594 ioctl c0306201 80000680 returned -14 [ 517.404157][ T5744] Bluetooth: hci0: command tx timeout [ 517.658129][T12603] binder: 12602:12603 ioctl c00c6211 0 returned -14 [ 517.850894][ T6006] usb 6-1: USB disconnect, device number 59 [ 518.391309][T12611] binder: 12610:12611 ioctl c00c6211 0 returned -14 [ 518.986936][T12619] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 518.992826][T12619] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 519.005128][T12619] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 519.421329][T12614] FAULT_INJECTION: forcing a failure. [ 519.421329][T12614] name failslab, interval 1, probability 0, space 0, times 0 [ 519.421360][T12614] CPU: 1 UID: 0 PID: 12614 Comm: syz.1.1619 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.421379][T12614] Tainted: [L]=SOFTLOCKUP [ 519.421384][T12614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.421391][T12614] Call Trace: [ 519.421396][T12614] [ 519.421401][T12614] dump_stack_lvl+0x100/0x190 [ 519.421420][T12614] should_fail_ex.cold+0x5/0xa [ 519.421437][T12614] should_failslab+0xc2/0x120 [ 519.421456][T12614] kmem_cache_alloc_noprof+0x92/0x6a0 [ 519.421472][T12614] ? proc_net_ns_init+0x42/0x420 [ 519.421492][T12614] ? __pfx_proc_net_ns_init+0x10/0x10 [ 519.421510][T12614] proc_net_ns_init+0x42/0x420 [ 519.421529][T12614] ? __pfx_proc_net_ns_init+0x10/0x10 [ 519.421546][T12614] ops_init+0x1e2/0x5f0 [ 519.421560][T12614] setup_net+0x118/0x3a0 [ 519.421573][T12614] ? __pfx_setup_net+0x10/0x10 [ 519.421609][T12614] copy_net_ns+0x345/0x7a0 [ 519.421627][T12614] create_new_namespaces+0x3ea/0xac0 [ 519.421649][T12614] unshare_nsproxy_namespaces+0xf2/0x220 [ 519.421670][T12614] ksys_unshare+0x4a2/0xa70 [ 519.421682][T12614] ? __pfx_ksys_unshare+0x10/0x10 [ 519.421701][T12614] __ia32_sys_unshare+0x30/0x40 [ 519.421714][T12614] __do_fast_syscall_32+0x13a/0x8b0 [ 519.421729][T12614] ? lockdep_hardirqs_on+0x7d/0x110 [ 519.421744][T12614] do_fast_syscall_32+0x32/0x70 [ 519.421761][T12614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 519.421776][T12614] RIP: 0023:0xf7fb3fec [ 519.421790][T12614] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 519.421795][T12614] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 519.421807][T12614] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 519.421814][T12614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.421821][T12614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 519.421828][T12614] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 519.421834][T12614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.421849][T12614] [ 519.484378][ T5744] Bluetooth: hci0: command tx timeout [ 519.622774][ T5818] usb 9-1: USB disconnect, device number 3 [ 519.630083][ T5818] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 519.630385][ T5818] spcp8x5 9-1:1.0: device disconnected [ 519.750591][T12628] random: crng reseeded on system resumption [ 519.906427][T12638] input: syz0 as /devices/virtual/input/input59 [ 519.960441][T12640] 9pnet_virtio: no channels available for device syz [ 519.977818][T12640] overlayfs: failed to resolve './file0': -2 [ 519.985153][ T44] audit: type=1800 audit(1790636372.624:689): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1626" name="file0" dev="9p" ino=71827937 res=0 errno=0 [ 520.164133][ T43] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 520.213526][T12646] binder: 12645:12646 ioctl c00c6211 0 returned -14 [ 520.345128][ T43] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.554840][ T43] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 520.554862][ T43] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.554886][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.724135][ T6174] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 520.873800][T12658] FAULT_INJECTION: forcing a failure. [ 520.873800][T12658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.873834][T12658] CPU: 1 UID: 0 PID: 12658 Comm: syz.2.1632 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.873860][T12658] Tainted: [L]=SOFTLOCKUP [ 520.873867][T12658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.873879][T12658] Call Trace: [ 520.873886][T12658] [ 520.873894][T12658] dump_stack_lvl+0x100/0x190 [ 520.873924][T12658] should_fail_ex.cold+0x5/0xa [ 520.873949][T12658] _copy_to_user+0x32/0xd0 [ 520.873978][T12658] simple_read_from_buffer+0xcb/0x170 [ 520.874019][T12658] proc_fail_nth_read+0x1af/0x230 [ 520.874046][T12658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.874071][T12658] ? rw_verify_area+0xce/0x6d0 [ 520.874090][T12658] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.874113][T12658] vfs_read+0x1e4/0xb40 [ 520.874136][T12658] ? lock_acquire+0x1d1/0x380 [ 520.874163][T12658] ? __fget_files+0x34/0x3d0 [ 520.874212][T12658] ? __pfx_vfs_read+0x10/0x10 [ 520.874232][T12658] ? find_held_lock+0x2b/0x80 [ 520.874254][T12658] ? __fget_files+0x215/0x3d0 [ 520.874281][T12658] ? __fget_files+0x21f/0x3d0 [ 520.874312][T12658] ksys_read+0x12a/0x250 [ 520.874333][T12658] ? __pfx_ksys_read+0x10/0x10 [ 520.874363][T12658] do_int80_emulation+0x166/0x650 [ 520.874390][T12658] asm_int80_emulation+0x1a/0x20 [ 520.874410][T12658] RIP: 0023:0xf71675ab [ 520.874426][T12658] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 520.874444][T12658] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 520.874463][T12658] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 520.874476][T12658] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 520.874487][T12658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 520.874499][T12658] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 520.874510][T12658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.874535][T12658] [ 520.884959][ T6174] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 520.886106][ T6174] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.886128][ T6174] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 520.886161][ T6174] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.898583][ T6174] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 520.903523][ T6174] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 521.061110][ T43] usb 9-1: usb_control_msg returned -32 [ 521.061134][ T43] usbtmc 9-1:16.0: can't read capabilities [ 521.106313][T12664] 9pnet_virtio: no channels available for device syz [ 521.127093][T12664] overlayfs: failed to resolve './file0': -2 [ 521.137452][ T44] audit: type=1800 audit(1790636373.774:690): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1635" name="file0" dev="9p" ino=71827937 res=0 errno=0 [ 521.413220][T12676] random: crng reseeded on system resumption [ 521.474780][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1636'. [ 521.474804][T12679] netlink: 'syz.2.1636': attribute type 7 has an invalid length. [ 521.474811][T12679] netlink: 'syz.2.1636': attribute type 8 has an invalid length. [ 521.474818][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 521.551464][T12682] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1636'. [ 521.574089][ T5744] Bluetooth: hci0: command tx timeout [ 522.045294][T12688] gadgetfs: bound to dummy_udc driver [ 522.159783][T12694] binder: 12693:12694 ioctl c00c6211 0 returned -14 [ 522.344157][ T6174] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 522.344380][ C1] gadgetfs: connected [ 522.396172][ T6174] gadgetfs: disconnected [ 522.636360][ C1] gadgetfs: connected [ 522.722714][ T6174] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 522.756534][ T6174] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 522.756563][ T6174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.924776][ C1] gadgetfs: configuration #1 [ 522.973199][T12687] gadgetfs: suspended from state 3 [ 522.981170][T12687] gadgetfs: disconnected [ 523.033776][ T5818] usb 9-1: USB disconnect, device number 4 [ 523.043981][ T6174] usb 6-1: USB disconnect, device number 60 [ 523.120762][T12702] 9pnet_virtio: no channels available for device syz [ 523.131440][T12704] FAULT_INJECTION: forcing a failure. [ 523.131440][T12704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.131464][T12704] CPU: 2 UID: 0 PID: 12704 Comm: syz.1.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.131479][T12704] Tainted: [L]=SOFTLOCKUP [ 523.131483][T12704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.131490][T12704] Call Trace: [ 523.131495][T12704] [ 523.131499][T12704] dump_stack_lvl+0x100/0x190 [ 523.131519][T12704] should_fail_ex.cold+0x5/0xa [ 523.131534][T12704] _copy_from_user+0x2e/0xd0 [ 523.131551][T12704] get_compat_msghdr+0xb3/0x480 [ 523.131566][T12704] ? __pfx_get_compat_msghdr+0x10/0x10 [ 523.131585][T12704] ___sys_sendmsg+0x1b6/0x1e0 [ 523.131601][T12704] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.131622][T12704] ? find_held_lock+0x2b/0x80 [ 523.131644][T12704] __sys_sendmsg+0x160/0x210 [ 523.131656][T12704] ? __pfx___sys_sendmsg+0x10/0x10 [ 523.131670][T12704] ? __pfx_ksys_write+0x10/0x10 [ 523.131687][T12704] __do_fast_syscall_32+0x13a/0x8b0 [ 523.131701][T12704] ? lockdep_hardirqs_on+0x7d/0x110 [ 523.131721][T12704] do_fast_syscall_32+0x32/0x70 [ 523.131736][T12704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 523.131751][T12704] RIP: 0023:0xf7fb3fec [ 523.131764][T12704] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 523.131770][T12704] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 523.131781][T12704] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 523.131789][T12704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.131795][T12704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.131802][T12704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.131808][T12704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 523.131822][T12704] [ 523.167389][T12702] overlayfs: failed to resolve './file0': -2 [ 523.192676][ T44] audit: type=1800 audit(1790636375.824:691): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1644" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 523.297310][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'. [ 523.297457][T12700] bridge_slave_1: left promiscuous mode [ 523.297676][T12700] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.304370][T12708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input62 [ 523.309581][T12700] bridge_slave_0: left allmulticast mode [ 523.309598][T12700] bridge_slave_0: left promiscuous mode [ 523.310276][T12700] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.534913][T12716] random: crng reseeded on system resumption [ 523.656741][ T6006] usb 10-1: USB disconnect, device number 2 [ 523.722357][ T6006] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 523.729652][ T6006] spcp8x5 10-1:1.0: device disconnected [ 523.811042][T12721] fuse: Bad value for 'user_id' [ 523.811056][T12721] fuse: Bad value for 'user_id' [ 524.142432][T12724] binder: 12723:12724 ioctl c00c6211 0 returned -14 [ 524.332743][T12731] input: syz0 as /devices/virtual/input/input64 [ 524.422372][T12075] udevd[12075]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 524.779851][T12736] gadgetfs: bound to dummy_udc driver [ 524.987742][T12745] 9pnet_virtio: no channels available for device syz [ 525.009535][ T44] audit: type=1800 audit(1790636377.644:692): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1655" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 525.334915][T12759] 9p: Bad value for 'wfdno' [ 525.460031][T12766] FAULT_INJECTION: forcing a failure. [ 525.460031][T12766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.460063][T12766] CPU: 0 UID: 0 PID: 12766 Comm: syz.4.1661 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.460089][T12766] Tainted: [L]=SOFTLOCKUP [ 525.460095][T12766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 525.460106][T12766] Call Trace: [ 525.460113][T12766] [ 525.460121][T12766] dump_stack_lvl+0x100/0x190 [ 525.460150][T12766] should_fail_ex.cold+0x5/0xa [ 525.460175][T12766] _copy_to_user+0x32/0xd0 [ 525.460204][T12766] simple_read_from_buffer+0xcb/0x170 [ 525.460231][T12766] proc_fail_nth_read+0x1af/0x230 [ 525.460254][T12766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.460285][T12766] ? rw_verify_area+0xce/0x6d0 [ 525.460304][T12766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.460326][T12766] vfs_read+0x1e4/0xb40 [ 525.460348][T12766] ? lock_acquire+0x1d1/0x380 [ 525.460375][T12766] ? __fget_files+0x34/0x3d0 [ 525.460397][T12766] ? __pfx_vfs_read+0x10/0x10 [ 525.460416][T12766] ? find_held_lock+0x2b/0x80 [ 525.460439][T12766] ? __fget_files+0x215/0x3d0 [ 525.460465][T12766] ? __fget_files+0x21f/0x3d0 [ 525.460494][T12766] ksys_read+0x12a/0x250 [ 525.460515][T12766] ? __pfx_ksys_read+0x10/0x10 [ 525.460545][T12766] do_int80_emulation+0x166/0x650 [ 525.460571][T12766] asm_int80_emulation+0x1a/0x20 [ 525.460589][T12766] RIP: 0023:0xf71075ab [ 525.460606][T12766] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 525.460623][T12766] RSP: 002b:00000000f539c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 525.460657][T12766] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f539c5d0 [ 525.460672][T12766] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 525.460683][T12766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.460694][T12766] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 525.460705][T12766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.460731][T12766] [ 525.718015][T12771] gadgetfs: bound to dummy_udc driver [ 525.809249][T12778] 9pnet_virtio: no channels available for device syz [ 525.828271][ T44] audit: type=1800 audit(1790636378.464:693): pid=12778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1665" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 526.110473][T12788] netlink: 'syz.5.1668': attribute type 10 has an invalid length. [ 526.116587][T12788] team0: Port device dummy0 added [ 526.143363][T12788] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 526.144748][T12788] netlink: 'syz.5.1668': attribute type 10 has an invalid length. [ 526.151359][T12788] team0: Port device dummy0 removed [ 526.644530][T12812] gadgetfs: bound to dummy_udc driver [ 526.754485][T12820] 9pnet_virtio: no channels available for device syz [ 526.766390][ T44] audit: type=1800 audit(1790636379.404:694): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1675" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 526.923484][T12827] FAULT_INJECTION: forcing a failure. [ 526.923484][T12827] name failslab, interval 1, probability 0, space 0, times 0 [ 526.923519][T12827] CPU: 0 UID: 0 PID: 12827 Comm: syz.5.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.923546][T12827] Tainted: [L]=SOFTLOCKUP [ 526.923555][T12827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 526.923566][T12827] Call Trace: [ 526.923574][T12827] [ 526.923582][T12827] dump_stack_lvl+0x100/0x190 [ 526.923613][T12827] should_fail_ex.cold+0x5/0xa [ 526.923640][T12827] should_failslab+0xc2/0x120 [ 526.923668][T12827] __kmalloc_noprof+0xfc/0x840 [ 526.923693][T12827] ? lsm_blob_alloc+0x68/0x90 [ 526.923722][T12827] lsm_blob_alloc+0x68/0x90 [ 526.923748][T12827] security_sk_alloc+0x2d/0x290 [ 526.923777][T12827] sk_prot_alloc+0x1d1/0x2a0 [ 526.923802][T12827] sk_alloc+0x36/0xe80 [ 526.923830][T12827] inet6_create+0x385/0x12b0 [ 526.923856][T12827] ? inet6_create+0x7f/0x12b0 [ 526.923884][T12827] __sock_create+0x339/0x860 [ 526.923913][T12827] __sys_socket+0x14d/0x260 [ 526.923939][T12827] ? __pfx___sys_socket+0x10/0x10 [ 526.923963][T12827] ? fput+0x7c/0x100 [ 526.923989][T12827] ? ksys_write+0x1ac/0x250 [ 526.924027][T12827] ? __pfx_ksys_write+0x10/0x10 [ 526.924054][T12827] __ia32_sys_socket+0x72/0xb0 [ 526.924076][T12827] ? lockdep_hardirqs_on+0x7d/0x110 [ 526.924100][T12827] __do_fast_syscall_32+0x13a/0x8b0 [ 526.924125][T12827] ? lockdep_hardirqs_on+0x7d/0x110 [ 526.924149][T12827] do_fast_syscall_32+0x32/0x70 [ 526.924181][T12827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.924203][T12827] RIP: 0023:0xf7f36fec [ 526.924226][T12827] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 526.924235][T12827] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 526.924256][T12827] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000002 [ 526.924267][T12827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.924280][T12827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.924291][T12827] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 526.924303][T12827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.924328][T12827] [ 526.968766][T12831] overlayfs: failed to set uuid (427/file1, err=-1); falling back to uuid=null. [ 526.968796][T12831] overlayfs: failed to verify upper root origin [ 527.154584][T12835] FAULT_INJECTION: forcing a failure. [ 527.154584][T12835] name failslab, interval 1, probability 0, space 0, times 0 [ 527.154607][T12835] CPU: 0 UID: 0 PID: 12835 Comm: syz.5.1678 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.154625][T12835] Tainted: [L]=SOFTLOCKUP [ 527.154630][T12835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.154637][T12835] Call Trace: [ 527.154642][T12835] [ 527.154652][T12835] dump_stack_lvl+0x100/0x190 [ 527.154673][T12835] should_fail_ex.cold+0x5/0xa [ 527.154690][T12835] should_failslab+0xc2/0x120 [ 527.154722][T12835] kmem_cache_alloc_noprof+0x92/0x6a0 [ 527.154740][T12835] ? proc_net_ns_init+0x42/0x420 [ 527.154761][T12835] ? __pfx_proc_net_ns_init+0x10/0x10 [ 527.154780][T12835] proc_net_ns_init+0x42/0x420 [ 527.154799][T12835] ? __pfx_proc_net_ns_init+0x10/0x10 [ 527.154817][T12835] ops_init+0x1e2/0x5f0 [ 527.154831][T12835] setup_net+0x118/0x3a0 [ 527.154844][T12835] ? __pfx_setup_net+0x10/0x10 [ 527.154861][T12835] copy_net_ns+0x345/0x7a0 [ 527.154876][T12835] create_new_namespaces+0x3ea/0xac0 [ 527.154898][T12835] unshare_nsproxy_namespaces+0xf2/0x220 [ 527.154917][T12835] ksys_unshare+0x4a2/0xa70 [ 527.154929][T12835] ? __pfx_ksys_unshare+0x10/0x10 [ 527.154948][T12835] __ia32_sys_unshare+0x30/0x40 [ 527.154962][T12835] __do_fast_syscall_32+0x13a/0x8b0 [ 527.154977][T12835] ? lockdep_hardirqs_on+0x7d/0x110 [ 527.154992][T12835] do_fast_syscall_32+0x32/0x70 [ 527.155007][T12835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.155022][T12835] RIP: 0023:0xf7f36fec [ 527.155036][T12835] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 527.155041][T12835] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 527.155054][T12835] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 527.155062][T12835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.155070][T12835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.155077][T12835] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.155084][T12835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.155099][T12835] [ 527.753778][T12845] FAULT_INJECTION: forcing a failure. [ 527.753778][T12845] name failslab, interval 1, probability 0, space 0, times 0 [ 527.753842][T12845] CPU: 2 UID: 0 PID: 12845 Comm: syz.4.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.753861][T12845] Tainted: [L]=SOFTLOCKUP [ 527.753866][T12845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.753874][T12845] Call Trace: [ 527.753879][T12845] [ 527.753884][T12845] dump_stack_lvl+0x100/0x190 [ 527.753905][T12845] should_fail_ex.cold+0x5/0xa [ 527.753921][T12845] should_failslab+0xc2/0x120 [ 527.753940][T12845] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 527.753956][T12845] ? _proc_mkdir+0x1a2/0x210 [ 527.753969][T12845] ? nf_lwtunnel_net_init+0x38/0xf0 [ 527.753983][T12845] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 527.753995][T12845] kmemdup_noprof+0x29/0x60 [ 527.754021][T12845] nf_lwtunnel_net_init+0x38/0xf0 [ 527.754035][T12845] ops_init+0x1e2/0x5f0 [ 527.754050][T12845] setup_net+0x118/0x3a0 [ 527.754062][T12845] ? __pfx_setup_net+0x10/0x10 [ 527.754079][T12845] copy_net_ns+0x345/0x7a0 [ 527.754094][T12845] create_new_namespaces+0x3ea/0xac0 [ 527.754116][T12845] unshare_nsproxy_namespaces+0xf2/0x220 [ 527.754155][T12845] ksys_unshare+0x4a2/0xa70 [ 527.754177][T12845] ? __pfx_ksys_unshare+0x10/0x10 [ 527.754204][T12845] __ia32_sys_unshare+0x30/0x40 [ 527.754217][T12845] __do_fast_syscall_32+0x13a/0x8b0 [ 527.754235][T12845] do_fast_syscall_32+0x32/0x70 [ 527.754250][T12845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.754265][T12845] RIP: 0023:0xf6fcefec [ 527.754280][T12845] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 527.754285][T12845] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 527.754297][T12845] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 527.754304][T12845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.754311][T12845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.754318][T12845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 527.754325][T12845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.754340][T12845] [ 528.276511][T12849] gadgetfs: bound to dummy_udc driver [ 528.344562][T12851] 9pnet_virtio: no channels available for device syz [ 528.372144][T12851] overlay: ./file0 is not a directory [ 528.383601][ T44] audit: type=1800 audit(1790636381.014:695): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1684" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 528.507310][T12864] input: syz0 as /devices/virtual/input/input65 [ 528.744162][ T8216] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 528.914946][ T8216] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.916104][ T8216] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.916130][ T8216] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.916149][ T8216] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.916182][ T8216] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.918403][ T8216] usb 10-1: config 0 descriptor?? [ 529.275412][T12873] FAULT_INJECTION: forcing a failure. [ 529.275412][T12873] name failslab, interval 1, probability 0, space 0, times 0 [ 529.275434][T12873] CPU: 3 UID: 0 PID: 12873 Comm: syz.4.1691 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.275452][T12873] Tainted: [L]=SOFTLOCKUP [ 529.275457][T12873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 529.275465][T12873] Call Trace: [ 529.275469][T12873] [ 529.275475][T12873] dump_stack_lvl+0x100/0x190 [ 529.275495][T12873] should_fail_ex.cold+0x5/0xa [ 529.275511][T12873] should_failslab+0xc2/0x120 [ 529.275530][T12873] kmem_cache_alloc_noprof+0x92/0x6a0 [ 529.275546][T12873] ? proc_net_ns_init+0x42/0x420 [ 529.275565][T12873] ? __pfx_proc_net_ns_init+0x10/0x10 [ 529.275584][T12873] proc_net_ns_init+0x42/0x420 [ 529.275602][T12873] ? __pfx_proc_net_ns_init+0x10/0x10 [ 529.275620][T12873] ops_init+0x1e2/0x5f0 [ 529.275634][T12873] setup_net+0x118/0x3a0 [ 529.275646][T12873] ? __pfx_setup_net+0x10/0x10 [ 529.275663][T12873] copy_net_ns+0x345/0x7a0 [ 529.275679][T12873] create_new_namespaces+0x3ea/0xac0 [ 529.275701][T12873] unshare_nsproxy_namespaces+0xf2/0x220 [ 529.275720][T12873] ksys_unshare+0x4a2/0xa70 [ 529.275732][T12873] ? __pfx_ksys_unshare+0x10/0x10 [ 529.275750][T12873] __ia32_sys_unshare+0x30/0x40 [ 529.275767][T12873] __do_fast_syscall_32+0x13a/0x8b0 [ 529.275788][T12873] ? lockdep_hardirqs_on+0x7d/0x110 [ 529.275809][T12873] do_fast_syscall_32+0x32/0x70 [ 529.275835][T12873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.275860][T12873] RIP: 0023:0xf6fcefec [ 529.275883][T12873] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 529.275892][T12873] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 529.275912][T12873] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 529.275922][T12873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.275930][T12873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.275937][T12873] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 529.275945][T12873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 529.275962][T12873] [ 529.382909][ T8216] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 529.661498][T12883] gadgetfs: bound to dummy_udc driver [ 529.718976][T12885] 9pnet_virtio: no channels available for device syz [ 529.734210][T12885] overlay: ./file0 is not a directory [ 529.736931][ T44] audit: type=1800 audit(1790636382.374:696): pid=12885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1695" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 530.144738][ T5818] usb 10-1: USB disconnect, device number 3 [ 530.477727][T12901] random: crng reseeded on system resumption [ 530.839012][T12904] binder: 12903:12904 ioctl c00c6211 0 returned -14 [ 531.918887][T12920] 9pnet_virtio: no channels available for device syz [ 531.947544][T12920] overlay: ./file0 is not a directory [ 532.147285][ T44] audit: type=1800 audit(1790636384.784:697): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1705" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 532.197666][T12914] FAULT_INJECTION: forcing a failure. [ 532.197666][T12914] name failslab, interval 1, probability 0, space 0, times 0 [ 532.197712][T12914] CPU: 3 UID: 0 PID: 12914 Comm: syz.2.1703 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.197742][T12914] Tainted: [L]=SOFTLOCKUP [ 532.197747][T12914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 532.197756][T12914] Call Trace: [ 532.197761][T12914] [ 532.197767][T12914] dump_stack_lvl+0x100/0x190 [ 532.197787][T12914] should_fail_ex.cold+0x5/0xa [ 532.197803][T12914] should_failslab+0xc2/0x120 [ 532.197821][T12914] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 532.197838][T12914] ? _proc_mkdir+0x1a2/0x210 [ 532.197849][T12914] ? nf_lwtunnel_net_init+0x38/0xf0 [ 532.197863][T12914] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 532.197874][T12914] kmemdup_noprof+0x29/0x60 [ 532.197887][T12914] nf_lwtunnel_net_init+0x38/0xf0 [ 532.197899][T12914] ops_init+0x1e2/0x5f0 [ 532.197915][T12914] setup_net+0x118/0x3a0 [ 532.197928][T12914] ? __pfx_setup_net+0x10/0x10 [ 532.197945][T12914] copy_net_ns+0x345/0x7a0 [ 532.197960][T12914] create_new_namespaces+0x3ea/0xac0 [ 532.197981][T12914] unshare_nsproxy_namespaces+0xf2/0x220 [ 532.198001][T12914] ksys_unshare+0x4a2/0xa70 [ 532.198015][T12914] ? __pfx_ksys_unshare+0x10/0x10 [ 532.198034][T12914] __ia32_sys_unshare+0x30/0x40 [ 532.198047][T12914] __do_fast_syscall_32+0x13a/0x8b0 [ 532.198063][T12914] ? lockdep_hardirqs_on+0x7d/0x110 [ 532.198078][T12914] do_fast_syscall_32+0x32/0x70 [ 532.198093][T12914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 532.198108][T12914] RIP: 0023:0xf702efec [ 532.198142][T12914] Code: Unable to access opcode bytes at 0xf702efc2. [ 532.198148][T12914] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 532.198160][T12914] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 532.198169][T12914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.198177][T12914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 532.198185][T12914] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 532.198192][T12914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 532.198208][T12914] [ 532.425702][T12935] binder: 12934:12935 ioctl c00c6211 0 returned -14 [ 532.686657][T12942] input: syz0 as /devices/virtual/input/input68 [ 533.293494][T12956] random: crng reseeded on system resumption [ 533.384183][T12953] 9pnet_virtio: no channels available for device syz [ 533.494155][T12953] overlay: ./file0 is not a directory [ 533.498224][ T44] audit: type=1800 audit(1790636386.134:698): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1714" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 533.620495][T12960] 9pnet_virtio: no channels available for device syz [ 533.636665][T12960] overlay: ./file0 is not a directory [ 533.640360][ T44] audit: type=1800 audit(1790636386.274:699): pid=12960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1723" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 534.103780][T12965] FAULT_INJECTION: forcing a failure. [ 534.103780][T12965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.103803][T12965] CPU: 1 UID: 0 PID: 12965 Comm: syz.4.1718 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.103819][T12965] Tainted: [L]=SOFTLOCKUP [ 534.103823][T12965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.103830][T12965] Call Trace: [ 534.103834][T12965] [ 534.103839][T12965] dump_stack_lvl+0x100/0x190 [ 534.103858][T12965] should_fail_ex.cold+0x5/0xa [ 534.103874][T12965] _copy_from_iter+0x1f4/0x1690 [ 534.103892][T12965] ? __asan_memset+0x23/0x50 [ 534.103906][T12965] ? __pfx__copy_from_iter+0x10/0x10 [ 534.103922][T12965] ? __pfx___alloc_skb+0x10/0x10 [ 534.103946][T12965] netlink_sendmsg+0x808/0xda0 [ 534.103966][T12965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.103983][T12965] ? apparmor_socket_sendmsg+0x165/0x280 [ 534.104003][T12965] ____sys_sendmsg+0xa4d/0xbe0 [ 534.104029][T12965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.104047][T12965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.104067][T12965] ___sys_sendmsg+0x190/0x1e0 [ 534.104083][T12965] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.104104][T12965] ? find_held_lock+0x2b/0x80 [ 534.104125][T12965] __sys_sendmsg+0x160/0x210 [ 534.104137][T12965] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.104151][T12965] ? __pfx_ksys_write+0x10/0x10 [ 534.104167][T12965] __do_fast_syscall_32+0x13a/0x8b0 [ 534.104182][T12965] ? lockdep_hardirqs_on+0x7d/0x110 [ 534.104201][T12965] do_fast_syscall_32+0x32/0x70 [ 534.104215][T12965] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.104230][T12965] RIP: 0023:0xf6fcefec [ 534.104244][T12965] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 534.104249][T12965] RSP: 002b:00000000f53bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 534.104260][T12965] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 534.104267][T12965] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.104274][T12965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.104280][T12965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 534.104286][T12965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.104300][T12965] [ 534.347174][T12968] FAULT_INJECTION: forcing a failure. [ 534.347174][T12968] name failslab, interval 1, probability 0, space 0, times 0 [ 534.347278][T12968] CPU: 3 UID: 0 PID: 12968 Comm: syz.4.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.347316][T12968] Tainted: [L]=SOFTLOCKUP [ 534.347339][T12968] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.347352][T12968] Call Trace: [ 534.347360][T12968] [ 534.347369][T12968] dump_stack_lvl+0x100/0x190 [ 534.347402][T12968] should_fail_ex.cold+0x5/0xa [ 534.347430][T12968] should_failslab+0xc2/0x120 [ 534.347460][T12968] kmem_cache_alloc_noprof+0x92/0x6a0 [ 534.347490][T12968] ? proc_net_ns_init+0x42/0x420 [ 534.347525][T12968] ? __pfx_proc_net_ns_init+0x10/0x10 [ 534.347556][T12968] proc_net_ns_init+0x42/0x420 [ 534.347587][T12968] ? __pfx_proc_net_ns_init+0x10/0x10 [ 534.347616][T12968] ops_init+0x1e2/0x5f0 [ 534.347640][T12968] setup_net+0x118/0x3a0 [ 534.347662][T12968] ? __pfx_setup_net+0x10/0x10 [ 534.347691][T12968] copy_net_ns+0x345/0x7a0 [ 534.347718][T12968] create_new_namespaces+0x3ea/0xac0 [ 534.347755][T12968] unshare_nsproxy_namespaces+0xf2/0x220 [ 534.347787][T12968] ksys_unshare+0x4a2/0xa70 [ 534.347808][T12968] ? __pfx_ksys_unshare+0x10/0x10 [ 534.347856][T12968] __ia32_sys_unshare+0x30/0x40 [ 534.347879][T12968] __do_fast_syscall_32+0x13a/0x8b0 [ 534.347904][T12968] ? lockdep_hardirqs_on+0x7d/0x110 [ 534.347931][T12968] do_fast_syscall_32+0x32/0x70 [ 534.347957][T12968] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.347982][T12968] RIP: 0023:0xf6fcefec [ 534.348003][T12968] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 534.348012][T12968] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 534.348032][T12968] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 534.348046][T12968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.348059][T12968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.348073][T12968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.348086][T12968] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.348114][T12968] [ 534.866031][T12972] FAULT_INJECTION: forcing a failure. [ 534.866031][T12972] name failslab, interval 1, probability 0, space 0, times 0 [ 534.866053][T12972] CPU: 0 UID: 0 PID: 12972 Comm: syz.5.1715 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.866072][T12972] Tainted: [L]=SOFTLOCKUP [ 534.866077][T12972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.866084][T12972] Call Trace: [ 534.866089][T12972] [ 534.866094][T12972] dump_stack_lvl+0x100/0x190 [ 534.866137][T12972] should_fail_ex.cold+0x5/0xa [ 534.866153][T12972] should_failslab+0xc2/0x120 [ 534.866175][T12972] kmem_cache_alloc_noprof+0x92/0x6a0 [ 534.866192][T12972] ? proc_net_ns_init+0x42/0x420 [ 534.866214][T12972] ? __pfx_proc_net_ns_init+0x10/0x10 [ 534.866233][T12972] proc_net_ns_init+0x42/0x420 [ 534.866251][T12972] ? __pfx_proc_net_ns_init+0x10/0x10 [ 534.866268][T12972] ops_init+0x1e2/0x5f0 [ 534.866283][T12972] setup_net+0x118/0x3a0 [ 534.866296][T12972] ? __pfx_setup_net+0x10/0x10 [ 534.866313][T12972] copy_net_ns+0x345/0x7a0 [ 534.866328][T12972] create_new_namespaces+0x3ea/0xac0 [ 534.866350][T12972] unshare_nsproxy_namespaces+0xf2/0x220 [ 534.866370][T12972] ksys_unshare+0x4a2/0xa70 [ 534.866383][T12972] ? __pfx_ksys_unshare+0x10/0x10 [ 534.866402][T12972] __ia32_sys_unshare+0x30/0x40 [ 534.866415][T12972] __do_fast_syscall_32+0x13a/0x8b0 [ 534.866430][T12972] ? lockdep_hardirqs_on+0x7d/0x110 [ 534.866445][T12972] do_fast_syscall_32+0x32/0x70 [ 534.866460][T12972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.866475][T12972] RIP: 0023:0xf7f36fec [ 534.866489][T12972] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 534.866496][T12972] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 534.866508][T12972] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 534.866516][T12972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.866523][T12972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.866530][T12972] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 534.866537][T12972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.866557][T12972] [ 535.394944][T12984] random: crng reseeded on system resumption [ 535.468615][T12988] gadgetfs: bound to dummy_udc driver [ 535.784818][T12993] 9pnet_virtio: no channels available for device syz [ 535.806017][T12993] overlay: ./file0 is not a directory [ 535.824855][ T44] audit: type=1800 audit(1790636388.464:700): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1725" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 536.431238][T13007] binder: 13005:13007 ioctl c00c6211 0 returned -14 [ 536.608758][T13011] FAULT_INJECTION: forcing a failure. [ 536.608758][T13011] name failslab, interval 1, probability 0, space 0, times 0 [ 536.617371][T13011] CPU: 3 UID: 0 PID: 13011 Comm: syz.5.1729 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.617405][T13011] Tainted: [L]=SOFTLOCKUP [ 536.617412][T13011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 536.617423][T13011] Call Trace: [ 536.617431][T13011] [ 536.617440][T13011] dump_stack_lvl+0x100/0x190 [ 536.617471][T13011] should_fail_ex.cold+0x5/0xa [ 536.617496][T13011] should_failslab+0xc2/0x120 [ 536.617523][T13011] kmem_cache_alloc_noprof+0x92/0x6a0 [ 536.617547][T13011] ? proc_net_ns_init+0x42/0x420 [ 536.617579][T13011] ? __pfx_proc_net_ns_init+0x10/0x10 [ 536.617606][T13011] proc_net_ns_init+0x42/0x420 [ 536.617634][T13011] ? __pfx_proc_net_ns_init+0x10/0x10 [ 536.617661][T13011] ops_init+0x1e2/0x5f0 [ 536.617683][T13011] setup_net+0x118/0x3a0 [ 536.617703][T13011] ? __pfx_setup_net+0x10/0x10 [ 536.617729][T13011] copy_net_ns+0x345/0x7a0 [ 536.617752][T13011] create_new_namespaces+0x3ea/0xac0 [ 536.617786][T13011] unshare_nsproxy_namespaces+0xf2/0x220 [ 536.617813][T13011] ksys_unshare+0x4a2/0xa70 [ 536.617851][T13011] ? __pfx_ksys_unshare+0x10/0x10 [ 536.617883][T13011] __ia32_sys_unshare+0x30/0x40 [ 536.617917][T13011] __do_fast_syscall_32+0x13a/0x8b0 [ 536.617947][T13011] do_fast_syscall_32+0x32/0x70 [ 536.617971][T13011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.617995][T13011] RIP: 0023:0xf7f36fec [ 536.618016][T13011] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 536.618025][T13011] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 536.618042][T13011] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 536.618055][T13011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.618065][T13011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.618077][T13011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.618089][T13011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.618136][T13011] [ 537.754130][T13026] binder: 13025:13026 ioctl c00c6211 0 returned -14 [ 537.845926][T13028] random: crng reseeded on system resumption [ 539.031748][T13039] input: syz0 as /devices/virtual/input/input71 [ 539.048000][T13041] 9pnet_virtio: no channels available for device syz [ 539.116177][T13045] random: crng reseeded on system resumption [ 539.234322][T13041] overlay: ./file0 is not a directory [ 539.242931][ T44] audit: type=1800 audit(1790636391.874:701): pid=13041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1738" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 539.726711][T13055] FAULT_INJECTION: forcing a failure. [ 539.726711][T13055] name failslab, interval 1, probability 0, space 0, times 0 [ 539.726733][T13055] CPU: 2 UID: 0 PID: 13055 Comm: syz.5.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 539.726751][T13055] Tainted: [L]=SOFTLOCKUP [ 539.726755][T13055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 539.726763][T13055] Call Trace: [ 539.726768][T13055] [ 539.726773][T13055] dump_stack_lvl+0x100/0x190 [ 539.726794][T13055] should_fail_ex.cold+0x5/0xa [ 539.726811][T13055] should_failslab+0xc2/0x120 [ 539.726831][T13055] kmem_cache_alloc_noprof+0x92/0x6a0 [ 539.726847][T13055] ? __proc_create+0xc1/0x8f0 [ 539.726866][T13055] ? __proc_create+0x247/0x8f0 [ 539.726885][T13055] __proc_create+0x247/0x8f0 [ 539.726903][T13055] ? __pfx___proc_create+0x10/0x10 [ 539.726927][T13055] _proc_mkdir+0xb9/0x210 [ 539.726940][T13055] ? __pfx__proc_mkdir+0x10/0x10 [ 539.726950][T13055] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 539.726965][T13055] ? proc_net_ns_init+0x42/0x420 [ 539.726985][T13055] proc_net_ns_init+0x273/0x420 [ 539.727004][T13055] ? __pfx_proc_net_ns_init+0x10/0x10 [ 539.727022][T13055] ops_init+0x1e2/0x5f0 [ 539.727036][T13055] setup_net+0x118/0x3a0 [ 539.727048][T13055] ? __pfx_setup_net+0x10/0x10 [ 539.727064][T13055] copy_net_ns+0x345/0x7a0 [ 539.727079][T13055] create_new_namespaces+0x3ea/0xac0 [ 539.727100][T13055] unshare_nsproxy_namespaces+0xf2/0x220 [ 539.727119][T13055] ksys_unshare+0x4a2/0xa70 [ 539.727138][T13055] ? __pfx_ksys_unshare+0x10/0x10 [ 539.727157][T13055] __ia32_sys_unshare+0x30/0x40 [ 539.727170][T13055] __do_fast_syscall_32+0x13a/0x8b0 [ 539.727189][T13055] do_fast_syscall_32+0x32/0x70 [ 539.727219][T13055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.727235][T13055] RIP: 0023:0xf7f36fec [ 539.727250][T13055] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 539.727256][T13055] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 539.727269][T13055] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 539.727277][T13055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.727284][T13055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.727291][T13055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.727298][T13055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.727312][T13055] [ 540.224879][T13065] random: crng reseeded on system resumption [ 540.414739][ T6006] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 540.566416][ T6006] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 540.577796][ T6006] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 540.577824][ T6006] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 540.577860][ T6006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.586814][ T6006] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 540.589643][ T6006] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 541.149432][T13075] binder: 13074:13075 ioctl c00c6211 0 returned -14 [ 542.134632][T13084] 9pnet_virtio: no channels available for device syz [ 542.136004][T13085] input: syz0 as /devices/virtual/input/input73 [ 542.149853][T13084] overlay: ./file0 is not a directory [ 542.162502][ T44] audit: type=1800 audit(1790636394.794:702): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1748" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 542.414110][ T6006] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 542.575095][ T6006] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.576377][ T6006] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.576394][ T6006] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.576416][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.702238][T13096] random: crng reseeded on system resumption [ 542.785822][ T6006] usb 6-1: usb_control_msg returned -32 [ 542.785849][ T6006] usbtmc 6-1:16.0: can't read capabilities [ 543.023459][T13104] gadgetfs: bound to dummy_udc driver [ 543.159417][ T5960] usb 9-1: USB disconnect, device number 5 [ 543.176418][ T5960] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 543.176955][ T5960] spcp8x5 9-1:1.0: device disconnected [ 544.187085][T13121] 9pnet_virtio: no channels available for device syz [ 544.198722][T13121] overlay: ./file0 is not a directory [ 544.206174][ T44] audit: type=1800 audit(1790636396.844:703): pid=13121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1758" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 544.543737][T13127] FAULT_INJECTION: forcing a failure. [ 544.543737][T13127] name failslab, interval 1, probability 0, space 0, times 0 [ 544.543785][T13127] CPU: 3 UID: 0 PID: 13127 Comm: syz.2.1760 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.543816][T13127] Tainted: [L]=SOFTLOCKUP [ 544.543821][T13127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 544.543829][T13127] Call Trace: [ 544.543833][T13127] [ 544.543839][T13127] dump_stack_lvl+0x100/0x190 [ 544.543859][T13127] should_fail_ex.cold+0x5/0xa [ 544.543875][T13127] should_failslab+0xc2/0x120 [ 544.543894][T13127] kmem_cache_alloc_noprof+0x92/0x6a0 [ 544.543911][T13127] ? proc_net_ns_init+0x42/0x420 [ 544.543932][T13127] ? __pfx_proc_net_ns_init+0x10/0x10 [ 544.543951][T13127] proc_net_ns_init+0x42/0x420 [ 544.543970][T13127] ? __pfx_proc_net_ns_init+0x10/0x10 [ 544.543987][T13127] ops_init+0x1e2/0x5f0 [ 544.544000][T13127] setup_net+0x118/0x3a0 [ 544.544026][T13127] ? __pfx_setup_net+0x10/0x10 [ 544.544044][T13127] copy_net_ns+0x345/0x7a0 [ 544.544060][T13127] create_new_namespaces+0x3ea/0xac0 [ 544.544081][T13127] unshare_nsproxy_namespaces+0xf2/0x220 [ 544.544101][T13127] ksys_unshare+0x4a2/0xa70 [ 544.544114][T13127] ? __pfx_ksys_unshare+0x10/0x10 [ 544.544132][T13127] __ia32_sys_unshare+0x30/0x40 [ 544.544144][T13127] __do_fast_syscall_32+0x13a/0x8b0 [ 544.544162][T13127] do_fast_syscall_32+0x32/0x70 [ 544.544176][T13127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.544191][T13127] RIP: 0023:0xf702efec [ 544.544204][T13127] Code: Unable to access opcode bytes at 0xf702efc2. [ 544.544210][T13127] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 544.544222][T13127] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 544.544229][T13127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 544.544236][T13127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 544.544242][T13127] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 544.544249][T13127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.544264][T13127] [ 545.046698][T13141] gadgetfs: bound to dummy_udc driver [ 545.124204][T13146] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 545.157611][T13146] team0: Port device dummy0 added [ 545.189749][ T5817] usb 6-1: USB disconnect, device number 61 [ 545.296391][T13146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 545.297970][T13146] netlink: 'syz.2.1764': attribute type 10 has an invalid length. [ 545.303316][T13146] team0: Port device dummy0 removed [ 545.484818][T13156] random: crng reseeded on system resumption [ 545.906544][T13148] FAULT_INJECTION: forcing a failure. [ 545.906544][T13148] name failslab, interval 1, probability 0, space 0, times 0 [ 545.906579][T13148] CPU: 2 UID: 0 PID: 13148 Comm: syz.5.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.906599][T13148] Tainted: [L]=SOFTLOCKUP [ 545.906604][T13148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 545.906613][T13148] Call Trace: [ 545.906619][T13148] [ 545.906625][T13148] dump_stack_lvl+0x100/0x190 [ 545.906645][T13148] should_fail_ex.cold+0x5/0xa [ 545.906663][T13148] should_failslab+0xc2/0x120 [ 545.906681][T13148] __kmalloc_noprof+0xfc/0x840 [ 545.906696][T13148] ? __register_sysctl_table+0xac/0x1650 [ 545.906718][T13148] __register_sysctl_table+0xac/0x1650 [ 545.906738][T13148] ? lock_acquire+0x1d1/0x380 [ 545.906783][T13148] ? __pfx___register_sysctl_table+0x10/0x10 [ 545.906803][T13148] ? is_module_address+0x5f/0xf0 [ 545.906815][T13148] ? is_module_address+0x5f/0xf0 [ 545.906831][T13148] register_net_sysctl_sz+0x325/0x420 [ 545.906855][T13148] ? __asan_memcpy+0x3c/0x60 [ 545.906875][T13148] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 545.906895][T13148] nf_lwtunnel_net_init+0x60/0xf0 [ 545.906917][T13148] ops_init+0x1e2/0x5f0 [ 545.906941][T13148] setup_net+0x118/0x3a0 [ 545.906964][T13148] ? __pfx_setup_net+0x10/0x10 [ 545.906994][T13148] copy_net_ns+0x345/0x7a0 [ 545.907017][T13148] create_new_namespaces+0x3ea/0xac0 [ 545.907053][T13148] unshare_nsproxy_namespaces+0xf2/0x220 [ 545.907082][T13148] ksys_unshare+0x4a2/0xa70 [ 545.907102][T13148] ? __pfx_ksys_unshare+0x10/0x10 [ 545.907138][T13148] __ia32_sys_unshare+0x30/0x40 [ 545.907159][T13148] __do_fast_syscall_32+0x13a/0x8b0 [ 545.907183][T13148] ? lockdep_hardirqs_on+0x7d/0x110 [ 545.907205][T13148] do_fast_syscall_32+0x32/0x70 [ 545.907228][T13148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 545.907252][T13148] RIP: 0023:0xf7f36fec [ 545.907274][T13148] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 545.907283][T13148] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 545.907303][T13148] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 545.907317][T13148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 545.907347][T13148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 545.907360][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.907372][T13148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 545.907398][T13148] [ 546.558236][T13169] 9pnet_virtio: no channels available for device syz [ 546.585522][T13171] FAULT_INJECTION: forcing a failure. [ 546.585522][T13171] name failslab, interval 1, probability 0, space 0, times 0 [ 546.585544][T13171] CPU: 0 UID: 0 PID: 13171 Comm: syz.1.1772 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.585561][T13171] Tainted: [L]=SOFTLOCKUP [ 546.585566][T13171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 546.585573][T13171] Call Trace: [ 546.585578][T13171] [ 546.585583][T13171] dump_stack_lvl+0x100/0x190 [ 546.585603][T13171] should_fail_ex.cold+0x5/0xa [ 546.585620][T13171] should_failslab+0xc2/0x120 [ 546.585651][T13171] kmem_cache_alloc_noprof+0x92/0x6a0 [ 546.585678][T13171] ? proc_net_ns_init+0x42/0x420 [ 546.585703][T13171] ? __pfx_proc_net_ns_init+0x10/0x10 [ 546.585722][T13171] proc_net_ns_init+0x42/0x420 [ 546.585740][T13171] ? __pfx_proc_net_ns_init+0x10/0x10 [ 546.585757][T13171] ops_init+0x1e2/0x5f0 [ 546.585772][T13171] setup_net+0x118/0x3a0 [ 546.585790][T13171] ? __pfx_setup_net+0x10/0x10 [ 546.585807][T13171] copy_net_ns+0x345/0x7a0 [ 546.585822][T13171] create_new_namespaces+0x3ea/0xac0 [ 546.585844][T13171] unshare_nsproxy_namespaces+0xf2/0x220 [ 546.585864][T13171] ksys_unshare+0x4a2/0xa70 [ 546.585878][T13171] ? __pfx_ksys_unshare+0x10/0x10 [ 546.585891][T13171] ? ksys_write+0x1ac/0x250 [ 546.585911][T13171] __ia32_sys_unshare+0x30/0x40 [ 546.585923][T13171] __do_fast_syscall_32+0x13a/0x8b0 [ 546.585939][T13171] ? lockdep_hardirqs_on+0x7d/0x110 [ 546.585954][T13171] do_fast_syscall_32+0x32/0x70 [ 546.585969][T13171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.585983][T13171] RIP: 0023:0xf7fb3fec [ 546.585998][T13171] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 546.586004][T13171] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 546.586017][T13171] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 546.586026][T13171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.586034][T13171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.586040][T13171] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 546.586070][T13171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.586088][T13171] [ 546.586702][T13169] overlay: ./file0 is not a directory [ 546.612141][ T44] audit: type=1800 audit(1790636399.244:704): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1770" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 546.960624][T13186] gadgetfs: bound to dummy_udc driver [ 546.976054][T13188] input: syz0 as /devices/virtual/input/input74 [ 547.033105][T13192] binder: 13191:13192 ioctl c00c6211 0 returned -14 [ 547.177231][T13199] random: crng reseeded on system resumption [ 547.508509][ T5103] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 547.726381][ T5103] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 547.728141][ T5103] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.728164][ T5103] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.731777][ T5103] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.468923][ T5103] usb 9-1: usb_control_msg returned -32 [ 548.468947][ T5103] usbtmc 9-1:16.0: can't read capabilities [ 548.562745][T13211] 9pnet_virtio: no channels available for device syz [ 548.580840][T13211] overlay: ./file0 is not a directory [ 548.590115][ T44] audit: type=1800 audit(1790636401.224:705): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1783" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 549.349753][T13230] FAULT_INJECTION: forcing a failure. [ 549.349753][T13230] name failslab, interval 1, probability 0, space 0, times 0 [ 549.349851][T13230] CPU: 2 UID: 0 PID: 13230 Comm: syz.2.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.349896][T13230] Tainted: [L]=SOFTLOCKUP [ 549.349906][T13230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 549.349920][T13230] Call Trace: [ 549.349928][T13230] [ 549.349937][T13230] dump_stack_lvl+0x100/0x190 [ 549.349970][T13230] should_fail_ex.cold+0x5/0xa [ 549.349998][T13230] should_failslab+0xc2/0x120 [ 549.350026][T13230] __kmalloc_noprof+0xfc/0x840 [ 549.350075][T13230] ? __register_sysctl_table+0xac/0x1650 [ 549.350110][T13230] __register_sysctl_table+0xac/0x1650 [ 549.350144][T13230] ? lock_acquire+0x1d1/0x380 [ 549.350175][T13230] ? __pfx___register_sysctl_table+0x10/0x10 [ 549.350206][T13230] ? is_module_address+0x5f/0xf0 [ 549.350226][T13230] ? is_module_address+0x5f/0xf0 [ 549.350253][T13230] register_net_sysctl_sz+0x325/0x420 [ 549.350284][T13230] ? __asan_memcpy+0x3c/0x60 [ 549.350309][T13230] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 549.350331][T13230] nf_lwtunnel_net_init+0x60/0xf0 [ 549.350353][T13230] ops_init+0x1e2/0x5f0 [ 549.350393][T13230] setup_net+0x118/0x3a0 [ 549.350417][T13230] ? __pfx_setup_net+0x10/0x10 [ 549.350447][T13230] copy_net_ns+0x345/0x7a0 [ 549.350473][T13230] create_new_namespaces+0x3ea/0xac0 [ 549.350512][T13230] unshare_nsproxy_namespaces+0xf2/0x220 [ 549.350547][T13230] ksys_unshare+0x4a2/0xa70 [ 549.350572][T13230] ? __pfx_ksys_unshare+0x10/0x10 [ 549.350603][T13230] __ia32_sys_unshare+0x30/0x40 [ 549.350625][T13230] __do_fast_syscall_32+0x13a/0x8b0 [ 549.350656][T13230] ? lockdep_hardirqs_on+0x7d/0x110 [ 549.350684][T13230] do_fast_syscall_32+0x32/0x70 [ 549.350710][T13230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 549.350738][T13230] RIP: 0023:0xf702efec [ 549.350762][T13230] Code: Unable to access opcode bytes at 0xf702efc2. [ 549.350772][T13230] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 549.350793][T13230] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 549.350806][T13230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.350819][T13230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 549.350831][T13230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.350844][T13230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 549.350872][T13230] [ 549.853692][T13244] gadgetfs: bound to dummy_udc driver [ 549.949451][T13247] 9pnet_virtio: no channels available for device syz [ 549.973827][T13249] 9pnet_virtio: no channels available for device syz [ 549.983516][T13247] overlay: ./file0 is not a directory [ 549.998463][T13249] 9pnet_virtio: no channels available for device syz [ 550.019537][T13249] overlayfs: failed to resolve './file0': -2 [ 550.021178][ T44] audit: type=1800 audit(1790636402.654:706): pid=13247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1791" name="file0" dev="9p" ino=71827937 res=0 errno=0 [ 550.025369][ T5818] usb 9-1: USB disconnect, device number 6 [ 550.106962][T13255] 9pnet_virtio: no channels available for device syz [ 550.118937][T13255] overlay: ./file0 is not a directory [ 550.145189][ T44] audit: type=1800 audit(1790636402.774:707): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1802" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 550.180769][T13256] random: crng reseeded on system resumption [ 550.266633][T13260] binder: 13259:13260 ioctl c00c6211 0 returned -14 [ 551.604797][T13283] FAULT_INJECTION: forcing a failure. [ 551.604797][T13283] name failslab, interval 1, probability 0, space 0, times 0 [ 551.604846][T13283] CPU: 0 UID: 0 PID: 13283 Comm: syz.1.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.604875][T13283] Tainted: [L]=SOFTLOCKUP [ 551.604880][T13283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 551.604887][T13283] Call Trace: [ 551.604891][T13283] [ 551.604896][T13283] dump_stack_lvl+0x100/0x190 [ 551.604916][T13283] should_fail_ex.cold+0x5/0xa [ 551.604932][T13283] should_failslab+0xc2/0x120 [ 551.604951][T13283] kmem_cache_alloc_noprof+0x92/0x6a0 [ 551.604969][T13283] ? do_getname+0x35/0x390 [ 551.604982][T13283] do_getname+0x35/0x390 [ 551.604994][T13283] do_sys_openat2+0xc7/0x1e0 [ 551.605013][T13283] ? __pfx_do_sys_openat2+0x10/0x10 [ 551.605036][T13283] __ia32_compat_sys_openat+0x12d/0x210 [ 551.605048][T13283] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 551.605066][T13283] __do_fast_syscall_32+0x13a/0x8b0 [ 551.605081][T13283] ? lockdep_hardirqs_on+0x7d/0x110 [ 551.605096][T13283] do_fast_syscall_32+0x32/0x70 [ 551.605111][T13283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.605126][T13283] RIP: 0023:0xf7fb3fec [ 551.605139][T13283] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 551.605144][T13283] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 551.605157][T13283] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 551.605164][T13283] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.605172][T13283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 551.605180][T13283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.605188][T13283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.605202][T13283] [ 552.056014][T13287] gadgetfs: bound to dummy_udc driver [ 552.259131][T13286] gadgetfs: suspended from state 2 [ 552.319817][ T75] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 553.032860][T13300] FAULT_INJECTION: forcing a failure. [ 553.032860][T13300] name failslab, interval 1, probability 0, space 0, times 0 [ 553.032892][T13300] CPU: 1 UID: 0 PID: 13300 Comm: syz.5.1806 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.032919][T13300] Tainted: [L]=SOFTLOCKUP [ 553.032926][T13300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 553.032938][T13300] Call Trace: [ 553.032945][T13300] [ 553.032953][T13300] dump_stack_lvl+0x100/0x190 [ 553.032982][T13300] should_fail_ex.cold+0x5/0xa [ 553.033008][T13300] should_failslab+0xc2/0x120 [ 553.033038][T13300] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 553.033063][T13300] ? _proc_mkdir+0x1a2/0x210 [ 553.033082][T13300] ? nf_lwtunnel_net_init+0x38/0xf0 [ 553.033104][T13300] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 553.033123][T13300] kmemdup_noprof+0x29/0x60 [ 553.033145][T13300] nf_lwtunnel_net_init+0x38/0xf0 [ 553.033164][T13300] ops_init+0x1e2/0x5f0 [ 553.033187][T13300] setup_net+0x118/0x3a0 [ 553.033206][T13300] ? __pfx_setup_net+0x10/0x10 [ 553.033233][T13300] copy_net_ns+0x345/0x7a0 [ 553.033256][T13300] create_new_namespaces+0x3ea/0xac0 [ 553.033293][T13300] unshare_nsproxy_namespaces+0xf2/0x220 [ 553.033324][T13300] ksys_unshare+0x4a2/0xa70 [ 553.033344][T13300] ? __pfx_ksys_unshare+0x10/0x10 [ 553.033373][T13300] __ia32_sys_unshare+0x30/0x40 [ 553.033391][T13300] __do_fast_syscall_32+0x13a/0x8b0 [ 553.033419][T13300] do_fast_syscall_32+0x32/0x70 [ 553.033442][T13300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 553.033466][T13300] RIP: 0023:0xf7f36fec [ 553.033487][T13300] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 553.033495][T13300] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 553.033514][T13300] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 553.033527][T13300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 553.033538][T13300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 553.033562][T13300] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 553.033572][T13300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 553.033598][T13300] [ 553.093619][T13299] binder: 13295:13299 ioctl c00c6211 0 returned -14 [ 554.246537][T13316] FAULT_INJECTION: forcing a failure. [ 554.246537][T13316] name failslab, interval 1, probability 0, space 0, times 0 [ 554.246560][T13316] CPU: 1 UID: 0 PID: 13316 Comm: syz.2.1808 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.246577][T13316] Tainted: [L]=SOFTLOCKUP [ 554.246583][T13316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.246592][T13316] Call Trace: [ 554.246609][T13316] [ 554.246616][T13316] dump_stack_lvl+0x100/0x190 [ 554.246636][T13316] should_fail_ex.cold+0x5/0xa [ 554.246654][T13316] should_failslab+0xc2/0x120 [ 554.246674][T13316] kmem_cache_alloc_noprof+0x92/0x6a0 [ 554.246691][T13316] ? proc_net_ns_init+0x42/0x420 [ 554.246712][T13316] ? __pfx_proc_net_ns_init+0x10/0x10 [ 554.246731][T13316] proc_net_ns_init+0x42/0x420 [ 554.246750][T13316] ? __pfx_proc_net_ns_init+0x10/0x10 [ 554.246768][T13316] ops_init+0x1e2/0x5f0 [ 554.246783][T13316] setup_net+0x118/0x3a0 [ 554.246796][T13316] ? __pfx_setup_net+0x10/0x10 [ 554.246813][T13316] copy_net_ns+0x345/0x7a0 [ 554.246828][T13316] create_new_namespaces+0x3ea/0xac0 [ 554.246850][T13316] unshare_nsproxy_namespaces+0xf2/0x220 [ 554.246869][T13316] ksys_unshare+0x4a2/0xa70 [ 554.246881][T13316] ? __pfx_ksys_unshare+0x10/0x10 [ 554.246901][T13316] __ia32_sys_unshare+0x30/0x40 [ 554.246914][T13316] __do_fast_syscall_32+0x13a/0x8b0 [ 554.246932][T13316] do_fast_syscall_32+0x32/0x70 [ 554.246946][T13316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 554.246961][T13316] RIP: 0023:0xf702efec [ 554.246976][T13316] Code: Unable to access opcode bytes at 0xf702efc2. [ 554.246981][T13316] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 554.246995][T13316] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 554.247003][T13316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.247009][T13316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 554.247016][T13316] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 554.247023][T13316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.247037][T13316] [ 554.283514][T13317] random: crng reseeded on system resumption [ 555.641923][T13331] 9pnet_virtio: no channels available for device syz [ 555.655797][T13331] overlay: ./file0 is not a directory [ 555.661249][ T44] audit: type=1800 audit(1790636408.294:708): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1811" name="file0" dev="9p" ino=71827937 res=0 errno=0 [ 555.772916][T13334] FAULT_INJECTION: forcing a failure. [ 555.772916][T13334] name fail_futex, interval 1, probability 0, space 0, times 0 [ 555.772940][T13334] CPU: 3 UID: 0 PID: 13334 Comm: syz.4.1813 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.772956][T13334] Tainted: [L]=SOFTLOCKUP [ 555.772960][T13334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 555.772968][T13334] Call Trace: [ 555.772972][T13334] [ 555.772978][T13334] dump_stack_lvl+0x100/0x190 [ 555.772998][T13334] should_fail_ex.cold+0x5/0xa [ 555.773014][T13334] get_futex_key+0x1d0/0x14f0 [ 555.773029][T13334] ? __pfx_get_futex_key+0x10/0x10 [ 555.773047][T13334] futex_wait_setup+0x91/0x540 [ 555.773067][T13334] __futex_wait+0x19f/0x300 [ 555.773085][T13334] ? __pfx___futex_wait+0x10/0x10 [ 555.773100][T13334] ? futex_hash+0x311/0x400 [ 555.773112][T13334] ? __pfx_futex_wake_mark+0x10/0x10 [ 555.773130][T13334] ? __pfx_futex_hash+0x10/0x10 [ 555.773145][T13334] futex_wait+0xe6/0x370 [ 555.773160][T13334] ? __pfx_futex_wait+0x10/0x10 [ 555.773174][T13334] ? __lock_acquire+0x5c0/0x1f40 [ 555.773198][T13334] do_futex+0x265/0x440 [ 555.773212][T13334] ? __pfx_do_futex+0x10/0x10 [ 555.773228][T13334] __ia32_sys_futex_time32+0x2f4/0x470 [ 555.773263][T13334] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 555.773280][T13334] ? __pfx_ksys_pread64+0x10/0x10 [ 555.773300][T13334] __do_fast_syscall_32+0x13a/0x8b0 [ 555.773315][T13334] ? lockdep_hardirqs_on+0x7d/0x110 [ 555.773330][T13334] do_fast_syscall_32+0x32/0x70 [ 555.773345][T13334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.773360][T13334] RIP: 0023:0xf6fcefec [ 555.773374][T13334] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 555.773380][T13334] RSP: 002b:00000000f539c5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 555.773392][T13334] RAX: ffffffffffffffda RBX: 00000000f73c5020 RCX: 0000000000000080 [ 555.773400][T13334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73c5024 [ 555.773406][T13334] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 555.773413][T13334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.773420][T13334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.773434][T13334] [ 556.110214][T13340] 9pnet_virtio: no channels available for device syz [ 556.131568][T13340] overlay: ./file0 is not a directory [ 556.139848][ T44] audit: type=1800 audit(1790636408.774:709): pid=13340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1815" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 557.018880][T13367] random: crng reseeded on system resumption [ 557.954268][T13379] 9pnet_virtio: no channels available for device syz [ 557.969081][T13379] overlay: ./file0 is not a directory [ 558.005049][ T44] audit: type=1800 audit(1790636410.644:710): pid=13379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1828" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 558.472968][T13393] FAULT_INJECTION: forcing a failure. [ 558.472968][T13393] name fail_futex, interval 1, probability 0, space 0, times 0 [ 558.473570][T13393] CPU: 0 UID: 0 PID: 13393 Comm: syz.5.1831 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.473607][T13393] Tainted: [L]=SOFTLOCKUP [ 558.473612][T13393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 558.473619][T13393] Call Trace: [ 558.473623][T13393] [ 558.473628][T13393] dump_stack_lvl+0x100/0x190 [ 558.473648][T13393] should_fail_ex.cold+0x5/0xa [ 558.473665][T13393] get_futex_key+0x1d0/0x14f0 [ 558.473680][T13393] ? __pfx_get_futex_key+0x10/0x10 [ 558.473698][T13393] futex_wait_setup+0x91/0x540 [ 558.473719][T13393] __futex_wait+0x19f/0x300 [ 558.473736][T13393] ? __pfx___futex_wait+0x10/0x10 [ 558.473750][T13393] ? __pfx_try_to_wake_up+0x10/0x10 [ 558.473767][T13393] ? futex_hash+0x311/0x400 [ 558.473780][T13393] ? __pfx_futex_wake_mark+0x10/0x10 [ 558.473798][T13393] ? find_held_lock+0x2b/0x80 [ 558.473813][T13393] ? futex_wake+0x4ea/0x5e0 [ 558.473832][T13393] futex_wait+0xe6/0x370 [ 558.473847][T13393] ? __pfx_futex_wait+0x10/0x10 [ 558.473865][T13393] ? rcu_is_watching+0x13/0xc0 [ 558.473879][T13393] ? trace_sched_exit_tp+0x120/0x160 [ 558.473894][T13393] do_futex+0x265/0x440 [ 558.473908][T13393] ? __pfx_do_futex+0x10/0x10 [ 558.473924][T13393] __ia32_sys_futex_time32+0x2f4/0x470 [ 558.473942][T13393] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 558.473957][T13393] ? rcu_is_watching+0x13/0xc0 [ 558.473974][T13393] __do_fast_syscall_32+0x13a/0x8b0 [ 558.473989][T13393] ? lockdep_hardirqs_on+0x7d/0x110 [ 558.474024][T13393] do_fast_syscall_32+0x32/0x70 [ 558.474040][T13393] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.474057][T13393] RIP: 0023:0xf7f36fec [ 558.474072][T13393] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 558.474078][T13393] RSP: 002b:00000000f53b45bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 558.474090][T13393] RAX: ffffffffffffffda RBX: 00000000f73f50b8 RCX: 0000000000000080 [ 558.474097][T13393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73f50bc [ 558.474104][T13393] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 558.474111][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.474118][T13393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.474133][T13393] [ 558.774117][T13405] 9pnet_virtio: no channels available for device syz [ 558.791291][T13405] overlay: ./file0 is not a directory [ 558.800932][ T44] audit: type=1800 audit(1790636411.434:711): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1842" name="file0" dev="9p" ino=71827937 res=0 errno=0 [ 558.933691][T13396] FAULT_INJECTION: forcing a failure. [ 558.933691][T13396] name failslab, interval 1, probability 0, space 0, times 0 [ 558.933712][T13396] CPU: 3 UID: 0 PID: 13396 Comm: syz.1.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.933736][T13396] Tainted: [L]=SOFTLOCKUP [ 558.933743][T13396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 558.933753][T13396] Call Trace: [ 558.933759][T13396] [ 558.933766][T13396] dump_stack_lvl+0x100/0x190 [ 558.933793][T13396] should_fail_ex.cold+0x5/0xa [ 558.933819][T13396] should_failslab+0xc2/0x120 [ 558.933847][T13396] kmem_cache_alloc_noprof+0x92/0x6a0 [ 558.933873][T13396] ? proc_net_ns_init+0x42/0x420 [ 558.933907][T13396] ? __pfx_proc_net_ns_init+0x10/0x10 [ 558.933937][T13396] proc_net_ns_init+0x42/0x420 [ 558.933969][T13396] ? __pfx_proc_net_ns_init+0x10/0x10 [ 558.934037][T13396] ops_init+0x1e2/0x5f0 [ 558.934068][T13396] setup_net+0x118/0x3a0 [ 558.934090][T13396] ? __pfx_setup_net+0x10/0x10 [ 558.934118][T13396] copy_net_ns+0x345/0x7a0 [ 558.934143][T13396] create_new_namespaces+0x3ea/0xac0 [ 558.934174][T13396] unshare_nsproxy_namespaces+0xf2/0x220 [ 558.934205][T13396] ksys_unshare+0x4a2/0xa70 [ 558.934223][T13396] ? __pfx_ksys_unshare+0x10/0x10 [ 558.934241][T13396] __ia32_sys_unshare+0x30/0x40 [ 558.934253][T13396] __do_fast_syscall_32+0x13a/0x8b0 [ 558.934270][T13396] ? lockdep_hardirqs_on+0x7d/0x110 [ 558.934286][T13396] do_fast_syscall_32+0x32/0x70 [ 558.934301][T13396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.934316][T13396] RIP: 0023:0xf7fb3fec [ 558.934331][T13396] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 558.934336][T13396] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 558.934348][T13396] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 558.934356][T13396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.934363][T13396] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.934369][T13396] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 558.934376][T13396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.934391][T13396] [ 559.476046][T13427] 9pnet_virtio: no channels available for device syz [ 559.491129][T13427] overlay: ./file0 is not a directory [ 559.543636][ T44] audit: type=1800 audit(1790636412.174:712): pid=13428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1838" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 560.252881][T13433] FAULT_INJECTION: forcing a failure. [ 560.252881][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 560.252965][T13433] CPU: 0 UID: 0 PID: 13433 Comm: syz.5.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.252995][T13433] Tainted: [L]=SOFTLOCKUP [ 560.253000][T13433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.253007][T13433] Call Trace: [ 560.253011][T13433] [ 560.253016][T13433] dump_stack_lvl+0x100/0x190 [ 560.253036][T13433] should_fail_ex.cold+0x5/0xa [ 560.253052][T13433] should_failslab+0xc2/0x120 [ 560.253070][T13433] kmem_cache_alloc_noprof+0x92/0x6a0 [ 560.253087][T13433] ? proc_net_ns_init+0x42/0x420 [ 560.253107][T13433] ? __pfx_proc_net_ns_init+0x10/0x10 [ 560.253125][T13433] proc_net_ns_init+0x42/0x420 [ 560.253144][T13433] ? __pfx_proc_net_ns_init+0x10/0x10 [ 560.253161][T13433] ops_init+0x1e2/0x5f0 [ 560.253176][T13433] setup_net+0x118/0x3a0 [ 560.253189][T13433] ? __pfx_setup_net+0x10/0x10 [ 560.253206][T13433] copy_net_ns+0x345/0x7a0 [ 560.253221][T13433] create_new_namespaces+0x3ea/0xac0 [ 560.253242][T13433] unshare_nsproxy_namespaces+0xf2/0x220 [ 560.253261][T13433] ksys_unshare+0x4a2/0xa70 [ 560.253273][T13433] ? __pfx_ksys_unshare+0x10/0x10 [ 560.253293][T13433] __ia32_sys_unshare+0x30/0x40 [ 560.253305][T13433] __do_fast_syscall_32+0x13a/0x8b0 [ 560.253322][T13433] do_fast_syscall_32+0x32/0x70 [ 560.253338][T13433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 560.253352][T13433] RIP: 0023:0xf7f36fec [ 560.253366][T13433] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 560.253372][T13433] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 560.253384][T13433] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 560.253392][T13433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 560.253413][T13433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.253420][T13433] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 560.253427][T13433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.253442][T13433] [ 560.498509][T13444] random: crng reseeded on system resumption [ 561.552131][T13461] 9pnet_virtio: no channels available for device syz [ 561.568275][T13461] overlay: ./file0 is not a directory [ 561.571030][ T44] audit: type=1800 audit(1790636414.204:713): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1849" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 562.305430][T13470] FAULT_INJECTION: forcing a failure. [ 562.305430][T13470] name failslab, interval 1, probability 0, space 0, times 0 [ 562.305492][T13470] CPU: 1 UID: 0 PID: 13470 Comm: syz.5.1850 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.305510][T13470] Tainted: [L]=SOFTLOCKUP [ 562.305515][T13470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 562.305522][T13470] Call Trace: [ 562.305527][T13470] [ 562.305532][T13470] dump_stack_lvl+0x100/0x190 [ 562.305552][T13470] should_fail_ex.cold+0x5/0xa [ 562.305572][T13470] should_failslab+0xc2/0x120 [ 562.305591][T13470] kmem_cache_alloc_noprof+0x92/0x6a0 [ 562.305607][T13470] ? alloc_empty_file+0x5b/0x1c0 [ 562.305628][T13470] alloc_empty_file+0x5b/0x1c0 [ 562.305647][T13470] path_openat+0xdb/0x2440 [ 562.305666][T13470] ? __pfx_path_openat+0x10/0x10 [ 562.305681][T13470] ? irqentry_exit+0x24d/0xa10 [ 562.305695][T13470] ? lockdep_hardirqs_on+0x7d/0x110 [ 562.305711][T13470] do_file_open+0x20e/0x430 [ 562.305728][T13470] ? __pfx_do_file_open+0x10/0x10 [ 562.305753][T13470] ? _raw_spin_unlock+0x28/0x50 [ 562.305764][T13470] ? alloc_fd+0x471/0x7a0 [ 562.305782][T13470] do_sys_openat2+0x10f/0x1e0 [ 562.305801][T13470] ? __pfx_do_sys_openat2+0x10/0x10 [ 562.305824][T13470] __ia32_compat_sys_openat+0x12d/0x210 [ 562.305838][T13470] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 562.305856][T13470] __do_fast_syscall_32+0x13a/0x8b0 [ 562.305871][T13470] ? lockdep_hardirqs_on+0x7d/0x110 [ 562.305885][T13470] do_fast_syscall_32+0x32/0x70 [ 562.305900][T13470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 562.305915][T13470] RIP: 0023:0xf7f36fec [ 562.305928][T13470] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 562.305934][T13470] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 562.305945][T13470] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 562.305953][T13470] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.305960][T13470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.305967][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.305991][T13470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 562.306008][T13470] [ 562.369511][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.369540][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.361612][T13492] FAULT_INJECTION: forcing a failure. [ 563.361612][T13492] name failslab, interval 1, probability 0, space 0, times 0 [ 563.361915][T13492] CPU: 0 UID: 0 PID: 13492 Comm: syz.1.1854 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.361946][T13492] Tainted: [L]=SOFTLOCKUP [ 563.361951][T13492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 563.361959][T13492] Call Trace: [ 563.361964][T13492] [ 563.361988][T13492] dump_stack_lvl+0x100/0x190 [ 563.362020][T13492] should_fail_ex.cold+0x5/0xa [ 563.362040][T13492] should_failslab+0xc2/0x120 [ 563.362059][T13492] kmem_cache_alloc_noprof+0x92/0x6a0 [ 563.362076][T13492] ? proc_net_ns_init+0x42/0x420 [ 563.362097][T13492] ? __pfx_proc_net_ns_init+0x10/0x10 [ 563.362116][T13492] proc_net_ns_init+0x42/0x420 [ 563.362135][T13492] ? __pfx_proc_net_ns_init+0x10/0x10 [ 563.362152][T13492] ops_init+0x1e2/0x5f0 [ 563.362167][T13492] setup_net+0x118/0x3a0 [ 563.362180][T13492] ? __pfx_setup_net+0x10/0x10 [ 563.362201][T13492] copy_net_ns+0x345/0x7a0 [ 563.362216][T13492] create_new_namespaces+0x3ea/0xac0 [ 563.362238][T13492] unshare_nsproxy_namespaces+0xf2/0x220 [ 563.362257][T13492] ksys_unshare+0x4a2/0xa70 [ 563.362269][T13492] ? __pfx_ksys_unshare+0x10/0x10 [ 563.362288][T13492] __ia32_sys_unshare+0x30/0x40 [ 563.362301][T13492] __do_fast_syscall_32+0x13a/0x8b0 [ 563.362320][T13492] do_fast_syscall_32+0x32/0x70 [ 563.362335][T13492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 563.362351][T13492] RIP: 0023:0xf7fb3fec [ 563.362365][T13492] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 563.362371][T13492] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 563.362383][T13492] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 563.362390][T13492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 563.362397][T13492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.362404][T13492] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 563.362411][T13492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.362426][T13492] [ 563.455222][T13494] binder: 13493:13494 ioctl c00c6211 0 returned -14 [ 564.465834][T13504] 9pnet_virtio: no channels available for device syz [ 564.474392][T13504] overlay: ./file0 is not a directory [ 564.487951][ T44] audit: type=1800 audit(1790636417.124:714): pid=13504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1859" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 564.605067][T13510] random: crng reseeded on system resumption [ 564.944133][ T75] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 565.106049][ T75] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.106827][ T75] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.106844][ T75] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.106865][ T75] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.398163][ T75] usb 6-1: usb_control_msg returned -32 [ 565.398195][ T75] usbtmc 6-1:16.0: can't read capabilities [ 565.843981][T13529] binder: 13528:13529 ioctl c00c6211 0 returned -14 [ 567.098165][T13541] 9pnet_virtio: no channels available for device syz [ 567.108811][T13541] overlay: ./file0 is not a directory [ 567.116039][ T44] audit: type=1800 audit(1790636419.754:715): pid=13541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1869" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 567.292516][T13544] FAULT_INJECTION: forcing a failure. [ 567.292516][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 567.292548][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.2.1868 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.292574][T13544] Tainted: [L]=SOFTLOCKUP [ 567.292582][T13544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 567.292593][T13544] Call Trace: [ 567.292600][T13544] [ 567.292608][T13544] dump_stack_lvl+0x100/0x190 [ 567.292638][T13544] should_fail_ex.cold+0x5/0xa [ 567.292663][T13544] should_failslab+0xc2/0x120 [ 567.292690][T13544] kmem_cache_alloc_noprof+0x92/0x6a0 [ 567.292721][T13544] ? proc_net_ns_init+0x42/0x420 [ 567.292754][T13544] ? __pfx_proc_net_ns_init+0x10/0x10 [ 567.292782][T13544] proc_net_ns_init+0x42/0x420 [ 567.292811][T13544] ? __pfx_proc_net_ns_init+0x10/0x10 [ 567.292840][T13544] ops_init+0x1e2/0x5f0 [ 567.292862][T13544] setup_net+0x118/0x3a0 [ 567.292882][T13544] ? __pfx_setup_net+0x10/0x10 [ 567.292908][T13544] copy_net_ns+0x345/0x7a0 [ 567.292932][T13544] create_new_namespaces+0x3ea/0xac0 [ 567.292966][T13544] unshare_nsproxy_namespaces+0xf2/0x220 [ 567.292995][T13544] ksys_unshare+0x4a2/0xa70 [ 567.293015][T13544] ? __pfx_ksys_unshare+0x10/0x10 [ 567.293044][T13544] __ia32_sys_unshare+0x30/0x40 [ 567.293063][T13544] __do_fast_syscall_32+0x13a/0x8b0 [ 567.293091][T13544] do_fast_syscall_32+0x32/0x70 [ 567.293114][T13544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 567.293137][T13544] RIP: 0023:0xf702efec [ 567.293158][T13544] Code: Unable to access opcode bytes at 0xf702efc2. [ 567.293166][T13544] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 567.293185][T13544] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 567.293196][T13544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.293206][T13544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.293215][T13544] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 567.293225][T13544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 567.293249][T13544] [ 567.721639][ T5817] usb 6-1: USB disconnect, device number 63 [ 567.780328][T13549] binder: 13548:13549 ioctl c00c6211 0 returned -14 [ 568.021016][T13556] binder: 13555:13556 ioctl c00c6211 0 returned -14 [ 569.209826][T13577] FAULT_INJECTION: forcing a failure. [ 569.209826][T13577] name failslab, interval 1, probability 0, space 0, times 0 [ 569.209878][T13577] CPU: 3 UID: 0 PID: 13577 Comm: syz.1.1877 Tainted: G L syzkaller #0 PREEMPT(full) [ 569.209922][T13577] Tainted: [L]=SOFTLOCKUP [ 569.209933][T13577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 569.209969][T13577] Call Trace: [ 569.209978][T13577] [ 569.209987][T13577] dump_stack_lvl+0x100/0x190 [ 569.210013][T13577] should_fail_ex.cold+0x5/0xa [ 569.210034][T13577] should_failslab+0xc2/0x120 [ 569.210062][T13577] kmem_cache_alloc_noprof+0x92/0x6a0 [ 569.210088][T13577] ? __proc_create+0xc1/0x8f0 [ 569.210129][T13577] ? __proc_create+0x247/0x8f0 [ 569.210151][T13577] __proc_create+0x247/0x8f0 [ 569.210169][T13577] ? __pfx___proc_create+0x10/0x10 [ 569.210192][T13577] _proc_mkdir+0xb9/0x210 [ 569.210203][T13577] ? __pfx__proc_mkdir+0x10/0x10 [ 569.210214][T13577] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 569.210230][T13577] ? proc_net_ns_init+0x42/0x420 [ 569.210251][T13577] proc_net_ns_init+0x273/0x420 [ 569.210268][T13577] ? __pfx_proc_net_ns_init+0x10/0x10 [ 569.210286][T13577] ops_init+0x1e2/0x5f0 [ 569.210300][T13577] setup_net+0x118/0x3a0 [ 569.210312][T13577] ? __pfx_setup_net+0x10/0x10 [ 569.210328][T13577] copy_net_ns+0x345/0x7a0 [ 569.210344][T13577] create_new_namespaces+0x3ea/0xac0 [ 569.210365][T13577] unshare_nsproxy_namespaces+0xf2/0x220 [ 569.210384][T13577] ksys_unshare+0x4a2/0xa70 [ 569.210397][T13577] ? __pfx_ksys_unshare+0x10/0x10 [ 569.210415][T13577] __ia32_sys_unshare+0x30/0x40 [ 569.210427][T13577] __do_fast_syscall_32+0x13a/0x8b0 [ 569.210445][T13577] do_fast_syscall_32+0x32/0x70 [ 569.210459][T13577] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 569.210474][T13577] RIP: 0023:0xf7fb3fec [ 569.210488][T13577] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 569.210493][T13577] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 569.210505][T13577] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 569.210513][T13577] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 569.210520][T13577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 569.210526][T13577] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 569.210533][T13577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.210548][T13577] [ 570.234307][ T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 570.387974][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.388802][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.388817][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.388837][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.592152][T13597] binder: 13596:13597 ioctl c00c6211 0 returned -14 [ 570.602705][ T9] usb 10-1: usb_control_msg returned -32 [ 570.602732][ T9] usbtmc 10-1:16.0: can't read capabilities [ 571.195647][T13605] gadgetfs: bound to dummy_udc driver [ 571.444102][ T5846] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 571.444312][ C3] gadgetfs: connected [ 571.444403][ T5846] gadgetfs: disconnected [ 571.594275][ C3] gadgetfs: connected [ 571.594992][ T5846] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 571.595247][ T5846] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 571.595268][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.596642][ C3] gadgetfs: configuration #1 [ 572.022035][ T6154] gadgetfs: suspended from state 3 [ 572.026230][ T6154] gadgetfs: disconnected [ 572.047669][ T5103] usb 6-1: USB disconnect, device number 64 [ 572.612735][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.621680][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.623612][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.625816][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.626409][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.003445][ T5846] usb 10-1: USB disconnect, device number 4 [ 573.175541][T13622] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.175691][T13622] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.175796][T13622] bridge_slave_0: entered allmulticast mode [ 573.177100][T13622] bridge_slave_0: entered promiscuous mode [ 573.179785][T13622] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.179914][T13622] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.180016][T13622] bridge_slave_1: entered allmulticast mode [ 573.181400][T13622] bridge_slave_1: entered promiscuous mode [ 573.220051][T13622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.222023][T13622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.263867][T13622] team0: Port device team_slave_0 added [ 573.269969][T13649] FAULT_INJECTION: forcing a failure. [ 573.269969][T13649] name failslab, interval 1, probability 0, space 0, times 0 [ 573.270047][T13649] CPU: 2 UID: 0 PID: 13649 Comm: syz.5.1891 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.270077][T13649] Tainted: [L]=SOFTLOCKUP [ 573.270084][T13649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.270096][T13649] Call Trace: [ 573.270103][T13649] [ 573.270127][T13649] dump_stack_lvl+0x100/0x190 [ 573.270159][T13649] should_fail_ex.cold+0x5/0xa [ 573.270186][T13649] should_failslab+0xc2/0x120 [ 573.270213][T13649] kmem_cache_alloc_noprof+0x92/0x6a0 [ 573.270238][T13649] ? proc_net_ns_init+0x42/0x420 [ 573.270269][T13649] ? __pfx_proc_net_ns_init+0x10/0x10 [ 573.270296][T13649] proc_net_ns_init+0x42/0x420 [ 573.270325][T13649] ? __pfx_proc_net_ns_init+0x10/0x10 [ 573.270350][T13649] ops_init+0x1e2/0x5f0 [ 573.270373][T13649] setup_net+0x118/0x3a0 [ 573.270393][T13649] ? __pfx_setup_net+0x10/0x10 [ 573.270418][T13649] copy_net_ns+0x345/0x7a0 [ 573.270442][T13649] create_new_namespaces+0x3ea/0xac0 [ 573.270476][T13649] unshare_nsproxy_namespaces+0xf2/0x220 [ 573.270514][T13649] ksys_unshare+0x4a2/0xa70 [ 573.270537][T13649] ? __pfx_ksys_unshare+0x10/0x10 [ 573.270567][T13649] __ia32_sys_unshare+0x30/0x40 [ 573.270587][T13649] __do_fast_syscall_32+0x13a/0x8b0 [ 573.270615][T13649] do_fast_syscall_32+0x32/0x70 [ 573.270638][T13649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 573.270661][T13649] RIP: 0023:0xf7f36fec [ 573.270682][T13649] Code: Unable to access opcode bytes at 0xf7f36fc2. [ 573.270691][T13649] RSP: 002b:00000000f53b450c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 573.270710][T13649] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 573.270722][T13649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 573.270735][T13649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 573.270747][T13649] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 573.270760][T13649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 573.270784][T13649] [ 573.293875][T13622] team0: Port device team_slave_1 added [ 573.366415][T13622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.366426][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.366440][T13622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.383485][T13622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.383499][T13622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.383518][T13622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.493842][T13622] hsr_slave_0: entered promiscuous mode [ 573.501898][T13622] hsr_slave_1: entered promiscuous mode [ 573.502500][T13622] debugfs: 'hsr0' already exists in 'hsr' [ 573.502520][T13622] Cannot create hsr debugfs directory [ 573.796228][T13622] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 573.799010][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.799897][T13622] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 573.802509][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.803311][T13622] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 573.806689][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.807468][T13622] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 573.816096][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.848946][T13668] gadgetfs: bound to dummy_udc driver [ 573.858875][T13622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.034115][ T8216] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 574.194526][ T8216] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 574.195387][ T8216] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 574.195403][ T8216] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 574.195423][ T8216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.198395][ T8216] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 574.199659][ T8216] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 574.286426][T13622] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.315979][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.316028][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.316879][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.316919][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.696779][ T5744] Bluetooth: hci3: command tx timeout [ 574.769593][T13622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.038768][T13622] veth0_vlan: entered promiscuous mode [ 575.042135][T13622] veth1_vlan: entered promiscuous mode [ 575.140974][T13622] veth0_macvtap: entered promiscuous mode [ 575.147181][T13622] veth1_macvtap: entered promiscuous mode [ 575.168440][T13622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.175627][T13622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.246602][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.246615][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.267737][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.267750][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.274783][T10286] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.274943][T10286] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.275111][T10286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.275229][T10286] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.388187][T13703] gadgetfs: bound to dummy_udc driver [ 575.693945][T13710] FAULT_INJECTION: forcing a failure. [ 575.693945][T13710] name fail_futex, interval 1, probability 0, space 0, times 0 [ 575.694108][T13710] CPU: 1 UID: 0 PID: 13710 Comm: syz.6.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.694128][T13710] Tainted: [L]=SOFTLOCKUP [ 575.694133][T13710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 575.694140][T13710] Call Trace: [ 575.694145][T13710] [ 575.694151][T13710] dump_stack_lvl+0x100/0x190 [ 575.694172][T13710] should_fail_ex.cold+0x5/0xa [ 575.694186][T13710] ? is_bpf_text_address+0x94/0x1a0 [ 575.694206][T13710] get_futex_key+0x1d0/0x14f0 [ 575.694222][T13710] ? __pfx_get_futex_key+0x10/0x10 [ 575.694237][T13710] ? __lock_acquire+0x5c0/0x1f40 [ 575.694256][T13710] futex_wait_setup+0x91/0x540 [ 575.694276][T13710] __futex_wait+0x19f/0x300 [ 575.694292][T13710] ? __pfx___futex_wait+0x10/0x10 [ 575.694310][T13710] ? __pfx_futex_wake_mark+0x10/0x10 [ 575.694328][T13710] ? lockdep_hardirqs_on+0x7d/0x110 [ 575.694342][T13710] ? irqentry_exit+0x24d/0xa10 [ 575.694372][T13710] futex_wait+0xe6/0x370 [ 575.694388][T13710] ? __pfx_futex_wait+0x10/0x10 [ 575.694406][T13710] ? rcu_is_watching+0x13/0xc0 [ 575.694419][T13710] ? trace_sched_exit_tp+0x120/0x160 [ 575.694434][T13710] do_futex+0x265/0x440 [ 575.694447][T13710] ? __pfx_do_futex+0x10/0x10 [ 575.694465][T13710] __ia32_sys_futex_time32+0x2f4/0x470 [ 575.694488][T13710] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 575.694503][T13710] ? rcu_is_watching+0x13/0xc0 [ 575.694522][T13710] __do_fast_syscall_32+0x13a/0x8b0 [ 575.694537][T13710] ? lockdep_hardirqs_on+0x7d/0x110 [ 575.694553][T13710] do_fast_syscall_32+0x32/0x70 [ 575.694569][T13710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 575.694585][T13710] RIP: 0023:0xf707efec [ 575.694600][T13710] Code: Unable to access opcode bytes at 0xf707efc2. [ 575.694605][T13710] RSP: 002b:00000000f542b5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 575.694617][T13710] RAX: ffffffffffffffda RBX: 00000000f74750b8 RCX: 0000000000000080 [ 575.694624][T13710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74750bc [ 575.694631][T13710] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 575.694638][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.694645][T13710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 575.694660][T13710] [ 576.510962][T13717] FAULT_INJECTION: forcing a failure. [ 576.510962][T13717] name failslab, interval 1, probability 0, space 0, times 0 [ 576.510986][T13717] CPU: 3 UID: 0 PID: 13717 Comm: syz.4.1899 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.511003][T13717] Tainted: [L]=SOFTLOCKUP [ 576.511008][T13717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 576.511017][T13717] Call Trace: [ 576.511024][T13717] [ 576.511029][T13717] dump_stack_lvl+0x100/0x190 [ 576.511049][T13717] should_fail_ex.cold+0x5/0xa [ 576.511065][T13717] should_failslab+0xc2/0x120 [ 576.511084][T13717] kmem_cache_alloc_noprof+0x92/0x6a0 [ 576.511100][T13717] ? __kernfs_new_node+0xd2/0xa10 [ 576.511120][T13717] __kernfs_new_node+0xd2/0xa10 [ 576.511138][T13717] ? __pfx___kernfs_new_node+0x10/0x10 [ 576.511157][T13717] ? lock_acquire+0x1d1/0x380 [ 576.511181][T13717] ? kernfs_root+0x23/0x2a0 [ 576.511197][T13717] ? find_held_lock+0x2b/0x80 [ 576.511211][T13717] ? kernfs_root+0xee/0x2a0 [ 576.511227][T13717] ? kernfs_root+0xee/0x2a0 [ 576.511246][T13717] kernfs_new_node+0x117/0x150 [ 576.511267][T13717] kernfs_create_link+0xcc/0x240 [ 576.511282][T13717] sysfs_do_create_link_sd+0x90/0x140 [ 576.511300][T13717] sysfs_create_link+0x61/0xc0 [ 576.511317][T13717] driver_sysfs_add+0x112/0x2d0 [ 576.511335][T13717] really_probe+0x146/0xa60 [ 576.511355][T13717] __driver_probe_device+0x210/0x460 [ 576.511372][T13717] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 576.511386][T13717] driver_probe_device+0x4a/0x140 [ 576.511405][T13717] __driver_attach+0x21f/0x5b0 [ 576.511424][T13717] ? __pfx___driver_attach+0x10/0x10 [ 576.511442][T13717] bus_for_each_dev+0x13e/0x1d0 [ 576.511457][T13717] ? __pfx_bus_for_each_dev+0x10/0x10 [ 576.511472][T13717] ? bus_add_driver+0x2b5/0x5b0 [ 576.511491][T13717] bus_add_driver+0x305/0x5b0 [ 576.511510][T13717] driver_register+0x1e2/0x360 [ 576.511522][T13717] ? rcu_is_watching+0x13/0xc0 [ 576.511537][T13717] usb_gadget_register_driver_owner+0x132/0x210 [ 576.511556][T13717] raw_ioctl+0x1a85/0x2b80 [ 576.511575][T13717] ? __pfx_raw_ioctl+0x10/0x10 [ 576.511593][T13717] ? __pfx_raw_ioctl+0x10/0x10 [ 576.511608][T13717] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 576.511624][T13717] __do_fast_syscall_32+0x13a/0x8b0 [ 576.511642][T13717] do_fast_syscall_32+0x32/0x70 [ 576.511658][T13717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.511675][T13717] RIP: 0023:0xf6fcefec [ 576.511689][T13717] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 576.511695][T13717] RSP: 002b:00000000f53bb424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 576.511707][T13717] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005501 [ 576.511714][T13717] RDX: 0000000000000000 RSI: 00000000f7398ff4 RDI: 00000000f53bc4c0 [ 576.511721][T13717] RBP: 00000000f7398ff4 R08: 0000000000000000 R09: 0000000000000000 [ 576.511728][T13717] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 576.511735][T13717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.511750][T13717] [ 576.511786][T13717] raw-gadget.1 gadget.4: really_probe: driver_sysfs_add failed [ 576.513412][T13717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.631495][T13717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.764098][ T5744] Bluetooth: hci3: command tx timeout [ 576.805085][ T43] usb 6-1: USB disconnect, device number 65 [ 576.807693][ T43] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 576.808451][ T43] spcp8x5 6-1:1.0: device disconnected [ 577.286238][T13727] 9pnet_virtio: no channels available for device syz [ 577.307284][T13727] overlay: ./file0 is not a directory [ 577.316316][ T44] audit: type=1800 audit(1790636429.954:716): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1904" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 577.462094][T13734] binder: 13730:13734 ioctl c00c6211 0 returned -14 [ 577.556029][T13736] binder: 13735:13736 ioctl c00c6211 0 returned -14 [ 578.844206][ T5744] Bluetooth: hci3: command tx timeout [ 579.264175][ T6006] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 579.335616][T13753] binder: 13752:13753 ioctl c00c6211 0 returned -14 [ 579.448477][ T6006] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.451879][ T6006] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 579.451906][ T6006] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.452021][ T6006] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.695963][ T6006] usb 9-1: usb_control_msg returned -32 [ 579.696668][ T6006] usbtmc 9-1:16.0: can't read capabilities [ 580.932794][ T5744] Bluetooth: hci3: command tx timeout [ 581.006786][T13776] binder: 13775:13776 ioctl c00c6211 0 returned -14 [ 581.215682][T13781] gadgetfs: bound to dummy_udc driver [ 581.454367][ T43] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 581.454583][ C2] gadgetfs: connected [ 581.454709][ T43] gadgetfs: disconnected [ 581.604678][ C2] gadgetfs: connected [ 581.605572][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 581.605862][ T43] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 581.605915][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.608472][ C2] gadgetfs: configuration #1 [ 581.782474][T13780] gadgetfs: suspended from state 3 [ 581.782842][ T5960] usb 6-1: USB disconnect, device number 66 [ 581.783819][T13780] gadgetfs: disconnected [ 581.829661][T13790] overlay: ./file0 is not a directory [ 581.841568][ T44] audit: type=1800 audit(1790636434.474:717): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1924" name="file0" dev="9p" ino=71827689 res=0 errno=0 [ 581.996683][ T5960] usb 9-1: USB disconnect, device number 7 [ 582.554689][T13800] random: crng reseeded on system resumption [ 582.615995][T13804] binder: 13803:13804 ioctl c00c6211 0 returned -14 [ 583.903242][T13825] gadgetfs: bound to dummy_udc driver [ 583.960761][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 584.043387][T13830] FAULT_INJECTION: forcing a failure. [ 584.043387][T13830] name failslab, interval 1, probability 0, space 0, times 0 [ 584.043436][T13830] CPU: 2 UID: 0 PID: 13830 Comm: syz.4.1937 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.043466][T13830] Tainted: [L]=SOFTLOCKUP [ 584.043471][T13830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.043480][T13830] Call Trace: [ 584.043484][T13830] [ 584.043490][T13830] dump_stack_lvl+0x100/0x190 [ 584.043511][T13830] should_fail_ex.cold+0x5/0xa [ 584.043527][T13830] should_failslab+0xc2/0x120 [ 584.043546][T13830] kmem_cache_alloc_noprof+0x92/0x6a0 [ 584.043563][T13830] ? proc_net_ns_init+0x42/0x420 [ 584.043588][T13830] ? __pfx_proc_net_ns_init+0x10/0x10 [ 584.043608][T13830] proc_net_ns_init+0x42/0x420 [ 584.043628][T13830] ? __pfx_proc_net_ns_init+0x10/0x10 [ 584.043647][T13830] ops_init+0x1e2/0x5f0 [ 584.043663][T13830] setup_net+0x118/0x3a0 [ 584.043676][T13830] ? __pfx_setup_net+0x10/0x10 [ 584.043694][T13830] copy_net_ns+0x345/0x7a0 [ 584.043709][T13830] create_new_namespaces+0x3ea/0xac0 [ 584.043731][T13830] unshare_nsproxy_namespaces+0xf2/0x220 [ 584.043750][T13830] ksys_unshare+0x4a2/0xa70 [ 584.043764][T13830] ? __pfx_ksys_unshare+0x10/0x10 [ 584.043783][T13830] __ia32_sys_unshare+0x30/0x40 [ 584.043795][T13830] __do_fast_syscall_32+0x13a/0x8b0 [ 584.043814][T13830] do_fast_syscall_32+0x32/0x70 [ 584.043830][T13830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 584.043845][T13830] RIP: 0023:0xf6fcefec [ 584.043859][T13830] Code: Unable to access opcode bytes at 0xf6fcefc2. [ 584.043865][T13830] RSP: 002b:00000000f537b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 584.043878][T13830] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 584.043886][T13830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 584.043894][T13830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 584.043901][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.043907][T13830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 584.043923][T13830] [ 584.134556][ T9] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 584.135430][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 584.135445][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 584.135463][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.138579][ T9] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 584.140217][ T9] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 584.144115][ T8216] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 584.144307][ C0] gadgetfs: connected [ 584.144395][ T8216] gadgetfs: disconnected [ 584.324449][ C0] gadgetfs: connected [ 584.325208][ T8216] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 584.325443][ T8216] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 584.325463][ T8216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.326884][ C0] gadgetfs: configuration #1 [ 584.707181][T13839] binder: 13838:13839 ioctl c00c6211 0 returned -14 [ 584.897579][T13825] gadgetfs: suspended from state 3 [ 584.897904][ T6174] usb 6-1: USB disconnect, device number 67 [ 584.898615][T13825] gadgetfs: disconnected [ 585.144393][T13855] FAULT_INJECTION: forcing a failure. [ 585.144393][T13855] name failslab, interval 1, probability 0, space 0, times 0 [ 585.144416][T13855] CPU: 2 UID: 0 PID: 13855 Comm: syz.6.1946 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.144433][T13855] Tainted: [L]=SOFTLOCKUP [ 585.144438][T13855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 585.144446][T13855] Call Trace: [ 585.144450][T13855] [ 585.144456][T13855] dump_stack_lvl+0x100/0x190 [ 585.144476][T13855] should_fail_ex.cold+0x5/0xa [ 585.144493][T13855] should_failslab+0xc2/0x120 [ 585.144523][T13855] __kmalloc_cache_noprof+0x91/0x6d0 [ 585.144537][T13855] ? kobject_uevent_env+0x263/0x18b0 [ 585.144560][T13855] kobject_uevent_env+0x263/0x18b0 [ 585.144583][T13855] ? rcu_is_watching+0x13/0xc0 [ 585.144599][T13855] gadget_bind_driver+0x773/0xbf0 [ 585.144618][T13855] ? urbs_show+0x3b1/0x440 [ 585.144631][T13855] ? __pfx_gadget_bind_driver+0x10/0x10 [ 585.144649][T13855] really_probe+0x241/0xa60 [ 585.144669][T13855] __driver_probe_device+0x210/0x460 [ 585.144687][T13855] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 585.144703][T13855] driver_probe_device+0x4a/0x140 [ 585.144723][T13855] __driver_attach+0x21f/0x5b0 [ 585.144741][T13855] ? __pfx___driver_attach+0x10/0x10 [ 585.144759][T13855] bus_for_each_dev+0x13e/0x1d0 [ 585.144774][T13855] ? __pfx_bus_for_each_dev+0x10/0x10 [ 585.144788][T13855] ? bus_add_driver+0x2b5/0x5b0 [ 585.144807][T13855] bus_add_driver+0x305/0x5b0 [ 585.144825][T13855] driver_register+0x1e2/0x360 [ 585.144836][T13855] ? rcu_is_watching+0x13/0xc0 [ 585.144850][T13855] usb_gadget_register_driver_owner+0x132/0x210 [ 585.144868][T13855] raw_ioctl+0x1a85/0x2b80 [ 585.144887][T13855] ? __pfx_raw_ioctl+0x10/0x10 [ 585.144905][T13855] ? __pfx_raw_ioctl+0x10/0x10 [ 585.144920][T13855] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 585.144935][T13855] __do_fast_syscall_32+0x13a/0x8b0 [ 585.144952][T13855] do_fast_syscall_32+0x32/0x70 [ 585.144966][T13855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.144981][T13855] RIP: 0023:0xf707efec [ 585.144995][T13855] Code: Unable to access opcode bytes at 0xf707efc2. [ 585.145000][T13855] RSP: 002b:00000000f546b424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 585.145013][T13855] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005501 [ 585.145020][T13855] RDX: 0000000000000000 RSI: 00000000f7448ff4 RDI: 00000000f546c4c0 [ 585.145027][T13855] RBP: 00000000f7448ff4 R08: 0000000000000000 R09: 0000000000000000 [ 585.145034][T13855] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 585.145041][T13855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.145056][T13855] [ 585.384119][ T5818] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 585.527526][T13860] FAULT_INJECTION: forcing a failure. [ 585.527526][T13860] name failslab, interval 1, probability 0, space 0, times 0 [ 585.527604][T13860] CPU: 3 UID: 0 PID: 13860 Comm: syz.1.1947 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.527633][T13860] Tainted: [L]=SOFTLOCKUP [ 585.527642][T13860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 585.527656][T13860] Call Trace: [ 585.527663][T13860] [ 585.527672][T13860] dump_stack_lvl+0x100/0x190 [ 585.527703][T13860] should_fail_ex.cold+0x5/0xa [ 585.527731][T13860] should_failslab+0xc2/0x120 [ 585.527761][T13860] kmem_cache_alloc_noprof+0x92/0x6a0 [ 585.527788][T13860] ? __proc_create+0xc1/0x8f0 [ 585.527816][T13860] ? __proc_create+0x247/0x8f0 [ 585.527851][T13860] __proc_create+0x247/0x8f0 [ 585.527883][T13860] ? __pfx___proc_create+0x10/0x10 [ 585.527923][T13860] _proc_mkdir+0xb9/0x210 [ 585.527943][T13860] ? __pfx__proc_mkdir+0x10/0x10 [ 585.527960][T13860] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 585.527986][T13860] ? proc_net_ns_init+0x42/0x420 [ 585.528021][T13860] proc_net_ns_init+0x273/0x420 [ 585.528052][T13860] ? __pfx_proc_net_ns_init+0x10/0x10 [ 585.528081][T13860] ops_init+0x1e2/0x5f0 [ 585.528105][T13860] setup_net+0x118/0x3a0 [ 585.528125][T13860] ? __pfx_setup_net+0x10/0x10 [ 585.528145][T13860] copy_net_ns+0x345/0x7a0 [ 585.528161][T13860] create_new_namespaces+0x3ea/0xac0 [ 585.528184][T13860] unshare_nsproxy_namespaces+0xf2/0x220 [ 585.528204][T13860] ksys_unshare+0x4a2/0xa70 [ 585.528218][T13860] ? __pfx_ksys_unshare+0x10/0x10 [ 585.528235][T13860] __ia32_sys_unshare+0x30/0x40 [ 585.528247][T13860] __do_fast_syscall_32+0x13a/0x8b0 [ 585.528263][T13860] ? lockdep_hardirqs_on+0x7d/0x110 [ 585.528277][T13860] do_fast_syscall_32+0x32/0x70 [ 585.528292][T13860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.528307][T13860] RIP: 0023:0xf7fb3fec [ 585.528321][T13860] Code: Unable to access opcode bytes at 0xf7fb3fc2. [ 585.528326][T13860] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 585.528338][T13860] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 585.528346][T13860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 585.528353][T13860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 585.528359][T13860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 585.528366][T13860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.528381][T13860] [ 585.547229][ T5818] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.549730][ T5818] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 585.549755][ T5818] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.549840][ T5818] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.270102][ T5818] usb 11-1: usb_control_msg returned -32 [ 586.270143][ T5818] usbtmc 11-1:16.0: can't read capabilities [ 586.331382][T13865] binder: 13864:13865 ioctl c00c6211 0 returned -14 [ 586.374996][T13867] gadgetfs: bound to dummy_udc driver [ 586.518643][T13871] random: crng reseeded on system resumption [ 586.708172][ T5960] usb 10-1: USB disconnect, device number 5 [ 586.710636][ T5960] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 586.710901][ T5960] spcp8x5 10-1:1.0: device disconnected [ 586.816597][T13878] gadgetfs: bound to dummy_udc driver [ 587.059387][ T5818] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 587.060183][ C2] gadgetfs: connected [ 587.060540][ T5818] gadgetfs: disconnected [ 587.204906][ C2] gadgetfs: connected [ 587.205703][ T5818] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 587.207532][ T5818] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 587.207565][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.213547][ C2] gadgetfs: configuration #1 [ 587.492392][T13893] binder: 13892:13893 ioctl c00c6211 0 returned -14 [ 587.884347][ T30] gadgetfs: suspended from state 3 [ 587.884383][ T30] gadgetfs: disconnected [ 587.886088][ T30] usb 6-1: USB disconnect, device number 68 [ 588.157500][T13905] binder: 13904:13905 ioctl c00c6211 0 returned -14 [ 588.178139][ T988] usb 11-1: USB disconnect, device number 2 [ 588.428579][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.429816][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.431346][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.432146][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.432592][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.564102][ T988] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 588.727613][ T988] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 588.732897][ T988] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.733075][ T988] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 588.733248][ T988] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.733958][T13914] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.734080][T13914] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.734145][T13914] bridge_slave_0: entered allmulticast mode [ 588.768615][T13914] bridge_slave_0: entered promiscuous mode [ 588.774770][T13914] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.774849][T13914] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.774957][T13914] bridge_slave_1: entered allmulticast mode [ 588.814953][T13914] bridge_slave_1: entered promiscuous mode [ 588.816085][ T988] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 588.858419][ T988] usb 11-1: SPCP8x5 converter now attached to ttyUSB0 [ 589.268267][T13948] gadgetfs: bound to dummy_udc driver [ 589.319317][T13914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.323641][T13914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.514376][ T5103] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 589.514740][ C1] gadgetfs: connected [ 589.514908][ T5103] gadgetfs: disconnected [ 589.674409][ C1] gadgetfs: connected [ 589.675333][ T5103] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 589.675655][ T5103] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 589.675690][ T5103] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.683427][ C1] gadgetfs: configuration #1 [ 589.852202][T13914] team0: Port device team_slave_0 added [ 589.853571][T13914] team0: Port device team_slave_1 added [ 589.942071][T13914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.942083][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.942097][T13914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.944291][T13914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.944299][T13914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.944313][T13914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.968688][T13914] hsr_slave_0: entered promiscuous mode [ 589.969126][T13914] hsr_slave_1: entered promiscuous mode [ 589.969416][T13914] debugfs: 'hsr0' already exists in 'hsr' [ 589.969428][T13914] Cannot create hsr debugfs directory [ 590.164457][ T5960] gadgetfs: suspended from state 3 [ 590.164493][ T5960] gadgetfs: disconnected [ 590.166171][ T5960] usb 6-1: USB disconnect, device number 69 [ 590.172233][T12462] ================================================================== [ 590.172241][T12462] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15c5/0x1bd0 [ 590.172260][T12462] Read of size 8 at addr ffff88804f63b458 by task syz-executor/12462 [ 590.172269][T12462] [ 590.172277][T12462] CPU: 3 UID: 0 PID: 12462 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 590.172292][T12462] Tainted: [L]=SOFTLOCKUP [ 590.172296][T12462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 590.172303][T12462] Call Trace: [ 590.172307][T12462] [ 590.172311][T12462] dump_stack_lvl+0x100/0x190 [ 590.172327][T12462] print_report+0x13d/0x4b0 [ 590.172344][T12462] ? __virt_addr_valid+0x239/0x430 [ 590.172361][T12462] ? __mutex_lock+0x15c5/0x1bd0 [ 590.172373][T12462] kasan_report+0xdf/0x1c0 [ 590.172390][T12462] ? __mutex_lock+0x15c5/0x1bd0 [ 590.172405][T12462] __mutex_lock+0x15c5/0x1bd0 [ 590.172418][T12462] ? ep_open+0x4c/0x2c0 [ 590.172432][T12462] ? hook_file_open+0x248/0x8e0 [ 590.172445][T12462] ? __pfx___mutex_lock+0x10/0x10 [ 590.172460][T12462] ? __pfx_apparmor_file_open+0x10/0x10 [ 590.172474][T12462] ? ep_open+0x4c/0x2c0 [ 590.172487][T12462] ep_open+0x4c/0x2c0 [ 590.172500][T12462] do_dentry_open+0x6ab/0x14d0 [ 590.172514][T12462] ? __pfx_ep_open+0x10/0x10 [ 590.172528][T12462] vfs_open+0x82/0x3f0 [ 590.172545][T12462] path_openat+0x19fa/0x2440 [ 590.172561][T12462] ? __pfx_path_openat+0x10/0x10 [ 590.172577][T12462] do_file_open+0x20e/0x430 [ 590.172592][T12462] ? __pfx_do_file_open+0x10/0x10 [ 590.172611][T12462] ? _raw_spin_unlock+0x28/0x50 [ 590.172621][T12462] ? alloc_fd+0x471/0x7a0 [ 590.172636][T12462] do_sys_openat2+0x10f/0x1e0 [ 590.172653][T12462] ? __pfx_do_sys_openat2+0x10/0x10 [ 590.172671][T12462] ? kasan_quarantine_put+0x104/0x240 [ 590.172685][T12462] __ia32_compat_sys_openat+0x12d/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 590.172696][T12462] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 590.172710][T12462] do_int80_emulation+0x166/0x650 [ 590.172724][T12462] asm_int80_emulation+0x1a/0x20 [ 590.172736][T12462] RIP: 0023:0xf71375ab [ 590.172745][T12462] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 590.172756][T12462] RSP: 002b:00000000ff83735c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 590.172768][T12462] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ff8374a0 [ 590.172775][T12462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.172782][T12462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.172788][T12462] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 590.172795][T12462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.172805][T12462] [ 590.172809][T12462] [ 590.172811][T12462] Allocated by task 13948: [ 590.172817][T12462] kasan_save_stack+0x30/0x50 [ 590.172831][T12462] kasan_save_track+0x14/0x30 [ 590.172844][T12462] __kasan_kmalloc+0xaa/0xb0 [ 590.172857][T12462] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 590.172868][T12462] gadgetfs_bind+0x582/0x890 [ 590.172880][T12462] gadget_bind_driver+0x28c/0xbf0 [ 590.172896][T12462] really_probe+0x241/0xa60 [ 590.172911][T12462] __driver_probe_device+0x210/0x460 [ 590.172927][T12462] driver_probe_device+0x4a/0x140 [ 590.172947][T12462] __driver_attach+0x21f/0x5b0 [ 590.172963][T12462] bus_for_each_dev+0x13e/0x1d0 [ 590.172975][T12462] bus_add_driver+0x305/0x5b0 [ 590.172989][T12462] driver_register+0x1e2/0x360 [ 590.172999][T12462] usb_gadget_register_driver_owner+0x132/0x210 [ 590.173014][T12462] dev_config+0xdce/0x1610 [ 590.173026][T12462] vfs_write+0x2aa/0x1050 [ 590.173038][T12462] ksys_write+0x12a/0x250 [ 590.173049][T12462] __do_fast_syscall_32+0x13a/0x8b0 [ 590.173062][T12462] do_fast_syscall_32+0x32/0x70 [ 590.173074][T12462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.173087][T12462] [ 590.173090][T12462] Freed by task 5960: [ 590.173095][T12462] kasan_save_stack+0x30/0x50 [ 590.173108][T12462] kasan_save_track+0x14/0x30 [ 590.173121][T12462] kasan_save_free_info+0x3b/0x70 [ 590.173131][T12462] __kasan_slab_free+0x5f/0x80 [ 590.173145][T12462] kfree+0x22b/0x6d0 [ 590.173154][T12462] put_ep+0x117/0x150 [ 590.173165][T12462] destroy_ep_files+0x163/0x420 [ 590.173176][T12462] gadgetfs_unbind+0x139/0x260 [ 590.173188][T12462] gadget_unbind_driver+0x20c/0x4f0 [ 590.173204][T12462] device_remove+0xcb/0x180 [ 590.173218][T12462] device_release_driver_internal+0x44e/0x620 [ 590.173228][T12462] driver_detach+0xd8/0x1b0 [ 590.173237][T12462] bus_remove_driver+0x13b/0x2e0 [ 590.173251][T12462] driver_unregister+0x76/0xb0 [ 590.173261][T12462] usb_gadget_unregister_driver+0x49/0x70 [ 590.173276][T12462] dev_release+0x132/0x1b0 [ 590.173287][T12462] __fput+0x3ff/0xb50 [ 590.173301][T12462] delayed_fput+0x72/0x90 [ 590.173315][T12462] process_one_work+0xac7/0x1b10 [ 590.173328][T12462] worker_thread+0x5ef/0xe50 [ 590.173340][T12462] kthread+0x373/0x450 [ 590.173351][T12462] ret_from_fork+0x730/0xd60 [ 590.173360][T12462] ret_from_fork_asm+0x1a/0x30 [ 590.173370][T12462] [ 590.173385][T12462] The buggy address belongs to the object at ffff88804f63b400 [ 590.173385][T12462] which belongs to the cache kmalloc-512 of size 512 [ 590.173393][T12462] The buggy address is located 88 bytes inside of [ 590.173393][T12462] freed 512-byte region [ffff88804f63b400, ffff88804f63b600) [ 590.173403][T12462] [ 590.173406][T12462] The buggy address belongs to the physical page: [ 590.173411][T12462] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f63bc00 pfn:0x4f638 [ 590.173422][T12462] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 590.173430][T12462] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 590.173441][T12462] page_type: f5(slab) [ 590.173450][T12462] raw: 04fff00000000240 ffff88801c042c80 ffffea0001b8fc10 ffffea00016e8c10 [ 590.173460][T12462] raw: ffff88804f63bc00 000000000010000f 00000000f5000000 0000000000000000 [ 590.173469][T12462] head: 04fff00000000240 ffff88801c042c80 ffffea0001b8fc10 ffffea00016e8c10 [ 590.173478][T12462] head: ffff88804f63bc00 000000000010000f 00000000f5000000 0000000000000000 [ 590.173488][T12462] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 590.173497][T12462] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 590.173503][T12462] page dumped because: kasan: bad access detected [ 590.173508][T12462] page_owner tracks the page as allocated [ 590.173512][T12462] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12771, tgid 12770 (syz.5.1664), ts 525717725020 [ 590.173529][T12462] post_alloc_hook+0xfd/0x120 [ 590.173540][T12462] get_page_from_freelist+0x110d/0x35d0 [ 590.173551][T12462] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 590.173563][T12462] new_slab+0xa9/0x6e0 [ 590.173573][T12462] refill_objects+0xe3/0x410 [ 590.173583][T12462] __pcs_replace_empty_main+0x35e/0x650 [ 590.173594][T12462] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 590.173605][T12462] gadgetfs_bind+0x582/0x890 [ 590.173617][T12462] gadget_bind_driver+0x28c/0xbf0 [ 590.173632][T12462] really_probe+0x241/0xa60 [ 590.173647][T12462] __driver_probe_device+0x210/0x460 [ 590.173664][T12462] driver_probe_device+0x4a/0x140 [ 590.173681][T12462] __driver_attach+0x21f/0x5b0 [ 590.173696][T12462] bus_for_each_dev+0x13e/0x1d0 [ 590.173708][T12462] bus_add_driver+0x305/0x5b0 [ 590.173722][T12462] driver_register+0x1e2/0x360 [ 590.173732][T12462] page last free pid 12462 tgid 12462 ts 525692372203 stack trace: [ 590.173739][T12462] __free_frozen_pages+0x79f/0x10f0 [ 590.173755][T12462] qlist_free_all+0x47/0xf0 [ 590.173767][T12462] kasan_quarantine_reduce+0x1a0/0x1f0 [ 590.173780][T12462] __kasan_slab_alloc+0x69/0x90 [ 590.173794][T12462] kmem_cache_alloc_noprof+0x269/0x6a0 [ 590.173806][T12462] do_getname+0x35/0x390 [ 590.173815][T12462] __ia32_sys_unlink+0x35/0x60 [ 590.173829][T12462] __do_fast_syscall_32+0x13a/0x8b0 [ 590.173842][T12462] do_fast_syscall_32+0x32/0x70 [ 590.173874][T12462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.173887][T12462] [ 590.173890][T12462] Memory state around the buggy address: [ 590.173895][T12462] ffff88804f63b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 590.173903][T12462] ffff88804f63b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 590.173910][T12462] >ffff88804f63b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.173916][T12462] ^ [ 590.173922][T12462] ffff88804f63b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.173929][T12462] ffff88804f63b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.173935][T12462] ================================================================== [ 590.173944][T12462] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 590.453614][T12462] CPU: 3 UID: 0 PID: 12462 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 590.457034][T12462] Tainted: [L]=SOFTLOCKUP [ 590.458391][T12462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 590.461487][T12462] Call Trace: [ 590.462554][T12462] [ 590.463488][T12462] dump_stack_lvl+0x100/0x190 [ 590.464973][T12462] vpanic+0x553/0x970 [ 590.466467][T12462] ? __pfx_vpanic+0x10/0x10 [ 590.467926][T12462] ? __pfx_vprintk_emit+0x10/0x10 [ 590.469569][T12462] ? __mutex_lock+0x15c5/0x1bd0 [ 590.471223][T12462] panic+0xd1/0xe0 [ 590.472403][T12462] ? __pfx_panic+0x10/0x10 [ 590.473821][T12462] ? end_report.part.0+0x23/0x90 [ 590.475384][T12462] ? rcu_is_watching+0x13/0xc0 [ 590.476901][T12462] check_panic_on_warn.cold+0x19/0x34 [ 590.478584][T12462] end_report.part.0+0x3a/0x90 [ 590.480085][T12462] kasan_report.cold+0xe/0x18 [ 590.481571][T12462] ? __mutex_lock+0x15c5/0x1bd0 [ 590.483110][T12462] __mutex_lock+0x15c5/0x1bd0 [ 590.484593][T12462] ? ep_open+0x4c/0x2c0 [ 590.485917][T12462] ? hook_file_open+0x248/0x8e0 [ 590.487457][T12462] ? __pfx___mutex_lock+0x10/0x10 [ 590.489035][T12462] ? __pfx_apparmor_file_open+0x10/0x10 [ 590.490771][T12462] ? ep_open+0x4c/0x2c0 [ 590.492080][T12462] ep_open+0x4c/0x2c0 [ 590.493338][T12462] do_dentry_open+0x6ab/0x14d0 [ 590.494861][T12462] ? __pfx_ep_open+0x10/0x10 [ 590.496327][T12462] vfs_open+0x82/0x3f0 [ 590.497643][T12462] path_openat+0x19fa/0x2440 [ 590.499110][T12462] ? __pfx_path_openat+0x10/0x10 [ 590.500657][T12462] do_file_open+0x20e/0x430 [ 590.502097][T12462] ? __pfx_do_file_open+0x10/0x10 [ 590.503674][T12462] ? _raw_spin_unlock+0x28/0x50 [ 590.505199][T12462] ? alloc_fd+0x471/0x7a0 [ 590.506959][T12462] do_sys_openat2+0x10f/0x1e0 [ 590.508490][T12462] ? __pfx_do_sys_openat2+0x10/0x10 [ 590.510152][T12462] ? kasan_quarantine_put+0x104/0x240 [ 590.511952][T12462] __ia32_compat_sys_openat+0x12d/0x210 [ 590.513721][T12462] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 590.515916][T12462] do_int80_emulation+0x166/0x650 [ 590.517668][T12462] asm_int80_emulation+0x1a/0x20 [ 590.519539][T12462] RIP: 0023:0xf71375ab [ 590.521377][T12462] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 590.527989][T12462] RSP: 002b:00000000ff83735c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 590.531173][T12462] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ff8374a0 [ 590.534098][T12462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.536564][T12462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 590.539039][T12462] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 590.541508][T12462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.543993][T12462] [ 590.545712][T12462] Kernel Offset: disabled [ 590.547102][T12462] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:00:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888028b1d7f0 RCX=0000000000000000 RDX=0000000000000000 RSI=ffff888028b1d7c8 RDI=0000000000000000 RBP=0000000000000007 RSP=ffffc9000761ef00 R8 =0000000000000000 R9 =0000000000000008 R10=0000000000000008 R11=0000000000000001 R12=ffff888028b1cb00 R13=0000000000020000 R14=0000000000000005 R15=0000000000000001 RIP=ffffffff81e6c213 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096955000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d127e79660 CR3=00000000498fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000106 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000ffffffe Opmask02=000000000fffffff Opmask03=0000000002082001 Opmask04=00000000ffffffbf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557c1abd33d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557c1abeb250 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2f799f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373260f69b17343 1e161e035c18101c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f115c435d431610 120300161e121d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7366746567646167 2f73726576697264 2f7465676461672f 7375622f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000073667465 676461672f737265 766972642f746567 6461672f7375622f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d387d425a19ad83e 000055794d05f68d 0000000000000091 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c3431 312c3331312c3231 312c3131312c3031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c32432c31432c 30432c46422c4542 2c44422c43422c42 422c41422c39422c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38422c37422c3242 2c31422c30422c44 412c36412c35412c 34412c33412c3141 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000013cb6f9 RBX=ffff88801cbfcb00 RCX=ffffffff8bd07215 RDX=0000000000000001 RSI=ffffffff8e391eab RDI=ffffffff8c623f80 RBP=ffffed100397f960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed10056667bd R10=ffff88802b333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bd0574f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a55000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd4ea33f52 CR3=000000006d548000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001c000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000200 RDX=0000000000000000 RSI=ffffffff8e36ba36 RDI=ffffffff8c623f80 RBP=ffffc90005ecf7d8 RSP=ffffc90005ecf718 R8 =000000005c1a233d R9 =0000000000000007 R10=0000000000000200 R11=0000000000000001 R12=ffffffff81f579c0 R13=ffffc90005ecf790 R14=0000000000000000 R15=ffff888023e34b00 RIP=ffffffff81b95266 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b46f4a1ec8 CR3=0000000028edd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=226cad035e7cb784 d039c75425a0a4d1 226cad035e7cb784 d039c75425a0a4d1 226cad035e7cb784 d039c75425a0a4d1 226cad035e7cb784 d039c75425a0a4d1 ZMM18=c56e16c643b525e0 1e29a4110e7e0c65 c56e16c643b525e0 1e29a4110e7e0c65 c56e16c643b525e0 1e29a4110e7e0c65 c56e16c643b525e0 1e29a4110e7e0c65 ZMM19=e314000000000000 0000000000000004 e314000000000000 0000000000000003 e314000000000000 0000000000000002 e314000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 022b80020a01458e 00703901ffffffff fffffffff9082d80 030030656c69662f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e01ffffffffffff ffffef082c800300 7a797301ffffffff fffffffff7082b80 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080008800201 c70800060143fe00 30656c69662f2e01 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e01ffffffffff ffffffef08048003 0fffffffff020008 002d80022c80022b ZMM25=8275bf438275bf43 8275bf438275bf43 8275bf438275bf43 8275bf438275bf43 8275bf438275bf43 8275bf438275bf43 8275bf438275bf43 8275bf438275bf43 ZMM26=b5526e95b5526e95 b5526e95b5526e95 b5526e95b5526e95 b5526e95b5526e95 b5526e95b5526e95 b5526e95b5526e95 b5526e95b5526e95 b5526e95b5526e95 ZMM27=3532447535324475 3532447535324475 3532447535324475 3532447535324475 3532447535324475 3532447535324475 3532447535324475 3532447535324475 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4b2700004b270000 4b2700004b270000 4b2700004b270000 4b2700004b270000 4b2700004b270000 4b2700004b270000 4b2700004b270000 4b2700004b270000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe035 RDI=ffffffff9bc624a0 RBP=ffffffff9bc62460 RSP=ffffc9000489f000 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=0000000000000039 R14=0000000000000004 R15=ffffc9000489f318 RIP=ffffffff85afe05f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c55000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff836e2c CR3=000000006faa2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000